last executing test programs: 3m6.136306255s ago: executing program 32 (id=343): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x3000014, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000600)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000700), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000740)=0x2) recvmmsg(r3, &(0x7f0000000780), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x2800091, &(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001900)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020}, 0x2020) mount$cgroup(0x0, &(0x7f0000003b00)='.\x00', &(0x7f0000003b40), 0x2208000, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003c00)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000003c40)=@arm64) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000003c80)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000003cc0)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003d00)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) unshare(0x40000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x80, 0x0, 0x40, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xa8, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x8, 0xa}, [@mdlm={0x15, 0x24, 0x12, 0x8001}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x13, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x2, 0xfc}}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000102050000000000000000000a000005300001802c00018014000300fe8000000000000000000000fc0000000000000000000000000000010000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 2m12.326182433s ago: executing program 0 (id=508): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%-010d \x00'}, 0x20) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000001580)={&(0x7f0000001500)=[{0x0, 0x5, 0x9, 0x6}, {0x1ff, 0x5, 0x9, 0x6}, {0x7310, 0x483, 0x8, 0x6}, {0x1ff, 0x9, 0x9, 0xd33e}], 0x4, 0x20, 0x5, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r1, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000001480)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000015c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001680)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000001740)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000001880)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[], 0x9, 0x212, &(0x7f0000000240)="$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") setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x17, 0x0, "4332bbc8aa1298be236afd3d78dbca596d57f7ee67f21cf79ab25fbfc5e44090cf8764ce3a0d53fa9ca0eef63c1eaa0340f6c98117129c772f5dac9c64f0a8c804bab621d98edfd4ea638574baa0bd42"}, 0xd8) creat(&(0x7f0000000000)='./file0\x00', 0x6a) 2m12.068554199s ago: executing program 0 (id=515): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f00000002c0)={0x1, &(0x7f0000000400)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x39c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1002, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x500, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x72}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x2c, r8, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40006) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r7) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000d40)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r10, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r10, 0x400454cd, 0x339) ioctl$TUNGETSNDBUF(r10, 0x800454d3, &(0x7f0000000d80)) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)={0x34, r9, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c040) unshare(0x20400) r11 = socket(0x1e, 0x4, 0x0) r12 = socket(0x1e, 0x4, 0x0) r13 = dup3(r12, r11, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r15, 0x4068aea3, &(0x7f0000000c40)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r16, 0x4008ae90, &(0x7f0000000cc0)={0x1, 0x0, [{0x80000019, 0x6, 0x1, 0xfffffff9, 0x43, 0x1000}]}) sendmsg$NFT_MSG_GETCHAIN(r13, &(0x7f00000007c0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r17, &(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2m11.09658525s ago: executing program 0 (id=536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)='$|', 0x2}], 0x1, 0x0, 0x0, 0x1000000}}], 0x1, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f00000012c0)=0x40) 2m11.075222492s ago: executing program 0 (id=537): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 2m10.90088383s ago: executing program 0 (id=541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000006800010400000000000000000200000000000000080001000100000008000500", @ANYRES32=0x1, @ANYBLOB="f3d249d07415b7cf441b64490ff507a207ee485fc6ef387418c574823e5a9f7436aaa4cd440bc2d9c4e8cf5b6448c976464de318e939a4509039f684c57181189fa3020bfd2d0262fcde013f5ddb277e616a548b2f8def42ece266edd530aafc8551441c642e17afdaa61557f7a6e7113e0a45532fdd7bb7b42c639ddb9556648a72158d7f4d7df76240cf1840604bb9262b1527178fc677e1a6e2d3c6a0d354ddc03ff054a7b59bc04ee7938bd02fcae040e45959b19d3711"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfeff, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x58, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x100}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m8.104911959s ago: executing program 0 (id=563): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0xffffffffffffd05a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r2, 0x43, 0x1, 0xf2fb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) lseek(r3, 0x1, 0x0) getdents(r0, 0x0, 0x58) 2m8.050863454s ago: executing program 33 (id=563): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0xffffffffffffd05a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r2, 0x43, 0x1, 0xf2fb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) lseek(r3, 0x1, 0x0) getdents(r0, 0x0, 0x58) 1m58.89279842s ago: executing program 6 (id=638): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') statx(r1, &(0x7f0000000100)='.\x00', 0x1000, 0x7ff, &(0x7f0000000140)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000040000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) syz_emit_ethernet(0x1909, &(0x7f0000000080)=ANY=[], 0x0) 1m58.89244178s ago: executing program 6 (id=639): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='smaps\x00') pread64(r3, &(0x7f0000000500)=""/102400, 0x19000, 0xffffffff8) pwrite64(r2, &(0x7f0000000040)='\f', 0x1, 0x8000c61) write$rnull_attr(r2, &(0x7f0000000080)='n', 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000003c0)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000480), 0x4) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000440)={0x40, 0x3, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m57.176164578s ago: executing program 6 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x3, 0x6, 0x0, 0x2, 0x8, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0xa) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000400)={0x0, 0x34bb, 0x4, 0x1, 0x2f4}, &(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) r5 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r5, 0x9) syz_clone(0x40200000, &(0x7f0000000b00)="0dbbeb3e8947572c5c218eb35308a5c820a1637c60ed4a2ed01d4c28dcf1aaca091d2d27b26a17b045d26458323d9e5f9bbc91bda902e2cbcc3e01926b070f3fe7e3094f018d13ad103de785f5108ee0dd1103d414b7ee547690b41ff814e69e77adfc8862e4dcc75adcec33bb4195e0e512826fcde041a801480d1ceae41f27c6d2618c170574a4326f21b17c8ddeda66e5d31e9856f27bdf0c832fca6fb08542d4b1a0e2c037811facc1c4c74dd9378ac1834642481d351c0de500f3ddbbc51a80c5031c7980bbdb5889a640e4395df0026702968d76b69d66a1a31f3ecf4ee7a100196cba", 0xe6, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="456febb1ab073a9426fda6fc68b362034f24854259d8a29d08929538c57d38c706aa4847dac74fa31fceaf43a3dade957d038830776947ea24f739d5e65237") prlimit64(0x0, 0x8, &(0x7f00000005c0), 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x2000, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) syz_io_uring_complete(r4, r5) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10008, &(0x7f0000000340)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000640)="$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") 1m56.458377162s ago: executing program 6 (id=656): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r0 = syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x208008de, &(0x7f0000000100)=ANY=[], 0x80, 0x150a, &(0x7f00000002c0)="$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") mkdir(&(0x7f0000001800)='./bus\x00', 0x19e) unlinkat(r0, &(0x7f0000001840)='./file1\x00', 0x0) mount$incfs(&(0x7f0000001880)='\x00', &(0x7f00000018c0)='./bus\x00', &(0x7f0000001900), 0xc002, 0x0) (async) mount$incfs(&(0x7f0000001880)='\x00', &(0x7f00000018c0)='./bus\x00', &(0x7f0000001900), 0xc002, 0x0) chdir(&(0x7f0000001940)='./bus\x00') (async) chdir(&(0x7f0000001940)='./bus\x00') link(&(0x7f0000001980)='./file1\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r2, @ANYBLOB="08000b00e000000108000200ac1414bb140006"], 0x60}}, 0x814) 1m55.683044632s ago: executing program 6 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 1m54.427743982s ago: executing program 6 (id=663): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x404, &(0x7f0000000200), 0x1, 0x76a, &(0x7f0000000bc0)="$eJzs2E9rXFUYB+D33kxi2sZOqi6sm4oVWpBO/rWhqZvWhSAIFgquVAx2koZMmpJJ0WSV4lIXLgQVEbQbFyLNQuhGNCD4AXRjv4IgKrpwIYzcySQN6SSNdeKh6fPAyZxz37n5vWeGucydAB5YTxZ/soi+iBiMiHLreB4RPc1Zb8TS6vNujCxfKkYWjcaFX7PitLg+snxp7X9lrccD0TwljkfEc89n8ejbd+bWFxanx2u16lxrPTA/c2WgvrB4YmpmfLI6Wb08PHz61NjJodHRsY7tdWggXvvuq7MvL527+uXgK7PTRb99rdrGfXRS1uZYKSJe3Y2wBLpa++nacCwrJWwIAIBtFd/zH4mIp5rf4crRFbe/vJXj1rdJmwMAAAA6onGkAQAAAOxxqX9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/tBoZNEAAAAA9rTUvz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/uT6yfGlt/J+5v5yLiP7V/ButsVopxVLzsTe6I2L/H1mUNpyXRcRgB/KXrkXE4+32nzXz+6O3udqcn0fE+cT5r3cgHx5kK8X152y7z1++fv2JNp+/0upp/9na9e/GHde/2/ldW1z/ruww4/MfX3p3y/xrEU+U2uVn6/nZFvlLO8z/5sXDH21Va3wWcSza52/MGpifuTJQX1g8MTUzPlmdrF4eHj59auzk0Ojo2MDEVK06uPq3bcYnX7zz/Xb7379Vfhbbvv7v7XD/Rw89+/Wn2+QfP7r9+9/u9S96Wt5h/u8/HPx7q1qRf3GL/d/t/V/ZYf4LN8/f3OFTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI/KI6Issr6zP87xSiTgQEY/F/rw2W59/ZmL26uWLRS2iP7rzialadTAiyqvrrFgPNee318Ob1iMRcSgi3i/va64rb8zWLqbePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOsORERfZHklIvKI+LOc55VK6q4AAACAjutP3QAAAACw69z/AwAAwN7n/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddujIyq0sIpbO7GuOQk+r1p20M2C35akbAJLpSt0AkEwpdQNAMu7xgewu9d57qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xw7vHIri4ilM/uao9DTqnUn7QzYbXnqBoBkulI3ACRTSt0AkIx7fCC7S733HioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7D19zZHllYjIm/M8r1QiHo6I/ujOJqZq1cGIOBgRP5W7HyrWQ6mbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOPqC4vT47Vadc7ExMRkfZL6ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAr1hcXp8VqtOldP3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABp5T9nEVGMY+Wn+zZXe7K/ys3HiHjz4wsfvDU+Pz83VBz/bf34/Iet48Mp+gcAAAA2W7tPX7uPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Kn6wuL0eK1WndvFSeo9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zj8BAAD//5GsoMo=") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001340)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001380)='./bus\x00', &(0x7f00000013c0), 0x0, &(0x7f0000001400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000001440)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001480)='.\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000014c0)='ns\x00') getdents64(r1, 0x0, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 1m54.133523932s ago: executing program 34 (id=663): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x404, &(0x7f0000000200), 0x1, 0x76a, &(0x7f0000000bc0)="$eJzs2E9rXFUYB+D33kxi2sZOqi6sm4oVWpBO/rWhqZvWhSAIFgquVAx2koZMmpJJ0WSV4lIXLgQVEbQbFyLNQuhGNCD4AXRjv4IgKrpwIYzcySQN6SSNdeKh6fPAyZxz37n5vWeGucydAB5YTxZ/soi+iBiMiHLreB4RPc1Zb8TS6vNujCxfKkYWjcaFX7PitLg+snxp7X9lrccD0TwljkfEc89n8ejbd+bWFxanx2u16lxrPTA/c2WgvrB4YmpmfLI6Wb08PHz61NjJodHRsY7tdWggXvvuq7MvL527+uXgK7PTRb99rdrGfXRS1uZYKSJe3Y2wBLpa++nacCwrJWwIAIBtFd/zH4mIp5rf4crRFbe/vJXj1rdJmwMAAAA6onGkAQAAAOxxqX9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/tBoZNEAAAAA9rTUvz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/uT6yfGlt/J+5v5yLiP7V/ButsVopxVLzsTe6I2L/H1mUNpyXRcRgB/KXrkXE4+32nzXz+6O3udqcn0fE+cT5r3cgHx5kK8X152y7z1++fv2JNp+/0upp/9na9e/GHde/2/ldW1z/ruww4/MfX3p3y/xrEU+U2uVn6/nZFvlLO8z/5sXDH21Va3wWcSza52/MGpifuTJQX1g8MTUzPlmdrF4eHj59auzk0Ojo2MDEVK06uPq3bcYnX7zz/Xb7379Vfhbbvv7v7XD/Rw89+/Wn2+QfP7r9+9/u9S96Wt5h/u8/HPx7q1qRf3GL/d/t/V/ZYf4LN8/f3OFTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI/KI6Issr6zP87xSiTgQEY/F/rw2W59/ZmL26uWLRS2iP7rzialadTAiyqvrrFgPNee318Ob1iMRcSgi3i/va64rb8zWLqbePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOsORERfZHklIvKI+LOc55VK6q4AAACAjutP3QAAAACw69z/AwAAwN7n/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddujIyq0sIpbO7GuOQk+r1p20M2C35akbAJLpSt0AkEwpdQNAMu7xgewu9d57qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xw7vHIri4ilM/uao9DTqnUn7QzYbXnqBoBkulI3ACRTSt0AkIx7fCC7S733HioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7D19zZHllYjIm/M8r1QiHo6I/ujOJqZq1cGIOBgRP5W7HyrWQ6mbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOPqC4vT47Vadc7ExMRkfZL6ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAr1hcXp8VqtOldP3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABp5T9nEVGMY+Wn+zZXe7K/ys3HiHjz4wsfvDU+Pz83VBz/bf34/Iet48Mp+gcAAAA2W7tPX7uPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Kn6wuL0eK1WndvFSeo9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zj8BAAD//5GsoMo=") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001340)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001380)='./bus\x00', &(0x7f00000013c0), 0x0, &(0x7f0000001400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000001440)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001480)='.\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000014c0)='ns\x00') getdents64(r1, 0x0, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 1m12.947014756s ago: executing program 4 (id=987): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ec0)={0x1, &(0x7f0000000f00)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r2 = fsopen(&(0x7f0000000f80)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') read$FUSE(r3, &(0x7f0000001080)={0x2020}, 0xb87ca4cf) r4 = fsmount(r2, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000fc0)=@generic={&(0x7f0000001000)='./file0\x00', r1}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000001040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) 1m12.313532262s ago: executing program 4 (id=990): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x400d4) setxattr$system_posix_acl(&(0x7f0000000600)='.