last executing test programs: 8m40.747479149s ago: executing program 2 (id=3047): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_perm_addr}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000a80)=""/4087, 0xff7}, {&(0x7f0000001a80)=""/170, 0xaa}, {&(0x7f0000001b40)=""/181, 0xb5}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x100a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001c00)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000001c80)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001cc0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000001d00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001d80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001e00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001e40), 0x4000087, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=@base={0x9, 0x53, 0x3ff, 0x1, 0x0, 0x1}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000001f00)={0x4000000, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001fc0)={r4, &(0x7f0000002000), 0x0}, 0x20) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000002040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x1, 0x21, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 8m37.267589015s ago: executing program 2 (id=3050): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x3200002, &(0x7f0000000900)={[{@noquota}, {@quota}, {@delalloc}]}, 0x3, 0x610, &(0x7f0000000940)="$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") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) fsopen(0x0, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000700)=@v2={0x2, @aes256, 0x10, '\x00', @auto="316570b692d4933a84d89e797032ed03"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x80002c1, 0x2, 0x0) unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x10, 0x11, &(0x7f0000001480)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x745, 0x66, &(0x7f0000001100)=""/102, 0x41000, 0x7, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000012c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) mremap(&(0x7f0000936000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000085b000/0x3000)=nil) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) syz_open_dev$loop(&(0x7f0000000200), 0x10, 0x80082) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) 8m35.278031678s ago: executing program 2 (id=3054): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xd, 0x6, 0x4, 0x9}, 0x50) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa50003d1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x41, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000100)={[{@test_dummy_encryption}]}, 0xfe, 0x4da, &(0x7f0000000f40)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000014c0)='2', 0x1, 0x8080c61) pwrite64(r4, &(0x7f0000001500)='E', 0xed0, 0x47ecf) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000001540)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001}) ioctl$TCSETS(r3, 0x40045431, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000000)=@base={0x5, 0x1, 0x6c02, 0x41}, 0x48) 8m30.720938204s ago: executing program 2 (id=3057): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000bc0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000002e00)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) connect$inet6(r3, 0x0, 0x0) open(&(0x7f0000000680)='./file0\x00', 0x1, 0x158) timer_create(0x3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, &(0x7f0000001e00)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd003f0000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc18143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33365160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f189b8f6e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4f32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r5 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0x400}}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@euid_lt}, {@euid_eq}]}}, 0x0, 0x0, &(0x7f0000000e00)="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") r6 = openat(r5, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstatfs(r6, &(0x7f0000000280)=""/167) 8m25.676441829s ago: executing program 2 (id=3062): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x3200002, &(0x7f0000000900)={[{@noquota}, {@quota}, {@delalloc}]}, 0x3, 0x610, &(0x7f0000000940)="$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") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) fsopen(0x0, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000700)=@v2={0x2, @aes256, 0x10, '\x00', @auto="316570b692d4933a84d89e797032ed03"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x80002c1, 0x2, 0x0) unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x10, 0x11, &(0x7f0000001480)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x745, 0x66, &(0x7f0000001100)=""/102, 0x41000, 0x7, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000012c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) mremap(&(0x7f0000936000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000085b000/0x3000)=nil) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x42, 0x0) 8m22.797806403s ago: executing program 2 (id=3069): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x3) mount$tmpfs(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nr_inodes=t']) syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', 0x22000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x8, &(0x7f0000000cc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x2748a712}}) 8m7.724575713s ago: executing program 32 (id=3069): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x3) mount$tmpfs(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nr_inodes=t']) syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', 0x22000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x8, &(0x7f0000000cc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x2748a712}}) 7m14.680277062s ago: executing program 1 (id=3165): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x3200002, &(0x7f0000000900)={[{@noquota}, {@quota}, {@delalloc}]}, 0x3, 0x610, &(0x7f0000000940)="$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") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) fsopen(0x0, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000700)=@v2={0x2, @aes256, 0x10, '\x00', @auto="316570b692d4933a84d89e797032ed03"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x80002c1, 0x2, 0x0) unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x10, 0x11, &(0x7f0000001480)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x745, 0x66, &(0x7f0000001100)=""/102, 0x41000, 0x7, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000012c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) mremap(&(0x7f0000936000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000085b000/0x3000)=nil) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) syz_open_dev$loop(&(0x7f0000000200), 0x10, 0x80082) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x42, 0x0) 7m13.832037449s ago: executing program 1 (id=3168): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xd, 0x6, 0x4, 0x9}, 0x50) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa50003d1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x41, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000014c0)='2', 0x1, 0x8080c61) pwrite64(r4, &(0x7f0000001500)='E', 0xed0, 0x47ecf) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000001540)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001}) ioctl$TCSETS(r3, 0x40045431, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000000)=@base={0x5, 0x1, 0x6c02, 0x41}, 0x48) 7m12.44367626s ago: executing program 1 (id=3172): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_perm_addr}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000a80)=""/4087, 0xff7}, {&(0x7f0000001a80)=""/170, 0xaa}, {&(0x7f0000001b40)=""/181, 0xb5}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x100a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001c00)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000001c80)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001cc0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000001d00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001d80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001e00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001e40), 0x4000087, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001f00)={0x4000000, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001fc0)={0xffffffffffffffff, &(0x7f0000002000), 0x0}, 0x20) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000002040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x1, 0x21, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 7m10.69035782s ago: executing program 1 (id=3175): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0xc, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x18, 0x200448d0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x180) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x800000) mknodat(r3, &(0x7f0000000300)='./file2/file0\x00', 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000003d40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfe}, 0x1c}}, 0x8000) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$eJzslb+r01AUx7/3Ji9pfW5uLg4+8DmYJqm/lgfPxclB8Edxs9i0VFMrbQZbEPEvcHdzcPFfEKGu/hFSBVEQXdT5SnJvkptqSltbing+0JNv7j09OfeccAKCIP5bPrz/ORU/Dj5VABzFHmy1/tnIfbjm/67y7dGbK5cbT80Xb+2pUy1Gs5d+vglgcslApO6FEELf31PX6+CZvgGO00o3wOAofRscN5UOwHBL6bua7u8oEQbOnX7YanfDwI2NFxs/NvXZ/L4+YWhp+TFtfzga32uGYTDYmLBKKjf5kuVXAQ60/PR+OZDZulr9PHB4StfBcE3pi7DhOE5eEu38x808vjH3/BaWP+SuvvIx6U660p5xNrBkHXfm+MS1Xa0xAPtz719t9m1YRVgorOBlvmXIrbSjW0917QJm8aR/EVDYBtaf4QV7DUPk9aHsX5bqY3lfdO7vzu/y4WLvz6KVz+aneM5wSptPcpQ8Sz4Wtaj3oDYcjc90e81O0Anu+379vHvWdc/5tWQQSVsyA+P41WQ+HZGhY6plvhaz8LAZRQNP2uzelzY/QP4fnsw/jv2TSL4cDMeuzsb9DiB9KFM/nlxjtW+UJk8QBLFFToBlg9NMhfqaqA1LCOH/NvQIgiAIgiAIgiAIgvhn+BUAAP//aA9ZjQ==") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x800, 0x137) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000002200)=""/4110, 0x28, 0x100e, 0x1}, 0x28) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x12, r8, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bind$inet(0xffffffffffffffff, 0x0, 0x0) 7m7.831807992s ago: executing program 1 (id=3181): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000bc0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000002e00)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) connect$inet6(r3, 0x0, 0x0) open(&(0x7f0000000680)='./file0\x00', 0x1, 0x158) timer_create(0x3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, &(0x7f0000001e00)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd003f0000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r5 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0x400}}]}}, 0x0, 0x0, 0x0) r6 = openat(r5, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstatfs(r6, &(0x7f0000000280)=""/167) 7m3.459561688s ago: executing program 1 (id=3187): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_perm_addr}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000a80)=""/4087, 0xff7}, {&(0x7f0000001a80)=""/170, 0xaa}, {&(0x7f0000001b40)=""/181, 0xb5}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x100a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001c00)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000001c80)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001cc0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001d80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001e00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001e40), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=@base={0x9, 0x53, 0x3ff, 0x1, 0x0, 0x1}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000001f00)={0x4000000, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001fc0)={r3, &(0x7f0000002000), 0x0}, 0x20) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000002040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x1, 0x21, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) sendmsg$nl_route(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 6m47.069609493s ago: executing program 33 (id=3187): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_perm_addr}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000a80)=""/4087, 0xff7}, {&(0x7f0000001a80)=""/170, 0xaa}, {&(0x7f0000001b40)=""/181, 0xb5}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x100a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001c00)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000001c80)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001cc0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001d80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001e00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001e40), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=@base={0x9, 0x53, 0x3ff, 0x1, 0x0, 0x1}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000001f00)={0x4000000, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001fc0)={r3, &(0x7f0000002000), 0x0}, 0x20) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000002040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x1, 0x21, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) sendmsg$nl_route(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 25.617533962s ago: executing program 3 (id=3912): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x7, 0x2ac, &(0x7f0000000400)="$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") (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f00000036c0)={0x20, 0x0, r0}, 0x20) 25.472662407s ago: executing program 3 (id=3919): r0 = socket$nl_route(0x10, 0x3, 0x0) (fail_nth: 2) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x2}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x70b8e2e9d093994a}]}, 0x24}}, 0xc8d4) 24.776991098s ago: executing program 3 (id=3923): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) syz_read_part_table(0x5c6, &(0x7f00000002c0)="$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") socket(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x9, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000003000000884b020001000000950000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x3) mount$tmpfs(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nr_inodes=']) 23.747008393s ago: executing program 3 (id=3931): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c6e66732c73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c006a4fcfcc9fc5ea902e1a6384d405e843e1dfa18259eaaba553a63617a0f84f2e66f4a8121e2cea67640f61a98cef24cdbc0121ddb0212c7365c895e70775f8c82357782f45acff678373e50747f0dbd34a6c51a45f248402fd4340c0024ca0ee5de3af9233d9e31dd6f105e2696137379613fb63ef2adfa2f785af00684cfa440b01bda2cbcd1b326a0ee91991ebfbd00ec2a75ac8d59d1e7793dfb73a16dd3b166bc6a158528f"], 0x1, 0x267, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f0000000600)) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000006c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000700)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x14000, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000840)='./file0\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000900)=ANY=[], 0xff2e) io_setup(0x4, &(0x7f0000000940)=0x0) io_submit(r4, 0x2, &(0x7f0000000980)=[&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0, 0x0, 0x8}, 0x0]) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x7f) openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x62c40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='rdma.current\x00', 0x275a, 0x0) 23.161126743s ago: executing program 3 (id=3936): syz_mount_image$fuse(0x0, 0x0, 0x280028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f00000002c0)="88a96c6b4653156bc81f0d51131cf90d056c26f9fbb61532bc6dbee9e4688070d97f50f7d9a557f67083867c1dd810c17b510db0c6f5b5fbe4847f46eb3ef68724a9aeabe2a2372a360060e3fd5bd34c18f74b2a2b19da94b50e639c7f7e1d5efaeb182e192dfcf93a57cc39551626185e1546e26810157fdb825f5ff6ab936e5607499c2191d4e52345c9159b3016c58835f2f8d8249c1e0c2f228a0a30e649810eaefcc14410c32302750616f99b31345d00", 0xb3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) io_setup(0x239f, &(0x7f0000000680)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="702300001d00", @ANYRES16], 0x2370}, 0x1, 0x200000000000000, 0x0, 0x8000}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) 23.022721267s ago: executing program 3 (id=3938): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000020e00"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000004001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4) (fail_nth: 2) 22.99868704s ago: executing program 34 (id=3938): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000020e00"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000004001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4) (fail_nth: 2) 4.538648846s ago: executing program 6 (id=4037): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) syz_read_part_table(0x5c6, &(0x7f00000002c0)="$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") socket(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x3) mount$tmpfs(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nr_inodes=']) 3.609497851s ago: executing program 7 (id=4049): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000001540)={0x0, {{0xa, 0x4e20, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e1f, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x108) 3.563338996s ago: executing program 7 (id=4050): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010000000000040000001c000000", @ANYRES8=r1, @ANYBLOB="000000f707f00000009993d0e4fe0a41e9d2aec70693a9e9a266771667f970a451f1f388cff4d24e2cbee46d931f5838e3303d9a3eb3b406f6d9c50f586809cc51002e05dbc5cc32e95a999798d49f7c67824785f2b97278df2c00320067c1"], 0x24}}, 0xc8d4) dup(0xffffffffffffffff) 3.562583936s ago: executing program 7 (id=4051): r0 = gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xffffe000) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000980)=[{&(0x7f00000009c0)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0xd0, 0x1e8, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xffffff, 0x0, 0x100000001, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xffffff], 'xfrm0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0x6, 0x5, 0x13}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @local, [0xff0000ff, 0xffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'ipvlan0\x00', 'veth0\x00', {0xff}, {0xff}, 0x3a, 0x6, 0x5, 0x20}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b0635965491f6531877000001e7b667f10900000000000000e3121114449fd20ba2be6e45dfe72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r5 = socket(0x8, 0x2, 0xf13) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x5b30, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_lsm={0x1a, 0x3, &(0x7f0000001040)=@framed, &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x18, 0x2b, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x82}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @jmp={0x5, 0x0, 0x9, 0x8, 0x2, 0x6, 0xffffffffffffffe8}, @generic={0x9, 0x8, 0x7, 0x8, 0x8000}, @tail_call, @generic={0x5, 0xb, 0x8, 0x4000, 0xa2}, @call={0x85, 0x0, 0x0, 0x9c}, @call={0x85, 0x0, 0x0, 0xa3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e80)='GPL\x00', 0x9, 0x38, &(0x7f0000000ec0)=""/56, 0x41100, 0x19, '\x00', r6, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f00)={0x4, 0x2, 0x2, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000010c0)=[r2, r2], &(0x7f0000001100)=[{0x5, 0x5, 0x4, 0x6}, {0x2, 0x3, 0x9, 0x4}], 0x10, 