\x00', &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200000001000500000000000400050000000000100007000000000020"], 0x24, 0x2) setuid(0xee01) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) 1m12.260901117s ago: executing program 4 (id=991): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="40000000200025a727bd7000fcdbdf250d0020cdff0000010200010008000600000000001400010020010000000000000000000000000002050016003b000000"], 0x40}, 0x1, 0x0, 0x0, 0x845}, 0x24008080) 1m12.260620357s ago: executing program 4 (id=992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 1m12.260352737s ago: executing program 4 (id=993): mkdirat(0xffffffffffffff9c, &(0x7f000001d880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f000001d8c0)='./proc\x00', &(0x7f000001d900)='proc\x00', 0x4000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)='syzkaller\x00'}, 0x94) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x5, &(0x7f0000000e00)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000e40)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000f00)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000001000), &(0x7f0000001040)}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x6, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000001d940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f000001d980)='27', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) mkdirat(r3, 0x0, 0x20) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_channels={0x1f, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x2}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.247438998s ago: executing program 4 (id=995): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x6f8d, &(0x7f0000000140)={0x0, 0xd9bc, 0x40, 0x3, 0x153}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000005e00)='./bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@new_dev={0x1, 0xa71, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x38}}}, &(0x7f0000000280)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x200, 0x2100, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8fcc, 0x8, 0x1, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x40000, 0x4003bfff, 0x277}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x226d, 0x1, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 57.140876659s ago: executing program 35 (id=995): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x6f8d, &(0x7f0000000140)={0x0, 0xd9bc, 0x40, 0x3, 0x153}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000005e00)='./bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@new_dev={0x1, 0xa71, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x38}}}, &(0x7f0000000280)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x200, 0x2100, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8fcc, 0x8, 0x1, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x40000, 0x4003bfff, 0x277}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x226d, 0x1, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 30.062660286s ago: executing program 8 (id=2014): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x0, 0x127f, &(0x7f0000002880)="$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") fadvise64(r0, 0xff, 0x7f, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 29.709994502s ago: executing program 8 (id=2029): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x2aa, &(0x7f0000000c80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000003a00), 0x208e24b) 29.623366101s ago: executing program 8 (id=2032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000040000000400000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r1, &(0x7f0000000580), &(0x7f00000005c0)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000680)='h', 0x1) shutdown(r0, 0x1) recvfrom(r0, &(0x7f00000006c0)=""/156, 0x9c, 0x101, 0x0, 0x0) 28.76899592s ago: executing program 8 (id=2044): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000080)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./trace\x00', &(0x7f0000000900)='tracefs\x00', 0x0, 0x0) openat(r0, &(0x7f00000013c0)='./dummy\x00', 0x68082, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./trace/uprobe_events\x00', 0x2, 0x0) write(r1, &(0x7f00000009c0)='p:mygrou-/myevent ./dummy:0', 0x1b) 28.643100402s ago: executing program 8 (id=2048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000180)=0xf22c, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001540)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 28.440873783s ago: executing program 8 (id=2052): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x5, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000) 28.404164667s ago: executing program 36 (id=2052): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x5, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000) 10.621893684s ago: executing program 9 (id=2649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000340)={0x79}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000003c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @sint={0x2ed3814f, 0xfff}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000400)={0x0, 0x7}) 9.765884542s ago: executing program 9 (id=2651): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000006a40)={0x90, 0x0, r1, {0x6, 0x1, 0x5, 0x5, 0x6, 0x9, {0x3, 0x5, 0x7, 0x5f0c049a, 0x3ff, 0x3, 0x3, 0x2, 0x2, 0x1000, 0x3, 0x0, 0x0, 0x0, 0xd49}}}, 0x90) 9.676274182s ago: executing program 9 (id=2655): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 9.633068736s ago: executing program 9 (id=2658): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x9801) move_mount(r0, &(0x7f00000004c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x9) 9.58916043s ago: executing program 9 (id=2659): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./myproc\x00', &(0x7f0000000840)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='myproc/iomem\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/215, 0xd7}], 0x1, 0x2001d, 0x4, 0x6) 9.475675932s ago: executing program 9 (id=2665): timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 9.367953924s ago: executing program 37 (id=2665): timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 1.617901073s ago: executing program 7 (id=2934): io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f00004dc000/0x4000)=nil, 0x4000, 0x9, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00'}, 0x94) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d7069647320710ba41785fe01fe72f0bcffb1954cf62c3f549fcb3a2260223e7b6c5b4cac26ce338079e36f9b794e1550c22d64b61f92a92e9f4ea69a19a74cc86cef00f0b1ed"], 0x6) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 1.601897295s ago: executing program 3 (id=2936): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) chroot(0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x41) 1.589199176s ago: executing program 7 (id=2938): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'bond0\x00', @broadcast}) 1.588591856s ago: executing program 3 (id=2939): mkdirat(0xffffffffffffff9c, &(0x7f0000001700)='./proc\x00', 0x4) mount(0x0, &(0x7f0000001740)='./proc\x00', &(0x7f0000001780)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000017c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) getpid() write(r0, &(0x7f0000001800)='10', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x1) 1.563197359s ago: executing program 7 (id=2941): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 1.535207272s ago: executing program 7 (id=2943): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000009240)={0x1, &(0x7f0000009280)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000092c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000009300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000093c0)={r2, 0x0, r1, 0x0, 0x80000}) 959.374431ms ago: executing program 3 (id=2952): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000e80)=@new_dev={0x44, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000ec0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000f40)={0x0, 0x2, 0xc000, 0xfffffffa, 0x3cb}, &(0x7f0000000fc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4707, 0x40, 0x1000000, 0x10000005, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bf2, 0x40, 0x4, 0x2c2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1050bf, 0x40000, 0x2, 0xfffffffc}}], 0x1, 0x0, 0x0) 931.473494ms ago: executing program 3 (id=2954): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro_nat=0x640a, 0x280, 0x20000000007fff}}], 0x68}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 927.432435ms ago: executing program 1 (id=2955): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000500)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x120, 0xb, 0xd0e0011, 0x0, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x9c, 0x0, 'nr0\x00', 'batadv0\x00', {0xff}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 834.462444ms ago: executing program 1 (id=2957): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d00)=0x2) readv(r0, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/132, 0x84}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 787.963699ms ago: executing program 3 (id=2960): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x20000fffffffb}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 787.709689ms ago: executing program 2 (id=2961): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000140)='7', 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000200)="d1", 0x1}], 0x2) 787.483379ms ago: executing program 3 (id=2962): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x287, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x1c9042, 0x224) io_setup(0x20fe, &(0x7f0000000640)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x80342, 0x168) io_submit(r1, 0x3, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000700)='p', 0x8200, 0x600}]) 787.079129ms ago: executing program 1 (id=2963): io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f00004dc000/0x4000)=nil, 0x4000, 0x9, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00'}, 0x94) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d7069647320710ba41785fe01fe72f0bcffb1954cf62c3f549fcb3a2260223e7b6c5b4cac26ce338079e36f9b794e1550c22d64b61f92a92e9f4ea69a19a74cc86cef00f0b1ed"], 0x6) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000540)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x9029881, 0x2, 0x1ff, 0x28d8, 0x6, 0x0, 0x0, 0x10, 0x5}}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 459.651343ms ago: executing program 7 (id=2965): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f00000002c0)) 458.896373ms ago: executing program 1 (id=2966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000001500)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) signalfd4(0xffffffffffffffff, &(0x7f00000015c0)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, 0x0, 0x0, 0x1004000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001700)='./proc\x00', &(0x7f0000001740)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000017c0)='27', 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[], &(0x7f0000001880)=""/4096, 0x1a, 0x1000, 0xa}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) 413.387408ms ago: executing program 2 (id=2968): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) close_range(r2, 0xffffffffffffffff, 0x0) 385.49988ms ago: executing program 2 (id=2969): fchownat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xee01, 0x0, 0x1000) 379.307711ms ago: executing program 1 (id=2970): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000480)={0xf, 0x10000000000001, 0x9, 0x8000, 0x800, 0x7}, 0x0, 0x0, 0x0, 0x0) 344.952045ms ago: executing program 2 (id=2971): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) fsopen(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='27', 0x2) getdents(r1, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000280)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) 344.711875ms ago: executing program 1 (id=2972): openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x1, &(0x7f0000007940)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000007980)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000079c0)=[&(0x7f0000007a00)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 305.040029ms ago: executing program 5 (id=2975): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 304.837509ms ago: executing program 5 (id=2976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xd, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000003000002000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001500)={r1}, 0xc) 246.064015ms ago: executing program 5 (id=2977): mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000d00)='./proc/fs/nfsd\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='.\x00', 0x82000, 0x24) getdents64(r0, 0xfffffffffffffffe, 0x29) 234.452936ms ago: executing program 5 (id=2987): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 19.546878ms ago: executing program 2 (id=2978): mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x4, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getdents64(r0, 0x0, 0x0) lseek(r0, 0x0, 0x0) 18.919109ms ago: executing program 7 (id=2989): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0xe, 0x6, &(0x7f00000021c0)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b70000000100000095"], &(0x7f0000002200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002240)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002280)={r2, &(0x7f00000022c0), &(0x7f0000002300)=@tcp=r0}, 0x20) sendto(r1, &(0x7f0000002340)="01", 0x1, 0x0, 0x0, 0x0) 18.430918ms ago: executing program 5 (id=2979): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/45, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 494.49µs ago: executing program 5 (id=2980): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=2981): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff, 0x3e}, 0x5) kernel console output (not intermixed with test programs): 9][ T6157] dump_stack_lvl+0x110/0x170 [ 312.307105][ T6157] ? __cfi_dump_stack_lvl+0x8/0x8 [ 312.312155][ T6157] ? kasan_save_alloc_info+0x1f/0x30 [ 312.317469][ T6157] ? bpf_prog_create_from_user+0x284/0x420 [ 312.323317][ T6157] ? __x64_sys_seccomp+0x7b/0x90 [ 312.328290][ T6157] ? x64_sys_call+0x721/0x9a0 [ 312.333002][ T6157] ? do_syscall_64+0x4c/0xa0 [ 312.337625][ T6157] dump_stack+0x15/0x24 [ 312.341810][ T6157] should_fail_ex+0x3bf/0x510 [ 312.346523][ T6157] __should_failslab+0xac/0xf0 [ 312.351324][ T6157] should_failslab+0x9/0x20 [ 312.355852][ T6157] __kmem_cache_alloc_node+0x3d/0x2d0 [ 312.361263][ T6157] ? bpf_prepare_filter+0x645/0x11c0 [ 312.366583][ T6157] ? bpf_prepare_filter+0x645/0x11c0 [ 312.371905][ T6157] __kmalloc+0xa4/0x1e0 [ 312.376088][ T6157] bpf_prepare_filter+0x645/0x11c0 [ 312.381225][ T6157] ? __cfi_seccomp_check_filter+0x10/0x10 [ 312.386980][ T6157] ? __kasan_kmalloc+0x95/0xb0 [ 312.391784][ T6157] ? bpf_prog_create+0x1f0/0x1f0 [ 312.396761][ T6157] ? kmemdup+0x46/0x60 [ 312.400863][ T6157] bpf_prog_create_from_user+0x2c5/0x420 [ 312.406580][ T6157] ? __cfi_seccomp_check_filter+0x10/0x10 [ 312.412334][ T6157] do_seccomp+0x801/0xec0 [ 312.416694][ T6157] ? prctl_set_seccomp+0x60/0x60 [ 312.421661][ T6157] ? __x64_sys_futex+0x100/0x100 [ 312.426625][ T6157] ? fpregs_restore_userregs+0x128/0x260 [ 312.432276][ T6157] __x64_sys_seccomp+0x7b/0x90 [ 312.437035][ T6157] x64_sys_call+0x721/0x9a0 [ 312.441704][ T6157] do_syscall_64+0x4c/0xa0 [ 312.446111][ T6157] ? clear_bhb_loop+0x30/0x80 [ 312.450788][ T6157] ? clear_bhb_loop+0x30/0x80 [ 312.455582][ T6157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.461510][ T6157] RIP: 0033:0x7ff3c919f559 [ 312.465949][ T6157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.485587][ T6157] RSP: 002b:00007ff3ca013028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 312.494293][ T6157] RAX: ffffffffffffffda RBX: 00007ff3c9425fa0 RCX: 00007ff3c919f559 [ 312.502293][ T6157] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000000000000001 [ 312.510295][ T6157] RBP: 00007ff3c9236b20 R08: 0000000000000000 R09: 0000000000000000 [ 312.518298][ T6157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.526298][ T6157] R13: 00007ff3c9426038 R14: 00007ff3c9425fa0 R15: 00007ffe4db81488 [ 312.534317][ T6157] [ 312.722138][ T6206] loop2: detected capacity change from 0 to 256 [ 312.818951][ T6209] overlayfs: failed to clone upperpath [ 312.825677][ T6215] FAULT_INJECTION: forcing a failure. [ 312.825677][ T6215] name failslab, interval 1, probability 0, space 0, times 0 [ 312.845469][ T6213] FAULT_INJECTION: forcing a failure. [ 312.845469][ T6213] name failslab, interval 1, probability 0, space 0, times 0 [ 312.863671][ T6215] CPU: 0 PID: 6215 Comm: syz.8.2001 Not tainted syzkaller #0 [ 312.871101][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 312.881274][ T6215] Call Trace: [ 312.884576][ T6215] [ 312.887529][ T6215] __dump_stack+0x21/0x24 [ 312.891915][ T6215] dump_stack_lvl+0x110/0x170 [ 312.896601][ T6215] ? __cfi_dump_stack_lvl+0x8/0x8 [ 312.901634][ T6215] dump_stack+0x15/0x24 [ 312.905805][ T6215] should_fail_ex+0x3bf/0x510 [ 312.910498][ T6215] ? security_inode_alloc+0x33/0x120 [ 312.915812][ T6215] __should_failslab+0xac/0xf0 [ 312.916544][ T6218] 9pnet_fd: Insufficient options for proto=fd [ 312.920605][ T6215] should_failslab+0x9/0x20 [ 312.931182][ T6215] kmem_cache_alloc+0x3b/0x320 [ 312.935979][ T6215] security_inode_alloc+0x33/0x120 [ 312.941105][ T6215] inode_init_always+0x6ee/0x950 [ 312.946049][ T6215] new_inode_pseudo+0xa2/0x1f0 [ 312.950824][ T6215] new_inode+0x28/0x1e0 [ 312.955006][ T6215] shmem_get_inode+0x36d/0xba0 [ 312.959791][ T6215] shmem_mknod+0x59/0x1d0 [ 312.964147][ T6215] ? shmem_create+0x16/0x40 [ 312.968674][ T6215] shmem_create+0x2c/0x40 [ 312.973030][ T6215] ? __cfi_shmem_create+0x10/0x10 [ 312.978082][ T6215] path_openat+0x15b6/0x2f30 [ 312.982685][ T6215] ? do_filp_open+0x420/0x420 [ 312.987374][ T6215] do_filp_open+0x1ee/0x420 [ 312.991888][ T6215] ? __cfi_do_filp_open+0x10/0x10 [ 312.996925][ T6215] ? alloc_fd+0x4c1/0x570 [ 313.001272][ T6215] do_sys_openat2+0x15e/0x820 [ 313.005961][ T6215] ? __se_sys_futex+0x136/0x310 [ 313.010822][ T6215] ? do_sys_open+0xe0/0xe0 [ 313.015260][ T6215] ? __this_cpu_preempt_check+0x13/0x20 [ 313.020820][ T6215] ? xfd_validate_state+0x70/0x150 [ 313.025947][ T6215] __x64_sys_openat+0x136/0x160 [ 313.030824][ T6215] x64_sys_call+0x783/0x9a0 [ 313.035369][ T6215] do_syscall_64+0x4c/0xa0 [ 313.039800][ T6215] ? clear_bhb_loop+0x30/0x80 [ 313.044497][ T6215] ? clear_bhb_loop+0x30/0x80 [ 313.049195][ T6215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.055194][ T6215] RIP: 0033:0x7f531939f559 [ 313.059626][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.079246][ T6215] RSP: 002b:00007f531a342028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 313.087686][ T6215] RAX: ffffffffffffffda RBX: 00007f5319625fa0 RCX: 00007f531939f559 [ 313.095762][ T6215] RDX: 000000000000275a RSI: 0000200000000240 RDI: ffffffffffffff9c [ 313.103843][ T6215] RBP: 00007f5319436b20 R08: 0000000000000000 R09: 0000000000000000 [ 313.111834][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.119900][ T6215] R13: 00007f5319626038 R14: 00007f5319625fa0 R15: 00007ffe66e6ef48 [ 313.127908][ T6215] [ 313.133844][ T6213] CPU: 1 PID: 6213 Comm: syz.2.2000 Not tainted syzkaller #0 [ 313.141273][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 313.151334][ T6213] Call Trace: [ 313.154783][ T6213] [ 313.157715][ T6213] __dump_stack+0x21/0x24 [ 313.162049][ T6213] dump_stack_lvl+0x110/0x170 [ 313.166734][ T6213] ? __cfi_dump_stack_lvl+0x8/0x8 [ 313.171786][ T6213] dump_stack+0x15/0x24 [ 313.175949][ T6213] should_fail_ex+0x3bf/0x510 [ 313.181236][ T6213] __should_failslab+0xac/0xf0 [ 313.186006][ T6213] should_failslab+0x9/0x20 [ 313.190693][ T6213] __kmem_cache_alloc_node+0x3d/0x2d0 [ 313.196155][ T6213] ? key_alloc+0x318/0xf00 [ 313.200772][ T6213] ? slab_post_alloc_hook+0x6d/0x2d0 [ 313.206067][ T6213] ? key_alloc+0x318/0xf00 [ 313.210578][ T6213] __kmalloc_node_track_caller+0xa1/0x1e0 [ 313.216295][ T6213] ? key_alloc+0x2d3/0xf00 [ 313.220730][ T6213] kmemdup+0x2b/0x60 [ 313.224634][ T6213] key_alloc+0x318/0xf00 [ 313.228980][ T6213] request_key_auth_new+0x694/0x8f0 [ 313.234380][ T6213] ? __kasan_check_write+0x14/0x20 [ 313.239668][ T6213] ? __cfi_request_key_auth_new+0x10/0x10 [ 313.245392][ T6213] ? mutex_unlock+0x8f/0x230 [ 313.249987][ T6213] ? refcount_dec_and_lock+0x25/0xa0 [ 313.255284][ T6213] request_key_and_link+0xa87/0x1180 [ 313.260601][ T6213] ? __cfi_request_key_and_link+0x10/0x10 [ 313.266337][ T6213] ? downgrade_write+0x370/0x370 [ 313.271294][ T6213] ? __cfi_key_default_cmp+0x10/0x10 [ 313.276582][ T6213] ? __cfi_keyring_search_iterator+0x10/0x10 [ 313.282651][ T6213] ? __kasan_check_write+0x14/0x20 [ 313.287769][ T6213] __se_sys_request_key+0x293/0x350 [ 313.292977][ T6213] ? __x64_sys_request_key+0xb0/0xb0 [ 313.298271][ T6213] ? fpregs_restore_userregs+0x128/0x260 [ 313.303910][ T6213] __x64_sys_request_key+0x9b/0xb0 [ 313.309111][ T6213] x64_sys_call+0x69c/0x9a0 [ 313.313703][ T6213] do_syscall_64+0x4c/0xa0 [ 313.318120][ T6213] ? clear_bhb_loop+0x30/0x80 [ 313.322805][ T6213] ? clear_bhb_loop+0x30/0x80 [ 313.327486][ T6213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.333380][ T6213] RIP: 0033:0x7f294cd9f559 [ 313.337800][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.357408][ T6213] RSP: 002b:00007f294dcb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 313.365824][ T6213] RAX: ffffffffffffffda RBX: 00007f294d025fa0 RCX: 00007f294cd9f559 [ 313.373800][ T6213] RDX: 0000200000001f80 RSI: 0000200000001f40 RDI: 0000200000001f00 [ 313.381771][ T6213] RBP: 00007f294ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 313.389749][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.397728][ T6213] R13: 00007f294d026038 R14: 00007f294d025fa0 R15: 00007ffd0e0c1a88 [ 313.405701][ T6213] [ 313.688956][ T6245] loop8: detected capacity change from 0 to 8192 [ 313.778883][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.786158][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.958194][ T6271] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 313.983764][ T6271] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.991483][ T6271] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 314.015755][ T6280] loop8: detected capacity change from 0 to 128 [ 314.034440][ T6280] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 314.092173][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2035'. [ 314.923214][ T6311] loop2: detected capacity change from 0 to 8192 [ 314.926123][ T6317] loop8: detected capacity change from 0 to 128 [ 314.971489][ T6311] device ip6gre1 left promiscuous mode [ 314.999891][ T28] audit: type=1400 audit(2000000036.555:7261): avc: denied { mounton } for pid=6316 comm="syz.8.2044" path="/171/file0/trace" dev="loop8" ino=1048883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 315.042007][ T4125] FAT-fs (loop8): error, invalid access to FAT (entry 0xffff0000) [ 315.065931][ T4125] FAT-fs (loop8): Filesystem has been set read-only [ 315.086284][ T4125] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 315.104280][ T4125] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 315.115449][ T6329] ip_tables: iptables: counters copy to user failed while replacing table [ 315.184458][ T1627] tipc: Left network mode [ 315.302281][ T6334] ip_tables: iptables: counters copy to user failed while replacing table [ 315.471076][ T6355] ip_tables: iptables: counters copy to user failed while replacing table [ 315.509387][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.516884][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.524527][ T6356] device bridge_slave_0 entered promiscuous mode [ 315.531813][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.539033][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.546755][ T6356] device bridge_slave_1 entered promiscuous mode [ 315.633387][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.640474][ T6356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.647891][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.654956][ T6356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.694496][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.705186][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.727755][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.735240][ T6382] ip_tables: iptables: counters copy to user failed while replacing table [ 315.744107][ T6320] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 315.754683][ T1627] device bridge_slave_1 left promiscuous mode [ 315.760838][ T6320] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 315.761946][ T1627] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.794009][ T1627] device bridge_slave_0 left promiscuous mode [ 315.800279][ T1627] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.887673][ T6385] ip_tables: iptables: counters copy to user failed while replacing table [ 315.910188][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.928808][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.935924][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.944358][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.960279][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.967381][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.986323][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.994704][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.019096][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 316.036704][ T6356] device veth0_vlan entered promiscuous mode [ 316.045394][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 316.053819][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.063094][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.081050][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 316.092665][ T6356] device veth1_macvtap entered promiscuous mode [ 316.107687][ T6411] netlink: 'syz.5.2087': attribute type 3 has an invalid length. [ 316.132510][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.160026][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.182579][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 316.522570][ T6452] device-mapper: table: 252:1: raid: unknown target type [ 316.529652][ T6452] device-mapper: ioctl: error adding target to table [ 316.655855][ T6470] loop2: detected capacity change from 0 to 128 [ 316.742084][ T43] kworker/u4:2: attempt to access beyond end of device [ 316.742084][ T43] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 316.950431][ T6502] loop2: detected capacity change from 0 to 8192 [ 317.509204][ T6563] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 317.518118][ T6563] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 317.707426][ T6583] loop7: detected capacity change from 0 to 256 [ 317.724770][ T6583] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.739334][ T6583] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 317.749784][ T6583] FAT-fs (loop7): Filesystem has been set read-only [ 317.768228][ T6593] overlayfs: failed to clone upperpath [ 317.786673][ T6597] ip_tables: iptables: counters copy to user failed while replacing table [ 317.841169][ T6613] loop7: detected capacity change from 0 to 128 [ 317.887614][ T43] kworker/u4:2: attempt to access beyond end of device [ 317.887614][ T43] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 317.913561][ T6616] loop7: detected capacity change from 0 to 512 [ 317.920354][ T6616] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.995765][ T6630] loop7: detected capacity change from 0 to 512 [ 318.006637][ T6630] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 318.064265][ T6641] FAULT_INJECTION: forcing a failure. [ 318.064265][ T6641] name failslab, interval 1, probability 0, space 0, times 0 [ 318.077175][ T6641] CPU: 1 PID: 6641 Comm: syz.2.2187 Not tainted syzkaller #0 [ 318.084579][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 318.093102][ T6647] FAULT_INJECTION: forcing a failure. [ 318.093102][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 318.094653][ T6641] Call Trace: [ 318.094664][ T6641] [ 318.094671][ T6641] __dump_stack+0x21/0x24 [ 318.117842][ T6641] dump_stack_lvl+0x110/0x170 [ 318.122531][ T6641] ? __cfi_dump_stack_lvl+0x8/0x8 [ 318.127562][ T6641] dump_stack+0x15/0x24 [ 318.131724][ T6641] should_fail_ex+0x3bf/0x510 [ 318.136406][ T6641] __should_failslab+0xac/0xf0 [ 318.141182][ T6641] should_failslab+0x9/0x20 [ 318.145695][ T6641] __kmem_cache_alloc_node+0x3d/0x2d0 [ 318.151075][ T6641] ? copy_net_ns+0x10f/0x5c0 [ 318.155681][ T6641] ? copy_net_ns+0x10f/0x5c0 [ 318.160287][ T6641] __kmalloc+0xa4/0x1e0 [ 318.164460][ T6641] copy_net_ns+0x10f/0x5c0 [ 318.168882][ T6641] ? __kasan_check_write+0x14/0x20 [ 318.173998][ T6641] ? copy_cgroup_ns+0x91/0x4c0 [ 318.178773][ T6641] create_new_namespaces+0x3a8/0x660 [ 318.184079][ T6641] unshare_nsproxy_namespaces+0x120/0x170 [ 318.189811][ T6641] ksys_unshare+0x4d5/0x850 [ 318.194332][ T6641] ? __cfi_ksys_unshare+0x10/0x10 [ 318.199368][ T6641] ? fpregs_restore_userregs+0x128/0x260 [ 318.205007][ T6641] __x64_sys_unshare+0x38/0x40 [ 318.209781][ T6641] x64_sys_call+0x767/0x9a0 [ 318.214297][ T6641] do_syscall_64+0x4c/0xa0 [ 318.218723][ T6641] ? clear_bhb_loop+0x30/0x80 [ 318.223412][ T6641] ? clear_bhb_loop+0x30/0x80 [ 318.228118][ T6641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.234044][ T6641] RIP: 0033:0x7f294cd9f559 [ 318.238464][ T6641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.258072][ T6641] RSP: 002b:00007f294dcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 318.266497][ T6641] RAX: ffffffffffffffda RBX: 00007f294d025fa0 RCX: 00007f294cd9f559 [ 318.274471][ T6641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 318.282443][ T6641] RBP: 00007f294ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 318.290423][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.298393][ T6641] R13: 00007f294d026038 R14: 00007f294d025fa0 R15: 00007ffd0e0c1a88 [ 318.306376][ T6641] [ 318.309396][ T6647] CPU: 0 PID: 6647 Comm: syz.7.2190 Not tainted syzkaller #0 [ 318.316797][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 318.326963][ T6647] Call Trace: [ 318.330265][ T6647] [ 318.333235][ T6647] __dump_stack+0x21/0x24 [ 318.337601][ T6647] dump_stack_lvl+0x110/0x170 [ 318.342311][ T6647] ? __cfi_dump_stack_lvl+0x8/0x8 [ 318.347405][ T6647] ? __x64_sys_setsockopt+0xbf/0xd0 [ 318.352645][ T6647] dump_stack+0x15/0x24 [ 318.356826][ T6647] should_fail_ex+0x3bf/0x510 [ 318.361532][ T6647] __should_failslab+0xac/0xf0 [ 318.366330][ T6647] should_failslab+0x9/0x20 [ 318.370856][ T6647] __kmem_cache_alloc_node+0x3d/0x2d0 [ 318.376259][ T6647] ? kvmalloc_node+0x28a/0x460 [ 318.381048][ T6647] ? kvmalloc_node+0x28a/0x460 [ 318.385835][ T6647] __kmalloc_node+0xa2/0x1e0 [ 318.390452][ T6647] kvmalloc_node+0x28a/0x460 [ 318.395065][ T6647] ? __cfi_kvmalloc_node+0x10/0x10 [ 318.400203][ T6647] __nf_hook_entries_try_shrink+0x343/0x730 [ 318.406562][ T6647] __nf_unregister_net_hook+0x413/0x610 [ 318.412140][ T6647] nf_unregister_net_hooks+0xe2/0x150 [ 318.417640][ T6647] nf_ct_netns_do_put+0x234/0x3f0 [ 318.422700][ T6647] ? nf_ct_netns_put+0x144/0x360 [ 318.427666][ T6647] ? __cfi_xt_nat_destroy+0x10/0x10 [ 318.432893][ T6647] nf_ct_netns_put+0x150/0x360 [ 318.437696][ T6647] ? __cfi_xt_nat_destroy+0x10/0x10 [ 318.442921][ T6647] xt_nat_destroy+0x4e/0x70 [ 318.447447][ T6647] cleanup_entry+0x29a/0x350 [ 318.452070][ T6647] ? translate_table+0x1f70/0x1f70 [ 318.457216][ T6647] ? xt_find_match+0x22b/0x270 [ 318.462022][ T6647] translate_table+0x1d6e/0x1f70 [ 318.467005][ T6647] ? ipt_register_table+0x7b0/0x7b0 [ 318.472239][ T6647] ? __kasan_kmalloc+0x95/0xb0 [ 318.477042][ T6647] ? kvmalloc_node+0x28a/0x460 [ 318.481919][ T6647] ? __kmalloc_node+0xb2/0x1e0 [ 318.486699][ T6647] ? kvmalloc_node+0x2b3/0x460 [ 318.491714][ T6647] ? _copy_from_user+0x8f/0xc0 [ 318.496465][ T6647] ? copy_from_sockptr_offset+0x77/0x90 [ 318.502034][ T6647] do_ipt_set_ctl+0x9e0/0xdf0 [ 318.506722][ T6647] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 318.512434][ T6647] ? __cfi_do_ipt_set_ctl+0x10/0x10 [ 318.517625][ T6647] ? __cfi_avc_has_perm+0x10/0x10 [ 318.522638][ T6647] ? __kasan_check_write+0x14/0x20 [ 318.527750][ T6647] ? mutex_unlock+0x8f/0x230 [ 318.532336][ T6647] ? __cfi_mutex_unlock+0x10/0x10 [ 318.537434][ T6647] ? selinux_socket_setsockopt+0x282/0x360 [ 318.543250][ T6647] nf_setsockopt+0x284/0x2b0 [ 318.547833][ T6647] ip_setsockopt+0xed/0x100 [ 318.552332][ T6647] udp_setsockopt+0x8a/0xa0 [ 318.556918][ T6647] sock_common_setsockopt+0xb1/0xc0 [ 318.562118][ T6647] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 318.568028][ T6647] __sys_setsockopt+0x2ff/0x4e0 [ 318.572872][ T6647] ? __cfi___sys_setsockopt+0x10/0x10 [ 318.578257][ T6647] ? __this_cpu_preempt_check+0x13/0x20 [ 318.583795][ T6647] ? xfd_validate_state+0x70/0x150 [ 318.588904][ T6647] ? __kasan_check_write+0x14/0x20 [ 318.594008][ T6647] ? fpregs_restore_userregs+0x128/0x260 [ 318.599637][ T6647] __x64_sys_setsockopt+0xbf/0xd0 [ 318.604657][ T6647] x64_sys_call+0x124/0x9a0 [ 318.609158][ T6647] do_syscall_64+0x4c/0xa0 [ 318.613587][ T6647] ? clear_bhb_loop+0x30/0x80 [ 318.618252][ T6647] ? clear_bhb_loop+0x30/0x80 [ 318.622917][ T6647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.628800][ T6647] RIP: 0033:0x7ff3c919f559 [ 318.633206][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.652802][ T6647] RSP: 002b:00007ff3ca013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 318.661214][ T6647] RAX: ffffffffffffffda RBX: 00007ff3c9425fa0 RCX: 00007ff3c919f559 [ 318.669187][ T6647] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 318.677153][ T6647] RBP: 00007ff3c9236b20 R08: 00000000000003e8 R09: 0000000000000000 [ 318.685114][ T6647] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 318.693077][ T6647] R13: 00007ff3c9426038 R14: 00007ff3c9425fa0 R15: 00007ffe4db81488 [ 318.701133][ T6647] [ 318.738087][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2196'. [ 319.070086][ T6713] overlayfs: failed