0x3}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="300000001100010029bd7000ffdbdf25fe880000000000000000000000000001000004d40200320005002100020000003816bb5f6eafa431104ece853dd275aa09cd74106f9ea34809103e8e154def7569a45abe59069b87731ffe40319262f382b29c426f91c6093aa26d79492f47cdbb01899b2e7f5b7c0386df0639f7880b4c1ec95dee5b2ea055d619143d1628239713de51685542ae7f3fcc22811e9a2f06ce5480c53929634dd13c37a120e1e7ecdf6a2d7b59cf6fb7ff51d3704f0bd2f45dbe2427fed09450b47b562453b7942d121d7ce9d60420ef8e0494833a90eda6bcc9642ca4848bacbdf12ade06bf0a80695a4bf938ca86af380115abd7244b4959797acbd7d6281cf5e63cff884831f45c925650c38492a33951ebcbc83fd02a88df37676598e6731d16bafd88faf6351e4287e2bd266b154b4d606351ee3899b4bdb4945141aa0b98f1cb3b2f3659b30108f239ae713be6a09bd06a52e0830a"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x6000) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x4, 0x6, 0x5, 0x0, 0x0, {0xcc411eaf6a585b1f, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040095}, 0x40) r9 = dup(0xffffffffffffffff) setsockopt$inet6_udp_int(r9, 0x11, 0x67, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f00000000c0)) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) recvmmsg(r11, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0xffff1d1f}], 0x1, 0x20, 0x0) 3.552253606s ago: executing program 6 (id=4052): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000300)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x41, 0x1506, &(0x7f0000000380)="$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") chdir(&(0x7f00000018c0)='./file0\x00') syz_mount_image$vfat(&(0x7f0000001900), &(0x7f0000001940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380687b, 0x0, 0x5, 0x0, &(0x7f0000001a40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000280)) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000000)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000080)=0x6568, 0x4) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x7}], 0x48, 0x102, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x800040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r2, &(0x7f0000000200)='of', 0x2) 2.73449584s ago: executing program 0 (id=4063): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000006b40)={{0x1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006fc0)={0xffffffffffffffff, 0x20, &(0x7f0000006f80)={&(0x7f0000006e00)=""/176, 0xb0, 0x0, &(0x7f0000006ec0)=""/170, 0xaa}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000007000)='net/packet\x00') preadv(r1, &(0x7f0000007040)=[{&(0x7f0000007080)=""/110, 0x6e}], 0x1, 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000007100)='pagemap\x00') pread64(r2, &(0x7f0000007140)=""/102400, 0x19020, 0x1000000000) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000020140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000020380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000203c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000020400)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000020440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000020480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000020500), 0x318, 0x0) recvmmsg(r4, &(0x7f0000020540), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000020580)=0x2) mkdir(&(0x7f00000205c0)='./file0\x00', 0x97) mkdir(&(0x7f0000020600)='./file1\x00', 0x13b) mkdir(&(0x7f0000020640)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000020680)='./bus\x00', &(0x7f00000206c0), 0x0, &(0x7f0000020700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000020740)='./bus\x00') r6 = open(&(0x7f0000020780)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f00000207c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000020880), 0x7f03) r7 = openat(0xffffffffffffff9c, &(0x7f00000201c0)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000020200)) bpf$PROG_LOAD(0x5, &(0x7f00000202c0)={0xe, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfe0}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x2}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x0, 0x0, 0xb, 0x0, 0x18, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000006c40)='syzkaller\x00', 0x89, 0xf8, &(0x7f0000006c80)=""/248, 0x41000, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000006d80)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000006dc0)={0x3, 0x0, 0x5, 0xc60}, 0x10, r0, r1, 0x1, &(0x7f0000020240)=[r2, r3, r7], &(0x7f0000020280)=[{0x4, 0x3, 0x1}], 0x10, 0x9}, 0x94) syz_io_uring_setup(0x10d, &(0x7f0000000040)={0x0, 0xb6e7, 0x2, 0x5}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x6000, 0x0) 2.73227106s ago: executing program 7 (id=4064): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r2, &(0x7f0000000740)='foo', 0x3) 2.64086814s ago: executing program 6 (id=4065): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x84ff, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sigaltstack(&(0x7f0000000040)={&(0x7f0000000200)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() mknodat(0xffffffffffffff9c, &(0x7f0000001240)='./file4\x00', 0x11c0, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000001280)='./file4\x00', 0x1, 0x166) r1 = fsopen(&(0x7f0000000100)='proc\x00', 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001480), 0x10) sendmsg$can_bcm(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000015c0)='./proc_mnt\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r3, &(0x7f0000001680)=""/1, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x1) fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000140)='./bus\x00', 0x400017e) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000001380)='.\x00', 0x88a880, 0x4) getdents64(r6, &(0x7f00000013c0)=""/163, 0xba974ed140df4995) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000001300)=0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) timer_settime(r7, 0x0, &(0x7f0000001340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x30, 0x1, 0x0, 0xfffff028}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) 2.611312753s ago: executing program 7 (id=4066): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4bfb, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000240)="c0fbedd8cbc20fb9b8209a08efe4", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.573734336s ago: executing program 4 (id=4067): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000001a0000000000000000250002000000000005000200000000002500000000000000a500feff0000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f0000783000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005b7000/0x2000)=nil) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000cf8000/0x1000)=nil, 0x1000) mremap(&(0x7f0000cc0000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, 0x0, 0x0) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) unshare(0x400) r1 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2.500756794s ago: executing program 4 (id=4068): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001000010000000000ffffffff00000000000000000000ffffeb000001fc0100000000000000000000000000010000fff82000000100000000f6000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010104000000000000000000000000000000006c000000ac1414bb00000000000000000000000004000000000000000000000000000000d82600000000000000000000000000000300000000000000060000000000000004000000000000008400000000000000000000000080000004000000000000000000004000000000000000000000010000000000030002000700000025bd7000000000000a0000013400000000000000"], 0xf0}}, 0x4810) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111a80000000000851000000095000000000000009500a50500000000b5291c376433ff651794ef658f2674d74f4fafb4cf25642fe4268f860e2d448af358a921f23f45a0324e8b682abfbe2c06ecc66a4954b125d8c9d6769e5945d88d2fb531987a87"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080001020000207b8af8ff00000000f7ef0ef3b117e26807020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x10, &(0x7f0000000b00)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x5, 0xe, 0x0, &(0x7f0000000c00)="469dc2d342e2b700009100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x80, 0x2}]}, 0x10) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000140)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x0) 2.500382404s ago: executing program 4 (id=4069): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000440)={0x12}) write(r3, &(0x7f0000000480), 0x11000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000004c0)={0x0, 0xccf, 0x3, 0x0, 0x5}) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000140)=0xfffd, 0x4) read(r0, &(0x7f00000001c0)=""/225, 0xe1) r5 = socket(0x5, 0x5, 0x10000003) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRESHEX=r5, @ANYRES8=0x0], 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x400) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) 2.499742184s ago: executing program 7 (id=4070): syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0x60, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0xf8, 0x20, 0xc4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x81, 0x2, 0x9, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x5, 0x8, {0x8, 0x25, 0x1, 0x82, 0x4f0a86a9df63d559, 0x6, 0x70fa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x40, 0x0, 0x5, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x9, 0x1ff}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x10, &(0x7f00000000c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x5, 0xff, 0x3, 0x5}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x200, 0x169) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000140)='./file3\x00', 0x808, &(0x7f0000000180)=ANY=[], 0x1, 0x1c3, &(0x7f0000000780)="$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") r3 = open(&(0x7f0000000980)='.\x00', 0x20000, 0x0) getdents64(r3, &(0x7f00000009c0)=""/224, 0xe0) write(r2, &(0x7f0000000740)='foo', 0x3) 2.454537769s ago: executing program 5 (id=4071): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES8], 0x10, 0x1229, &(0x7f0000000600)="$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") (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001880), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) connect$can_bcm(r0, &(0x7f0000000400), 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000003480)=""/4106}, 0x94) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x12, 0x4) (async, rerun: 32) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async, rerun: 32) read(r0, &(0x7f0000002480)=""/4096, 0x1000) 2.392280535s ago: executing program 5 (id=4072): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d40)={&(0x7f0000001d80)=ANY=[@ANYBLOB="9feb01001400000014000000020000000000000001000013040100000400000000000002e4b4952bb6074e000000", @ANYRES64=r0, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="109c07015170bab617f35e2646e432fa32d85cca9450ca75a640b6426ff4706539acd4b49e7dffe405034d6f904e4e84aa83e4c516bfb1a593", @ANYRES16=r0], 0x0, 0x2e}, 0x28) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x168, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @cache={'random_threshold ', 0xfb2}}}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_TABLE_STATUS(r2, 0xc138fd0c, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x238, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, '\x00'/256}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x6, 0x3, &(0x7f0000001f00)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000001f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001f80)={'veth1_to_hsr\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001fc0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002200)=@newtfilter={0x3c, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x7}, {0x0, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x80000001}, @TCA_RATE={0x6, 0x5, {0x3, 0x36}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7f}}]}, 0x3c}, 0x1, 0xf0ffffffffffff, 0x0, 0x20}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000020c0)={r6, 0x0, 0x0}, 0x10) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000c00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x408600, 0x8) r8 = epoll_create1(0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000002100)={0xc000000b}) signalfd4(r9, &(0x7f0000002140)={[0xfffffffffffffff9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f00000021c0)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) syz_create_resource$futex(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000000)='ntfs3\x00', 0x1002040, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/filesystems\x00', 0x0, 0x0) read(r10, &(0x7f0000000d40)=""/4096, 0x1000) mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x8) 2.318528652s ago: executing program 5 (id=4073): socket$packet(0x11, 0x3, 0x300) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) 2.266633357s ago: executing program 5 (id=4074): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = getpid() ptrace$ARCH_GET_GS(0x1e, r0, 0x0, 0x1004) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) io_setup(0x239f, &(0x7f0000000680)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, 0x0, 0x8000}, 0x4000) 2.098370235s ago: executing program 5 (id=4075): gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xffffe000) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000980)=[{&(0x7f00000009c0)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="5401000018000100299d7000fddbdf251d0105001e01060003f800feff71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e42373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c025c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea0000150004"], 0x154}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0xd0, 0x1e8, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xffffff, 0x0, 0x100000001, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xffffff], 'xfrm0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0x6, 0x5, 0x13}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @local, [0xff0000ff, 0xffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'ipvlan0\x00', 'veth0\x00', {0xff}, {0xff}, 0x3a, 0x6, 0x5, 0x20}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b0635965491f6531877000001e7b667f10900000000000000e3121114449fd20ba2be6e45dfe72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r4 = socket(0x8, 0x2, 0xf13) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x5b30, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_lsm={0x1a, 0x3, &(0x7f0000001040)=@framed, &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x18, 0x2b, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x82}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @jmp={0x5, 0x0, 0x9, 0x8, 0x2, 0x6, 0xffffffffffffffe8}, @generic={0x9, 0x8, 0x7, 0x8, 0x8000}, @tail_call, @generic={0x5, 0xb, 0x8, 0x4000, 0xa2}, @call={0x85, 0x0, 0x0, 0x9c}, @call={0x85, 0x0, 0x0, 0xa3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e80)='GPL\x00', 0x9, 0x38, &(0x7f0000000ec0)=""/56, 0x41100, 0x19, '\x00', r5, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f00)={0x4, 0x2, 0x2, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000010c0)=[r1, r1], &(0x7f0000001100)=[{0x5, 0x5, 0x4, 0x6}, {0x2, 0x3, 0x9, 0x4}], 0x10, 0x3}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x6000) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xcc411eaf6a585b1f, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040095}, 0x40) r8 = dup(0xffffffffffffffff) setsockopt$inet6_udp_int(r8, 0x11, 0x67, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) ioctl$VHOST_VDPA_GET_STATUS(r0, 0x8001af71, &(0x7f00000000c0)) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) recvmmsg(r10, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0xffff1d1f}], 0x1, 0x20, 0x0) 1.928641652s ago: executing program 0 (id=4076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004002000080000000a00000000000000", @ANYBLOB], 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev}, &(0x7f00000001c0)=0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write$P9_RVERSION(r2, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x15) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="490650662936cd04c6d4eb765200010000008520000002000000c4954000fcffffff"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x9, '\x00', r1, @fallback=0x23, r2, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x6, 0x97ef, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000005c0)=[r3, r0, r4, r0, 0x1, r0, r0, r2, r4, r2, r4], &(0x7f0000000400)=[{0x1, 0x5, 0x8, 0xc}, {0x3, 0x5, 0xf, 0x2}, {0x0, 0x5, 0x6, 0xc}]}, 0x94) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f00000000c0)=ANY=[], 0x1, 0x1537, &(0x7f0000001040)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002580)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000352000/0x4000)=nil, 0x4000, 0x2, 0x12, r5, 0x4df7d000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000025c0)='pids.current\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@generic={&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000300), &(0x7f0000000080)}, 0x20) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000500)={0x0, @broadcast, @initdev}, &(0x7f0000000540)=0xc) 1.863674099s ago: executing program 0 (id=4077): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2370}, 0x1, 0x200000000000000, 0x0, 0x8000}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) 1.862492809s ago: executing program 0 (id=4078): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="b8", 0x1, 0x2400a044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0), 0x4) 1.851133191s ago: executing program 0 (id=4079): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000000)='statm\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000000180)) read$FUSE(r2, &(0x7f0000000540)={0x2020}, 0x96) close(r0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) keyctl$revoke(0x3, r4) keyctl$read(0xb, r4, 0x0, 0x29) read$FUSE(r2, &(0x7f0000002580)={0x2020}, 0x39e) 1.773931618s ago: executing program 6 (id=4080): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.773384038s ago: executing program 6 (id=4081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="c0fbedd8cbc20fb9b8209a08efe4", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.690391167s ago: executing program 6 (id=4082): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', 0x0, 0x0, 0x0) r0 = syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x554e, &(0x7f0000000440)="$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") r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x108) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000240)='./bus\x00', 0x810, &(0x7f0000000280)=ANY=[], 0xfd, 0x1067a, &(0x7f0000005a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000016100)='./file1\x00', 0x1c0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) unlink(&(0x7f0000005a00)='./file1\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000005a40)={0x0, &(0x7f0000005a80)}) close_range(r2, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x3) 1.674853149s ago: executing program 4 (id=4083): r0 = getpgrp(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000b, 0x8031, 0xffffffffffffffff, 0x4f1b3000) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000000), 0x4001) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r3, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/142, 0x8e}}, 0x10) r4 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x1) close(r5) socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d2a330c0666646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000009b80), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) io_setup(0x8, &(0x7f0000000180)) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f0000009bc0)={0xb6, 0x0, 0x8}) 1.384882718s ago: executing program 4 (id=4084): socket$packet(0x11, 0x3, 0x300) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) 1.326559454s ago: executing program 4 (id=4085): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x390a4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x40000000000035d, 0x20000084) recvmmsg(r2, &(0x7f00000003c0), 0x191d1f8, 0x10042, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000002544,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303130363135312c756d61736b3d30303030303030303030303030303030303030303336302c6e616d65636173653d312c756d61736b3d30303030303030303030303030303030303030303136352c6572726f72733d636f6e74696e75652c75056964", @ANYRESHEX=0x0, @ANYBLOB=',discard,dmask=00000000000000000000007,utf8,\x00'], 0x1, 0x1535, &(0x7f00000005c0)="$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") r4 = open(&(0x7f0000001b00)='.