to clone upperpath [ 319.991924][ T6734] FAULT_INJECTION: forcing a failure. [ 319.991924][ T6734] name failslab, interval 1, probability 0, space 0, times 0 [ 320.014827][ T6734] CPU: 0 PID: 6734 Comm: syz.9.2229 Not tainted syzkaller #0 [ 320.022263][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 320.032337][ T6734] Call Trace: [ 320.035635][ T6734] [ 320.038590][ T6734] __dump_stack+0x21/0x24 [ 320.042955][ T6734] dump_stack_lvl+0x110/0x170 [ 320.047651][ T6734] ? __cfi_dump_stack_lvl+0x8/0x8 [ 320.052705][ T6734] dump_stack+0x15/0x24 [ 320.056894][ T6734] should_fail_ex+0x3bf/0x510 [ 320.061605][ T6734] __should_failslab+0xac/0xf0 [ 320.066409][ T6734] should_failslab+0x9/0x20 [ 320.070945][ T6734] __kmem_cache_alloc_node+0x3d/0x2d0 [ 320.076355][ T6734] ? create_filter_start+0xc5/0x2d0 [ 320.081607][ T6734] ? create_filter_start+0xc5/0x2d0 [ 320.086844][ T6734] kmalloc_trace+0x29/0xb0 [ 320.091292][ T6734] create_filter_start+0xc5/0x2d0 [ 320.096357][ T6734] ? apply_event_filter+0x8c/0x5c0 [ 320.101495][ T6734] apply_event_filter+0x168/0x5c0 [ 320.106549][ T6734] ? __kasan_check_write+0x14/0x20 [ 320.111682][ T6734] event_filter_write+0xda/0x150 [ 320.116653][ T6734] ? __cfi_event_filter_write+0x10/0x10 [ 320.122226][ T6734] vfs_write+0x3fb/0xd00 [ 320.126498][ T6734] ? __cfi_vfs_write+0x10/0x10 [ 320.131293][ T6734] ? __kasan_check_write+0x14/0x20 [ 320.136434][ T6734] ? mutex_lock+0x93/0x1b0 [ 320.140887][ T6734] ? __cfi_mutex_lock+0x10/0x10 [ 320.145772][ T6734] ? __fdget_pos+0x2cd/0x380 [ 320.150484][ T6734] ? ksys_write+0x70/0x260 [ 320.154925][ T6734] ksys_write+0x14a/0x260 [ 320.159276][ T6734] ? __cfi_ksys_write+0x10/0x10 [ 320.164160][ T6734] ? fpregs_restore_userregs+0x128/0x260 [ 320.169820][ T6734] __x64_sys_write+0x7b/0x90 [ 320.174459][ T6734] x64_sys_call+0x27b/0x9a0 [ 320.178999][ T6734] do_syscall_64+0x4c/0xa0 [ 320.183445][ T6734] ? clear_bhb_loop+0x30/0x80 [ 320.188156][ T6734] ? clear_bhb_loop+0x30/0x80 [ 320.192868][ T6734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.198794][ T6734] RIP: 0033:0x7fc99e79f559 [ 320.203238][ T6734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.222872][ T6734] RSP: 002b:00007fc99f5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.231327][ T6734] RAX: ffffffffffffffda RBX: 00007fc99ea25fa0 RCX: 00007fc99e79f559 [ 320.239503][ T6734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 320.247504][ T6734] RBP: 00007fc99e836b20 R08: 0000000000000000 R09: 0000000000000000 [ 320.255503][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.263499][ T6734] R13: 00007fc99ea26038 R14: 00007fc99ea25fa0 R15: 00007ffea3107fe8 [ 320.271589][ T6734] [ 320.432363][ T6787] netlink: 'syz.2.2252': attribute type 4 has an invalid length. [ 320.546955][ T28] audit: type=1326 audit(2000000042.105:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.5.2262" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f959319f559 code=0x0 [ 320.588800][ T6809] tmpfs: Unsupported parameter 'mpol' [ 321.213417][ T6873] FAULT_INJECTION: forcing a failure. [ 321.213417][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 321.226231][ T6873] CPU: 0 PID: 6873 Comm: syz.9.2293 Not tainted syzkaller #0 [ 321.233641][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 321.243704][ T6873] Call Trace: [ 321.246975][ T6873] [ 321.249897][ T6873] __dump_stack+0x21/0x24 [ 321.254224][ T6873] dump_stack_lvl+0x110/0x170 [ 321.258891][ T6873] ? __cfi_dump_stack_lvl+0x8/0x8 [ 321.263926][ T6873] dump_stack+0x15/0x24 [ 321.268076][ T6873] should_fail_ex+0x3bf/0x510 [ 321.272747][ T6873] __should_failslab+0xac/0xf0 [ 321.277511][ T6873] should_failslab+0x9/0x20 [ 321.282068][ T6873] __kmem_cache_alloc_node+0x3d/0x2d0 [ 321.287442][ T6873] ? x509_cert_parse+0x100/0x8b0 [ 321.292373][ T6873] ? kasan_save_alloc_info+0x1f/0x30 [ 321.297646][ T6873] ? x509_cert_parse+0x100/0x8b0 [ 321.302584][ T6873] kmalloc_trace+0x29/0xb0 [ 321.306984][ T6873] x509_cert_parse+0x100/0x8b0 [ 321.311757][ T6873] ? down_read+0xa6/0xf0 [ 321.315990][ T6873] x509_key_preparse+0x63/0x6d0 [ 321.320832][ T6873] asymmetric_key_preparse+0xaf/0x100 [ 321.326201][ T6873] key_create_or_update+0x43e/0x9f0 [ 321.331388][ T6873] ? __cfi_key_create_or_update+0x10/0x10 [ 321.337101][ T6873] ? __cfi_lookup_user_key+0x10/0x10 [ 321.342569][ T6873] ? __kasan_check_write+0x14/0x20 [ 321.347676][ T6873] __se_sys_add_key+0x34b/0x410 [ 321.352513][ T6873] ? __x64_sys_add_key+0xd0/0xd0 [ 321.357449][ T6873] ? __kasan_check_write+0x14/0x20 [ 321.362632][ T6873] ? fpregs_restore_userregs+0x128/0x260 [ 321.368278][ T6873] __x64_sys_add_key+0xbf/0xd0 [ 321.373046][ T6873] x64_sys_call+0x6aa/0x9a0 [ 321.377556][ T6873] do_syscall_64+0x4c/0xa0 [ 321.382056][ T6873] ? clear_bhb_loop+0x30/0x80 [ 321.386731][ T6873] ? clear_bhb_loop+0x30/0x80 [ 321.391413][ T6873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.397321][ T6873] RIP: 0033:0x7fc99e79f559 [ 321.401830][ T6873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.421448][ T6873] RSP: 002b:00007fc99f5a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 321.429875][ T6873] RAX: ffffffffffffffda RBX: 00007fc99ea25fa0 RCX: 00007fc99e79f559 [ 321.437854][ T6873] RDX: 0000200000000b40 RSI: 0000000000000000 RDI: 0000200000000540 [ 321.445830][ T6873] RBP: 00007fc99e836b20 R08: fffffffffffffffd R09: 0000000000000000 [ 321.453826][ T6873] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 321.461811][ T6873] R13: 00007fc99ea26038 R14: 00007fc99ea25fa0 R15: 00007ffea3107fe8 [ 321.469792][ T6873] [ 321.536043][ T6885] FAULT_INJECTION: forcing a failure. [ 321.536043][ T6885] name failslab, interval 1, probability 0, space 0, times 0 [ 321.548888][ T6885] CPU: 1 PID: 6885 Comm: syz.2.2299 Not tainted syzkaller #0 [ 321.556301][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 321.566557][ T6885] Call Trace: [ 321.569859][ T6885] [ 321.572819][ T6885] __dump_stack+0x21/0x24 [ 321.577183][ T6885] dump_stack_lvl+0x110/0x170 [ 321.581887][ T6885] ? __cfi_dump_stack_lvl+0x8/0x8 [ 321.586935][ T6885] ? __cfi_avc_has_perm+0x10/0x10 [ 321.591987][ T6885] dump_stack+0x15/0x24 [ 321.596163][ T6885] should_fail_ex+0x3bf/0x510 [ 321.600867][ T6885] __should_failslab+0xac/0xf0 [ 321.605656][ T6885] should_failslab+0x9/0x20 [ 321.610197][ T6885] __kmem_cache_alloc_node+0x3d/0x2d0 [ 321.615625][ T6885] ? smaps_rollup_open+0x56/0x130 [ 321.620681][ T6885] ? smaps_rollup_open+0x56/0x130 [ 321.625740][ T6885] kmalloc_trace+0x29/0xb0 [ 321.630177][ T6885] smaps_rollup_open+0x56/0x130 [ 321.635052][ T6885] do_dentry_open+0x885/0x11f0 [ 321.639848][ T6885] ? __cfi_smaps_rollup_open+0x10/0x10 [ 321.645335][ T6885] vfs_open+0x73/0x80 [ 321.649352][ T6885] path_openat+0x2699/0x2f30 [ 321.653980][ T6885] ? do_filp_open+0x420/0x420 [ 321.659044][ T6885] do_filp_open+0x1ee/0x420 [ 321.663582][ T6885] ? __cfi_do_filp_open+0x10/0x10 [ 321.668649][ T6885] ? __cfi_kfree_link+0x10/0x10 [ 321.673542][ T6885] ? alloc_fd+0x4c1/0x570 [ 321.677907][ T6885] do_sys_openat2+0x15e/0x820 [ 321.680517][ T28] audit: type=1400 audit(2000000043.225:7263): avc: denied { name_bind } for pid=6888 comm="syz.3.2300" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 321.682629][ T6885] ? __se_sys_futex+0x136/0x310 [ 321.682659][ T6885] ? do_sys_open+0xe0/0xe0 [ 321.713744][ T6885] ? __this_cpu_preempt_check+0x13/0x20 [ 321.719329][ T6885] ? xfd_validate_state+0x70/0x150 [ 321.724485][ T6885] __x64_sys_openat+0x136/0x160 [ 321.729374][ T6885] x64_sys_call+0x783/0x9a0 [ 321.733922][ T6885] do_syscall_64+0x4c/0xa0 [ 321.738369][ T6885] ? clear_bhb_loop+0x30/0x80 [ 321.743078][ T6885] ? clear_bhb_loop+0x30/0x80 [ 321.747790][ T6885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.753719][ T6885] RIP: 0033:0x7f294cd5fd8e [ 321.758152][ T6885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 321.777760][ T6885] RSP: 002b:00007f294dcb3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 321.786169][ T6885] RAX: ffffffffffffffda RBX: 00007f294dcb46c0 RCX: 00007f294cd5fd8e [ 321.794137][ T6885] RDX: 0000000000000002 RSI: 00007f294dcb3f90 RDI: ffffffffffffff9c [ 321.802117][ T6885] RBP: 00007f294ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 321.810107][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.818220][ T6885] R13: 00007f294d026038 R14: 00007f294d025fa0 R15: 00007ffd0e0c1a88 [ 321.826237][ T6885] [ 322.032234][ T28] audit: type=1400 audit(2000000043.595:7264): avc: denied { mounton } for pid=6935 comm="syz.2.2321" path="/387/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 322.782302][ T7004] FAULT_INJECTION: forcing a failure. [ 322.782302][ T7004] name failslab, interval 1, probability 0, space 0, times 0 [ 322.795045][ T7004] CPU: 0 PID: 7004 Comm: syz.9.2352 Not tainted syzkaller #0 [ 322.802639][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 322.812788][ T7004] Call Trace: [ 322.816058][ T7004] [ 322.818977][ T7004] __dump_stack+0x21/0x24 [ 322.823320][ T7004] dump_stack_lvl+0x110/0x170 [ 322.827984][ T7004] ? __cfi_dump_stack_lvl+0x8/0x8 [ 322.832995][ T7004] ? __kasan_check_write+0x14/0x20 [ 322.838094][ T7004] ? _raw_spin_lock+0x94/0xf0 [ 322.842772][ T7004] dump_stack+0x15/0x24 [ 322.846922][ T7004] should_fail_ex+0x3bf/0x510 [ 322.851588][ T7004] __should_failslab+0xac/0xf0 [ 322.856430][ T7004] should_failslab+0x9/0x20 [ 322.860926][ T7004] __kmem_cache_alloc_node+0x3d/0x2d0 [ 322.866291][ T7004] ? __get_vm_area_node+0x12c/0x360 [ 322.871488][ T7004] ? kvm_sched_clock_read+0x18/0x40 [ 322.876713][ T7004] ? __get_vm_area_node+0x12c/0x360 [ 322.881903][ T7004] kmalloc_node_trace+0x26/0xb0 [ 322.886745][ T7004] __get_vm_area_node+0x12c/0x360 [ 322.891760][ T7004] __vmalloc_node_range+0x326/0x1440 [ 322.897040][ T7004] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 322.902596][ T7004] ? finish_task_switch+0x209/0x7c0 [ 322.907808][ T7004] ? __cfi___vmalloc_node_range+0x10/0x10 [ 322.913785][ T7004] ? __schedule+0xcbb/0x1700 [ 322.918387][ T7004] ? __kasan_check_write+0x14/0x20 [ 322.923597][ T7004] ? _raw_spin_lock_bh+0x94/0xf0 [ 322.928543][ T7004] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 322.933997][ T7004] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 322.939545][ T7004] __vmalloc+0x79/0x90 [ 322.943609][ T7004] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 322.949152][ T7004] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 322.954524][ T7004] ? __kasan_check_write+0x14/0x20 [ 322.959720][ T7004] bpf_prog_alloc+0x21/0x1c0 [ 322.964322][ T7004] __get_filter+0x105/0x410 [ 322.968826][ T7004] sk_attach_filter+0x23/0x140 [ 322.973589][ T7004] sk_setsockopt+0x1fac/0x28b0 [ 322.978356][ T7004] ? __cfi_sk_setsockopt+0x10/0x10 [ 322.983465][ T7004] ? selinux_socket_setsockopt+0x282/0x360 [ 322.989267][ T7004] ? __fget_files+0x2d1/0x330 [ 322.993936][ T7004] sock_setsockopt+0x5a/0x70 [ 322.998521][ T7004] __sys_setsockopt+0x269/0x4e0 [ 323.003370][ T7004] ? __cfi___sys_setsockopt+0x10/0x10 [ 323.008746][ T7004] ? ksys_write+0xf4/0x260 [ 323.013154][ T7004] ? __kasan_check_write+0x14/0x20 [ 323.018306][ T7004] ? fpregs_restore_userregs+0x128/0x260 [ 323.023967][ T7004] __x64_sys_setsockopt+0xbf/0xd0 [ 323.029117][ T7004] x64_sys_call+0x124/0x9a0 [ 323.033659][ T7004] do_syscall_64+0x4c/0xa0 [ 323.038068][ T7004] ? clear_bhb_loop+0x30/0x80 [ 323.042757][ T7004] ? clear_bhb_loop+0x30/0x80 [ 323.047443][ T7004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.053349][ T7004] RIP: 0033:0x7fc99e79f559 [ 323.057770][ T7004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.077380][ T7004] RSP: 002b:00007fc99f5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 323.085805][ T7004] RAX: ffffffffffffffda RBX: 00007fc99ea25fa0 RCX: 00007fc99e79f559 [ 323.093794][ T7004] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 323.101782][ T7004] RBP: 00007fc99e836b20 R08: 0000000000000010 R09: 0000000000000000 [ 323.109753][ T7004] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 323.117727][ T7004] R13: 00007fc99ea26038 R14: 00007fc99ea25fa0 R15: 00007ffea3107fe8 [ 323.125707][ T7004] [ 323.131809][ T7004] syz.9.2352: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0 [ 323.149562][ T7004] CPU: 0 PID: 7004 Comm: syz.9.2352 Not tainted syzkaller #0 [ 323.156999][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 323.167086][ T7004] Call Trace: [ 323.170577][ T7004] [ 323.173543][ T7004] __dump_stack+0x21/0x24 [ 323.177902][ T7004] dump_stack_lvl+0x110/0x170 [ 323.182607][ T7004] ? __cfi_dump_stack_lvl+0x8/0x8 [ 323.187661][ T7004] ? pr_cont_kernfs_name+0x133/0x160 [ 323.193070][ T7004] dump_stack+0x15/0x24 [ 323.197280][ T7004] warn_alloc+0x1dc/0x200 [ 323.201658][ T7004] ? should_failslab+0x9/0x20 [ 323.206373][ T7004] ? __cfi_warn_alloc+0x10/0x10 [ 323.211261][ T7004] ? kmalloc_node_trace+0x3d/0xb0 [ 323.216332][ T7004] ? __get_vm_area_node+0x353/0x360 [ 323.221565][ T7004] __vmalloc_node_range+0x34b/0x1440 [ 323.226901][ T7004] ? finish_task_switch+0x209/0x7c0 [ 323.232152][ T7004] ? __cfi___vmalloc_node_range+0x10/0x10 [ 323.237907][ T7004] ? __schedule+0xcbb/0x1700 [ 323.242521][ T7004] ? __kasan_check_write+0x14/0x20 [ 323.247689][ T7004] ? _raw_spin_lock_bh+0x94/0xf0 [ 323.252654][ T7004] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 323.258142][ T7004] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 323.263726][ T7004] __vmalloc+0x79/0x90 [ 323.267823][ T7004] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 323.273412][ T7004] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 323.278818][ T7004] ? __kasan_check_write+0x14/0x20 [ 323.283959][ T7004] bpf_prog_alloc+0x21/0x1c0 [ 323.288577][ T7004] __get_filter+0x105/0x410 [ 323.293113][ T7004] sk_attach_filter+0x23/0x140 [ 323.297912][ T7004] sk_setsockopt+0x1fac/0x28b0 [ 323.302854][ T7004] ? __cfi_sk_setsockopt+0x10/0x10 [ 323.308005][ T7004] ? selinux_socket_setsockopt+0x282/0x360 [ 323.313850][ T7004] ? __fget_files+0x2d1/0x330 [ 323.318562][ T7004] sock_setsockopt+0x5a/0x70 [ 323.323186][ T7004] __sys_setsockopt+0x269/0x4e0 [ 323.328068][ T7004] ? __cfi___sys_setsockopt+0x10/0x10 [ 323.333475][ T7004] ? ksys_write+0xf4/0x260 [ 323.334198][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2362'. [ 323.337931][ T7004] ? __kasan_check_write+0x14/0x20 [ 323.351902][ T7004] ? fpregs_restore_userregs+0x128/0x260 [ 323.357564][ T7004] __x64_sys_setsockopt+0xbf/0xd0 [ 323.362618][ T7004] x64_sys_call+0x124/0x9a0 [ 323.367116][ T7004] do_syscall_64+0x4c/0xa0 [ 323.371521][ T7004] ? clear_bhb_loop+0x30/0x80 [ 323.376280][ T7004] ? clear_bhb_loop+0x30/0x80 [ 323.380949][ T7004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.386835][ T7004] RIP: 0033:0x7fc99e79f559 [ 323.391259][ T7004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.410893][ T7004] RSP: 002b:00007fc99f5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 323.419313][ T7004] RAX: ffffffffffffffda RBX: 00007fc99ea25fa0 RCX: 00007fc99e79f559 [ 323.427290][ T7004] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 323.435264][ T7004] RBP: 00007fc99e836b20 R08: 0000000000000010 R09: 0000000000000000 [ 323.443257][ T7004] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 323.451240][ T7004] R13: 00007fc99ea26038 R14: 00007fc99ea25fa0 R15: 00007ffea3107fe8 [ 323.459228][ T7004] [ 323.463676][ T7004] Mem-Info: [ 323.466990][ T7004] active_anon:25463 inactive_anon:205 isolated_anon:0 [ 323.466990][ T7004] active_file:24794 inactive_file:2780 isolated_file:0 [ 323.466990][ T7004] unevictable:16454 dirty:381 writeback:0 [ 323.466990][ T7004] slab_reclaimable:10185 slab_unreclaimable:74306 [ 323.466990][ T7004] mapped:34016 shmem:17166 pagetables:1278 [ 323.466990][ T7004] sec_pagetables:0 bounce:0 [ 323.466990][ T7004] kernel_misc_reclaimable:0 [ 323.466990][ T7004] free:1464013 free_pcp:8582 free_cma:0 [ 323.512975][ T7004] Node 0 active_anon:101752kB inactive_anon:820kB active_file:99176kB inactive_file:11020kB unevictable:65816kB isolated(anon):0kB isolated(file):0kB mapped:136064kB dirty:1524kB writeback:0kB shmem:68664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:6620kB pagetables:5012kB sec_pagetables:0kB all_unreclaimable? no [ 323.546686][ T7004] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971856kB mlocked:0kB bounce:0kB free_pcp:5372kB local_pcp:5372kB free_cma:0kB [ 323.575114][ T7004] lowmem_reserve[]: 0 3932 