\x00', 0x8000, 0x10) getdents(r4, &(0x7f0000001b40)=""/180, 0xb4) r5 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000100), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000140)={0xf0000012}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001e00)={'syztnl0\x00', &(0x7f0000001d80)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x70, 0x134, 0x9, @private1, @private1, 0x7800, 0x1, 0xa55, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x25f1a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait(r5, &(0x7f0000000180)=[{}, {}], 0x2, 0x8, 0x0, 0xfffffffffffffd4a) lseek(r0, 0x26f, 0x4) 1.255967041s ago: executing program 5 (id=4086): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', &(0x7f0000000240)={0xa0482, 0x86, 0x2}, 0x18) r1 = openat(r0, &(0x7f0000000140)='./sys\x00', 0x1, 0x4) write$binfmt_format(r1, &(0x7f0000000180)='-1\x00', 0x3) write$binfmt_format(r1, &(0x7f00000001c0)='1\x00', 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22700, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffe) r5 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r6, 0x9, 0x1, 0x82, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48b, 0x0, 0x200000000002}]}) 0s ago: executing program 0 (id=4087): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0xf9, 0x0, 0xfffffffe, 0x7, @mcast1, @loopback, 0x40, 0x700, 0xfffffffd, 0x3ff}}) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01005800000000000000100000001000000008000000050000000000000e04000000000000000000002e615f3e0066094c18ae001b7f2a095c6e1cfedf8c1bccfaefd709205df11d7bc3c6a474d0b03e36bfdc"], 0x0, 0x30}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x22b}]}) r6 = syz_usb_connect(0x0, 0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) syz_usb_ep_read(r6, 0x2, 0x0, 0x0) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): ][T16294] FAULT_INJECTION: forcing a failure. [ 1734.608360][T16294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.623110][ T28] audit: type=1400 audit(1793622976.151:480): avc: denied { listen } for pid=16283 comm="syz.0.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1734.650224][T16294] CPU: 1 PID: 16294 Comm: syz.4.3851 Not tainted syzkaller #0 [ 1734.657748][T16294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1734.667861][T16294] Call Trace: [ 1734.671165][T16294] [ 1734.674131][T16294] __dump_stack+0x21/0x24 [ 1734.678505][T16294] dump_stack_lvl+0x110/0x170 [ 1734.683215][T16294] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1734.688276][T16294] ? stack_trace_save+0xa6/0xf0 [ 1734.693245][T16294] dump_stack+0x15/0x24 [ 1734.697438][T16294] should_fail_ex+0x3bf/0x510 [ 1734.702177][T16294] should_fail+0xb/0x10 [ 1734.706368][T16294] should_fail_usercopy+0x1a/0x20 [ 1734.711453][T16294] _copy_from_user+0x1e/0xc0 [ 1734.716075][T16294] ___sys_recvmsg+0x170/0x590 [ 1734.720884][T16294] ? kstrtoull+0x137/0x1d0 [ 1734.725350][T16294] ? __sys_recvmsg+0x290/0x290 [ 1734.730158][T16294] ? kstrtouint_from_user+0x113/0x170 [ 1734.735604][T16294] ? __fget_files+0x2d1/0x330 [ 1734.740417][T16294] ? __fdget+0x19c/0x220 [ 1734.743993][ T28] audit: type=1400 audit(1793622976.151:481): avc: denied { connect } for pid=16283 comm="syz.0.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1734.744692][T16294] ? do_recvmmsg+0x19e/0x7e0 [ 1734.766470][ T28] audit: type=1400 audit(1793622976.161:482): avc: denied { write } for pid=16283 comm="syz.0.3848" path="socket:[83294]" dev="sockfs" ino=83294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1734.768966][T16294] do_recvmmsg+0x370/0x7e0 [ 1734.792827][ T28] audit: type=1400 audit(1793622976.161:483): avc: denied { accept } for pid=16283 comm="syz.0.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1734.796748][T16294] ? __sys_recvmmsg+0x290/0x290 [ 1734.816566][ T28] audit: type=1400 audit(1793622976.161:484): avc: denied { read } for pid=16283 comm="syz.0.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1734.821302][T16294] ? __cfi_mutex_unlock+0x10/0x10 [ 1734.841335][ T28] audit: type=1400 audit(1793622976.261:485): avc: denied { create } for pid=16292 comm="syz.0.3852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1734.845682][T16294] ? __kasan_check_write+0x14/0x20 [ 1734.845713][T16294] __x64_sys_recvmmsg+0x195/0x250 [ 1734.875538][T16294] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 1734.881136][T16294] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1734.887289][T16294] x64_sys_call+0x3e7/0x9a0 [ 1734.891862][T16294] do_syscall_64+0x4c/0xa0 [ 1734.896314][T16294] ? clear_bhb_loop+0x30/0x80 [ 1734.901028][T16294] ? clear_bhb_loop+0x30/0x80 [ 1734.905730][T16294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1734.911627][T16294] RIP: 0033:0x7ff7a1b9fb19 [ 1734.916046][T16294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.935672][T16294] RSP: 002b:00007ff7a2a9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1734.944121][T16294] RAX: ffffffffffffffda RBX: 00007ff7a1e25fa0 RCX: 00007ff7a1b9fb19 [ 1734.952118][T16294] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 1734.960122][T16294] RBP: 00007ff7a2a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1734.968109][T16294] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1734.976084][T16294] R13: 00007ff7a1e26038 R14: 00007ff7a1e25fa0 R15: 00007ffeaeac8608 [ 1734.984098][T16294] [ 1735.000080][T13741] EXT4-fs (loop6): unmounting filesystem. [ 1735.064844][T16304] loop4: detected capacity change from 0 to 128 [ 1735.154948][T16307] netlink: 'syz.3.3857': attribute type 3 has an invalid length. [ 1735.170400][T16307] netlink: 'syz.3.3857': attribute type 3 has an invalid length. [ 1735.179222][T16304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1735.196857][T16304] ext4 filesystem being mounted at /758/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1735.208647][ T28] audit: type=1400 audit(1793622977.863:486): avc: denied { bind } for pid=16297 comm="syz.6.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1735.229877][T16313] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3853'. [ 1735.239123][ T493] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1735.323539][T16317] loop3: detected capacity change from 0 to 2048 [ 1735.363093][T16317] loop3: p1 < > p4 [ 1735.367549][T16317] loop3: p4 size 722688 extends beyond EOD, truncated [ 1735.377409][T16317] tmpfs: Bad value for 'nr_inodes' [ 1735.419752][T16322] netlink: 'syz.5.3861': attribute type 16 has an invalid length. [ 1735.427723][T16322] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.3861'. [ 1735.445221][ T493] usb 1-1: Using ep0 maxpacket: 32 [ 1735.466931][ T493] usb 1-1: too many endpoints for config 0 interface 0 altsetting 6: 50, using maximum allowed: 30 [ 1735.478182][ T493] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.489415][T16325] FAULT_INJECTION: forcing a failure. [ 1735.489415][T16325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.503311][ T493] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 50 [ 1735.516387][T16325] CPU: 1 PID: 16325 Comm: syz.3.3862 Not tainted syzkaller #0 [ 1735.524006][T16325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1735.534109][T16325] Call Trace: [ 1735.537419][T16325] [ 1735.540365][T16325] __dump_stack+0x21/0x24 [ 1735.544748][T16325] dump_stack_lvl+0x110/0x170 [ 1735.549442][T16325] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1735.554489][T16325] dump_stack+0x15/0x24 [ 1735.558659][T16325] should_fail_ex+0x3bf/0x510 [ 1735.563354][T16325] should_fail+0xb/0x10 [ 1735.567529][T16325] should_fail_usercopy+0x1a/0x20 [ 1735.572588][T16325] _copy_to_user+0x1e/0x90 [ 1735.577038][T16325] simple_read_from_buffer+0xe9/0x160 [ 1735.582550][T16325] proc_fail_nth_read+0x1a6/0x220 [ 1735.587662][T16325] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1735.593230][T16325] ? security_file_permission+0x94/0xb0 [ 1735.598865][T16325] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1735.604451][T16325] vfs_read+0x286/0x930 [ 1735.608668][T16325] ? __cfi_vfs_read+0x10/0x10 [ 1735.613358][T16325] ? __kasan_check_write+0x14/0x20 [ 1735.618491][T16325] ? mutex_lock+0x93/0x1b0 [ 1735.622928][T16325] ? __cfi_mutex_lock+0x10/0x10 [ 1735.627800][T16325] ? __fdget_pos+0x2cd/0x380 [ 1735.632405][T16325] ? ksys_read+0x70/0x260 [ 1735.636924][T16325] ksys_read+0x14a/0x260 [ 1735.641276][T16325] ? __cfi_ksys_read+0x10/0x10 [ 1735.646061][T16325] ? fput+0x154/0x1a0 [ 1735.650062][T16325] ? debug_smp_processor_id+0x17/0x20 [ 1735.655491][T16325] __x64_sys_read+0x7b/0x90 [ 1735.660107][T16325] x64_sys_call+0x2f/0x9a0 [ 1735.664539][T16325] do_syscall_64+0x4c/0xa0 [ 1735.668990][T16325] ? clear_bhb_loop+0x30/0x80 [ 1735.673698][T16325] ? clear_bhb_loop+0x30/0x80 [ 1735.678419][T16325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1735.684382][T16325] RIP: 0033:0x7f064716034e [ 1735.688824][T16325] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1735.708628][T16325] RSP: 002b:00007f0648041fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1735.717069][T16325] RAX: ffffffffffffffda RBX: 00007f06480426c0 RCX: 00007f064716034e [ 1735.725064][T16325] RDX: 000000000000000f RSI: 00007f06480420a0 RDI: 0000000000000004 [ 1735.733052][T16325] RBP: 00007f0648042090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.741048][T16325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.749040][T16325] R13: 00007f0647426038 R14: 00007f0647425fa0 R15: 00007ffd2da9f6d8 [ 1735.757041][T16325] [ 1735.769016][ T493] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1735.775989][ T493] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1735.785281][ T493] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.794893][ T493] usb 1-1: config 0 descriptor?? [ 1735.929315][ T289] EXT4-fs (loop4): unmounting filesystem. [ 1735.936704][T16330] device-mapper: table: 252:0: verity: Device must be readonly (-EINVAL) [ 1735.945593][T16330] device-mapper: ioctl: error adding target to table [ 1735.954056][T16330] device-mapper: ioctl: The device has no table. [ 1735.961012][T16330] device-mapper: ioctl: The device has no table. [ 1735.996860][T16335] SELinux: Context ›Y7»ôj [ 1735.996860][T16335] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 1735.996860][T16335] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå4˜i!ÿÿOi%Ú‚2 úë´F"2‹E,P] èôkÇ? is not valid (left unmapped). [ 1736.079097][T16335] SELinux: Context *mþkXI·Æ$h·x4Û«½K•M¤ is not valid (left unmapped). [ 1736.094558][T16336] loop6: detected capacity change from 0 to 2048 [ 1736.103537][T16335] SELinux: Context ¬õ–KM*º,hÃc¶¼I¨Ç¾Êû·ßÌ‹yÖÔõ+á.ë+yÒÿ0ª[prŸ;J©A9ÅõIqÒ j¦Ç¼=7)oM{ìší–nFÓÙ=«¾ø‰Xmnxºœr¶Dß㑉³åž³ç4ÌÚTW²ü}»tŠóôòò%È–Y…É^sìlF¬€¤§Bˆ53²‰hÖmì‰âÝ5þ}ßã;J™¬ìÁXom%~"á¿~9mM¾–~alʺLàI8­„iÛþ [ 1736.446493][T16346] __dump_stack+0x21/0x24 [ 1736.450918][T16346] dump_stack_lvl+0x110/0x170 [ 1736.455657][T16346] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1736.460725][T16346] dump_stack+0x15/0x24 [ 1736.464971][T16346] should_fail_ex+0x3bf/0x510 [ 1736.467759][ T493] usb 1-1: USB disconnect, device number 8 [ 1736.469695][T16346] should_fail+0xb/0x10 [ 1736.479695][T16346] should_fail_usercopy+0x1a/0x20 [ 1736.484764][T16346] _copy_from_user+0x1e/0xc0 [ 1736.489399][T16346] do_tcp_setsockopt+0x5a1/0x1b90 [ 1736.494702][T16346] ? proc_fail_nth_write+0x180/0x200 [ 1736.500030][T16346] ? __cfi_do_tcp_setsockopt+0x10/0x10 [ 1736.505666][T16346] ? selinux_socket_setsockopt+0x282/0x360 [ 1736.511675][T16346] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 1736.517919][T16346] tcp_setsockopt+0x54/0x100 [ 1736.522555][T16346] sock_common_setsockopt+0xb1/0xc0 [ 1736.527871][T16346] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 1736.533849][T16346] __sys_setsockopt+0x2ff/0x4e0 [ 1736.538919][T16346] ? __cfi___sys_setsockopt+0x10/0x10 [ 1736.544352][T16346] ? ksys_write+0x1fa/0x260 [ 1736.548910][T16346] ? __cfi_ksys_write+0x10/0x10 [ 1736.553813][T16346] __x64_sys_setsockopt+0xbf/0xd0 [ 1736.558899][T16346] x64_sys_call+0x124/0x9a0 [ 1736.563452][T16346] do_syscall_64+0x4c/0xa0 [ 1736.567914][T16346] ? clear_bhb_loop+0x30/0x80 [ 1736.572899][T16346] ? clear_bhb_loop+0x30/0x80 [ 1736.577734][T16346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1736.583669][T16346] RIP: 0033:0x7f40efb9fb19 [ 1736.588122][T16346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1736.607768][T16346] RSP: 002b:00007f40f0a38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1736.616273][T16346] RAX: ffffffffffffffda RBX: 00007f40efe25fa0 RCX: 00007f40efb9fb19 [ 1736.624291][T16346] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000004 [ 1736.632300][T16346] RBP: 00007f40f0a38090 R08: 0000000000000004 R09: 0000000000000000 [ 1736.640310][T16346] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1736.648365][T16346] R13: 00007f40efe26038 R14: 00007f40efe25fa0 R15: 00007ffd2c2517a8 [ 1736.656390][T16346] [ 1736.686076][T16347] fido_id[16347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1736.690677][T16349] binder: 16348:16349 ioctl 9205 0 returned -22 [ 1736.728685][T16353] FAULT_INJECTION: forcing a failure. [ 1736.728685][T16353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1736.748224][T16353] CPU: 0 PID: 16353 Comm: syz.5.3872 Not tainted syzkaller #0 [ 1736.755757][T16353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1736.765853][T16353] Call Trace: [ 1736.769187][T16353] [ 1736.772145][T16353] __dump_stack+0x21/0x24 [ 1736.776519][T16353] dump_stack_lvl+0x110/0x170 [ 1736.781237][T16353] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1736.786298][T16353] ? __kasan_check_write+0x14/0x20 [ 1736.791454][T16353] ? kvm_arch_vcpu_load+0x56f/0x760 [ 1736.796715][T16353] dump_stack+0x15/0x24 [ 1736.800912][T16353] should_fail_ex+0x3bf/0x510 [ 1736.805632][T16353] should_fail+0xb/0x10 [ 1736.809831][T16353] should_fail_usercopy+0x1a/0x20 [ 1736.814893][T16353] _copy_from_user+0x1e/0xc0 [ 1736.819504][T16353] kvm_arch_vcpu_ioctl+0x22c/0x2390 [ 1736.824726][T16353] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1736.830384][T16353] ? __cfi____update_load_sum+0x10/0x10 [ 1736.836053][T16353] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 1736.841708][T16353] ? update_load_avg+0x497/0x13f0 [ 1736.846765][T16353] ? enqueue_task_fair+0xbee/0x1d70 [ 1736.851987][T16353] ? __kasan_check_write+0x14/0x20 [ 1736.857115][T16353] ? resched_curr+0x114/0x3a0 [ 1736.861823][T16353] ? _parse_integer_limit+0x18e/0x1d0 [ 1736.867237][T16353] ? __asan_set_shadow_00+0xe/0x10 [ 1736.872458][T16353] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 1736.877376][T16353] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 1736.883030][T16353] ? kstrtouint+0x74/0xe0 [ 1736.887380][T16353] ? kstrtouint_from_user+0x113/0x170 [ 1736.892777][T16353] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 1736.898523][T16353] ? __this_cpu_preempt_check+0x13/0x20 [ 1736.904093][T16353] ? xfd_validate_state+0x70/0x150 [ 1736.909226][T16353] ? ioctl_has_perm+0x1b8/0x4f0 [ 1736.914162][T16353] ? memcpy+0x56/0x70 [ 1736.918166][T16353] ? __kasan_check_write+0x14/0x20 [ 1736.923293][T16353] ? mutex_lock_killable+0x93/0x1b0 [ 1736.928507][T16353] ? __cfi_mutex_lock_killable+0x10/0x10 [ 1736.934167][T16353] kvm_vcpu_ioctl+0x6fb/0xc00 [ 1736.938871][T16353] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 1736.944182][T16353] ? selinux_file_ioctl+0x3ad/0x4c0 [ 1736.949468][T16353] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 1736.955071][T16353] ? mutex_unlock+0x8f/0x230 [ 1736.959677][T16353] ? __cfi_mutex_unlock+0x10/0x10 [ 1736.964724][T16353] ? __fget_files+0x2d1/0x330 [ 1736.969428][T16353] ? security_file_ioctl+0x95/0xc0 [ 1736.974668][T16353] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 1736.979900][T16353] __se_sys_ioctl+0x12f/0x1b0 [ 1736.984597][T16353] __x64_sys_ioctl+0x7b/0x90 [ 1736.989204][T16353] x64_sys_call+0x58b/0x9a0 [ 1736.993728][T16353] do_syscall_64+0x4c/0xa0 [ 1736.998167][T16353] ? clear_bhb_loop+0x30/0x80 [ 1737.002977][T16353] ? clear_bhb_loop+0x30/0x80 [ 1737.007697][T16353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.013699][T16353] RIP: 0033:0x7f40efb9fb19 [ 1737.018137][T16353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.037851][T16353] RSP: 002b:00007f40f0a38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1737.046319][T16353] RAX: ffffffffffffffda RBX: 00007f40efe25fa0 RCX: 00007f40efb9fb19 [ 1737.054314][T16353] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1737.062306][T16353] RBP: 00007f40f0a38090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.070294][T16353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.078281][T16353] R13: 00007f40efe26038 R14: 00007f40efe25fa0 R15: 00007ffd2c2517a8 [ 1737.086285][T16353] [ 1737.158427][T16361] FAULT_INJECTION: forcing a failure. [ 1737.158427][T16361] name failslab, interval 1, probability 0, space 0, times 1 [ 1737.171252][T16361] CPU: 1 PID: 16361 Comm: syz.6.3875 Not tainted syzkaller #0 [ 1737.178774][T16361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1737.188859][T16361] Call Trace: [ 1737.192159][T16361] [ 1737.195124][T16361] __dump_stack+0x21/0x24 [ 1737.199488][T16361] dump_stack_lvl+0x110/0x170 [ 1737.204199][T16361] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1737.209261][T16361] dump_stack+0x15/0x24 [ 1737.213456][T16361] should_fail_ex+0x3bf/0x510 [ 1737.218175][T16361] __should_failslab+0xac/0xf0 [ 1737.223161][T16361] should_failslab+0x9/0x20 [ 1737.227798][T16361] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1737.233327][T16361] ? kvmalloc_node+0x28a/0x460 [ 1737.238196][T16361] ? unwind_get_return_address+0x4d/0x90 [ 1737.243900][T16361] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1737.250123][T16361] ? kvmalloc_node+0x28a/0x460 [ 1737.254967][T16361] __kmalloc_node+0xa2/0x1e0 [ 1737.259601][T16361] kvmalloc_node+0x28a/0x460 [ 1737.264232][T16361] ? __cfi_kvmalloc_node+0x10/0x10 [ 1737.269499][T16361] ? __stack_depot_save+0x36/0x490 [ 1737.274764][T16361] traverse+0xdc/0x5e0 [ 1737.278882][T16361] ? _parse_integer+0x2a/0x40 [ 1737.283603][T16361] seq_read_iter+0xc68/0xd80 [ 1737.288247][T16361] ? kstrtouint+0x74/0xe0 [ 1737.292715][T16361] ? iov_iter_init+0x53/0x1f0 [ 1737.297557][T16361] seq_read+0x171/0x210 [ 1737.301764][T16361] ? __cfi_seq_read+0x10/0x10 [ 1737.306484][T16361] ? __kasan_check_write+0x14/0x20 [ 1737.311635][T16361] ? proc_fail_nth_write+0x180/0x200 [ 1737.316965][T16361] ? avc_policy_seqno+0x1b/0x70 [ 1737.321868][T16361] ? __cfi_seq_read+0x10/0x10 [ 1737.322720][T13036] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1737.326843][T16361] proc_reg_read+0x1e4/0x2d0 [ 1737.338927][T16361] ? __cfi_proc_reg_read+0x10/0x10 [ 1737.344093][T16361] vfs_read+0x286/0x930 [ 1737.348327][T16361] ? __cfi_vfs_read+0x10/0x10 [ 1737.353049][T16361] ? __fget_files+0x2d1/0x330 [ 1737.357768][T16361] ? __fdget+0x19c/0x220 [ 1737.362043][T16361] ? __x64_sys_pread64+0xf3/0x220 [ 1737.367099][T16361] __x64_sys_pread64+0x194/0x220 [ 1737.372105][T16361] ? __cfi___x64_sys_pread64+0x10/0x10 [ 1737.377603][T16361] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1737.383713][T16361] x64_sys_call+0x4c7/0x9a0 [ 1737.388266][T16361] do_syscall_64+0x4c/0xa0 [ 1737.392718][T16361] ? clear_bhb_loop+0x30/0x80 [ 1737.397448][T16361] ? clear_bhb_loop+0x30/0x80 [ 1737.402168][T16361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.408098][T16361] RIP: 0033:0x7f3364d9fb19 [ 1737.412569][T16361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.432209][T16361] RSP: 002b:00007f3365ba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1737.440665][T16361] RAX: ffffffffffffffda RBX: 00007f3365025fa0 RCX: 00007f3364d9fb19 [ 1737.448676][T16361] RDX: 000000000000009a RSI: 00002000000004c0 RDI: 0000000000000006 [ 1737.456694][T16361] RBP: 00007f3365ba8090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.464709][T16361] R10: 00000000000000e4 R11: 0000000000000246 R12: 0000000000000001 [ 1737.472719][T16361] R13: 00007f3365026038 R14: 00007f3365025fa0 R15: 00007ffe916f85a8 [ 1737.480740][T16361] [ 1737.533643][T13036] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1737.541885][T13036] usb 4-1: config 0 has no interface number 0 [ 1737.548179][T13036] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.567828][T16366] loop5: detected capacity change from 0 to 2048 [ 1737.574344][T13036] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1737.585096][T13036] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1737.602083][T13036] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1737.611517][T13036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.633016][T16366] loop5: p1 < > p4 [ 1737.637798][T16375] FAULT_INJECTION: forcing a failure. [ 1737.637798][T16375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.650946][T16375] CPU: 1 PID: 16375 Comm: syz.6.3879 Not tainted syzkaller #0 [ 1737.658615][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1737.668784][T16375] Call Trace: [ 1737.672095][T16375] [ 1737.675046][T16375] __dump_stack+0x21/0x24 [ 1737.679401][T16375] dump_stack_lvl+0x110/0x170 [ 1737.684096][T16375] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1737.689149][T16375] dump_stack+0x15/0x24 [ 1737.693537][T16375] should_fail_ex+0x3bf/0x510 [ 1737.698240][T16375] should_fail+0xb/0x10 [ 1737.702414][T16375] should_fail_usercopy+0x1a/0x20 [ 1737.707474][T16375] _copy_from_user+0x1e/0xc0 [ 1737.712085][T16375] __sys_bpf+0x2a0/0x850 [ 1737.716512][T16375] ? bpf_link_show_fdinfo+0x330/0x330 [ 1737.721906][T16375] ? __cfi_ksys_write+0x10/0x10 [ 1737.726778][T16375] ? debug_smp_processor_id+0x17/0x20 [ 1737.732176][T16375] __x64_sys_bpf+0x7c/0x90 [ 1737.736610][T16375] x64_sys_call+0x488/0x9a0 [ 1737.741134][T16375] do_syscall_64+0x4c/0xa0 [ 1737.745561][T16375] ? clear_bhb_loop+0x30/0x80 [ 1737.750260][T16375] ? clear_bhb_loop+0x30/0x80 [ 1737.754975][T16375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.760910][T16375] RIP: 0033:0x7f3364d9fb19 [ 1737.765450][T16375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.785070][T16375] RSP: 002b:00007f33637f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1737.793591][T16375] RAX: ffffffffffffffda RBX: 00007f3365026180 RCX: 00007f3364d9fb19 [ 1737.801669][T16375] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000012 [ 1737.809745][T16375] RBP: 00007f33637f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.817733][T16375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.825722][T16375] R13: 00007f3365026218 R14: 00007f3365026180 R15: 00007ffe916f85a8 [ 1737.833804][T16375] [ 1737.844385][T16366] loop5: p4 size 722688 extends beyond EOD, truncated [ 1737.856953][T13036] usb 4-1: config 0 descriptor?? [ 1737.986024][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3880'. [ 1738.103054][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3881'. [ 1738.473622][T13036] uclogic 0003:28BD:0042.0002: failed retrieving string descriptor #100: -71 [ 1738.484545][T13036] uclogic 0003:28BD:0042.0002: failed retrieving pen parameters: -71 [ 1738.493009][T13036] uclogic 0003:28BD:0042.0002: pen probing failed: -71 [ 1738.499941][T13036] uclogic 0003:28BD:0042.0002: failed probing parameters: -71 [ 1738.507760][T13036] uclogic: probe of 0003:28BD:0042.0002 failed with error -71 [ 1738.522800][T13036] usb 4-1: USB disconnect, device number 6 [ 1738.682057][T16384] Illegal XDP return value 4294967282 on prog (id 381) dev N/A, expect packet loss! [ 1738.691904][T13673] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1738.831357][T16386] loop4: detected capacity change from 0 to 512 [ 1738.853280][T16122] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1738.883747][T13673] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1738.893967][T13673] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1738.905193][T13673] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1738.913448][T13673] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1738.923240][T13673] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.931326][T13673] usb 7-1: Product: syz [ 1738.935258][T16386] loop4: detected capacity change from 0 to 256 [ 1738.945768][T13673] usb 7-1: Manufacturer: syz [ 1738.950567][T13673] usb 7-1: SerialNumber: syz [ 1738.959911][T16381] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1738.968192][T16381] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1738.976573][ T1184] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1738.986365][T16388] ip_tables: iptables: counters copy to user failed while replacing table [ 1739.000582][T16386] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 1739.023704][T16390] FAULT_INJECTION: forcing a failure. [ 1739.023704][T16390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1739.039197][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1739.039213][ T28] audit: type=1400 audit(1793622981.693:508): avc: denied { write } for pid=16385 comm="syz.4.3884" name="file1" dev="loop4" ino=1048884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1739.074260][T16390] CPU: 1 PID: 16390 Comm: syz.3.3886 Not tainted syzkaller #0 [ 1739.081876][T16390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1739.091965][T16390] Call Trace: [ 1739.095301][T16390] [ 1739.098263][T16390] __dump_stack+0x21/0x24 [ 1739.102637][T16390] dump_stack_lvl+0x110/0x170 [ 1739.107366][T16390] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1739.112533][T16390] ? vfs_write+0xa51/0xd00 [ 1739.116983][T16390] dump_stack+0x15/0x24 [ 1739.121176][T16390] should_fail_ex+0x3bf/0x510 [ 1739.125889][T16390] should_fail+0xb/0x10 [ 1739.130083][T16390] should_fail_usercopy+0x1a/0x20 [ 1739.132657][ T28] audit: type=1400 audit(1793622981.733:509): avc: denied { open } for pid=16385 comm="syz.4.3884" name="file1" dev="loop4" ino=1048884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1739.135140][T16390] _copy_from_user+0x1e/0xc0 [ 1739.135166][T16390] __x64_sys_io_uring_setup+0x10a/0x230 [ 1739.167824][T16390] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 1739.173948][T16390] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1739.180060][T16390] x64_sys_call+0x4ab/0x9a0 [ 1739.184608][T16390] do_syscall_64+0x4c/0xa0 [ 1739.189064][T16390] ? clear_bhb_loop+0x30/0x80 [ 1739.193784][T16390] ? clear_bhb_loop+0x30/0x80 [ 1739.194179][ T28] audit: type=1400 audit(1793622981.733:510): avc: denied { read append } for pid=16385 comm="syz.4.3884" path="/762/file1/blkio.bfq.empty_time" dev="loop4" ino=1048885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1739.198502][T16390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.198534][T16390] RIP: 0033:0x7f064719fb19 [ 1739.234264][T16390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1739.253911][T16390] RSP: 002b:00007f0648041ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1739.262382][T16390] RAX: ffffffffffffffda RBX: 0000200000000708 RCX: 00007f064719fb19 [ 1739.265310][ T1184] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 1739.270414][T16390] RDX: 0000200000000788 RSI: 0000200000000708 RDI: 00000000000003c9 [ 1739.270434][T16390] RBP: 0000200000000700 R08: 0000000000000000 R09: 0000000000000000 [ 1739.270449][T16390] R10: 0000200000000790 R11: 0000000000000206 R12: 0000200000000788 [ 1739.285649][ T1184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.287471][T16390] R13: 0000200000000790 R14: 00007f0648041fd8 R15: 0000000000000000 [ 1739.287498][T16390] [ 1739.507144][ T1184] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1739.521017][ T1184] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1739.533427][ T1184] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 1739.608845][T16409] loop3: detected capacity change from 0 to 2048 [ 1739.653145][T16409] loop3: p1 < > p4 [ 1739.657628][T16409] loop3: p4 size 722688 extends beyond EOD, truncated [ 1739.666731][T16409] tmpfs: Bad value for 'nr_inodes' [ 1739.753605][T16122] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1739.778945][T16122] udevd[16122]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1739.779019][T16230] udevd[16230]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1740.018637][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3892'. [ 1740.062484][T16425] FAULT_INJECTION: forcing a failure. [ 1740.062484][T16425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.076067][T16425] CPU: 1 PID: 16425 Comm: syz.0.3894 Not tainted syzkaller #0 [ 1740.083573][T16425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1740.093672][T16425] Call Trace: [ 1740.097041][T16425] [ 1740.100000][T16425] __dump_stack+0x21/0x24 [ 1740.104367][T16425] dump_stack_lvl+0x110/0x170 [ 1740.109087][T16425] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1740.114140][T16425] dump_stack+0x15/0x24 [ 1740.118327][T16425] should_fail_ex+0x3bf/0x510 [ 1740.123220][T16425] should_fail+0xb/0x10 [ 1740.127405][T16425] should_fail_usercopy+0x1a/0x20 [ 1740.132465][T16425] _copy_from_user+0x1e/0xc0 [ 1740.137115][T16425] iovec_from_user+0x1aa/0x2e0 [ 1740.141939][T16425] __import_iovec+0x6d/0x460 [ 1740.146612][T16425] import_iovec+0x7c/0xb0 [ 1740.150995][T16425] do_preadv+0x1f8/0x390 [ 1740.155334][T16425] ? vfs_writev+0x5f0/0x5f0 [ 1740.159899][T16425] ? __kasan_check_write+0x14/0x20 [ 1740.165057][T16425] ? ksys_write+0x1fa/0x260 [ 1740.169608][T16425] ? __cfi_ksys_write+0x10/0x10 [ 1740.174489][T16425] __x64_sys_preadv2+0xd7/0x100 [ 1740.179381][T16425] x64_sys_call+0x243/0x9a0 [ 1740.183928][T16425] do_syscall_64+0x4c/0xa0 [ 1740.188385][T16425] ? clear_bhb_loop+0x30/0x80 [ 1740.193107][T16425] ? clear_bhb_loop+0x30/0x80 [ 1740.197826][T16425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1740.203760][T16425] RIP: 0033:0x7fc1c0f9fb19 [ 1740.208355][T16425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.227999][T16425] RSP: 002b:00007fc1bf9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 1740.236571][T16425] RAX: ffffffffffffffda RBX: 00007fc1c1225fa0 RCX: 00007fc1c0f9fb19 [ 1740.244581][T16425] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 1740.252616][T16425] RBP: 00007fc1bf9f7090 R08: 0000000000000558 R09: 0000000000000012 [ 1740.260618][T16425] R10: 00000000fffffffd R11: 0000000000000246 R12: 0000000000000001 [ 1740.268713][T16425] R13: 00007fc1c1226038 R14: 00007fc1c1225fa0 R15: 00007fff496e4f88 [ 1740.276807][T16425] [ 1740.405096][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3895'. [ 1740.966202][T13673] (unnamed net_device) (uninitialized): Assigned a random MAC address: 0e:58:b1:e3:1d:65 [ 1740.977694][T13673] rtl8150 7-1:1.0: eth1: rtl8150 is detected [ 1740.986327][T13673] usb 7-1: USB disconnect, device number 2 [ 1741.032532][ T1184] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1741.086531][ T28] audit: type=1400 audit(1793622983.743:511): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1741.210266][T16436] loop3: detected capacity change from 0 to 40427 [ 1741.213596][ T1184] usb 6-1: not running at top speed; connect to a high speed hub [ 1741.225539][T16436] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 1741.229636][ T1184] usb 6-1: config 6 has an invalid interface number: 113 but max is 0 [ 1741.251976][T16436] F2FS-fs (loop3): invalid crc value [ 1741.258663][T16436] F2FS-fs (loop3): invalid crc value [ 1741.263406][ T1184] usb 6-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 1741.265398][T16436] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1741.291339][ T1184] usb 6-1: config 6 has an invalid interface number: 189 but max is 0 [ 1741.301585][ T1184] usb 6-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 1741.322466][ T1184] usb 6-1: config 6 has no interface number 0 [ 1741.328640][ T1184] usb 6-1: config 6 has no interface number 1 [ 1741.354748][ T1184] usb 6-1: config 6 interface 113 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1741.421467][ T1184] usb 6-1: config 6 interface 113 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1741.435063][ T1184] usb 6-1: too many endpoints for config 6 interface 189 altsetting 125: 168, using maximum allowed: 30 [ 1741.446814][ T1184] usb 6-1: config 6 interface 189 altsetting 125 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1741.458502][ T1184] usb 6-1: config 6 interface 189 altsetting 125 has a duplicate endpoint with address 0x8, skipping [ 1741.470948][ T1184] usb 6-1: config 6 interface 189 altsetting 125 has a duplicate endpoint with address 0x8, skipping [ 1741.482103][ T1184] usb 6-1: config 6 interface 189 altsetting 125 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1741.493410][ T1184] usb 6-1: config 6 interface 189 altsetting 125 has 5 endpoint descriptors, different from the interface descriptor's value: 168 [ 1741.507021][ T1184] usb 6-1: config 6 interface 113 has no altsetting 0 [ 1741.514031][ T1184] usb 6-1: config 6 interface 189 has no altsetting 0 [ 1741.522041][T16440] mmap: syz.3.3897 (16440) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1741.576381][T16447] FAULT_INJECTION: forcing a failure. [ 1741.576381][T16447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.585852][T16445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.597722][ T1184] usb 6-1: New USB device found, idVendor=045b, idProduct=023c, bcdDevice=f1.d7 [ 1741.614554][T16447] CPU: 1 PID: 16447 Comm: syz.3.3902 Not tainted syzkaller #0 [ 1741.615121][ T1184] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.622176][T16447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1741.622193][T16447] Call Trace: [ 1741.622200][T16447] [ 1741.637055][ T1184] usb 6-1: Product: syz [ 1741.640261][T16447] __dump_stack+0x21/0x24 [ 1741.643775][ T1184] usb 6-1: Manufacturer: syz [ 1741.646623][T16447] dump_stack_lvl+0x110/0x170 [ 1741.650788][ T1184] usb 6-1: SerialNumber: syz [ 1741.655127][T16447] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1741.655150][T16447] dump_stack+0x15/0x24 [ 1741.655169][T16447] should_fail_ex+0x3bf/0x510 [ 1741.683147][T16447] should_fail+0xb/0x10 [ 1741.687346][T16447] should_fail_usercopy+0x1a/0x20 [ 1741.692416][T16447] _copy_from_iter+0x18a/0xfe0 [ 1741.697497][T16447] ? __alloc_pages+0x1fa/0x610 [ 1741.702381][T16447] ? __kernel_text_address+0xd/0x30 [ 1741.707626][T16447] ? __cfi__copy_from_iter+0x10/0x10 [ 1741.712962][T16447] ? avc_has_perm_noaudit+0x30a/0x490 [ 1741.718373][T16447] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1741.724142][T16447] copy_page_from_iter+0x1de/0x2c0 [ 1741.729291][T16447] ? skb_page_frag_refill+0x221/0x3a0 [ 1741.734710][T16447] tun_get_user+0x6f5/0x32f0 [ 1741.739466][T16447] ? tun_do_read+0x1d70/0x1d70 [ 1741.744321][T16447] ? __kasan_check_write+0x14/0x20 [ 1741.749473][T16447] ? ref_tracker_alloc+0x319/0x4a0 [ 1741.752190][ T28] audit: type=1400 audit(1793622984.403:512): avc: denied { mounton } for pid=16449 comm="syz.6.3904" path="/135/file0" dev="tmpfs" ino=824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1741.754681][T16447] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 1741.754718][T16447] ? selinux_file_permission+0x3ef/0x510 [ 1741.782089][T16450] 9pnet_fd: Insufficient options for proto=fd [ 1741.782781][T16447] tun_chr_write_iter+0x1f9/0x300 [ 1741.799679][T16447] vfs_write+0x5ef/0xd00 [ 1741.803974][T16447] ? __cfi_vfs_write+0x10/0x10 [ 1741.808780][T16447] ? __fget_files+0x2d1/0x330 [ 1741.813503][T16447] ? __fdget_pos+0x1f2/0x380 [ 1741.818132][T16447] ? ksys_write+0x70/0x260 [ 1741.822594][T16447] ksys_write+0x14a/0x260 [ 1741.827014][T16447] ? __cfi_ksys_write+0x10/0x10 [ 1741.831901][T16447] ? do_user_addr_fault+0x9a5/0x1030 [ 1741.837236][T16447] ? debug_smp_processor_id+0x17/0x20 [ 1741.842669][T16447] __x64_sys_write+0x7b/0x90 [ 1741.847284][T16447] x64_sys_call+0x27b/0x9a0 [ 1741.851825][T16447] do_syscall_64+0x4c/0xa0 [ 1741.856262][T16447] ? clear_bhb_loop+0x30/0x80 [ 1741.860971][T16447] ? clear_bhb_loop+0x30/0x80 [ 1741.865691][T16447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1741.871625][T16447] RIP: 0033:0x7f064716034e [ 1741.876071][T16447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1741.895793][T16447] RSP: 002b:00007f0648041fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1741.904242][T16447] RAX: ffffffffffffffda RBX: 00007f06480426c0 RCX: 00007f064716034e [ 1741.912253][T16447] RDX: 000000000000005f RSI: 0000200000002340 RDI: 00000000000000c8 [ 1741.920257][T16447] RBP: 00007f0648042090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.928278][T16447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.936276][T16447] R13: 00007f0647426038 R14: 00007f0647425fa0 R15: 00007ffd2da9f6d8 [ 1741.944286][T16447] [ 1741.962271][ T1184] cdc_acm 6-1:6.113: invalid descriptor buffer length [ 1741.988622][ T28] audit: type=1400 audit(1793622984.643:513): avc: denied { ioctl } for pid=16455 comm="syz.0.3906" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=84076 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1742.015197][T16461] FAULT_INJECTION: forcing a failure. [ 1742.015197][T16461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.026712][ T1184] cdc_acm 6-1:6.189: skipping garbage [ 1742.032924][T16461] CPU: 1 PID: 16461 Comm: syz.3.3908 Not tainted syzkaller #0 [ 1742.041230][T16461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1742.051347][T16461] Call Trace: [ 1742.054664][T16461] [ 1742.057628][T16461] __dump_stack+0x21/0x24 [ 1742.062012][T16461] dump_stack_lvl+0x110/0x170 [ 1742.066734][T16461] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1742.071812][ T1184] usb 6-1: USB disconnect, device number 2 [ 1742.071817][T16461] dump_stack+0x15/0x24 [ 1742.071844][T16461] should_fail_ex+0x3bf/0x510 [ 1742.086512][T16461] should_fail+0xb/0x10 [ 1742.090980][T16461] should_fail_usercopy+0x1a/0x20 [ 1742.096048][T16461] _copy_from_user+0x1e/0xc0 [ 1742.100692][T16461] iovec_from_user+0x1aa/0x2e0 [ 1742.105500][T16461] __import_iovec+0x6d/0x460 [ 1742.110136][T16461] ? kstrtoull+0x137/0x1d0 [ 1742.114609][T16461] import_iovec+0x7c/0xb0 [ 1742.118987][T16461] ___sys_sendmsg+0x252/0x360 [ 1742.124065][T16461] ? __sys_sendmsg+0x290/0x290 [ 1742.128922][T16461] ? __kasan_check_write+0x14/0x20 [ 1742.134077][T16461] ? proc_fail_nth_write+0x180/0x200 [ 1742.139415][T16461] ? vfs_write+0xa51/0xd00 [ 1742.143895][T16461] ? __fdget+0x19c/0x220 [ 1742.146756][T16452] ------------[ cut here ]------------ [ 1742.148178][T16461] __x64_sys_sendmsg+0x20d/0x2e0 [ 1742.153847][T16452] WARNING: CPU: 0 PID: 16452 at crypto/rsa-pkcs1pad.c:540 pkcs1pad_verify+0x4b8/0x600 [ 1742.158585][T16461] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1742.168351][T16452] Modules linked in: [ 1742.173589][T16461] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1742.173620][T16461] x64_sys_call+0x171/0x9a0 [ 1742.177573][T16452] [ 1742.177583][T16452] CPU: 0 PID: 16452 Comm: syz.6.3905 Not tainted syzkaller #0 [ 1742.183689][T16461] do_syscall_64+0x4c/0xa0 [ 1742.183714][T16461] ? clear_bhb_loop+0x30/0x80 [ 1742.188234][T16452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1742.190569][T16461] ? clear_bhb_loop+0x30/0x80 [ 1742.190596][T16461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.198541][T16452] RIP: 0010:pkcs1pad_verify+0x4b8/0x600 [ 1742.202465][T16461] RIP: 0033:0x7f064719fb19 [ 1742.202485][T16461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.202502][T16461] RSP: 002b:00007f0648042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1742.202523][T16461] RAX: ffffffffffffffda RBX: 00007f0647425fa0 RCX: 00007f064719fb19 [ 1742.202537][T16461] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003 [ 1742.202551][T16461] RBP: 00007f0648042090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.202565][T16461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.207239][T16452] Code: 44 89 f6 e8 4a 0f 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 06 1d 2c ff 0f 0b b8 ea ff ff ff eb e3 e8 f8 1c 2c ff <0f> 0b b8 ea ff ff ff eb d5 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 85 [ 1742.217306][T16461] R13: 00007f0647426038 R14: 00007f0647425fa0 R15: 00007ffd2da9f6d8 [ 1742.217335][T16461] [ 1742.329736][T16452] RSP: 0018:ffffc90005e47728 EFLAGS: 00010287 [ 1742.335916][T16452] RAX: ffffffff82455528 RBX: ffff88811b733200 RCX: 0000000000080000 [ 1742.344006][T16452] RDX: ffffc90012a1b000 RSI: 00000000000004ef RDI: 00000000000004f0 [ 1742.352060][T16452] RBP: ffffc90005e47770 R08: ffffc90005e478af R09: ffffc90005e47898 [ 1742.360203][T16452] R10: 0000000000000000 R11: ffffffff82455070 R12: 0000000000000000 [ 1742.368259][T16452] R13: ffff888131630180 R14: dffffc0000000000 R15: ffff88811b733238 [ 1742.376345][T16452] FS: 00007f3365ba86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1742.385588][T16452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1742.392476][T16452] CR2: 0000001b2f31dff8 CR3: 00000001268ec000 CR4: 00000000003526b0 [ 1742.400502][T16452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1742.408671][T16452] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1742.416714][T16452] Call Trace: [ 1742.420296][T16452] [ 1742.423457][T16452] ? sg_init_one+0x93/0x140 [ 1742.428018][T16452] public_key_verify_signature+0x90f/0xd80 [ 1742.434023][T16452] ? __cfi_public_key_verify_signature+0x10/0x10 [ 1742.440409][T16452] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 1742.446409][T16452] ? memdup_user+0x2a/0xc0 [ 1742.450867][T16452] ? keyctl_pkey_verify+0x3a4/0x460 [ 1742.456164][T16452] ? __se_sys_keyctl+0x817/0xe10 [ 1742.461237][T16452] ? __x64_sys_keyctl+0xbf/0xd0 [ 1742.466213][T16452] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 1742.473026][T16452] public_key_verify_signature_2+0x43/0x50 [ 1742.478919][T16452] verify_signature+0xe4/0x110 [ 1742.483757][T16452] asymmetric_key_verify_signature+0x177/0x220 [ 1742.489973][T16452] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 1742.492596][ T28] audit: type=1400 audit(1793622985.113:514): avc: denied { bind } for pid=16470 comm="syz.3.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1742.496794][T16452] ? __kasan_check_write+0x14/0x20 [ 1742.521915][T16452] keyctl_pkey_verify+0x434/0x460 [ 1742.527042][T16452] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 1742.532686][T16452] __se_sys_keyctl+0x817/0xe10 [ 1742.537509][T16452] ? __x64_sys_keyctl+0xd0/0xd0 [ 1742.542454][T16452] ? do_futex+0x2e2/0x430 [ 1742.546916][T16452] ? __cfi_do_futex+0x10/0x10 [ 1742.551637][T16452] ? __kasan_check_write+0x14/0x20 [ 1742.556851][T16452] ? __se_sys_futex+0x136/0x310 [ 1742.561756][T16452] ? __this_cpu_preempt_check+0x13/0x20 [ 1742.567409][T16452] ? xfd_validate_state+0x70/0x150 [ 1742.572594][T16452] ? __kasan_check_write+0x14/0x20 [ 1742.577766][T16452] ? fpregs_restore_userregs+0x128/0x260 [ 1742.583493][T16452] __x64_sys_keyctl+0xbf/0xd0 [ 1742.588233][T16452] x64_sys_call+0x71a/0x9a0 [ 1742.592915][T16452] do_syscall_64+0x4c/0xa0 [ 1742.597372][T16452] ? clear_bhb_loop+0x30/0x80 [ 1742.602132][T16452] ? clear_bhb_loop+0x30/0x80 [ 1742.606909][T16452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.612883][T16452] RIP: 0033:0x7f3364d9fb19 [ 1742.617491][T16452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.637216][T16452] RSP: 002b:00007f3365ba8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1742.645793][T16452] RAX: ffffffffffffffda RBX: 00007f3365025fa0 RCX: 00007f3364d9fb19 [ 1742.653853][T16452] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 000000000000001c [ 1742.661884][T16452] RBP: 00007f3364e37af8 R08: 0000200000000fc0 R09: 0000000000000000 [ 1742.670010][T16452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.678073][T16452] R13: 00007f3365026038 R14: 00007f3365025fa0 R15: 00007ffe916f85a8 [ 1742.686132][T16452] [ 1742.689187][T16452] ---[ end trace 0000000000000000 ]--- [ 1742.695299][T16468] netlink: 'syz.4.3910': attribute type 4 has an invalid length. [ 1742.725193][T16472] netlink: 'syz.4.3910': attribute type 4 has an invalid length. [ 1742.742712][T16476] loop3: detected capacity change from 0 to 256 [ 1742.766084][T16482] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1742.797645][T16122] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1742.806181][T16486] loop2: detected capacity change from 0 to 7 [ 1742.814354][T16486] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3916'. [ 1742.829501][T16488] loop5: detected capacity change from 0 to 256 [ 1742.836758][ T28] audit: type=1400 audit(1793622985.493:515): avc: denied { append } for pid=16478 comm="syz.6.3913" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1742.868236][T16493] FAULT_INJECTION: forcing a failure. [ 1742.868236][T16493] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.883858][T16489] loop6: detected capacity change from 0 to 512 [ 1742.891812][T16494] FAULT_INJECTION: forcing a failure. [ 1742.891812][T16494] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.913211][T16488] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1742.929538][T16489] syz.6.3913: attempt to access beyond end of device [ 1742.929538][T16489] loop6: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 1742.931760][T16496] loop4: detected capacity change from 0 to 1024 [ 1742.950937][T16493] CPU: 0 PID: 16493 Comm: syz.0.3918 Tainted: G W syzkaller #0 [ 1742.959924][T16493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1742.970015][T16493] Call Trace: [ 1742.973377][T16493] [ 1742.976344][T16493] __dump_stack+0x21/0x24 [ 1742.980744][T16493] dump_stack_lvl+0x110/0x170 [ 1742.985482][T16493] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1742.990552][T16493] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 1742.995458][T16493] dump_stack+0x15/0x24 [ 1742.999655][T16493] should_fail_ex+0x3bf/0x510 [ 1743.002881][T16496] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1743.004413][T16493] __should_failslab+0xac/0xf0 [ 1743.020511][T16493] should_failslab+0x9/0x20 [ 1743.025069][T16493] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1743.030494][T16493] ? vlan_dev_set_egress_priority+0x18e/0x370 [ 1743.036669][T16493] ? vlan_dev_set_egress_priority+0x18e/0x370 [ 1743.042784][T16493] kmalloc_trace+0x29/0xb0 [ 1743.047238][T16493] vlan_dev_set_egress_priority+0x18e/0x370 [ 1743.053177][T16493] vlan_ioctl_handler+0x4ba/0x630 [ 1743.058241][T16493] ? __cfi_vlan_ioctl_handler+0x10/0x10 [ 1743.063841][T16493] ? selinux_file_ioctl+0x3ad/0x4c0 [ 1743.069090][T16493] ? __cfi_vlan_ioctl_handler+0x10/0x10 [ 1743.074673][T16493] sock_ioctl+0x242/0x700 [ 1743.079145][T16493] ? __cfi_sock_ioctl+0x10/0x10 [ 1743.084078][T16493] ? __fget_files+0x2d1/0x330 [ 1743.088799][T16493] ? security_file_ioctl+0x95/0xc0 [ 1743.093956][T16493] ? __cfi_sock_ioctl+0x10/0x10 [ 1743.098871][T16493] __se_sys_ioctl+0x12f/0x1b0 [ 1743.103622][T16493] __x64_sys_ioctl+0x7b/0x90 [ 1743.108250][T16493] x64_sys_call+0x58b/0x9a0 [ 1743.112831][T16493] do_syscall_64+0x4c/0xa0 [ 1743.117285][T16493] ? clear_bhb_loop+0x30/0x80 [ 1743.122091][T16493] ? clear_bhb_loop+0x30/0x80 [ 1743.126803][T16493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1743.132728][T16493] RIP: 0033:0x7fc1c0f9fb19 [ 1743.137170][T16493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.156801][T16493] RSP: 002b:00007fc1bf9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1743.165346][T16493] RAX: ffffffffffffffda RBX: 00007fc1c1225fa0 RCX: 00007fc1c0f9fb19 [ 1743.173352][T16493] RDX: 0000200000000280 RSI: 0000000000008983 RDI: 0000000000000003 [ 1743.181367][T16493] RBP: 00007fc1bf9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.189371][T16493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.197371][T16493] R13: 00007fc1c1226038 R14: 00007fc1c1225fa0 R15: 00007fff496e4f88 [ 1743.205379][T16493] [ 1743.209530][T16489] syz.6.3913: attempt to access beyond end of device [ 1743.209530][T16489] loop6: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 1743.210086][T16494] CPU: 0 PID: 16494 Comm: syz.3.3919 Tainted: G W syzkaller #0 [ 1743.232538][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1743.242660][T16494] Call Trace: [ 1743.245975][T16494] [ 1743.248933][T16494] __dump_stack+0x21/0x24 [ 1743.253301][T16494] dump_stack_lvl+0x110/0x170 [ 1743.258023][T16494] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1743.263089][T16494] dump_stack+0x15/0x24 [ 1743.267286][T16494] should_fail_ex+0x3bf/0x510 [ 1743.271998][T16494] ? security_inode_alloc+0x33/0x120 [ 1743.277327][T16494] __should_failslab+0xac/0xf0 [ 1743.282140][T16494] should_failslab+0x9/0x20 [ 1743.284164][T16489] syz.6.3913: attempt to access beyond end of device [ 1743.284164][T16489] loop6: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 1743.286675][T16494] kmem_cache_alloc+0x3b/0x320 [ 1743.286711][T16494] security_inode_alloc+0x33/0x120 [ 1743.310684][T16494] inode_init_always+0x6ee/0x950 [ 1743.315670][T16494] new_inode_pseudo+0xa2/0x1f0 [ 1743.320488][T16494] __sock_create+0x12c/0x7c0 [ 1743.325119][T16494] ? __cfi_ksys_write+0x10/0x10 [ 1743.330009][T16494] ? do_user_addr_fault+0x9a5/0x1030 [ 1743.335335][T16494] __sys_socket+0xcd/0x1a0 [ 1743.335371][T16489] syz.6.3913: attempt to access beyond end of device [ 1743.335371][T16489] loop6: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 1743.339792][T16494] __x64_sys_socket+0x7a/0x90 [ 1743.339829][T16494] x64_sys_call+0x449/0x9a0 [ 1743.362832][T16494] do_syscall_64+0x4c/0xa0 [ 1743.367295][T16494] ? clear_bhb_loop+0x30/0x80 [ 1743.372017][T16494] ? clear_bhb_loop+0x30/0x80 [ 1743.376738][T16494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1743.382670][T16494] RIP: 0033:0x7f064719fb19 [ 1743.387113][T16494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.407023][T16494] RSP: 002b:00007f0648042028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1743.415500][T16494] RAX: ffffffffffffffda RBX: 00007f0647425fa0 RCX: 00007f064719fb19 [ 1743.423245][T10554] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1743.423523][T16494] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1743.438985][T16494] RBP: 00007f0648042090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.446994][T16494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.455029][T16494] R13: 00007f0647426038 R14: 00007f0647425fa0 R15: 00007ffd2da9f6d8 [ 1743.462572][T16496] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1743.463159][T16494] [ 1743.476072][T16494] socket: no more sockets [ 1743.478415][T16496] ext4 filesystem being mounted at /769/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1743.504551][T16495] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.3920: Freeing blocks not in datazone - block = 0, count = 16 [ 1743.509318][ T28] audit: type=1400 audit(1793622986.163:516): avc: denied { ioctl } for pid=16495 comm="syz.4.3920" path="socket:[84128]" dev="sockfs" ino=84128 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1743.518486][T16495] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3920: bg 0: block 112: padding at end of block bitmap is not set [ 1743.558678][T16495] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1743.572456][ T28] audit: type=1400 audit(1793622986.163:517): avc: denied { bind } for pid=16495 comm="syz.4.3920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1743.604532][ T289] EXT4-fs (loop4): unmounting filesystem. [ 1743.624961][T16510] loop4: detected capacity change from 0 to 2048 [ 1743.642482][T10554] usb 6-1: Using ep0 maxpacket: 32 [ 1743.649063][T10554] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1743.670424][T16510] EXT4-fs: Ignoring removed oldalloc option [ 1743.676045][T10554] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 1743.710419][T16515] FAULT_INJECTION: forcing a failure. [ 1743.710419][T16515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1743.723852][T16515] CPU: 0 PID: 16515 Comm: syz.6.3925 Tainted: G W syzkaller #0 [ 1743.732840][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1743.742934][T16515] Call Trace: [ 1743.746245][T16515] [ 1743.749207][T16515] __dump_stack+0x21/0x24 [ 1743.753570][T16515] dump_stack_lvl+0x110/0x170 [ 1743.758291][T16515] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1743.759145][T10554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.763346][T16515] ? __kasan_check_write+0x14/0x20 [ 1743.763375][T16515] dump_stack+0x15/0x24 [ 1743.771370][T10554] usb 6-1: Product: syz [ 1743.776487][T16515] should_fail_ex+0x3bf/0x510 [ 1743.776512][T16515] should_fail+0xb/0x10 [ 1743.776532][T16515] should_fail_usercopy+0x1a/0x20 [ 1743.780785][T10554] usb 6-1: Manufacturer: syz [ 1743.784862][T16515] _copy_from_user+0x1e/0xc0 [ 1743.784884][T16515] do_ipv6_setsockopt+0x30d/0x3bd0 [ 1743.789806][T10554] usb 6-1: SerialNumber: syz [ 1743.793984][T16515] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 1743.794015][T16515] ? 0xffffffffa00040c0 [ 1743.827739][T16515] ? is_bpf_text_address+0x177/0x190 [ 1743.833151][T16515] ? kernel_text_address+0xa0/0xd0 [ 1743.838288][T16515] ? __kernel_text_address+0xd/0x30 [ 1743.843509][T16515] ? unwind_get_return_address+0x4d/0x90 [ 1743.849334][T16515] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1743.855511][T16515] ? arch_stack_walk+0xfc/0x150 [ 1743.860390][T16515] ? stack_trace_save+0xa6/0xf0 [ 1743.865268][T16515] ? __stack_depot_save+0x36/0x490 [ 1743.870426][T16515] ? avc_has_perm_noaudit+0x390/0x490 [ 1743.875822][T16515] ? memcpy+0x56/0x70 [ 1743.879823][T16515] ? avc_has_perm_noaudit+0x30a/0x490 [ 1743.885236][T16515] ? _parse_integer+0x2a/0x40 [ 1743.889932][T16515] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1743.895674][T16515] ? kstrtouint_from_user+0x113/0x170 [ 1743.901071][T16515] ? avc_has_perm+0x163/0x250 [ 1743.905770][T16515] ? __cfi_avc_has_perm+0x10/0x10 [ 1743.910846][T16515] ? __kasan_check_write+0x14/0x20 [ 1743.915989][T16515] ? proc_fail_nth_write+0x180/0x200 [ 1743.921300][T16515] ? selinux_socket_setsockopt+0x282/0x360 [ 1743.927129][T16515] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 1743.933303][T16515] ipv6_setsockopt+0x59/0x1a0 [ 1743.938005][T16515] tcp_setsockopt+0xeb/0x100 [ 1743.942611][T16515] sock_common_setsockopt+0xb1/0xc0 [ 1743.947834][T16515] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 1743.953746][T16515] __sys_setsockopt+0x2ff/0x4e0 [ 1743.958627][T16515] ? __cfi___sys_setsockopt+0x10/0x10 [ 1743.964027][T16515] ? ksys_write+0x1fa/0x260 [ 1743.968555][T16515] ? __cfi_ksys_write+0x10/0x10 [ 1743.973422][T16515] __x64_sys_setsockopt+0xbf/0xd0 [ 1743.978565][T16515] x64_sys_call+0x124/0x9a0 [ 1743.983090][T16515] do_syscall_64+0x4c/0xa0 [ 1743.987522][T16515] ? clear_bhb_loop+0x30/0x80 [ 1743.992214][T16515] ? clear_bhb_loop+0x30/0x80 [ 1743.996911][T16515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1744.002830][T16515] RIP: 0033:0x7f3364d9fb19 [ 1744.007262][T16515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.026894][T16515] RSP: 002b:00007f3365ba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1744.035340][T16515] RAX: ffffffffffffffda RBX: 00007f3365025fa0 RCX: 00007f3364d9fb19 [ 1744.043380][T16515] RDX: 000000000000002b RSI: 0000000000000029 RDI: 0000000000000003 [ 1744.051369][T16515] RBP: 00007f3365ba8090 R08: 0000000000000108 R09: 0000000000000000 [ 1744.059381][T16515] R10: 0000200000001540 R11: 0000000000000246 R12: 0000000000000001 [ 1744.067388][T16515] R13: 00007f3365026038 R14: 00007f3365025fa0 R15: 00007ffe916f85a8 [ 1744.075432][T16515] [ 1744.087592][T16513] loop3: detected capacity change from 0 to 2048 [ 1744.102111][T16510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1744.110191][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3926'. [ 1744.114593][T16510] FAULT_INJECTION: forcing a failure. [ 1744.114593][T16510] name failslab, interval 1, probability 0, space 0, times 0 [ 1744.132276][T16510] CPU: 0 PID: 16510 Comm: syz.4.3924 Tainted: G W syzkaller #0 [ 1744.141371][T16510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1744.151545][T16510] Call Trace: [ 1744.154883][T16510] [ 1744.157843][T16510] __dump_stack+0x21/0x24 [ 1744.162218][T16510] dump_stack_lvl+0x110/0x170 [ 1744.166920][T16510] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1744.172073][T16510] ? stack_trace_save+0xa6/0xf0 [ 1744.176976][T16510] dump_stack+0x15/0x24 [ 1744.181198][T16510] should_fail_ex+0x3bf/0x510 [ 1744.185928][T16510] __should_failslab+0xac/0xf0 [ 1744.190778][T16510] should_failslab+0x9/0x20 [ 1744.195332][T16510] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1744.200746][T16510] ? iovec_from_user+0x86/0x2e0 [ 1744.205645][T16510] ? kstrtoull+0x137/0x1d0 [ 1744.210119][T16510] ? iovec_from_user+0x86/0x2e0 [ 1744.214993][T16510] __kmalloc+0xa4/0x1e0 [ 1744.219186][T16510] iovec_from_user+0x86/0x2e0 [ 1744.223902][T16510] __import_iovec+0x6d/0x460 [ 1744.228531][T16510] import_iovec+0x7c/0xb0 [ 1744.232905][T16510] vfs_writev+0x154/0x5f0 [ 1744.237268][T16510] ? security_file_permission+0x8a/0xb0 [ 1744.242871][T16510] ? do_writev+0x2c0/0x2c0 [ 1744.247338][T16510] ? __fdget+0x19c/0x220 [ 1744.251633][T16510] ? __se_sys_pwritev2+0xb6/0x290 [ 1744.256684][T16510] __se_sys_pwritev2+0x17d/0x290 [ 1744.261749][T16510] ? __x64_sys_pwritev2+0xd0/0xd0 [ 1744.266809][T16510] ? __cfi_ksys_write+0x10/0x10 [ 1744.271790][T16510] __x64_sys_pwritev2+0xbf/0xd0 [ 1744.276681][T16510] x64_sys_call+0x2d6/0x9a0 [ 1744.281223][T16510] do_syscall_64+0x4c/0xa0 [ 1744.285691][T16510] ? clear_bhb_loop+0x30/0x80 [ 1744.290428][T16510] ? clear_bhb_loop+0x30/0x80 [ 1744.295145][T16510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1744.301080][T16510] RIP: 0033:0x7ff7a1b9fb19 [ 1744.305529][T16510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.325170][T16510] RSP: 002b:00007ff7a2a9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1744.333631][T16510] RAX: ffffffffffffffda RBX: 00007ff7a1e25fa0 RCX: 00007ff7a1b9fb19 [ 1744.341757][T16510] RDX: 000000000000000f RSI: 0000200000000f00 RDI: 0000000000000004 [ 1744.349860][T16510] RBP: 00007ff7a2a9a090 R08: 0000000000000000 R09: 0000000000000003 [ 1744.357883][T16510] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 1744.365890][T16510] R13: 00007ff7a1e26038 R14: 00007ff7a1e25fa0 R15: 00007ffeaeac8608 [ 1744.373906][T16510] [ 1744.377801][T16513] loop3: p1 < > p4 [ 1744.379626][T16521] tmpfs: Bad value for 'nr_inodes' [ 1744.387495][T16513] loop3: p4 size 722688 extends beyond EOD, truncated [ 1744.413532][ T289] EXT4-fs (loop4): unmounting filesystem. [ 1744.455667][T16523] loop4: detected capacity change from 0 to 1024 [ 1744.474127][T16523] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1744.522461][T16523] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (40000) [ 1744.601746][T16530] FAULT_INJECTION: forcing a failure. [ 1744.601746][T16530] name failslab, interval 1, probability 0, space 0, times 0 [ 1744.615085][T16530] CPU: 1 PID: 16530 Comm: syz.0.3929 Tainted: G W syzkaller #0 [ 1744.624123][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1744.634229][T16530] Call Trace: [ 1744.637528][T16530] [ 1744.640475][T16530] __dump_stack+0x21/0x24 [ 1744.644829][T16530] dump_stack_lvl+0x110/0x170 [ 1744.649523][T16530] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1744.654571][T16530] ? __cfi_vfs_write+0x10/0x10 [ 1744.659354][T16530] dump_stack+0x15/0x24 [ 1744.663536][T16530] should_fail_ex+0x3bf/0x510 [ 1744.668253][T16530] __should_failslab+0xac/0xf0 [ 1744.673071][T16530] should_failslab+0x9/0x20 [ 1744.677590][T16530] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1744.683006][T16530] ? __se_sys_memfd_create+0xf2/0x3c0 [ 1744.688393][T16530] ? ksys_write+0x1fa/0x260 [ 1744.692933][T16530] ? __se_sys_memfd_create+0xf2/0x3c0 [ 1744.698320][T16530] __kmalloc+0xa4/0x1e0 [ 1744.702494][T16530] ? strnlen_user+0x10d/0x190 [ 1744.707209][T16530] __se_sys_memfd_create+0xf2/0x3c0 [ 1744.712424][T16530] __x64_sys_memfd_create+0x5b/0x70 [ 1744.717639][T16530] x64_sys_call+0x235/0x9a0 [ 1744.722161][T16530] do_syscall_64+0x4c/0xa0 [ 1744.726596][T16530] ? clear_bhb_loop+0x30/0x80 [ 1744.731311][T16530] ? clear_bhb_loop+0x30/0x80 [ 1744.736011][T16530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1744.741922][T16530] RIP: 0033:0x7fc1c0f9fb19 [ 1744.746348][T16530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.765968][T16530] RSP: 002b:00007fc1bf9f6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1744.774415][T16530] RAX: ffffffffffffffda RBX: 0000000000000797 RCX: 00007fc1c0f9fb19 [ 1744.782486][T16530] RDX: 00007fc1bf9f6ee0 RSI: 0000000000000000 RDI: 00007fc1c1037ceb [ 1744.790470][T16530] RBP: 00002000000006c0 R08: 00000000ffffffff R09: 0000000000000000 [ 1744.798458][T16530] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 1744.806445][T16530] R13: 00007fc1bf9f6ee0 R14: 00007fc1bf9f6ea0 R15: 00002000000000c0 [ 1744.814439][T16530] [ 1744.821321][T16531] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 1744.854642][T16531] device bridge0 entered promiscuous mode [ 1744.860546][T16533] loop3: detected capacity change from 0 to 256 [ 1744.860584][T16531] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 1744.875203][T16110] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 1744.898985][T16531] overlayfs: conflicting options: nfs_export=on,index=off [ 1744.943055][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1744.943072][ T28] audit: type=1400 audit(1793622987.603:519): avc: denied { mounton } for pid=16532 comm="syz.3.3931" path=2F3738362F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530 dev="loop3" ino=1048890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1745.003609][T10554] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 1745.020028][T16538] loop4: detected capacity change from 0 to 2048 [ 1745.026672][T10554] usb 6-1: USB disconnect, device number 3 [ 1745.053108][T16538] EXT4-fs: Ignoring removed oldalloc option [ 1745.092143][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3935'. [ 1745.106195][T16538] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1745.128899][T16538] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1745.143476][T16538] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 500 with error 28 [ 1745.156159][T16538] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1745.156159][T16538] [ 1745.166302][T16538] EXT4-fs (loop4): Total free blocks count 0 [ 1745.172901][T16538] EXT4-fs (loop4): Free/Dirty block details [ 1745.179386][T16548] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1745.191904][T16538] EXT4-fs (loop4): free_blocks=4096 [ 1745.197416][T16538] EXT4-fs (loop4): dirty_blocks=528 [ 1745.198428][T16548] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1745.198428][T16548] [ 1745.203425][T16538] EXT4-fs (loop4): Block reservation details [ 1745.437910][ T28] audit: type=1400 audit(1793622988.093:520): avc: denied { ioctl } for pid=16549 comm="syz.4.3937" path="socket:[84223]" dev="sockfs" ino=84223 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1745.476465][ T28] audit: type=1400 audit(1793622988.123:521): avc: denied { create } for pid=16549 comm="syz.4.3937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1745.488030][T16553] 9pnet_fd: Insufficient options for proto=fd [ 1745.579326][T16554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.597870][T16554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.617488][T16554] device bridge_slave_0 entered promiscuous mode [ 1745.639190][T16554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.659360][T16554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.680306][T16554] device bridge_slave_1 entered promiscuous mode [ 1745.751906][T16563] FAULT_INJECTION: forcing a failure. [ 1745.751906][T16563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1745.769422][T16563] CPU: 0 PID: 16563 Comm: syz.0.3941 Tainted: G W syzkaller #0 [ 1745.778422][T16563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1745.788511][T16563] Call Trace: [ 1745.791821][T16563] [ 1745.794783][T16563] __dump_stack+0x21/0x24 [ 1745.799152][T16563] dump_stack_lvl+0x110/0x170 [ 1745.803859][T16563] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1745.808928][T16563] dump_stack+0x15/0x24 [ 1745.813120][T16563] should_fail_ex+0x3bf/0x510 [ 1745.817844][T16563] should_fail+0xb/0x10 [ 1745.822040][T16563] should_fail_usercopy+0x1a/0x20 [ 1745.827108][T16563] _copy_from_user+0x1e/0xc0 [ 1745.831740][T16563] iovec_from_user+0x1aa/0x2e0 [ 1745.836573][T16563] __import_iovec+0x6d/0x460 [ 1745.841295][T16563] ? kstrtoull+0x137/0x1d0 [ 1745.845868][T16563] import_iovec+0x7c/0xb0 [ 1745.850235][T16563] ___sys_sendmsg+0x252/0x360 [ 1745.854950][T16563] ? __sys_sendmsg+0x290/0x290 [ 1745.859754][T16563] ? __kasan_check_write+0x14/0x20 [ 1745.864914][T16563] ? proc_fail_nth_write+0x180/0x200 [ 1745.870272][T16563] ? vfs_write+0xa51/0xd00 [ 1745.874747][T16563] ? __fdget+0x19c/0x220 [ 1745.879028][T16563] __x64_sys_sendmsg+0x20d/0x2e0 [ 1745.884005][T16563] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1745.889516][T16563] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1745.895646][T16563] x64_sys_call+0x171/0x9a0 [ 1745.900192][T16563] do_syscall_64+0x4c/0xa0 [ 1745.904657][T16563] ? clear_bhb_loop+0x30/0x80 [ 1745.909370][T16563] ? clear_bhb_loop+0x30/0x80 [ 1745.914116][T16563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1745.920082][T16563] RIP: 0033:0x7fc1c0f9fb19 [ 1745.924540][T16563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.944208][T16563] RSP: 002b:00007fc1bf9f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1745.952668][T16563] RAX: ffffffffffffffda RBX: 00007fc1c1225fa0 RCX: 00007fc1c0f9fb19 [ 1745.960675][T16563] RDX: 000000000004c040 RSI: 0000200000000440 RDI: 0000000000000003 [ 1745.968686][T16563] RBP: 00007fc1bf9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.976697][T16563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.984794][T16563] R13: 00007fc1c1226038 R14: 00007fc1c1225fa0 R15: 00007fff496e4f88 [ 1745.992803][T16563] [ 1746.092927][ T28] audit: type=1400 audit(1793622988.753:522): avc: denied { connect } for pid=16565 comm="syz.6.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1746.119990][ T8743] device bridge_slave_1 left promiscuous mode [ 1746.134839][T16556] loop5: detected capacity change from 0 to 512 [ 1746.143219][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.167438][ T8743] device bridge_slave_0 left promiscuous mode [ 1746.173736][ T28] audit: type=1400 audit(1793622988.773:523): avc: denied { write } for pid=16565 comm="syz.6.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1746.209255][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.432105][ T28] audit: type=1400 audit(1793622989.083:524): avc: denied { setopt } for pid=16569 comm="syz.0.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1746.721028][T16577] fuse: Bad value for 'fd' [ 1748.136879][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3945'. [ 1748.180391][T16589] loop5: detected capacity change from 0 to 1024 [ 1748.202292][T16589] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1748.232104][T16110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1748.240391][T16589] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 1748.248411][T16110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1748.257507][T16589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1749.555016][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1749.672360][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1749.691164][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.698292][ T587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.730294][T16606] loop6: detected capacity change from 0 to 1024 [ 1749.738719][T16604] hub 5-0:1.0: USB hub found [ 1749.752603][T16604] hub 5-0:1.0: 1 port detected [ 1749.757217][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1749.766152][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1749.774539][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.781612][ T587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1749.802820][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1749.810889][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1749.819139][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1749.837545][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1749.847382][T16606] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1749.857112][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1749.872503][T16604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3954'. [ 1749.888039][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1749.899038][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1749.908341][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1749.924524][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1749.946699][T16554] device veth0_vlan entered promiscuous mode [ 1749.959495][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1749.967697][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1750.022687][T13184] EXT4-fs (loop5): unmounting filesystem. [ 1750.033239][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1750.054119][T13741] EXT4-fs (loop6): unmounting filesystem. [ 1750.058592][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1750.068773][T16554] device veth1_macvtap entered promiscuous mode [ 1750.085069][T16614] loop5: detected capacity change from 0 to 512 [ 1750.099772][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1750.111217][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1750.144032][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1750.162536][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1750.194748][T16615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.234169][T16614] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.3957: missing EA_INODE flag [ 1750.248990][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1750.262581][T16614] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3957: error while reading EA inode 2 err=-117 [ 1750.353836][T16614] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.3957: inode #3584: comm syz.5.3957: iget: illegal inode # [ 1750.383991][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1750.551531][T16614] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3957: error while reading EA inode 3584 err=-117 [ 1750.679185][T16614] EXT4-fs (loop5): 1 orphan inode deleted [ 1750.723974][T16614] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1751.348973][T16614] 9pnet_fd: Insufficient options for proto=fd [ 1751.362492][ T28] audit: type=1400 audit(1793622994.013:525): avc: denied { write } for pid=16613 comm="syz.5.3957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1751.419535][ T28] audit: type=1400 audit(1793622994.013:526): avc: denied { setattr } for pid=16613 comm="syz.5.3957" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1751.457422][ T28] audit: type=1400 audit(1793622994.053:527): avc: denied { link } for pid=16613 comm="syz.5.3957" name="#21" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1751.488976][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3959'. [ 1751.523382][T13184] EXT4-fs (loop5): unmounting filesystem. [ 1751.541103][T16626] loop5: detected capacity change from 0 to 256 [ 1751.574937][ T28] audit: type=1400 audit(1793622994.233:528): avc: denied { read } for pid=16627 comm="syz.4.3961" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1751.598950][ T28] audit: type=1400 audit(1793622994.253:529): avc: denied { open } for pid=16627 comm="syz.4.3961" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1751.650726][T16634] FAULT_INJECTION: forcing a failure. [ 1751.650726][T16634] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1751.664056][T16634] CPU: 0 PID: 16634 Comm: syz.6.3962 Tainted: G W syzkaller #0 [ 1751.673028][T16634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1751.683105][T16634] Call Trace: [ 1751.686413][T16634] [ 1751.689403][T16634] __dump_stack+0x21/0x24 [ 1751.693777][T16634] dump_stack_lvl+0x110/0x170 [ 1751.698526][T16634] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1751.703588][T16634] dump_stack+0x15/0x24 [ 1751.707790][T16634] should_fail_ex+0x3bf/0x510 [ 1751.712536][T16634] should_fail_alloc_page+0x61/0x90 [ 1751.717783][T16634] prepare_alloc_pages+0x131/0x570 [ 1751.722986][T16634] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 1751.728235][T16634] ? vsock_connectible_sendmsg+0xa3d/0xe50 [ 1751.734172][T16634] ? sock_write_iter+0x2ea/0x3f0 [ 1751.739149][T16634] ? vfs_write+0x5ef/0xd00 [ 1751.743603][T16634] ? ksys_write+0x14a/0x260 [ 1751.748152][T16634] ? __x64_sys_write+0x7b/0x90 [ 1751.752960][T16634] __alloc_pages+0x15b/0x610 [ 1751.757601][T16634] ? __cfi___alloc_pages+0x10/0x10 [ 1751.762778][T16634] __kmalloc_large_node+0xa1/0x1c0 [ 1751.767939][T16634] ? virtio_transport_alloc_pkt+0x2d5/0xa00 [ 1751.773981][T16634] __kmalloc+0xe3/0x1e0 [ 1751.778270][T16634] ? kmalloc_trace+0x40/0xb0 [ 1751.782902][T16634] virtio_transport_alloc_pkt+0x2d5/0xa00 [ 1751.788675][T16634] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 1751.794184][T16634] virtio_transport_send_pkt_info+0x329/0x720 [ 1751.800306][T16634] virtio_transport_seqpacket_enqueue+0x174/0x200 [ 1751.806766][T16634] ? __cfi_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 1751.813744][T16634] ? avc_has_perm+0x163/0x250 [ 1751.818465][T16634] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1751.824309][T16634] ? remove_wait_queue+0x12e/0x140 [ 1751.829541][T16634] vsock_connectible_sendmsg+0xa3d/0xe50 [ 1751.835227][T16634] ? __cfi_vsock_connectible_sendmsg+0x10/0x10 [ 1751.841433][T16634] ? __cfi_woken_wake_function+0x10/0x10 [ 1751.847109][T16634] ? security_socket_sendmsg+0x93/0xb0 [ 1751.852620][T16634] sock_write_iter+0x2ea/0x3f0 [ 1751.857453][T16634] ? __cfi_sock_write_iter+0x10/0x10 [ 1751.862782][T16634] ? fsnotify_perm+0x67/0x5b0 [ 1751.867520][T16634] ? security_file_permission+0x8a/0xb0 [ 1751.873095][T16634] vfs_write+0x5ef/0xd00 [ 1751.877368][T16634] ? __cfi_vfs_write+0x10/0x10 [ 1751.882151][T16634] ? __fget_files+0x2d1/0x330 [ 1751.886871][T16634] ? __fdget_pos+0x1f2/0x380 [ 1751.891478][T16634] ? ksys_write+0x70/0x260 [ 1751.895918][T16634] ksys_write+0x14a/0x260 [ 1751.900279][T16634] ? __cfi_ksys_write+0x10/0x10 [ 1751.905150][T16634] ? debug_smp_processor_id+0x17/0x20 [ 1751.910549][T16634] __x64_sys_write+0x7b/0x90 [ 1751.915158][T16634] x64_sys_call+0x27b/0x9a0 [ 1751.920206][T16634] do_syscall_64+0x4c/0xa0 [ 1751.924640][T16634] ? clear_bhb_loop+0x30/0x80 [ 1751.929373][T16634] ? clear_bhb_loop+0x30/0x80 [ 1751.934088][T16634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1751.940004][T16634] RIP: 0033:0x7f3364d9fb19 [ 1751.944438][T16634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1751.964065][T16634] RSP: 002b:00007f3365ba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1751.972533][T16634] RAX: ffffffffffffffda RBX: 00007f3365025fa0 RCX: 00007f3364d9fb19 [ 1751.980613][T16634] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1751.988613][T16634] RBP: 00007f3365ba8090 R08: 0000000000000000 R09: 0000000000000000 [ 1751.996623][T16634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.004707][T16634] R13: 00007f3365026038 R14: 00007f3365025fa0 R15: 00007ffe916f85a8 [ 1752.012709][T16634] [ 1752.096761][ T28] audit: type=1400 audit(1793622994.753:530): avc: denied { mount } for pid=16639 comm="syz.5.3963" name="/" dev="ramfs" ino=84431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1752.122142][T16640] loop5: detected capacity change from 0 to 512 [ 1752.147095][T16640] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1752.167891][T16640] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.3963: bad orphan inode 131083 [ 1752.182485][T13673] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1752.192902][T16640] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1752.224875][T16640] overlayfs: upper fs needs to support d_type. [ 1752.235240][T16640] overlayfs: failed to resolve './file0': -2 [ 1752.267286][T13184] EXT4-fs (loop5): unmounting filesystem. [ 1752.282539][ T28] audit: type=1400 audit(1793622994.933:531): avc: denied { connect } for pid=16642 comm="syz.0.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1752.330286][T16646] netlink: 'syz.0.3964': attribute type 12 has an invalid length. [ 1752.348515][T16646] netlink: 'syz.0.3964': attribute type 29 has an invalid length. [ 1752.368694][T16646] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3964'. [ 1752.380127][T13673] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1752.399555][T13673] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1752.412426][T13673] usb 5-1: Product: syz [ 1752.416741][T13673] usb 5-1: Manufacturer: syz [ 1752.438581][T13673] usb 5-1: Found UVC 1.00 device syz (225a:e1d4) [ 1752.445554][ T28] audit: type=1400 audit(1793622995.103:532): avc: denied { read } for pid=16642 comm="syz.0.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1752.592413][T10554] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1752.668686][ T28] audit: type=1400 audit(1793622995.313:533): avc: denied { set_context_mgr } for pid=16648 comm="syz.6.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1752.755137][T16628] loop4: detected capacity change from 0 to 128 [ 1752.840109][T13673] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1752.861938][T13673] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 1752.871075][T13673] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 1752.874731][T10554] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1752.889063][T13673] usb 5-1: USB disconnect, device number 3 [ 1752.893587][T10554] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.919013][T10554] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1752.928392][T10554] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1752.941133][T10554] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1752.950769][T10554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.958984][T10554] usb 6-1: Product: syz [ 1752.963482][T10554] usb 6-1: Manufacturer: syz [ 1752.968155][T10554] usb 6-1: SerialNumber: syz [ 1753.182002][T10554] usb 6-1: USB disconnect, device number 4 [ 1753.955728][T16122] udevd[16122]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1754.544054][T16682] loop7: detected capacity change from 0 to 8192 [ 1754.568474][T16687] xt_hashlimit: size too large, truncated to 1048576 [ 1754.592905][T16682] loop7: p1 < > p2 p3 p4 < p5 > [ 1754.597962][T16682] loop7: partition table partially beyond EOD, truncated [ 1754.616946][T16682] loop7: p1 start 16777216 is beyond EOD, truncated [ 1754.632524][T16682] loop7: p2 start 131072 is beyond EOD, truncated [ 1754.635156][T16689] fuse: Bad value for 'fd' [ 1754.639908][T16682] loop7: p3 start 655105 is beyond EOD, truncated [ 1754.650832][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3975'. [ 1754.660142][T16682] loop7: p5 start 131072 is beyond EOD, truncated [ 1754.885915][T16693] loop7: detected capacity change from 0 to 256 [ 1754.902965][T16693] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1755.158596][T16695] device vlan0 entered promiscuous mode [ 1755.171275][T16695] device eth0 entered promiscuous mode [ 1755.185606][T16692] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3974'. [ 1755.271962][T16698] loop5: detected capacity change from 0 to 1024 [ 1755.280943][T16698] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1755.292256][T16698] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 1755.300055][T16698] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1755.437253][ T28] audit: type=1400 audit(1793622998.093:534): avc: denied { setopt } for pid=16706 comm="syz.4.