3932 3932 [ 323.581144][ T7004] Normal free:2889568kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:107452kB inactive_anon:820kB active_file:99176kB inactive_file:11020kB unevictable:65816kB writepending:1524kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:22828kB local_pcp:11604kB free_cma:0kB [ 323.628969][ T7004] lowmem_reserve[]: 0 0 0 0 [ 323.633852][ T7004] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB [ 323.652077][ T7004] Normal: 2*4kB (UE) 367*8kB (UE) 30*16kB (U) 318*32kB (UME) 317*64kB (UM) 182*128kB (UM) 108*256kB (UME) 60*512kB (UME) 47*1024kB (UME) 29*2048kB (UM) 651*4096kB (UM) = 2889568kB [ 323.696385][ T7004] 63385 total pagecache pages [ 323.701408][ T7004] 216 pages in swap cache [ 323.705862][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2368'. [ 323.721258][ T7004] Free swap = 123624kB [ 323.725463][ T7004] Total swap = 124996kB [ 323.729634][ T7004] 2097051 pages RAM [ 323.745974][ T7004] 0 pages HighMem/MovableOnly [ 323.750758][ T7004] 347487 pages reserved [ 323.761368][ T28] audit: type=1326 audit(2000000045.325:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.2.2369" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f294cd9f559 code=0x0 [ 323.791056][ T7004] 0 pages cma reserved [ 323.854387][ T28] audit: type=1326 audit(2000000045.415:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.3.2374" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cc79f559 code=0x7ffc0000 [ 323.911742][ T28] audit: type=1326 audit(2000000045.445:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.3.2374" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cc79f559 code=0x7ffc0000 [ 323.983662][ T28] audit: type=1326 audit(2000000045.445:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.3.2374" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cc79f559 code=0x7ffc0000 [ 324.014354][ T28] audit: type=1326 audit(2000000045.445:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.3.2374" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cc79f559 code=0x7ffc0000 [ 324.040478][ T28] audit: type=1326 audit(2000000045.445:7270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.3.2374" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f52cc79f559 code=0x7ffc0000 [ 324.065911][ T7086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2384'. [ 324.094580][ T7086] ip_tables: iptables: counters copy to user failed while replacing table [ 324.095411][ T28] audit: type=1326 audit(2000000045.445:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.3.2374" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cc79f559 code=0x7ffc0000 [ 324.148815][ T7098] ip_tables: iptables: counters copy to user failed while replacing table [ 324.194831][ T7106] loop7: detected capacity change from 0 to 16 [ 324.217441][ T7106] erofs: (device loop7): mounted with root inode @ nid 36. [ 324.454308][ T7139] ./dev/sda1: Can't open blockdev [ 324.473174][ T7143] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 324.482105][ T7143] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 324.490418][ T7143] overlayfs: missing 'lowerdir' [ 324.512113][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'. [ 324.760957][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 324.775651][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.784712][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 324.793165][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.803602][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.812019][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.820961][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.829336][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.838551][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2423'. [ 325.028782][ T7219] ip_tables: iptables: counters copy to user failed while replacing table [ 325.091283][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.497610][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.541265][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.569144][ T7254] device bridge_slave_0 entered promiscuous mode [ 325.595624][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.612299][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.633198][ T7254] device bridge_slave_1 entered promiscuous mode [ 325.779086][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.787130][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.812894][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.821482][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.849282][ T714] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.856384][ T714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.871470][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.891561][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.900058][ T714] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.907153][ T714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.923731][ T7275] ip_tables: iptables: counters copy to user failed while replacing table [ 325.942177][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.952245][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.960360][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.977849][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.992736][ T7254] device veth0_vlan entered promiscuous mode [ 325.995446][ T7281] fscrypt (sda1, inode 1262): Direct key flag not allowed with different contents and filenames modes [ 325.999779][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.019855][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.028703][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.051052][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.060248][ T7254] device veth1_macvtap entered promiscuous mode [ 326.078669][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.091838][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.095874][ T7297] loop7: detected capacity change from 0 to 256 [ 326.343091][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 326.343111][ T28] audit: type=1400 audit(2000000047.905:7315): avc: denied { remount } for pid=7315 comm="syz.5.2484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 326.406234][ T7328] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2490'. [ 326.415333][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2490'. [ 326.425351][ T7328] netlink: 31 bytes leftover after parsing attributes in process `syz.9.2490'. [ 326.436448][ T7328] netlink: 'syz.9.2490': attribute type 2 has an invalid length. [ 326.444316][ T7328] netlink: 31 bytes leftover after parsing attributes in process `syz.9.2490'. [ 326.886381][ T28] audit: type=1400 audit(2000000048.445:7316): avc: denied { mounton } for pid=7372 comm="syz.9.2509" path="/40/proc/90/task/91/fail-nth" dev="proc" ino=58185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 326.886418][ T7373] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 326.946336][ T7373] FAULT_INJECTION: forcing a failure. [ 326.946336][ T7373] name fail_futex, interval 1, probability 0, space 0, times 1 [ 326.963298][ T7373] CPU: 1 PID: 7373 Comm: syz.9.2509 Not tainted syzkaller #0 [ 326.970729][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 326.980814][ T7373] Call Trace: [ 326.984119][ T7373] [ 326.987081][ T7373] __dump_stack+0x21/0x24 [ 326.991589][ T7373] dump_stack_lvl+0x110/0x170 [ 326.996298][ T7373] ? __cfi_dump_stack_lvl+0x8/0x8 [ 327.001350][ T7373] ? stack_trace_save+0xa6/0xf0 [ 327.006224][ T7373] dump_stack+0x15/0x24 [ 327.010406][ T7373] should_fail_ex+0x3bf/0x510 [ 327.015127][ T7373] should_fail+0xb/0x10 [ 327.019514][ T7373] get_futex_key+0x143/0xb10 [ 327.024134][ T7373] ? __kasan_slab_alloc+0x72/0x80 [ 327.029274][ T7373] ? slab_post_alloc_hook+0x4f/0x2d0 [ 327.034593][ T7373] ? taskstats_exit+0x1f0/0xb50 [ 327.039471][ T7373] ? get_signal+0x167c/0x1700 [ 327.044177][ T7373] ? exit_to_user_mode_prepare+0x87/0xd0 [ 327.049927][ T7373] ? syscall_exit_to_user_mode+0x1a/0x30 [ 327.055587][ T7373] ? __cfi_get_futex_key+0x10/0x10 [ 327.060765][ T7373] futex_wake+0x150/0x8e0 [ 327.065121][ T7373] ? __cfi_futex_wake+0x10/0x10 [ 327.070002][ T7373] ? perf_lock_task_context+0x3fd/0x4c0 [ 327.075578][ T7373] ? perf_event_exit_event+0x530/0x530 [ 327.081104][ T7373] ? mutex_unlock+0x8f/0x230 [ 327.085722][ T7373] do_futex+0x2bf/0x430 [ 327.089900][ T7373] ? __cfi_do_futex+0x10/0x10 [ 327.094813][ T7373] ? __kasan_check_write+0x14/0x20 [ 327.099926][ T7373] mm_release+0x195/0x2d0 [ 327.104255][ T7373] ? exit_mm_release+0x30/0x30 [ 327.109023][ T7373] ? futex_exit_release+0x119/0x1e0 [ 327.114310][ T7373] exit_mm_release+0x25/0x30 [ 327.118927][ T7373] do_exit+0x8de/0x29f0 [ 327.123094][ T7373] ? __schedule+0xcbb/0x1700 [ 327.127681][ T7373] ? __cfi_do_exit+0x10/0x10 [ 327.132264][ T7373] ? plist_check_list+0x255/0x270 [ 327.137283][ T7373] ? _raw_spin_lock+0x94/0xf0 [ 327.141968][ T7373] ? __kasan_check_write+0x14/0x20 [ 327.147072][ T7373] ? _raw_spin_lock_irq+0x95/0xf0 [ 327.152089][ T7373] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 327.157630][ T7373] do_group_exit+0x21b/0x2e0 [ 327.162218][ T7373] ? __kasan_check_write+0x14/0x20 [ 327.167321][ T7373] ? recalc_sigpending+0x168/0x1c0 [ 327.172437][ T7373] get_signal+0x167c/0x1700 [ 327.176952][ T7373] ? __cfi_get_signal+0x10/0x10 [ 327.181808][ T7373] arch_do_signal_or_restart+0xd1/0x11c0 [ 327.187479][ T7373] ? do_futex+0x2e2/0x430 [ 327.191804][ T7373] ? __cfi_do_futex+0x10/0x10 [ 327.196473][ T7373] ? __se_sys_mount+0x353/0x390 [ 327.201315][ T7373] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 327.207461][ T7373] ? __se_sys_futex+0x136/0x310 [ 327.212320][ T7373] ? __kasan_check_write+0x14/0x20 [ 327.217424][ T7373] exit_to_user_mode_loop+0x7a/0xb0 [ 327.222614][ T7373] exit_to_user_mode_prepare+0x87/0xd0 [ 327.228067][ T7373] syscall_exit_to_user_mode+0x1a/0x30 [ 327.233536][ T7373] do_syscall_64+0x58/0xa0 [ 327.237977][ T7373] ? clear_bhb_loop+0x30/0x80 [ 327.242660][ T7373] ? clear_bhb_loop+0x30/0x80 [ 327.247338][ T7373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.253235][ T7373] RIP: 0033:0x7fc99e79f559 [ 327.257653][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.277257][ T7373] RSP: 002b:00007fc99f5a90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 327.285670][ T7373] RAX: fffffffffffffe00 RBX: 00007fc99ea25fa8 RCX: 00007fc99e79f559 [ 327.293649][ T7373] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc99ea25fa8 [ 327.301617][ T7373] RBP: 00007fc99ea25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 327.309583][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.317567][ T7373] R13: 00007fc99ea26038 R14: 00007ffea3107f00 R15: 00007ffea3107fe8 [ 327.325551][ T7373] [ 327.344547][ T28] audit: type=1326 audit(2000000048.905:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.7.2512" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 327.370463][ T28] audit: type=1326 audit(2000000048.915:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.7.2512" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 327.398846][ T28] audit: type=1326 audit(2000000048.915:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.7.2512" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 327.423932][ T28] audit: type=1326 audit(2000000048.915:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.7.2512" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 327.448994][ T28] audit: type=1326 audit(2000000048.915:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.7.2512" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 327.474444][ T28] audit: type=1326 audit(2000000048.915:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.7.2512" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 327.506446][ T28] audit: type=1326 audit(2000000048.915:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.7.2512" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 327.531572][ T28] audit: type=1326 audit(2000000048.915:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.7.2512" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 327.754473][ T7430] loop3: detected capacity change from 0 to 512 [ 327.761405][ T7430] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 327.772753][ T7434] loop7: detected capacity change from 0 to 512 [ 327.975271][ T7459] loop2: detected capacity change from 0 to 512 [ 327.999407][ T7459] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 328.305380][ T7503] netlink: 'syz.3.2561': attribute type 2 has an invalid length. [ 328.348693][ T7505] FAULT_INJECTION: forcing a failure. [ 328.348693][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 328.361337][ T7505] CPU: 1 PID: 7505 Comm: syz.3.2562 Not tainted syzkaller #0 [ 328.368735][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 328.378785][ T7505] Call Trace: [ 328.382060][ T7505] [ 328.385004][ T7505] __dump_stack+0x21/0x24 [ 328.389339][ T7505] dump_stack_lvl+0x110/0x170 [ 328.394015][ T7505] ? __cfi_dump_stack_lvl+0x8/0x8 [ 328.399036][ T7505] dump_stack+0x15/0x24 [ 328.403184][ T7505] should_fail_ex+0x3bf/0x510 [ 328.407861][ T7505] ? __sigqueue_alloc+0x13f/0x210 [ 328.412885][ T7505] __should_failslab+0xac/0xf0 [ 328.417647][ T7505] should_failslab+0x9/0x20 [ 328.422171][ T7505] kmem_cache_alloc+0x3b/0x320 [ 328.426938][ T7505] __sigqueue_alloc+0x13f/0x210 [ 328.431811][ T7505] __send_signal_locked+0x19d/0xb70 [ 328.437009][ T7505] ? __task_pid_nr_ns+0x1e2/0x280 [ 328.442034][ T7505] do_notify_parent+0x6b1/0x820 [ 328.446913][ T7505] ? __cfi_do_notify_parent+0x10/0x10 [ 328.452377][ T7505] release_task+0xe36/0x1200 [ 328.456970][ T7505] do_exit+0x1a34/0x29f0 [ 328.461214][ T7505] ? preempt_schedule+0xbc/0xd0 [ 328.466060][ T7505] ? __cfi_do_exit+0x10/0x10 [ 328.470652][ T7505] ? ttwu_do_wakeup+0x468/0x490 [ 328.475505][ T7505] ? __kasan_check_write+0x14/0x20 [ 328.480613][ T7505] ? _raw_spin_lock_irq+0x95/0xf0 [ 328.485725][ T7505] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 328.491264][ T7505] do_group_exit+0x21b/0x2e0 [ 328.495853][ T7505] ? __kasan_check_write+0x14/0x20 [ 328.500958][ T7505] ? recalc_sigpending+0x168/0x1c0 [ 328.506068][ T7505] get_signal+0x167c/0x1700 [ 328.510574][ T7505] ? __cfi_get_signal+0x10/0x10 [ 328.515428][ T7505] arch_do_signal_or_restart+0xd1/0x11c0 [ 328.521064][ T7505] ? do_futex+0x2bf/0x430 [ 328.525392][ T7505] ? __cfi_do_futex+0x10/0x10 [ 328.530169][ T7505] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 328.536322][ T7505] ? __se_sys_futex+0x136/0x310 [ 328.541168][ T7505] ? __cfi_ksys_unshare+0x10/0x10 [ 328.546214][ T7505] exit_to_user_mode_loop+0x7a/0xb0 [ 328.551498][ T7505] exit_to_user_mode_prepare+0x87/0xd0 [ 328.556967][ T7505] syscall_exit_to_user_mode+0x1a/0x30 [ 328.562425][ T7505] do_syscall_64+0x58/0xa0 [ 328.566941][ T7505] ? clear_bhb_loop+0x30/0x80 [ 328.571617][ T7505] ? clear_bhb_loop+0x30/0x80 [ 328.576289][ T7505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.582269][ T7505] RIP: 0033:0x7f750139f559 [ 328.586679][ T7505] Code: Unable to access opcode bytes at 0x7f750139f52f. [ 328.593693][ T7505] RSP: 002b:00007f74ffdf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 328.602112][ T7505] RAX: 0000000000000001 RBX: 00007f7501625fa8 RCX: 00007f750139f559 [ 328.610078][ T7505] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7501625fac [ 328.618043][ T7505] RBP: 00007f7501625fa0 R08: 0012dee7e1ae18f0 R09: 0000000000000000 [ 328.626012][ T7505] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 328.633976][ T7505] R13: 00007f7501626038 R14: 00007ffed9fc9080 R15: 00007ffed9fc9168 [ 328.641951][ T7505] [ 328.757921][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2575'. [ 330.636591][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2590'. [ 330.658394][ T7568] ip_tables: iptables: counters copy to user failed while replacing table [ 330.727838][ T7579] FAULT_INJECTION: forcing a failure. [ 330.727838][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 330.751272][ T7579] CPU: 0 PID: 7579 Comm: syz.2.2594 Not tainted syzkaller #0 [ 330.758699][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 330.768864][ T7579] Call Trace: [ 330.772171][ T7579] [ 330.775211][ T7579] __dump_stack+0x21/0x24 [ 330.779567][ T7579] dump_stack_lvl+0x110/0x170 [ 330.784261][ T7579] ? __cfi_dump_stack_lvl+0x8/0x8 [ 330.789373][ T7579] dump_stack+0x15/0x24 [ 330.793551][ T7579] should_fail_ex+0x3bf/0x510 [ 330.798257][ T7579] __should_failslab+0xac/0xf0 [ 330.803061][ T7579] should_failslab+0x9/0x20 [ 330.807595][ T7579] __kmem_cache_alloc_node+0x3d/0x2d0 [ 330.813000][ T7579] ? x509_fabricate_name+0x59c/0x990 [ 330.818323][ T7579] ? x509_fabricate_name+0x59c/0x990 [ 330.823644][ T7579] __kmalloc+0xa4/0x1e0 [ 330.827818][ T7579] ? memcpy+0x56/0x70 [ 330.831833][ T7579] x509_fabricate_name+0x59c/0x990 [ 330.836974][ T7579] x509_note_subject+0x87/0xb0 [ 330.841770][ T7579] asn1_ber_decoder+0x178b/0x1de0 [ 330.846824][ T7579] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 330.852228][ T7579] ? __asan_load8+0x30/0x90 [ 330.856765][ T7579] ? __kasan_kmalloc+0x95/0xb0 [ 330.861555][ T7579] ? x509_cert_parse+0x170/0x8b0 [ 330.866524][ T7579] ? kmalloc_trace+0x40/0xb0 [ 330.871146][ T7579] x509_cert_parse+0x1d2/0x8b0 [ 330.875935][ T7579] x509_key_preparse+0x63/0x6d0 [ 330.880811][ T7579] asymmetric_key_preparse+0xaf/0x100 [ 330.886208][ T7579] key_create_or_update+0x43e/0x9f0 [ 330.891487][ T7579] ? __cfi_key_create_or_update+0x10/0x10 [ 330.897227][ T7579] ? __cfi_lookup_user_key+0x10/0x10 [ 330.902637][ T7579] ? __kasan_check_write+0x14/0x20 [ 330.907773][ T7579] __se_sys_add_key+0x34b/0x410 [ 330.912646][ T7579] ? __x64_sys_add_key+0xd0/0xd0 [ 330.917608][ T7579] ? xfd_validate_state+0x70/0x150 [ 330.922746][ T7579] ? __kasan_check_write+0x14/0x20 [ 330.927877][ T7579] ? fpregs_restore_userregs+0x128/0x260 [ 330.933537][ T7579] __x64_sys_add_key+0xbf/0xd0 [ 330.938333][ T7579] x64_sys_call+0x6aa/0x9a0 [ 330.942866][ T7579] do_syscall_64+0x4c/0xa0 [ 330.947392][ T7579] ? clear_bhb_loop+0x30/0x80 [ 330.952094][ T7579] ? clear_bhb_loop+0x30/0x80 [ 330.956804][ T7579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.962810][ T7579] RIP: 0033:0x7f294cd9f559 [ 330.967248][ T7579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.986879][ T7579] RSP: 002b:00007f294dcb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 330.995317][ T7579] RAX: ffffffffffffffda RBX: 00007f294d025fa0 RCX: 00007f294cd9f559 [ 331.003313][ T7579] RDX: 0000200000000580 RSI: 0000000000000000 RDI: 00002000000003c0 [ 331.011303][ T7579] RBP: 00007f294ce36b20 R08: 000000001bef87a9 R09: 0000000000000000 [ 331.019295][ T7579] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 331.027290][ T7579] R13: 00007f294d026038 R14: 00007f294d025fa0 R15: 00007ffd0e0c1a88 [ 331.035287][ T7579] [ 331.167193][ T7599] loop2: detected capacity change from 0 to 2048 [ 331.212300][ T7599] loop2: p1 < > p3 [ 331.221914][ T7599] loop2: p3 size 134217728 extends beyond EOD, truncated [ 331.499896][ T7603] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 331.738153][ T7614] loop9: detected capacity change from 0 to 16 [ 331.748199][ T7614] erofs: (device loop9): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 331.809005][ T7616] loop7: detected capacity change from 0 to 256 [ 331.816147][ T7616] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 332.012257][ T7631] FAULT_INJECTION: forcing a failure. [ 332.012257][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 332.015568][ T7633] /dev/loop0: Can't open blockdev [ 332.025056][ T7631] CPU: 0 PID: 7631 Comm: syz.2.2615 Not tainted syzkaller #0 [ 332.037464][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 332.047629][ T7631] Call Trace: [ 332.050924][ T7631] [ 332.053886][ T7631] __dump_stack+0x21/0x24 [ 332.058245][ T7631] dump_stack_lvl+0x110/0x170 [ 332.063042][ T7631] ? __cfi_dump_stack_lvl+0x8/0x8 [ 332.068199][ T7631] dump_stack+0x15/0x24 [ 332.072473][ T7631] should_fail_ex+0x3bf/0x510 [ 332.077204][ T7631] ? security_inode_alloc+0x33/0x120 [ 332.082507][ T7631] __should_failslab+0xac/0xf0 [ 332.087276][ T7631] should_failslab+0x9/0x20 [ 332.091954][ T7631] kmem_cache_alloc+0x3b/0x320 [ 332.096759][ T7631] security_inode_alloc+0x33/0x120 [ 332.101878][ T7631] inode_init_always+0x6ee/0x950 [ 332.106831][ T7631] new_inode_pseudo+0xa2/0x1f0 [ 332.111618][ T7631] new_inode+0x28/0x1e0 [ 332.115801][ T7631] ? show_sid+0x1d0/0x1d0 [ 332.120145][ T7631] shmem_get_inode+0x36d/0xba0 [ 332.124936][ T7631] shmem_symlink+0x9e/0x4c0 [ 332.129450][ T7631] ? selinux_inode_symlink+0x22/0x30 [ 332.134742][ T7631] ? security_inode_symlink+0xcf/0x120 [ 332.140291][ T7631] vfs_symlink+0x261/0x3f0 [ 332.144716][ T7631] do_symlinkat+0x24a/0x5d0 [ 332.149222][ T7631] __x64_sys_symlink+0x7e/0x90 [ 332.154002][ T7631] x64_sys_call+0x369/0x9a0 [ 332.158523][ T7631] do_syscall_64+0x4c/0xa0 [ 332.162999][ T7631] ? clear_bhb_loop+0x30/0x80 [ 332.167702][ T7631] ? clear_bhb_loop+0x30/0x80 [ 332.172396][ T7631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.178326][ T7631] RIP: 0033:0x7f294cd9f559 [ 332.182743][ T7631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.202437][ T7631] RSP: 002b:00007f294dcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 332.211049][ T7631] RAX: ffffffffffffffda RBX: 00007f294d025fa0 RCX: 00007f294cd9f559 [ 332.219026][ T7631] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000200000000300 [ 332.227021][ T7631] RBP: 00007f294ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 332.234996][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.242966][ T7631] R13: 00007f294d026038 R14: 00007f294d025fa0 R15: 00007ffd0e0c1a88 [ 332.250955][ T7631] [ 332.448415][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.455882][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.463749][ T7656] device bridge_slave_0 entered promiscuous mode [ 332.471508][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.478611][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.485280][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 332.485295][ T28] audit: type=1400 audit(2000000054.045:7326): avc: denied { read } for pid=7666 comm="syz.2.2631" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 332.487579][ T7656] device bridge_slave_1 entered promiscuous mode [ 332.579225][ T7672] syz.9.2633 (7672): drop_caches: 0 [ 332.617675][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.624777][ T7656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.632181][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.639215][ T7656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.689769][ T1890] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.725184][ T1890] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.740596][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.749683][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.774544][ T28] audit: type=1400 audit(2000000054.335:7327): avc: denied { link } for pid=7686 comm="syz.9.2639" name="file1" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 332.808773][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.812614][ T28] audit: type=1400 audit(2000000054.365:7328): avc: denied { rename } for pid=7686 comm="syz.9.2639" name="file0" dev="overlay" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 332.821172][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.843814][ T28] audit: type=1400 audit(2000000054.365:7329): avc: denied { setattr } for pid=7686 comm="syz.9.2639" name="#30" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 332.846693][ T1890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.880291][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.890885][ T1890] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.897997][ T1890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.911255][ T7692] netlink: 'syz.3.2641': attribute type 16 has an invalid length. [ 332.919312][ T7692] netlink: 'syz.3.2641': attribute type 17 has an invalid length. [ 332.934622][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 332.942484][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 332.950020][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 332.981312][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.989693][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.998212][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 333.010605][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.020223][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 333.028491][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.037342][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.046093][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.055060][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.064258][ T7712] FAULT_INJECTION: forcing a failure. [ 333.064258][ T7712] name failslab, interval 1, probability 0, space 0, times 0 [ 333.069636][ T7714] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 333.079333][ T7712] CPU: 1 PID: 7712 Comm: syz.3.2648 Not tainted syzkaller #0 [ 333.086515][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.092997][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 333.093012][ T7712] Call Trace: [ 333.093019][ T7712] [ 333.093026][ T7712] __dump_stack+0x21/0x24 [ 333.093053][ T7712] dump_stack_lvl+0x110/0x170 [ 333.093071][ T7712] ? __cfi_dump_stack_lvl+0x8/0x8 [ 333.101451][ T7714] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 333.111030][ T7712] ? kernel_text_address+0xa0/0xd0 [ 333.111067][ T7712] dump_stack+0x15/0x24 [ 333.157491][ T7712] should_fail_ex+0x3bf/0x510 [ 333.162165][ T7712] ? dst_alloc+0x16a/0x1e0 [ 333.166578][ T7712] __should_failslab+0xac/0xf0 [ 333.171359][ T7712] should_failslab+0x9/0x20 [ 333.176248][ T7712] kmem_cache_alloc+0x3b/0x320 [ 333.181024][ T7712] dst_alloc+0x16a/0x1e0 [ 333.185297][ T7712] ip_route_output_key_hash_rcu+0x13f8/0x2160 [ 333.191471][ T7712] ? ip_route_output_key_hash_rcu+0x17d1/0x2160 [ 333.197709][ T7712] ip_route_output_key_hash+0x146/0x200 [ 333.203346][ T7712] ? __cfi_ip_route_output_key_hash+0x10/0x10 [ 333.209440][ T7712] tcp_v4_connect+0x638/0x1760 [ 333.214201][ T7712] ? __cfi_tcp_v4_connect+0x10/0x10 [ 333.219420][ T7712] ? __kasan_check_write+0x14/0x20 [ 333.224528][ T7712] ? _raw_spin_lock_bh+0x94/0xf0 [ 333.229509][ T7712] __inet_stream_connect+0x267/0xe80 [ 333.234789][ T7712] ? __local_bh_enable_ip+0x58/0x80 [ 333.239986][ T7712] ? _raw_spin_unlock_bh+0x50/0x60 [ 333.245089][ T7712] ? lock_sock_nested+0x212/0x290 [ 333.250118][ T7712] ? tcp_init_sock+0x563/0x820 [ 333.254900][ T7712] ? __cfi___inet_stream_connect+0x10/0x10 [ 333.260707][ T7712] ? tcp_v4_init_sock+0x15/0x50 [ 333.265634][ T7712] ? security_socket_post_create+0xa3/0xc0 [ 333.271454][ T7712] inet_stream_connect+0x62/0xa0 [ 333.276384][ T7712] p9_fd_create_tcp+0x474/0x610 [ 333.281235][ T7712] ? __kmem_cache_free+0xb7/0x1b0 [ 333.286278][ T7712] ? __cfi_p9_fd_create_tcp+0x10/0x10 [ 333.291652][ T7712] ? __kasan_slab_free+0x11/0x20 [ 333.296593][ T7712] ? slab_free_freelist_hook+0xc2/0x190 [ 333.302135][ T7712] ? p9_client_create+0x704/0x10e0 [ 333.307283][ T7712] p9_client_create+0x7b0/0x10e0 [ 333.312227][ T7712] ? __cfi_p9_client_create+0x10/0x10 [ 333.317613][ T7712] ? memset+0x35/0x40 [ 333.321600][ T7712] v9fs_session_init+0x1c2/0x16e0 [ 333.326644][ T7712] ? __cfi_v9fs_session_init+0x10/0x10 [ 333.332134][ T7712] ? kasan_save_alloc_info+0x1f/0x30 [ 333.337434][ T7712] ? __kasan_kmalloc+0x95/0xb0 [ 333.342213][ T7712] ? v9fs_mount+0xb6/0xa90 [ 333.346646][ T7712] ? kmalloc_trace+0x40/0xb0 [ 333.351237][ T7712] v9fs_mount+0xcc/0xa90 [ 333.355488][ T7712] ? __cfi_v9fs_mount+0x10/0x10 [ 333.360343][ T7712] ? vfs_parse_fs_string+0x10b/0x170 [ 333.365634][ T7712] ? cap_capable+0x1a6/0x230 [ 333.370221][ T7712] legacy_get_tree+0xfe/0x1a0 [ 333.374904][ T7712] ? __cfi_v9fs_mount+0x10/0x10 [ 333.379768][ T7712] vfs_get_tree+0x9a/0x270 [ 333.384202][ T7712] do_new_mount+0x251/0xb40 [ 333.388722][ T7712] ? security_capable+0x99/0xc0 [ 333.393586][ T7712] path_mount+0x640/0xfd0 [ 333.397938][ T7712] __se_sys_mount+0x320/0x390 [ 333.402639][ T7712] ? __this_cpu_preempt_check+0x13/0x20 [ 333.408205][ T7712] ? __x64_sys_mount+0xd0/0xd0 [ 333.412978][ T7712] ? __kasan_check_write+0x14/0x20 [ 333.418097][ T7712] ? fpregs_restore_userregs+0x128/0x260 [ 333.423734][ T7712] __x64_sys_mount+0xbf/0xd0 [ 333.428319][ T7712] x64_sys_call+0x65d/0x9a0 [ 333.432828][ T7712] do_syscall_64+0x4c/0xa0 [ 333.437242][ T7712] ? clear_bhb_loop+0x30/0x80 [ 333.441923][ T7712] ? clear_bhb_loop+0x30/0x80 [ 333.446603][ T7712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.452500][ T7712] RIP: 0033:0x7f750139f559 [ 333.456921][ T7712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.476526][ T7712] RSP: 002b:00007f74ffdf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 333.484944][ T7712] RAX: ffffffffffffffda RBX: 00007f7501625fa0 RCX: 00007f750139f559 [ 333.492913][ T7712] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0 [ 333.500879][ T7712] RBP: 00007f7501436b20 R08: 0000200000000ac0 R09: 0000000000000000 [ 333.508849][ T7712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.516832][ T7712] R13: 00007f7501626038 R14: 00007f7501625fa0 R15: 00007ffed9fc9168 [ 333.524843][ T7712] [ 333.528536][ T7712] 9pnet_fd: p9_fd_create_tcp (7712): problem connecting socket to 127.0.0.1 [ 333.543044][ T7709] FAULT_INJECTION: forcing a failure. [ 333.543044][ T7709] name failslab, interval 1, probability 0, space 0, times 0 [ 333.556049][ T7709] CPU: 1 PID: 7709 Comm: syz.7.2647 Not tainted syzkaller #0 [ 333.563455][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 333.573532][ T7709] Call Trace: [ 333.576855][ T7709] [ 333.579784][ T7709] __dump_stack+0x21/0x24 [ 333.584206][ T7709] dump_stack_lvl+0x110/0x170 [ 333.588879][ T7709] ? __cfi_dump_stack_lvl+0x8/0x8 [ 333.593903][ T7709] ? selinux_kernfs_init_security+0x143/0x450 [ 333.599974][ T7709] dump_stack+0x15/0x24 [ 333.604160][ T7709] should_fail_ex+0x3bf/0x510 [ 333.608838][ T7709] ? __kernfs_new_node+0xe1/0x670 [ 333.613859][ T7709] __should_failslab+0xac/0xf0 [ 333.618717][ T7709] should_failslab+0x9/0x20 [ 333.623242][ T7709] kmem_cache_alloc+0x3b/0x320 [ 333.628021][ T7709] __kernfs_new_node+0xe1/0x670 [ 333.632869][ T7709] ? clear_nonspinnable+0x60/0x60 [ 333.637891][ T7709] ? rwsem_write_trylock+0x136/0x300 [ 333.643188][ T7709] ? kernfs_new_node+0x260/0x260 [ 333.648134][ T7709] ? up_write+0x7b/0x290 [ 333.652397][ T7709] kernfs_new_node+0x150/0x260 [ 333.657248][ T7709] __kernfs_create_file+0x4e/0x270 [ 333.662358][ T7709] sysfs_add_file_mode_ns+0x1ce/0x270 [ 333.667736][ T7709] internal_create_group+0x6b7/0xeb0 [ 333.673031][ T7709] ? sysfs_create_group+0x30/0x30 [ 333.678066][ T7709] ? up_write+0x7b/0x290 [ 333.682398][ T7709] ? kernfs_activate+0x1ea/0x200 [ 333.687333][ T7709] sysfs_create_groups+0x58/0x120 [ 333.692361][ T7709] device_add_attrs+0xdb/0x830 [ 333.697129][ T7709] ? get_device_parent+0x410/0x410 [ 333.702506][ T7709] ? sysfs_do_create_link_sd+0xe9/0x110 [ 333.708053][ T7709] device_add+0x5b0/0xec0 [ 333.712381][ T7709] netdev_register_kobject+0x18e/0x330 [ 333.717840][ T7709] ? raw_notifier_call_chain+0xfa/0x110 [ 333.723400][ T7709] register_netdevice+0xec9/0x1550 [ 333.728523][ T7709] ? __cfi_register_netdevice+0x10/0x10 [ 333.734068][ T7709] ? tun_net_initialize+0x154/0x430 [ 333.739273][ T7709] ? tun_setup+0x2b0/0x2b0 [ 333.743873][ T7709] tun_set_iff+0x831/0xee0 [ 333.748304][ T7709] __tun_chr_ioctl+0x88c/0x1ef0 [ 333.753160][ T7709] ? tun_flow_create+0x320/0x320 [ 333.758104][ T7709] tun_chr_ioctl+0x2a/0x40 [ 333.762531][ T7709] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 333.767643][ T7709] __se_sys_ioctl+0x12f/0x1b0 [ 333.772343][ T7709] __x64_sys_ioctl+0x7b/0x90 [ 333.776934][ T7709] x64_sys_call+0x58b/0x9a0 [ 333.781440][ T7709] do_syscall_64+0x4c/0xa0 [ 333.785855][ T7709] ? clear_bhb_loop+0x30/0x80 [ 333.790534][ T7709] ? clear_bhb_loop+0x30/0x80 [ 333.795213][ T7709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.801108][ T7709] RIP: 0033:0x7ff3c919f559 [ 333.805525][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.825134][ T7709] RSP: 002b:00007ff3ca013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.833656][ T7709] RAX: ffffffffffffffda RBX: 00007ff3c9425fa0 RCX: 00007ff3c919f559 [ 333.841639][ T7709] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000004 [ 333.849619][ T7709] RBP: 00007ff3c9236b20 R08: 0000000000000000 R09: 0000000000000000 [ 333.857590][ T7709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.865578][ T7709] R13: 00007ff3c9426038 