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1755.507187][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3983'. [ 1755.576802][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3987'. [ 1755.603847][T16730] FAULT_INJECTION: forcing a failure. [ 1755.603847][T16730] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.616943][T16730] CPU: 0 PID: 16730 Comm: syz.6.3988 Tainted: G W syzkaller #0 [ 1755.625985][T16730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1755.636178][T16730] Call Trace: [ 1755.639509][T16730] [ 1755.642485][T16730] __dump_stack+0x21/0x24 [ 1755.646906][T16730] dump_stack_lvl+0x110/0x170 [ 1755.651632][T16730] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1755.656709][T16730] dump_stack+0x15/0x24 [ 1755.660915][T16730] should_fail_ex+0x3bf/0x510 [ 1755.665643][T16730] __should_failslab+0xac/0xf0 [ 1755.670468][T16730] should_failslab+0x9/0x20 [ 1755.675203][T16730] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1755.680665][T16730] ? kvmalloc_node+0x28a/0x460 [ 1755.685471][T16730] ? unwind_get_return_address+0x4d/0x90 [ 1755.691138][T16730] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1755.697330][T16730] ? kvmalloc_node+0x28a/0x460 [ 1755.702145][T16730] __kmalloc_node+0xa2/0x1e0 [ 1755.706766][T16730] kvmalloc_node+0x28a/0x460 [ 1755.711380][T16730] ? __cfi_kvmalloc_node+0x10/0x10 [ 1755.716548][T16730] ? __stack_depot_save+0x36/0x490 [ 1755.721706][T16730] traverse+0xdc/0x5e0 [ 1755.725803][T16730] ? __cfi_mutex_lock+0x10/0x10 [ 1755.730683][T16730] ? _parse_integer+0x2a/0x40 [ 1755.735476][T16730] seq_read_iter+0xc68/0xd80 [ 1755.740189][T16730] proc_reg_read_iter+0x1e0/0x2b0 [ 1755.745343][T16730] do_iter_read+0x64b/0xb30 [ 1755.749963][T16730] ? vfs_iter_read+0xa0/0xa0 [ 1755.754581][T16730] ? import_iovec+0x7c/0xb0 [ 1755.759117][T16730] do_preadv+0x233/0x390 [ 1755.763390][T16730] ? vfs_writev+0x5f0/0x5f0 [ 1755.768012][T16730] ? __kasan_check_write+0x14/0x20 [ 1755.773245][T16730] ? ksys_write+0x1fa/0x260 [ 1755.777772][T16730] ? __cfi_ksys_write+0x10/0x10 [ 1755.782647][T16730] __x64_sys_preadv2+0xd7/0x100 [ 1755.787535][T16730] x64_sys_call+0x243/0x9a0 [ 1755.792100][T16730] do_syscall_64+0x4c/0xa0 [ 1755.796572][T16730] ? clear_bhb_loop+0x30/0x80 [ 1755.801286][T16730] ? clear_bhb_loop+0x30/0x80 [ 1755.806000][T16730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1755.811924][T16730] RIP: 0033:0x7f3364d9fb19 [ 1755.816365][T16730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1755.836009][T16730] RSP: 002b:00007f3365ba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 1755.844454][T16730] RAX: ffffffffffffffda RBX: 00007f3365025fa0 RCX: 00007f3364d9fb19 [ 1755.852454][T16730] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 1755.860446][T16730] RBP: 00007f3365ba8090 R08: 0000000000000558 R09: 0000000000000012 [ 1755.868472][T16730] R10: 00000000fffffffd R11: 0000000000000246 R12: 0000000000000001 [ 1755.876570][T16730] R13: 00007f3365026038 R14: 00007f3365025fa0 R15: 00007ffe916f85a8 [ 1755.884596][T16730] [ 1755.910052][T16732] netlink: 95 bytes leftover after parsing attributes in process `syz.6.3989'. [ 1755.912814][ T517] Bluetooth: hci0: Frame reassembly failed (-84) [ 1755.939212][T16735] loop4: detected capacity change from 0 to 4096 [ 1755.947491][T16735] EXT4-fs: Ignoring removed nobh option [ 1755.953558][T16735] EXT4-fs: Ignoring removed bh option [ 1755.959920][T16735] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1755.968413][T16735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1756.135057][T16739] FAULT_INJECTION: forcing a failure. [ 1756.135057][T16739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.138360][T13184] EXT4-fs (loop5): unmounting filesystem. [ 1756.155681][T16739] CPU: 1 PID: 16739 Comm: syz.4.3990 Tainted: G W syzkaller #0 [ 1756.164679][T16739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1756.174888][T16739] Call Trace: [ 1756.178219][T16739] [ 1756.181171][T16739] __dump_stack+0x21/0x24 [ 1756.185556][T16739] dump_stack_lvl+0x110/0x170 [ 1756.190258][T16739] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1756.195305][T16739] ? getname_flags+0xba/0x510 [ 1756.200092][T16739] dump_stack+0x15/0x24 [ 1756.204264][T16739] should_fail_ex+0x3bf/0x510 [ 1756.208966][T16739] should_fail+0xb/0x10 [ 1756.213140][T16739] should_fail_usercopy+0x1a/0x20 [ 1756.218186][T16739] strncpy_from_user+0x24/0x2c0 [ 1756.223059][T16739] ? kmem_cache_alloc+0x166/0x320 [ 1756.228125][T16739] ? getname_flags+0xba/0x510 [ 1756.232838][T16739] getname_flags+0xf5/0x510 [ 1756.237372][T16739] __x64_sys_mkdirat+0x7c/0xa0 [ 1756.242205][T16739] x64_sys_call+0x73d/0x9a0 [ 1756.246745][T16739] do_syscall_64+0x4c/0xa0 [ 1756.251185][T16739] ? clear_bhb_loop+0x30/0x80 [ 1756.255897][T16739] ? clear_bhb_loop+0x30/0x80 [ 1756.260602][T16739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1756.266517][T16739] RIP: 0033:0x7ff7a1b9e987 [ 1756.270972][T16739] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.290609][T16739] RSP: 002b:00007ff7a2a57e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1756.299059][T16739] RAX: ffffffffffffffda RBX: 00007ff7a2a57ee0 RCX: 00007ff7a1b9e987 [ 1756.307057][T16739] RDX: 00000000000001ff RSI: 0000200000000ec0 RDI: 00000000ffffff9c [ 1756.315142][T16739] RBP: 0000200000000e80 R08: 0000200000000f00 R09: 0000000000000000 [ 1756.323256][T16739] R10: 0000200000000e80 R11: 0000000000000246 R12: 0000200000000ec0 [ 1756.331244][T16739] R13: 00007ff7a2a57ea0 R14: 0000000000000000 R15: 0000000000000000 [ 1756.339233][T16739] [ 1756.364950][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3991'. [ 1756.910492][ T289] EXT4-fs (loop4): unmounting filesystem. [ 1756.930010][T16751] loop4: detected capacity change from 0 to 16 [ 1756.939700][T16751] erofs: (device loop4): mounted with root inode @ nid 36. [ 1756.954502][T16751] syz.4.3995: attempt to access beyond end of device [ 1756.954502][T16751] loop4: rw=524288, sector=1342177272, nr_sectors = 2560 limit=16 [ 1758.008503][T16736] Bluetooth: hci0: command 0x1003 tx timeout [ 1758.008535][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1758.261474][T16765] FAULT_INJECTION: forcing a failure. [ 1758.261474][T16765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.293281][T16765] CPU: 0 PID: 16765 Comm: syz.6.3999 Tainted: G W syzkaller #0 [ 1758.294130][T16767] device lo entered promiscuous mode [ 1758.302299][T16765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1758.302321][T16765] Call Trace: [ 1758.302328][T16765] [ 1758.302336][T16765] __dump_stack+0x21/0x24 [ 1758.308747][T16767] device tunl0 entered promiscuous mode [ 1758.317731][T16765] dump_stack_lvl+0x110/0x170 [ 1758.317760][T16765] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1758.317780][T16765] ? __kasan_check_write+0x14/0x20 [ 1758.323818][T16767] device gre0 entered promiscuous mode [ 1758.324137][T16765] ? _raw_spin_lock_bh+0x94/0xf0 [ 1758.328774][T16767] device gretap0 entered promiscuous mode [ 1758.334016][T16765] dump_stack+0x15/0x24 [ 1758.334039][T16765] should_fail_ex+0x3bf/0x510 [ 1758.334063][T16765] should_fail+0xb/0x10 [ 1758.334084][T16765] should_fail_usercopy+0x1a/0x20 [ 1758.340178][T16767] device erspan0 entered promiscuous mode [ 1758.343785][T16765] _copy_to_user+0x1e/0x90 [ 1758.343811][T16765] put_user_ifreq+0x78/0xc0 [ 1758.343834][T16765] sock_do_ioctl+0x27f/0x330 [ 1758.351461][T16767] device ip_vti0 entered promiscuous mode [ 1758.354474][T16765] ? sock_show_fdinfo+0xb0/0xb0 [ 1758.354512][T16765] ? selinux_file_ioctl+0x3ad/0x4c0 [ 1758.354542][T16765] sock_ioctl+0x475/0x700 [ 1758.354566][T16765] ? __cfi_sock_ioctl+0x10/0x10 [ 1758.361407][T16767] device ip6_vti0 entered promiscuous mode [ 1758.365264][T16765] ? __fget_files+0x2d1/0x330 [ 1758.365298][T16765] ? security_file_ioctl+0x95/0xc0 [ 1758.365327][T16765] ? __cfi_sock_ioctl+0x10/0x10 [ 1758.370911][T16767] device sit0 entered promiscuous mode [ 1758.374177][T16765] __se_sys_ioctl+0x12f/0x1b0 [ 1758.374210][T16765] __x64_sys_ioctl+0x7b/0x90 [ 1758.374233][T16765] x64_sys_call+0x58b/0x9a0 [ 1758.385802][T16767] device ip6tnl0 entered promiscuous mode [ 1758.389181][T16765] do_syscall_64+0x4c/0xa0 [ 1758.394727][T16767] device ip6gre0 entered promiscuous mode [ 1758.398111][T16765] ? clear_bhb_loop+0x30/0x80 [ 1758.403401][ T28] audit: type=1400 audit(1793623001.043:535): avc: denied { mount } for pid=16768 comm="syz.5.4001" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1758.408453][T16765] ? clear_bhb_loop+0x30/0x80 [ 1758.408487][T16765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1758.415677][T16767] device ip6gretap0 entered promiscuous mode [ 1758.418578][T16765] RIP: 0033:0x7f3364d9fb19 [ 1758.418603][T16765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.424755][T16767] device bridge0 entered promiscuous mode [ 1758.427841][T16765] RSP: 002b:00007f3365ba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1758.427869][T16765] RAX: ffffffffffffffda RBX: 00007f3365025fa0 RCX: 00007f3364d9fb19 [ 1758.506498][T16767] device vcan0 entered promiscuous mode [ 1758.510542][T16765] RDX: 00002000000000c0 RSI: 0000000000008921 RDI: 0000000000000003 [ 1758.510563][T16765] RBP: 00007f3365ba8090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.510578][T16765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.602970][T16765] R13: 00007f3365026038 R14: 00007f3365025fa0 R15: 00007ffe916f85a8 [ 1758.611086][T16765] [ 1758.616886][T16767] device veth0 entered promiscuous mode [ 1758.632603][T16767] device veth1 entered promiscuous mode [ 1758.638307][T16767] device wg0 entered promiscuous mode [ 1758.663077][T16767] device wg1 entered promiscuous mode [ 1758.672656][T16767] device wg2 entered promiscuous mode [ 1758.678252][T16767] device veth0_to_bridge entered promiscuous mode [ 1758.702605][T16767] device veth1_to_bridge entered promiscuous mode [ 1758.709309][T16767] device veth0_to_bond entered promiscuous mode [ 1758.765049][ T28] audit: type=1400 audit(1793623001.423:536): avc: denied { create } for pid=16766 comm="syz.0.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1758.767727][T16767] device bond_slave_0 entered promiscuous mode [ 1758.795869][T16767] device veth1_to_bond entered promiscuous mode [ 1758.814047][T16780] loop6: detected capacity change from 0 to 128 [ 1758.820537][T16767] device bond_slave_1 entered promiscuous mode [ 1758.831242][T16755] loop4: detected capacity change from 0 to 40427 [ 1758.837930][T16780] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1758.849010][T16755] F2FS-fs (loop4): Corrupted extension count (33554469 + 1 > 64) [ 1758.855542][T16767] device veth0_to_team entered promiscuous mode [ 1758.864778][T16767] device team_slave_0 entered promiscuous mode [ 1758.871329][T16780] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1758.878967][T16755] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1758.883134][T16767] device veth1_to_team entered promiscuous mode [ 1758.895693][T16767] device team_slave_1 entered promiscuous mode [ 1758.902606][T16767] device veth0_to_batadv entered promiscuous mode [ 1758.910338][T16755] F2FS-fs (loop4): invalid crc value [ 1758.924708][T16767] device batadv_slave_0 entered promiscuous mode [ 1758.939791][T16767] device veth1_to_batadv entered promiscuous mode [ 1758.942221][T16755] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1758.958672][T16767] device batadv_slave_1 entered promiscuous mode [ 1758.967517][T16767] device xfrm0 entered promiscuous mode [ 1758.973450][T16767] device veth0_to_hsr entered promiscuous mode [ 1758.979806][T16767] device hsr_slave_0 entered promiscuous mode [ 1758.986246][T16767] device veth1_to_hsr entered promiscuous mode [ 1758.992831][T16767] device hsr_slave_1 entered promiscuous mode [ 1758.999032][T16767] device veth1_virt_wifi entered promiscuous mode [ 1759.005954][T16767] device veth0_virt_wifi entered promiscuous mode [ 1759.020958][T16767] device veth1_vlan entered promiscuous mode [ 1759.027469][T16110] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1759.049138][T16767] device vlan0 entered promiscuous mode [ 1759.055346][T16767] device vlan1 entered promiscuous mode [ 1759.061349][T16767] device veth1_macvtap entered promiscuous mode [ 1759.068175][T16755] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 1759.069359][T16767] device veth0_macvtap entered promiscuous mode [ 1759.076194][T16755] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1759.086274][T16767] device macsec0 entered promiscuous mode [ 1759.095744][T16767] device ip6erspan0 entered promiscuous mode [ 1759.101836][T16767] device sit1 entered promiscuous mode [ 1759.107678][T16767] device bridge1 entered promiscuous mode [ 1759.113757][T16767] device bridge2 entered promiscuous mode [ 1759.119671][T16767] device bridge3 entered promiscuous mode [ 1759.125743][T16767] device bridge4 entered promiscuous mode [ 1759.131741][T16767] device bridge5 entered promiscuous mode [ 1759.137909][T16767] device bridge6 entered promiscuous mode [ 1759.144218][T16767] device bridge7 entered promiscuous mode [ 1759.150318][T16767] device bridge8 entered promiscuous mode [ 1759.157621][T16767] device bridge9 entered promiscuous mode [ 1759.164309][T16767] device bridge10 entered promiscuous mode [ 1759.170846][T16767] device bridge11 entered promiscuous mode [ 1759.178122][T16767] device bridge12 entered promiscuous mode [ 1759.185791][T16767] device bridge13 entered promiscuous mode [ 1759.193039][T16767] device bridge14 entered promiscuous mode [ 1759.203962][T16787] FAULT_INJECTION: forcing a failure. [ 1759.203962][T16787] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.216687][T16787] CPU: 1 PID: 16787 Comm: syz.6.4005 Tainted: G W syzkaller #0 [ 1759.225658][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1759.235727][T16787] Call Trace: [ 1759.239023][T16787] [ 1759.241976][T16787] __dump_stack+0x21/0x24 [ 1759.246332][T16787] dump_stack_lvl+0x110/0x170 [ 1759.251028][T16787] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1759.256077][T16787] ? avc_has_perm_noaudit+0x30a/0x490 [ 1759.261473][T16787] dump_stack+0x15/0x24 [ 1759.265643][T16787] should_fail_ex+0x3bf/0x510 [ 1759.270341][T16787] ? getname_flags+0xba/0x510 [ 1759.275035][T16787] __should_failslab+0xac/0xf0 [ 1759.279820][T16787] should_failslab+0x9/0x20 [ 1759.284367][T16787] kmem_cache_alloc+0x3b/0x320 [ 1759.289161][T16787] getname_flags+0xba/0x510 [ 1759.293683][T16787] user_path_create+0x29/0x1b0 [ 1759.298472][T16787] bpf_obj_pin_user+0x130/0x2d0 [ 1759.303419][T16787] ? __cfi_bpf_obj_pin_user+0x10/0x10 [ 1759.308815][T16787] bpf_obj_pin+0xac/0xe0 [ 1759.313075][T16787] __sys_bpf+0x5b7/0x850 [ 1759.317338][T16787] ? bpf_link_show_fdinfo+0x330/0x330 [ 1759.322747][T16787] ? fpregs_restore_userregs+0x128/0x260 [ 1759.328396][T16787] __x64_sys_bpf+0x7c/0x90 [ 1759.332824][T16787] x64_sys_call+0x488/0x9a0 [ 1759.337368][T16787] do_syscall_64+0x4c/0xa0 [ 1759.341796][T16787] ? clear_bhb_loop+0x30/0x80 [ 1759.346511][T16787] ? clear_bhb_loop+0x30/0x80 [ 1759.351227][T16787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1759.357141][T16787] RIP: 0033:0x7f3364d9fb19 [ 1759.361574][T16787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.381210][T16787] RSP: 002b:00007f33637f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1759.389906][T16787] RAX: ffffffffffffffda RBX: 00007f3365026180 RCX: 00007f3364d9fb19 [ 1759.397914][T16787] RDX: 0000000000000018 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1759.406078][T16787] RBP: 00007f33637f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1759.414065][T16787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1759.422048][T16787] R13: 00007f3365026218 R14: 00007f3365026180 R15: 00007ffe916f85a8 [ 1759.430041][T16787] [ 1759.487445][T16767] device bridge15 entered promiscuous mode [ 1759.524451][T16767] device bridge16 entered promiscuous mode [ 1759.553816][T16767] device bridge17 entered promiscuous mode [ 1759.585231][T16767] device bridge18 entered promiscuous mode [ 1759.614316][T16767] device bridge19 entered promiscuous mode [ 1759.635477][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3996'. [ 1759.647243][T16767] device bridge20 entered promiscuous mode [ 1759.661617][T16767] device bridge21 entered promiscuous mode [ 1759.678398][T16767] device bridge22 entered promiscuous mode [ 1759.685595][T16767] device bridge23 entered promiscuous mode [ 1759.692229][T16767] device bridge24 entered promiscuous mode [ 1759.699425][T16767] device bridge25 entered promiscuous mode [ 1759.706487][T16767] device bridge26 entered promiscuous mode [ 1759.713893][T16767] device bridge27 entered promiscuous mode [ 1759.719953][T16767] device bridge28 entered promiscuous mode [ 1759.725916][T16767] device bridge29 entered promiscuous mode [ 1759.731878][T16767] device bridge30 entered promiscuous mode [ 1759.738126][T16767] device bridge31 entered promiscuous mode [ 1759.744300][T16767] device bridge32 entered promiscuous mode [ 1759.750230][T16767] device bridge33 entered promiscuous mode [ 1759.756211][T16767] device bridge34 entered promiscuous mode [ 1759.762106][T16767] device bridge35 entered promiscuous mode [ 1759.768048][T16767] device bridge36 entered promiscuous mode [ 1759.774000][T16767] device bridge37 entered promiscuous mode [ 1759.779884][T16767] device bridge38 entered promiscuous mode [ 1759.786000][T16767] device bridge39 entered promiscuous mode [ 1759.791871][T16767] device bridge40 entered promiscuous mode [ 1759.797864][T16767] device bridge41 entered promiscuous mode [ 1759.803891][T16767] device bridge42 entered promiscuous mode [ 1759.809755][T16767] device bridge43 entered promiscuous mode [ 1759.815705][T16767] device bridge44 entered promiscuous mode [ 1759.821584][T16767] device bridge45 entered promiscuous mode [ 1759.827499][T16767] device bridge46 entered promiscuous mode [ 1759.833388][T16767] device bridge47 entered promiscuous mode [ 1759.885326][ T28] audit: type=1400 audit(1793623002.543:537): avc: denied { unmount } for pid=13184 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1759.911242][T16795] loop5: detected capacity change from 0 to 512 [ 1759.944796][ T28] audit: type=1400 audit(1793623002.603:538): avc: denied { read append } for pid=16798 comm="syz.6.4009" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1759.975590][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4010'. [ 1759.980023][T16795] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1759.994506][ T28] audit: type=1400 audit(1793623002.643:539): avc: denied { open } for pid=16798 comm="syz.6.4009" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1759.995089][T13036] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1760.027663][T16795] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.4006: bad orphan inode 131083 [ 1760.041830][T16795] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1760.079725][T13184] EXT4-fs (loop5): unmounting filesystem. [ 1760.109557][ T28] audit: type=1400 audit(1793623002.763:540): avc: denied { getopt } for pid=16807 comm="syz.6.4012" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1760.120666][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4014'. [ 1760.140006][ T28] audit: type=1400 audit(1793623002.793:541): avc: denied { shutdown } for pid=16807 comm="syz.6.