R14: 00007ff3c9425fa0 R15: 00007ffe4db81488 [ 333.873576][ T7709] [ 333.900761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.922392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.938132][ T7656] device veth0_vlan entered promiscuous mode [ 333.944947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.953286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.969430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.977836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.993195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.022394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.034551][ T7656] device veth1_macvtap entered promiscuous mode [ 334.053978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.062881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.073080][ T7738] loop7: detected capacity change from 0 to 512 [ 334.076716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.125613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.139137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 334.361363][ T28] audit: type=1400 audit(2000000055.925:7330): avc: denied { remount } for pid=7764 comm="syz.5.2670" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 334.381875][ T7755] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 334.390507][ T7755] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 334.574624][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.590258][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.604626][ T7770] device bridge_slave_0 entered promiscuous mode [ 334.636794][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.651290][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.658920][ T7770] device bridge_slave_1 entered promiscuous mode [ 334.675970][ T7780] FAULT_INJECTION: forcing a failure. [ 334.675970][ T7780] name failslab, interval 1, probability 0, space 0, times 0 [ 334.688756][ T7780] CPU: 1 PID: 7780 Comm: syz.2.2674 Not tainted syzkaller #0 [ 334.696159][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 334.706242][ T7780] Call Trace: [ 334.709541][ T7780] [ 334.712495][ T7780] __dump_stack+0x21/0x24 [ 334.716856][ T7780] dump_stack_lvl+0x110/0x170 [ 334.721563][ T7780] ? __cfi_dump_stack_lvl+0x8/0x8 [ 334.726625][ T7780] dump_stack+0x15/0x24 [ 334.730800][ T7780] should_fail_ex+0x3bf/0x510 [ 334.735507][ T7780] __should_failslab+0xac/0xf0 [ 334.740310][ T7780] should_failslab+0x9/0x20 [ 334.744881][ T7780] __kmem_cache_alloc_node+0x3d/0x2d0 [ 334.750294][ T7780] ? __list_lru_init+0xa6/0x380 [ 334.755172][ T7780] ? __prealloc_shrinker+0x44c/0x500 [ 334.760496][ T7780] ? __list_lru_init+0xa6/0x380 [ 334.765461][ T7780] kmalloc_trace+0x29/0xb0 [ 334.769906][ T7780] __list_lru_init+0xa6/0x380 [ 334.774697][ T7780] alloc_super+0x6e3/0x850 [ 334.779158][ T7780] sget+0x1f0/0x530 [ 334.780830][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.782996][ T7780] ? __cfi_set_anon_super+0x10/0x10 [ 334.783029][ T7780] ? __cfi_ovl_fill_super+0x10/0x10 [ 334.790077][ T7770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.795247][ T7780] mount_nodev+0x33/0x100 [ 334.795271][ T7780] ovl_mount+0x2c/0x40 [ 334.800571][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.807762][ T7780] legacy_get_tree+0xfe/0x1a0 [ 334.807792][ T7780] ? __cfi_ovl_mount+0x10/0x10 [ 334.812174][ T7770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.816253][ T7780] vfs_get_tree+0x9a/0x270 [ 334.844489][ T7780] do_new_mount+0x251/0xb40 [ 334.849025][ T7780] ? security_capable+0x99/0xc0 [ 334.853911][ T7780] path_mount+0x640/0xfd0 [ 334.858288][ T7780] __se_sys_mount+0x320/0x390 [ 334.863009][ T7780] ? __this_cpu_preempt_check+0x13/0x20 [ 334.868601][ T7780] ? __x64_sys_mount+0xd0/0xd0 [ 334.873400][ T7780] ? __kasan_check_write+0x14/0x20 [ 334.878551][ T7780] ? fpregs_restore_userregs+0x128/0x260 [ 334.884224][ T7780] __x64_sys_mount+0xbf/0xd0 [ 334.888844][ T7780] x64_sys_call+0x65d/0x9a0 [ 334.893386][ T7780] do_syscall_64+0x4c/0xa0 [ 334.897834][ T7780] ? clear_bhb_loop+0x30/0x80 [ 334.902555][ T7780] ? clear_bhb_loop+0x30/0x80 [ 334.907266][ T7780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.913200][ T7780] RIP: 0033:0x7f294cd9f559 [ 334.917640][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.937290][ T7780] RSP: 002b:00007f294dcb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 334.945717][ T7780] RAX: ffffffffffffffda RBX: 00007f294d025fa0 RCX: 00007f294cd9f559 [ 334.954390][ T7780] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000000000 [ 334.962536][ T7780] RBP: 00007f294ce36b20 R08: 00002000000003c0 R09: 0000000000000000 [ 334.970595][ T7780] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 334.978568][ T7780] R13: 00007f294d026038 R14: 00007f294d025fa0 R15: 00007ffd0e0c1a88 [ 334.986546][ T7780] [ 334.990398][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.998481][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.019282][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.031651][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.070307][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.081939][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.089018][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.115317][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.131504][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.138638][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.162088][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.171771][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.189743][ T8] device bridge_slave_1 left promiscuous mode [ 335.197057][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.212551][ T8] device bridge_slave_0 left promiscuous mode [ 335.224413][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.233043][ T8] device veth1_macvtap left promiscuous mode [ 335.239194][ T8] device veth0_vlan left promiscuous mode [ 335.280701][ T7791] loop7: detected capacity change from 0 to 512 [ 335.321750][ T7791] FAT-fs (loop7): Directory bread(block 199916) failed [ 335.346381][ T7791] FAT-fs (loop7): Directory bread(block 199917) failed [ 335.357559][ T7791] FAT-fs (loop7): Directory bread(block 199918) failed [ 335.364752][ T7791] FAT-fs (loop7): Directory bread(block 199919) failed [ 335.371723][ T7791] FAT-fs (loop7): Directory bread(block 199920) failed [ 335.378732][ T7791] FAT-fs (loop7): Directory bread(block 199921) failed [ 335.389197][ T7791] FAT-fs (loop7): Directory bread(block 199922) failed [ 335.396467][ T7791] FAT-fs (loop7): Directory bread(block 199923) failed [ 335.399689][ T7770] device veth0_vlan entered promiscuous mode [ 335.415911][ T7791] FAT-fs (loop7): Directory bread(block 199916) failed [ 335.420292][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.423159][ T7791] FAT-fs (loop7): Directory bread(block 199917) failed [ 335.438887][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.456411][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.472492][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.502656][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.522743][ T7770] device veth1_macvtap entered promiscuous mode [ 335.544418][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.556519][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.565002][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.669920][ T28] audit: type=1400 audit(2000000057.225:7331): avc: denied { write } for pid=7810 comm="syz.5.2684" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 335.702097][ T28] audit: type=1400 audit(2000000057.225:7332): avc: denied { open } for pid=7810 comm="syz.5.2684" path="/10/dev/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 335.800519][ T7824] loop5: detected capacity change from 0 to 256 [ 335.829290][ T7826] FAULT_INJECTION: forcing a failure. [ 335.829290][ T7826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.843644][ T7826] CPU: 1 PID: 7826 Comm: syz.3.2690 Not tainted syzkaller #0 [ 335.851074][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 335.861157][ T7826] Call Trace: [ 335.864462][ T7826] [ 335.867418][ T7826] __dump_stack+0x21/0x24 [ 335.871783][ T7826] dump_stack_lvl+0x110/0x170 [ 335.876461][ T7826] ? __cfi_dump_stack_lvl+0x8/0x8 [ 335.881479][ T7826] dump_stack+0x15/0x24 [ 335.885637][ T7826] should_fail_ex+0x3bf/0x510 [ 335.890344][ T7826] should_fail+0xb/0x10 [ 335.894506][ T7826] should_fail_usercopy+0x1a/0x20 [ 335.899542][ T7826] strncpy_from_user+0x24/0x2c0 [ 335.904390][ T7826] ? kmem_cache_alloc+0x166/0x320 [ 335.909435][ T7826] ? getname_flags+0xba/0x510 [ 335.914194][ T7826] getname_flags+0xf5/0x510 [ 335.918707][ T7826] user_path_at_empty+0x2f/0x1c0 [ 335.923660][ T7826] __se_sys_mount+0x2eb/0x390 [ 335.928363][ T7826] ? __this_cpu_preempt_check+0x13/0x20 [ 335.933995][ T7826] ? __x64_sys_mount+0xd0/0xd0 [ 335.938789][ T7826] ? __kasan_check_write+0x14/0x20 [ 335.943895][ T7826] ? fpregs_restore_userregs+0x128/0x260 [ 335.949547][ T7826] __x64_sys_mount+0xbf/0xd0 [ 335.954148][ T7826] x64_sys_call+0x65d/0x9a0 [ 335.958668][ T7826] do_syscall_64+0x4c/0xa0 [ 335.963101][ T7826] ? clear_bhb_loop+0x30/0x80 [ 335.967829][ T7826] ? clear_bhb_loop+0x30/0x80 [ 335.972541][ T7826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.978468][ T7826] RIP: 0033:0x7f750139f559 [ 335.982883][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.002609][ T7826] RSP: 002b:00007f74ffdf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.011112][ T7826] RAX: ffffffffffffffda RBX: 00007f7501625fa0 RCX: 00007f750139f559 [ 336.019138][ T7826] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00002000000004c0 [ 336.027126][ T7826] RBP: 00007f7501436b20 R08: 0000000000000000 R09: 0000000000000000 [ 336.035211][ T7826] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000 [ 336.043192][ T7826] R13: 00007f7501626038 R14: 00007f7501625fa0 R15: 00007ffed9fc9168 [ 336.051173][ T7826] [ 336.171795][ T7855] loop2: detected capacity change from 0 to 512 [ 336.175100][ T7838] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 336.187232][ T7838] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 336.206421][ T7855] FAT-fs (loop2): Directory bread(block 199916) failed [ 336.220818][ T7855] FAT-fs (loop2): Directory bread(block 199917) failed [ 336.228643][ T7855] FAT-fs (loop2): Directory bread(block 199918) failed [ 336.235795][ T7855] FAT-fs (loop2): Directory bread(block 199919) failed [ 336.242883][ T7855] FAT-fs (loop2): Directory bread(block 199920) failed [ 336.249874][ T7855] FAT-fs (loop2): Directory bread(block 199921) failed [ 336.257419][ T7855] FAT-fs (loop2): Directory bread(block 199922) failed [ 336.264469][ T7855] FAT-fs (loop2): Directory bread(block 199923) failed [ 336.284436][ T7855] FAT-fs (loop2): Directory bread(block 199916) failed [ 336.292013][ T7855] FAT-fs (loop2): Directory bread(block 199917) failed [ 336.310047][ T7863] FAULT_INJECTION: forcing a failure. [ 336.310047][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 336.324548][ T7863] CPU: 0 PID: 7863 Comm: syz.3.2704 Not tainted syzkaller #0 [ 336.331966][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 336.342053][ T7863] Call Trace: [ 336.345361][ T7863] [ 336.348331][ T7863] __dump_stack+0x21/0x24 [ 336.352690][ T7863] dump_stack_lvl+0x110/0x170 [ 336.357399][ T7863] ? __cfi_dump_stack_lvl+0x8/0x8 [ 336.362456][ T7863] dump_stack+0x15/0x24 [ 336.366640][ T7863] should_fail_ex+0x3bf/0x510 [ 336.371345][ T7863] ? ep_insert+0x4b4/0x14c0 [ 336.375890][ T7863] __should_failslab+0xac/0xf0 [ 336.380688][ T7863] should_failslab+0x9/0x20 [ 336.385211][ T7863] kmem_cache_alloc+0x3b/0x320 [ 336.389980][ T7863] ep_insert+0x4b4/0x14c0 [ 336.394309][ T7863] ? ep_loop_check+0x80/0x80 [ 336.398895][ T7863] ? mutex_lock+0x93/0x1b0 [ 336.403335][ T7863] ? security_capable+0x99/0xc0 [ 336.408225][ T7863] do_epoll_ctl+0x878/0xdc0 [ 336.412763][ T7863] __x64_sys_epoll_ctl+0x162/0x1b0 [ 336.417876][ T7863] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 336.423517][ T7863] ? fpregs_restore_userregs+0x128/0x260 [ 336.429171][ T7863] ? switch_fpu_return+0xe/0x10 [ 336.434016][ T7863] x64_sys_call+0x839/0x9a0 [ 336.438523][ T7863] do_syscall_64+0x4c/0xa0 [ 336.442946][ T7863] ? clear_bhb_loop+0x30/0x80 [ 336.447615][ T7863] ? clear_bhb_loop+0x30/0x80 [ 336.452544][ T7863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.458442][ T7863] RIP: 0033:0x7f750139f559 [ 336.462866][ T7863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.482576][ T7863] RSP: 002b:00007f74ffdf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 336.490993][ T7863] RAX: ffffffffffffffda RBX: 00007f7501625fa0 RCX: 00007f750139f559 [ 336.498962][ T7863] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000004 [ 336.506928][ T7863] RBP: 00007f7501436b20 R08: 0000000000000000 R09: 0000000000000000 [ 336.514910][ T7863] R10: 00002000000017c0 R11: 0000000000000246 R12: 0000000000000000 [ 336.522875][ T7863] R13: 00007f7501626038 R14: 00007f7501625fa0 R15: 00007ffed9fc9168 [ 336.530854][ T7863] [ 336.602083][ T7882] FAULT_INJECTION: forcing a failure. [ 336.602083][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 336.617232][ T7882] CPU: 0 PID: 7882 Comm: syz.7.2710 Not tainted syzkaller #0 [ 336.624439][ T28] audit: type=1400 audit(2000000058.175:7333): avc: denied { mount } for pid=7885 comm="syz.3.2713" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 336.624648][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 336.656979][ T7882] Call Trace: [ 336.660256][ T7882] [ 336.663193][ T7882] __dump_stack+0x21/0x24 [ 336.667526][ T7882] dump_stack_lvl+0x110/0x170 [ 336.672228][ T7882] ? __cfi_dump_stack_lvl+0x8/0x8 [ 336.677277][ T7882] ? memcpy+0x56/0x70 [ 336.681311][ T7882] dump_stack+0x15/0x24 [ 336.685478][ T7882] should_fail_ex+0x3bf/0x510 [ 336.690145][ T7882] __should_failslab+0xac/0xf0 [ 336.694926][ T7882] should_failslab+0x9/0x20 [ 336.699435][ T7882] slab_pre_alloc_hook+0x30/0x1d0 [ 336.704459][ T7882] kmem_cache_alloc_lru+0x49/0x280 [ 336.709574][ T7882] ? __d_alloc+0x34/0x6d0 [ 336.713958][ T7882] __d_alloc+0x34/0x6d0 [ 336.718108][ T7882] d_alloc+0x48/0x260 [ 336.722086][ T7882] ? lookup_one_qstr_excl+0xb6/0x270 [ 336.727364][ T7882] lookup_one_qstr_excl+0xcb/0x270 [ 336.732475][ T7882] filename_create+0x23d/0x440 [ 336.737265][ T7882] ? kern_path_create+0x1b0/0x1b0 [ 336.742300][ T7882] ? __check_object_size+0x45a/0x600 [ 336.747596][ T7882] do_mknodat+0xdb/0x790 [ 336.751847][ T7882] ? getname_flags+0x205/0x510 [ 336.756600][ T7882] __x64_sys_mknodat+0xa9/0xc0 [ 336.761372][ T7882] x64_sys_call+0x220/0x9a0 [ 336.765873][ T7882] do_syscall_64+0x4c/0xa0 [ 336.770285][ T7882] ? clear_bhb_loop+0x30/0x80 [ 336.774951][ T7882] ? clear_bhb_loop+0x30/0x80 [ 336.779627][ T7882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.785523][ T7882] RIP: 0033:0x7ff3c919f559 [ 336.789929][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.809541][ T7882] RSP: 002b:00007ff3ca013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 336.817971][ T7882] RAX: ffffffffffffffda RBX: 00007ff3c9425fa0 RCX: 00007ff3c919f559 [ 336.825933][ T7882] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 336.833901][ T7882] RBP: 00007ff3c9236b20 R08: 0000000000000000 R09: 0000000000000000 [ 336.841864][ T7882] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 336.849827][ T7882] R13: 00007ff3c9426038 R14: 00007ff3c9425fa0 R15: 00007ffe4db81488 [ 336.857808][ T7882] [ 336.866335][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 336.886812][ T28] audit: type=1400 audit(2000000058.445:7334): avc: denied { watch } for pid=7889 comm="syz.7.2714" path="/358/file0" dev="tmpfs" ino=1973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 336.934807][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.952266][ T7887] device veth1_macvtap left promiscuous mode [ 336.958908][ T7887] device veth1_macvtap entered promiscuous mode [ 336.970457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.980812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.988527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.999010][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.006122][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.013625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 