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1760.324964][T16820] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1760.480021][T13036] usb 5-1: Using ep0 maxpacket: 32 [ 1760.493847][T13036] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1760.501481][T13036] usb 5-1: can't read configurations, error -61 [ 1760.652431][T13036] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1760.853686][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4019'. [ 1760.868929][T16832] loop4: detected capacity change from 0 to 1024 [ 1760.909816][T16832] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1760.926719][T16835] FAULT_INJECTION: forcing a failure. [ 1760.926719][T16835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1760.940062][T16835] CPU: 1 PID: 16835 Comm: syz.0.4020 Tainted: G W syzkaller #0 [ 1760.949050][T16835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1760.959141][T16835] Call Trace: [ 1760.962447][T16835] [ 1760.965407][T16835] __dump_stack+0x21/0x24 [ 1760.969772][T16835] dump_stack_lvl+0x110/0x170 [ 1760.974497][T16835] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1760.979999][T16835] ? format_decode+0x1bb/0x1520 [ 1760.984973][T16835] dump_stack+0x15/0x24 [ 1760.989176][T16835] should_fail_ex+0x3bf/0x510 [ 1760.993898][T16835] should_fail+0xb/0x10 [ 1760.997808][T16832] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1760.998091][T16835] should_fail_usercopy+0x1a/0x20 [ 1761.010690][T16835] _copy_from_user+0x1e/0xc0 [ 1761.015313][T16835] kstrtouint_from_user+0xda/0x170 [ 1761.017102][T16832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1761.020457][T16835] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 1761.035098][T16835] ? __kasan_check_read+0x11/0x20 [ 1761.040166][T16835] ? _copy_to_user+0x72/0x90 [ 1761.044907][T16835] ? simple_read_from_buffer+0x10f/0x160 [ 1761.050585][T16835] proc_fail_nth_write+0x8b/0x200 [ 1761.055665][T16835] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1761.061352][T16835] ? security_file_permission+0x8a/0xb0 [ 1761.066963][T16835] ? security_file_permission+0x94/0xb0 [ 1761.072559][T16835] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1761.078233][T16835] vfs_write+0x3fb/0xd00 [ 1761.082514][T16835] ? __kasan_check_read+0x11/0x20 [ 1761.087575][T16835] ? __cfi_vfs_write+0x10/0x10 [ 1761.092373][T16835] ? __kasan_check_write+0x14/0x20 [ 1761.097563][T16835] ? mutex_lock+0x93/0x1b0 [ 1761.100037][ T28] audit: type=1400 audit(1793623003.753:542): avc: denied { setopt } for pid=16837 comm="syz.5.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1761.102014][T16835] ? __cfi_mutex_lock+0x10/0x10 [ 1761.102046][T16835] ? __fdget_pos+0x2cd/0x380 [ 1761.130947][T16835] ? ksys_write+0x70/0x260 [ 1761.135407][T16835] ksys_write+0x14a/0x260 [ 1761.139778][T16835] ? __cfi_ksys_write+0x10/0x10 [ 1761.144674][T16835] ? fput+0x154/0x1a0 [ 1761.148705][T16835] ? debug_smp_processor_id+0x17/0x20 [ 1761.153326][T16838] loop5: detected capacity change from 0 to 512 [ 1761.154126][T16835] __x64_sys_write+0x7b/0x90 [ 1761.165003][T16835] x64_sys_call+0x27b/0x9a0 [ 1761.169560][T16835] do_syscall_64+0x4c/0xa0 [ 1761.174045][T16835] ? clear_bhb_loop+0x30/0x80 [ 1761.178781][T16835] ? clear_bhb_loop+0x30/0x80 [ 1761.183502][T16835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1761.189434][T16835] RIP: 0033:0x7fc1c0f6034e [ 1761.193875][T16835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1761.213504][T16835] RSP: 002b:00007fc1bf9f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1761.221944][T16835] RAX: ffffffffffffffda RBX: 00007fc1bf9f76c0 RCX: 00007fc1c0f6034e [ 1761.230033][T16835] RDX: 0000000000000001 RSI: 00007fc1bf9f70a0 RDI: 0000000000000004 [ 1761.238046][T16835] RBP: 00007fc1bf9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.246069][T16835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.254071][T16835] R13: 00007fc1c1226038 R14: 00007fc1c1225fa0 R15: 00007fff496e4f88 [ 1761.262077][T16835] [ 1761.275047][ T289] EXT4-fs (loop4): unmounting filesystem. [ 1761.308349][T16846] FAULT_INJECTION: forcing a failure. [ 1761.308349][T16846] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.321218][T16846] CPU: 0 PID: 16846 Comm: syz.4.4023 Tainted: G W syzkaller #0 [ 1761.330204][T16846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1761.340300][T16846] Call Trace: [ 1761.343617][T16846] [ 1761.346580][T16846] __dump_stack+0x21/0x24 [ 1761.350948][T16846] dump_stack_lvl+0x110/0x170 [ 1761.355684][T16846] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1761.360773][T16846] dump_stack+0x15/0x24 [ 1761.364967][T16846] should_fail_ex+0x3bf/0x510 [ 1761.369713][T16846] __should_failslab+0xac/0xf0 [ 1761.374519][T16846] should_failslab+0x9/0x20 [ 1761.379080][T16846] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1761.384524][T16846] ? sk_prot_alloc+0xed/0x320 [ 1761.389278][T16846] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1761.395121][T16846] ? sk_prot_alloc+0xed/0x320 [ 1761.399838][T16846] __kmalloc+0xa4/0x1e0 [ 1761.404032][T16846] sk_prot_alloc+0xed/0x320 [ 1761.408575][T16846] ? _raw_read_lock_irqsave+0x94/0xf0 [ 1761.413974][T16846] sk_alloc+0x3b/0x460 [ 1761.418088][T16846] netlink_create+0x3c2/0x640 [ 1761.422910][T16846] ? __cfi_rtnetlink_bind+0x10/0x10 [ 1761.428220][T16846] __sock_create+0x39e/0x7c0 [ 1761.432845][T16846] __sys_socket+0xcd/0x1a0 [ 1761.437298][T16846] __x64_sys_socket+0x7a/0x90 [ 1761.442041][T16846] x64_sys_call+0x449/0x9a0 [ 1761.446578][T16846] do_syscall_64+0x4c/0xa0 [ 1761.451026][T16846] ? clear_bhb_loop+0x30/0x80 [ 1761.455737][T16846] ? clear_bhb_loop+0x30/0x80 [ 1761.460450][T16846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1761.466387][T16846] RIP: 0033:0x7ff7a1b9fb19 [ 1761.470848][T16846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.490493][T16846] RSP: 002b:00007ff7a2a9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1761.498956][T16846] RAX: ffffffffffffffda RBX: 00007ff7a1e25fa0 RCX: 00007ff7a1b9fb19 [ 1761.506984][T16846] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1761.514994][T16846] RBP: 00007ff7a2a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.523024][T16846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.531045][T16846] R13: 00007ff7a1e26038 R14: 00007ff7a1e25fa0 R15: 00007ffeaeac8608 [ 1761.539060][T16846] [ 1761.544014][T16838] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1761.553878][T16838] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1761.781362][T16849] loop6: detected capacity change from 0 to 2048 [ 1762.695387][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4025'. [ 1762.702155][ T28] audit: type=1400 audit(1793623005.353:543): avc: denied { map } for pid=16853 comm="syz.7.4027" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1762.937089][T13184] EXT4-fs (loop5): unmounting filesystem. [ 1763.173089][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4029'. [ 1763.191461][ T28] audit: type=1400 audit(1793623005.603:544): avc: denied { accept } for pid=16853 comm="syz.7.4027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1763.215106][T16863] loop7: detected capacity change from 0 to 2048 [ 1763.227793][T16861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4026'. [ 1763.254486][T16863] EXT4-fs: Ignoring removed oldalloc option [ 1763.279974][T16868] loop6: detected capacity change from 0 to 256 [ 1763.306372][T16868] exfat: Deprecated parameter 'utf8' [ 1763.329703][T16863] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1763.372582][T16868] exfat: Deprecated parameter 'namecase' [ 1763.395755][T16863] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1763.416075][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1763.416091][ T28] audit: type=1400 audit(1793623006.073:548): avc: denied { write } for pid=16871 comm="syz.5.4032" name="/" dev="configfs" ino=13523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1763.456477][T16868] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8f46efdf, utbl_chksum : 0xe619d30d) [ 1763.469630][T16863] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 484 with error 28 [ 1763.501162][ T28] audit: type=1400 audit(1793623006.103:549): avc: denied { add_name } for pid=16871 comm="syz.5.4032" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1763.526937][T16863] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1763.526937][T16863] [ 1763.540332][ T28] audit: type=1400 audit(1793623006.103:550): avc: denied { create } for pid=16871 comm="syz.5.4032" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1763.562983][T16863] EXT4-fs (loop7): Total free blocks count 0 [ 1763.569317][T16863] EXT4-fs (loop7): Free/Dirty block details [ 1763.572606][ T28] audit: type=1400 audit(1793623006.213:551): avc: denied { remove_name } for pid=16866 comm="syz.6.4031" name="file1" dev="loop6" ino=1048925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1763.576016][T16863] EXT4-fs (loop7): free_blocks=4096 [ 1763.604070][T16863] EXT4-fs (loop7): dirty_blocks=512 [ 1763.609391][T16863] EXT4-fs (loop7): Block reservation details [ 1763.615498][T16863] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 1763.621674][T16880] loop5: detected capacity change from 0 to 2048 [ 1763.622524][ T28] audit: type=1400 audit(1793623006.223:552): avc: denied { unlink } for pid=16866 comm="syz.6.4031" name="file1" dev="loop6" ino=1048925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1763.647963][T16880] EXT4-fs: Ignoring removed oldalloc option [ 1763.697799][ T586] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1763.713115][T16880] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1763.764102][T16880] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1763.791728][T16880] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 640 with error 28 [ 1763.804409][T16880] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1763.804409][T16880] [ 1763.816003][T16880] EXT4-fs (loop5): Total free blocks count 0 [ 1763.822040][T16880] EXT4-fs (loop5): Free/Dirty block details [ 1763.822795][T16891] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1763.839447][T16880] EXT4-fs (loop5): free_blocks=4096 [ 1763.845647][T16880] EXT4-fs (loop5): dirty_blocks=656 [ 1763.850999][T16880] EXT4-fs (loop5): Block reservation details [ 1763.857290][T16880] EXT4-fs (loop5): i_reserved_data_blocks=41 [ 1763.860986][ T28] audit: type=1400 audit(1793623006.513:553): avc: denied { setcheckreqprot } for pid=16892 comm="syz.7.4036" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1763.892880][ T28] audit: type=1400 audit(1793623006.543:554): avc: denied { accept } for pid=16892 comm="syz.7.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1763.987904][T16899] loop5: detected capacity change from 0 to 256 [ 1764.009738][T16901] loop4: detected capacity change from 0 to 256 [ 1764.028201][T16902] loop6: detected capacity change from 0 to 2048 [ 1764.052807][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4042'. [ 1764.064793][ T28] audit: type=1400 audit(1793623006.723:555): avc: denied { read } for pid=16904 comm="syz.0.4041" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1764.088869][T16902] loop6: p1 < > p4 [ 1764.095852][T16902] loop6: p4 size 722688 extends beyond EOD, truncated [ 1764.120014][T16902] tmpfs: Bad value for 'nr_inodes' [ 1764.127811][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4044'. [ 1764.148523][ T28] audit: type=1400 audit(1793623006.733:556): avc: denied { open } for pid=16904 comm="syz.0.4041" path="/dev/input/event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1764.164503][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4043'. [ 1764.181737][ T28] audit: type=1400 audit(1793623006.753:557): avc: denied { ioctl } for pid=16904 comm="syz.0.4041" path="/dev/input/event2" dev="devtmpfs" ino=275 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1764.434020][T16918] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 1764.442169][T16918] FAT-fs (loop7): Filesystem has been set read-only [ 1764.462171][T16918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.469450][T16918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.505533][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4047'. [ 1764.562469][T14272] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1764.653755][T16921] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1764.662618][T16921] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1764.703868][T16554] EXT4-fs (loop7): unmounting filesystem. [ 1764.742434][T14272] usb 1-1: Using ep0 maxpacket: 32 [ 1764.750649][T14272] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 1764.761058][T14272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.769988][T14272] usb 1-1: Product: syz [ 1764.775858][T14272] usb 1-1: Manufacturer: syz [ 1764.780746][T14272] usb 1-1: SerialNumber: syz [ 1764.787009][T14272] usb 1-1: config 0 descriptor?? [ 1764.793306][T14272] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 1764.838803][T16932] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1764.849535][T16932] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1764.859894][T16932] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xda9de4d5, utbl_chksum : 0xe619d30d) [ 1764.960492][T16935] set_capacity_and_notify: 3 callbacks suppressed [ 1764.960511][T16935] loop5: detected capacity change from 0 to 256 [ 1765.006000][T16939] loop4: detected capacity change from 0 to 128 [ 1765.012601][T14272] usb 1-1: USB disconnect, device number 10 [ 1765.033324][T16939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1765.049313][T16939] ext4 filesystem being mounted at /792/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1765.072080][ T289] EXT4-fs (loop4): unmounting filesystem. [ 1765.094808][T16943] loop4: detected capacity change from 0 to 2048 [ 1765.111946][T16943] EXT4-fs: Ignoring removed oldalloc option [ 1765.144716][T16943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1765.163996][T16943] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1765.178597][T16943] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 484 with error 28 [ 1765.191340][T16943] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1765.191340][T16943] [ 1765.201160][T16943] EXT4-fs (loop4): Total free blocks count 0 [ 1765.207241][T16943] EXT4-fs (loop4): Free/Dirty block details [ 1765.213228][T16943] EXT4-fs (loop4): free_blocks=4096 [ 1765.215070][T16958] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1765.218474][T16943] EXT4-fs (loop4): dirty_blocks=512 [ 1765.231934][T16958] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1765.231934][T16958] [ 1765.236207][T16943] EXT4-fs (loop4): Block reservation details [ 1765.606556][T16977] loop7: detected capacity change from 0 to 128 [ 1765.639645][T16977] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1765.664259][T16977] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1765.721339][T16554] EXT4-fs (loop7): unmounting filesystem. [ 1765.840501][T16994] loop7: detected capacity change from 0 to 128 [ 1765.850939][T16994] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 1765.902971][T16996] loop5: detected capacity change from 0 to 8192 [ 1765.912763][T16996] FAT-fs (loop5): Unrecognized mount option "0x0000000000000003ÿ" or missing value [ 1765.962020][T17002] device-mapper: table: 252:2: thin-pool: unknown target type [ 1765.969894][T17002] device-mapper: ioctl: error adding target to table [ 1765.977536][T17002] device-mapper: ioctl: The device has no table. [ 1765.985419][T17002] __nla_validate_parse: 1 callbacks suppressed [ 1765.985497][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4072'. [ 1766.001126][T17002] device-mapper: ioctl: The device has no table. [ 1766.238218][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4075'. [ 1766.719628][T17025] loop6: detected capacity change from 0 to 40427 [ 1766.727009][T17025] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 1766.733656][T17025] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1766.742628][T17025] F2FS-fs (loop6): invalid crc value [ 1766.759026][T17025] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1766.774453][T17027] 9pnet: Could not find request transport: *3 fdno=0x0000000000000007 [ 1766.802829][T17025] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1766.810092][T17025] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1767.189875][T17042] loop4: detected capacity change from 0 to 256 [ 1767.198940][T17042] exfat: Deprecated parameter 'namecase' [ 1767.215463][T17042] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1768.286443][ T613] ------------[ cut here ]------------ [ 1768.291972][ T613] kernel BUG at fs/buffer.c:2714! [ 1768.353877][ T613] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1768.360069][ T613] CPU: 0 PID: 613 Comm: kmmpd-loop0 Tainted: G W syzkaller #0 [ 1768.368955][ T613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1768.379084][ T613] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 1768.384659][ T613] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 38 d4 e7 ff e9 b0 fe ff ff e8 1e 38 a2 ff 0f 0b e8 17 38 a2 ff <0f> 0b e8 10 38 a2 ff 0f 0b e8 09 38 a2 ff 0f 0b e8 02 38 a2 ff 0f [ 1768.404403][ T613] RSP: 0000:ffffc9000ee3fca0 EFLAGS: 00010293 [ 1768.410514][ T613] RAX: ffffffff81cf3a09 RBX: 0000000000000000 RCX: ffff888118b51440 [ 1768.418530][ T613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1768.426649][ T613] RBP: ffffc9000ee3fcf0 R08: ffff88811754073f R09: 1ffff11022ea80e7 [ 1768.434659][ T613] R10: dffffc0000000000 R11: ffffed1022ea80e8 R12: 0000000000000000 [ 1768.442670][ T613] R13: 1ffff11022ea80e7 R14: ffff888117540738 R15: 0000000000003801 [ 1768.450684][ T613] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1768.459657][ T613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1768.466279][ T613] CR2: 00007facbc46b000 CR3: 000000013de1b000 CR4: 00000000003506b0 [ 1768.474298][ T613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1768.482305][ T613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1768.490318][ T613] Call Trace: [ 1768.493627][ T613] [ 1768.496619][ T613] submit_bh+0x1f/0x30 [ 1768.500730][ T613] write_mmp_block_thawed+0x397/0x510 [ 1768.506215][ T613] ? __cfi_schedule_timeout+0x10/0x10 [ 1768.511637][ T613] ? read_mmp_block+0x700/0x700 [ 1768.516533][ T613] ? __cfi_process_timeout+0x10/0x10 [ 1768.521934][ T613] write_mmp_block+0x138/0x2b0 [ 1768.526926][ T613] kmmpd+0x382/0x940 [ 1768.530909][ T613] kthread+0x281/0x320 [ 1768.535027][ T613] ? __cfi_kmmpd+0x10/0x10 [ 1768.539489][ T613] ? __cfi_kthread+0x10/0x10 [ 1768.544118][ T613] ret_from_fork+0x1f/0x30 [ 1768.548584][ T613] [ 1768.551630][ T613] Modules linked in: [ 1768.619825][ T613] ---[ end trace 0000000000000000 ]--- [ 1768.625849][ T613] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 1768.631345][ T613] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 38 d4 e7 ff e9 b0 fe ff ff e8 1e 38 a2 ff 0f 0b e8 17 38 a2 ff <0f> 0b e8 10 38 a2 ff 0f 0b e8 09 38 a2 ff 0f 0b e8 02 38 a2 ff 0f [ 1768.651362][ T613] RSP: 0000:ffffc9000ee3fca0 EFLAGS: 00010293 [ 1768.658217][ T613] RAX: ffffffff81cf3a09 RBX: 0000000000000000 RCX: ffff888118b51440 [ 1768.666449][ T613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1768.672559][T15182] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1768.675361][ T613] RBP: ffffc9000ee3fcf0 R08: ffff88811754073f R09: 1ffff11022ea80e7 [ 1768.690256][ T613] R10: dffffc0000000000 R11: ffffed1022ea80e8 R12: 0000000000000000 [ 1768.698564][ T613] R13: 1ffff11022ea80e7 R14: ffff888117540738 R15: 0000000000003801 [ 1768.706822][ T613] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1768.716192][ T613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1768.724206][ T613] CR2: 00007ff7a1df72f8 CR3: 000000010feb8000 CR4: 00000000003506b0 [ 1768.732320][ T613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1768.738929][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1768.738970][ T28] audit: type=1400 audit(1793623011.383:567): avc: denied { map } for pid=17046 comm="syz.5.4088" path="/dev/binderfs/binder0" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1768.746667][ T613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1768.772307][T17047] binder: 17046:17047 ioctl c0306201 2000000001c0 returned -22 [ 1768.786870][ T613] Kernel panic - not syncing: Fatal exception [ 1768.793593][ T613] Kernel Offset: disabled [ 1768.797933][ T613] Rebooting in 86400 seconds..