337.023396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.037508][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.044659][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.061585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 337.070301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 337.081155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 337.089958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 337.089975][ T7903] overlayfs: missing 'lowerdir' [ 337.098638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 337.113708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 337.131566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 337.146538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.159222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.169798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.181994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.193229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.203925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.214290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.226030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.238219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.255329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.279265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.297683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 337.305526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 337.313265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 337.526147][ T7933] FAULT_INJECTION: forcing a failure. [ 337.526147][ T7933] name failslab, interval 1, probability 0, space 0, times 0 [ 337.538961][ T7933] CPU: 0 PID: 7933 Comm: syz.1.2730 Not tainted syzkaller #0 [ 337.546367][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 337.556456][ T7933] Call Trace: [ 337.559749][ T7933] [ 337.562696][ T7933] __dump_stack+0x21/0x24 [ 337.567050][ T7933] dump_stack_lvl+0x110/0x170 [ 337.571758][ T7933] ? __cfi_dump_stack_lvl+0x8/0x8 [ 337.576814][ T7933] dump_stack+0x15/0x24 [ 337.581004][ T7933] should_fail_ex+0x3bf/0x510 [ 337.585711][ T7933] __should_failslab+0xac/0xf0 [ 337.590508][ T7933] should_failslab+0x9/0x20 [ 337.595127][ T7933] __kmem_cache_alloc_node+0x3d/0x2d0 [ 337.600586][ T7933] ? call_usermodehelper_setup+0x8e/0x210 [ 337.606346][ T7933] ? call_usermodehelper_setup+0x8e/0x210 [ 337.612096][ T7933] kmalloc_trace+0x29/0xb0 [ 337.616539][ T7933] call_usermodehelper_setup+0x8e/0x210 [ 337.622127][ T7933] ? __cfi_free_modprobe_argv+0x10/0x10 [ 337.627701][ T7933] __request_module+0x391/0x910 [ 337.632619][ T7933] ? __cfi___request_module+0x10/0x10 [ 337.638022][ T7933] ? slab_post_alloc_hook+0x6d/0x2d0 [ 337.643342][ T7933] ? security_inode_alloc+0x33/0x120 [ 337.648664][ T7933] ? security_inode_alloc+0x33/0x120 [ 337.653984][ T7933] ? __kasan_check_write+0x14/0x20 [ 337.659127][ T7933] ? _raw_spin_lock+0x94/0xf0 [ 337.663840][ T7933] ? __cfi__raw_spin_lock+0x10/0x10 [ 337.669067][ T7933] inet6_create+0x326/0x1060 [ 337.673704][ T7933] __sock_create+0x39e/0x7c0 [ 337.678335][ T7933] __sys_socket+0xcd/0x1a0 [ 337.682791][ T7933] __x64_sys_socket+0x7a/0x90 [ 337.687501][ T7933] x64_sys_call+0x449/0x9a0 [ 337.692043][ T7933] do_syscall_64+0x4c/0xa0 [ 337.696485][ T7933] ? clear_bhb_loop+0x30/0x80 [ 337.701198][ T7933] ? clear_bhb_loop+0x30/0x80 [ 337.705907][ T7933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.711826][ T7933] RIP: 0033:0x7fb29139f559 [ 337.716261][ T7933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.735986][ T7933] RSP: 002b:00007fb292205028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 337.744435][ T7933] RAX: ffffffffffffffda RBX: 00007fb291625fa0 RCX: 00007fb29139f559 [ 337.752447][ T7933] RDX: 0000000000000106 RSI: 0000000000000002 RDI: 000000000000000a [ 337.760444][ T7933] RBP: 00007fb291436b20 R08: 0000000000000000 R09: 0000000000000000 [ 337.768452][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.776430][ T7933] R13: 00007fb291626038 R14: 00007fb291625fa0 R15: 00007fffa7c38cd8 [ 337.784415][ T7933] [ 337.920757][ T7988] overlayfs: failed to clone upperpath [ 338.150663][ T8026] loop1: detected capacity change from 0 to 16 [ 338.160574][ T8026] erofs: (device loop1): mounted with root inode @ nid 36. [ 338.169436][ T8026] syz.1.2772: attempt to access beyond end of device [ 338.169436][ T8026] loop1: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 338.185602][ T8026] syz.1.2772: attempt to access beyond end of device [ 338.185602][ T8026] loop1: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 338.200298][ T8026] syz.1.2772: attempt to access beyond end of device [ 338.200298][ T8026] loop1: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 338.214181][ T8026] syz.1.2772: attempt to access beyond end of device [ 338.214181][ T8026] loop1: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 338.405228][ T28] audit: type=1326 audit(2000000059.965:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.7.2781" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 338.406647][ T8056] raw_sendmsg: syz.3.2785 forgot to set AF_INET. Fix it! [ 338.461065][ T28] audit: type=1326 audit(2000000059.995:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.7.2781" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 338.487641][ T28] audit: type=1326 audit(2000000059.995:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.7.2781" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 338.513512][ T28] audit: type=1326 audit(2000000059.995:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.7.2781" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 338.541573][ T28] audit: type=1326 audit(2000000059.995:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.7.2781" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3c91a0dc7 code=0x7ffc0000 [ 338.566723][ T28] audit: type=1326 audit(2000000059.995:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.7.2781" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 338.592019][ T28] audit: type=1326 audit(2000000059.995:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.7.2781" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 338.617483][ T28] audit: type=1326 audit(2000000059.995:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.7.2781" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 338.644156][ T28] audit: type=1326 audit(2000000059.995:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.7.2781" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 338.670462][ T28] audit: type=1326 audit(2000000059.995:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8045 comm="syz.7.2781" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff3c919f559 code=0x7ffc0000 [ 338.858475][ T8094] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 338.875830][ T8094] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 339.156246][ T8162] FAULT_INJECTION: forcing a failure. [ 339.156246][ T8162] name failslab, interval 1, probability 0, space 0, times 0 [ 339.169927][ T8162] CPU: 1 PID: 8162 Comm: syz.7.2826 Not tainted syzkaller #0 [ 339.177348][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 339.187432][ T8162] Call Trace: [ 339.190734][ T8162] [ 339.193689][ T8162] __dump_stack+0x21/0x24 [ 339.198062][ T8162] dump_stack_lvl+0x110/0x170 [ 339.202760][ T8162] ? __cfi_dump_stack_lvl+0x8/0x8 [ 339.207807][ T8162] dump_stack+0x15/0x24 [ 339.211979][ T8162] should_fail_ex+0x3bf/0x510 [ 339.216667][ T8162] __should_failslab+0xac/0xf0 [ 339.221449][ T8162] should_failslab+0x9/0x20 [ 339.225969][ T8162] __kmem_cache_alloc_node+0x3d/0x2d0 [ 339.231371][ T8162] ? apply_subsystem_event_filter+0x348/0x16b0 [ 339.237547][ T8162] ? apply_subsystem_event_filter+0x348/0x16b0 [ 339.243727][ T8162] kmalloc_trace+0x29/0xb0 [ 339.248148][ T8162] apply_subsystem_event_filter+0x348/0x16b0 [ 339.254234][ T8162] ? __cfi_apply_subsystem_event_filter+0x10/0x10 [ 339.260661][ T8162] ? __kasan_check_write+0x14/0x20 [ 339.265794][ T8162] ? _copy_from_user+0x8f/0xc0 [ 339.270565][ T8162] subsystem_filter_write+0x98/0xf0 [ 339.275780][ T8162] ? __cfi_subsystem_filter_write+0x10/0x10 [ 339.281766][ T8162] vfs_write+0x3fb/0xd00 [ 339.286013][ T8162] ? __cfi_vfs_write+0x10/0x10 [ 339.290779][ T8162] ? __kasan_check_write+0x14/0x20 [ 339.295985][ T8162] ? mutex_lock+0x93/0x1b0 [ 339.300417][ T8162] ? __cfi_mutex_lock+0x10/0x10 [ 339.305272][ T8162] ? __fdget_pos+0x2cd/0x380 [ 339.309863][ T8162] ? ksys_write+0x70/0x260 [ 339.314276][ T8162] ksys_write+0x14a/0x260 [ 339.318604][ T8162] ? __cfi_ksys_write+0x10/0x10 [ 339.323455][ T8162] ? fpregs_restore_userregs+0x128/0x260 [ 339.329094][ T8162] __x64_sys_write+0x7b/0x90 [ 339.333854][ T8162] x64_sys_call+0x27b/0x9a0 [ 339.338365][ T8162] do_syscall_64+0x4c/0xa0 [ 339.342867][ T8162] ? clear_bhb_loop+0x30/0x80 [ 339.347549][ T8162] ? clear_bhb_loop+0x30/0x80 [ 339.352249][ T8162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.358146][ T8162] RIP: 0033:0x7ff3c919f559 [ 339.362559][ T8162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.382251][ T8162] RSP: 002b:00007ff3ca013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.390669][ T8162] RAX: ffffffffffffffda RBX: 00007ff3c9425fa0 RCX: 00007ff3c919f559 [ 339.398642][ T8162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 339.406611][ T8162] RBP: 00007ff3c9236b20 R08: 0000000000000000 R09: 0000000000000000 [ 339.414583][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.422572][ T8162] R13: 00007ff3c9426038 R14: 00007ff3c9425fa0 R15: 00007ffe4db81488 [ 339.430635][ T8162] [ 339.595058][ T8185] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 339.604109][ T8185] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 339.798544][ T8207] loop3: detected capacity change from 0 to 16 [ 339.805445][ T8203] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2845'. [ 339.819287][ T8207] erofs: (device loop3): mounted with root inode @ nid 36. [ 339.833335][ T8207] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 339.863886][ T8207] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851] [ 339.912808][ T8207] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 339.945122][ T8223] fuse: Bad value for 'fd' [ 340.093165][ T8238] FAULT_INJECTION: forcing a failure. [ 340.093165][ T8238] name failslab, interval 1, probability 0, space 0, times 0 [ 340.111321][ T8238] CPU: 1 PID: 8238 Comm: syz.2.2860 Not tainted syzkaller #0 [ 340.118773][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 340.128854][ T8238] Call Trace: [ 340.132166][ T8238] [ 340.132511][ T8231] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 340.135142][ T8238] __dump_stack+0x21/0x24 [ 340.148078][ T8238] dump_stack_lvl+0x110/0x170 [ 340.152790][ T8238] ? __cfi_dump_stack_lvl+0x8/0x8 [ 340.153578][ T8231] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 340.157836][ T8238] ? _copy_from_iter+0x1ff/0xfe0 [ 340.157872][ T8238] ? __alloc_pages+0x1fa/0x610 [ 340.157897][ T8238] dump_stack+0x15/0x24 [ 340.157916][ T8238] should_fail_ex+0x3bf/0x510 [ 340.157937][ T8238] ? build_skb+0x2a/0x220 [ 340.157961][ T8238] __should_failslab+0xac/0xf0 [ 340.193809][ T8250] loop3: detected capacity change from 0 to 256 [ 340.193850][ T8238] should_failslab+0x9/0x20 [ 340.213676][ T8238] kmem_cache_alloc+0x3b/0x320 [ 340.218476][ T8238] build_skb+0x2a/0x220 [ 340.222660][ T8238] ? tun_get_user+0x73e/0x32f0 [ 340.227441][ T8238] tun_get_user+0x757/0x32f0 [ 340.232046][ T8238] ? tun_do_read+0x1d70/0x1d70 [ 340.236823][ T8238] ? __kasan_check_write+0x14/0x20 [ 340.241940][ T8238] ? ref_tracker_alloc+0x319/0x4a0 [ 340.247055][ T8238] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 340.252516][ T8238] ? avc_policy_seqno+0x1b/0x70 [ 340.257367][ T8238] ? selinux_file_permission+0x2a5/0x510 [ 340.263012][ T8238] tun_chr_write_iter+0x1f9/0x300 [ 340.268045][ T8238] vfs_write+0x5ef/0xd00 [ 340.272309][ T8238] ? __cfi_vfs_write+0x10/0x10 [ 340.277075][ T8238] ? __fget_files+0x2d1/0x330 [ 340.281840][ T8238] ? __fdget_pos+0x1f2/0x380 [ 340.286432][ T8238] ? ksys_write+0x70/0x260 [ 340.290846][ T8238] ksys_write+0x14a/0x260 [ 340.295173][ T8238] ? __cfi_ksys_write+0x10/0x10 [ 340.300023][ T8238] ? fpregs_restore_userregs+0x128/0x260 [ 340.305656][ T8238] __x64_sys_write+0x7b/0x90 [ 340.310246][ T8238] x64_sys_call+0x27b/0x9a0 [ 340.314754][ T8238] do_syscall_64+0x4c/0xa0 [ 340.319166][ T8238] ? clear_bhb_loop+0x30/0x80 [ 340.323843][ T8238] ? clear_bhb_loop+0x30/0x80 [ 340.328520][ T8238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.334438][ T8238] RIP: 0033:0x7f294cd5fd8e [ 340.338872][ T8238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.358501][ T8238] RSP: 002b:00007f294dcb3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.366938][ T8238] RAX: ffffffffffffffda RBX: 00007f294dcb46c0 RCX: 00007f294cd5fd8e [ 340.374908][ T8238] RDX: 0000000000000022 RSI: 00002000000004c0 RDI: 00000000000000c8 [ 340.382888][ T8238] RBP: 00007f294ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 340.390859][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.398827][ T8238] R13: 00007f294d026038 R14: 00007f294d025fa0 R15: 00007ffd0e0c1a88 [ 340.406803][ T8238] [ 341.389940][ T8311] loop7: detected capacity change from 0 to 8192 [ 341.523445][ T8322] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 341.530070][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2900'. [ 341.541905][ T8322] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 341.884701][ T8373] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 341.924502][ T8382] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 341.934820][ T8382] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 342.154930][ T8438] overlayfs: failed to clone lowerpath [ 342.161030][ T8438] overlayfs: failed to clone lowerpath [ 342.166667][ T8424] FAULT_INJECTION: forcing a failure. [ 342.166667][ T8424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.179857][ T8424] CPU: 0 PID: 8424 Comm: syz.3.2939 Not tainted syzkaller #0 [ 342.187256][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 342.197332][ T8424] Call Trace: [ 342.200722][ T8424] [ 342.203683][ T8424] __dump_stack+0x21/0x24 [ 342.208058][ T8424] dump_stack_lvl+0x110/0x170 [ 342.212770][ T8424] ? __cfi_dump_stack_lvl+0x8/0x8 [ 342.217800][ T8424] dump_stack+0x15/0x24 [ 342.221957][ T8424] should_fail_ex+0x3bf/0x510 [ 342.226632][ T8424] should_fail+0xb/0x10 [ 342.230799][ T8424] should_fail_usercopy+0x1a/0x20 [ 342.235847][ T8424] _copy_from_user+0x1e/0xc0 [ 342.240454][ T8424] restore_altstack+0xab/0x4e0 [ 342.245266][ T8424] ? __kasan_check_write+0x14/0x20 [ 342.250419][ T8424] ? __cfi_restore_altstack+0x10/0x10 [ 342.255834][ T8424] ? __kasan_check_write+0x14/0x20 [ 342.260989][ T8424] __ia32_sys_rt_sigreturn+0x636/0x730 [ 342.264646][ T8447] FAULT_INJECTION: forcing a failure. [ 342.264646][ T8447] name failslab, interval 1, probability 0, space 0, times 0 [ 342.266489][ T8424] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 342.285086][ T8424] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 342.291192][ T8424] x64_sys_call+0x832/0x9a0 [ 342.295739][ T8424] do_syscall_64+0x4c/0xa0 [ 342.300168][ T8424] ? clear_bhb_loop+0x30/0x80 [ 342.304868][ T8424] ? clear_bhb_loop+0x30/0x80 [ 342.309560][ T8424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.315477][ T8424] RIP: 0033:0x7f750139f557 [ 342.319987][ T8424] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 342.339768][ T8424] RSP: 002b:00007f74ffdf7028 EFLAGS: 00000246 [ 342.345841][ T8424] RAX: 0000000000000113 RBX: 00007f7501625fa0 RCX: 00007f750139f559 [ 342.353812][ T8424] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 342.361781][ T8424] RBP: 00007f7501436b20 R08: 0000000000000006 R09: 0000000000000000 [ 342.369746][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.377715][ T8424] R13: 00007f7501626038 R14: 00007f7501625fa0 R15: 00007ffed9fc9168 [ 342.385686][ T8424] [ 342.392367][ T8447] CPU: 0 PID: 8447 Comm: syz.2.2950 Not tainted syzkaller #0 [ 342.399784][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 342.409864][ T8447] Call Trace: [ 342.413155][ T8447] [ 342.416094][ T8447] __dump_stack+0x21/0x24 [ 342.420424][ T8447] dump_stack_lvl+0x110/0x170 [ 342.425373][ T8447] ? __cfi_dump_stack_lvl+0x8/0x8 [ 342.430482][ T8447] ? rtnetlink_rcv_msg+0x1b9/0xde0 [ 342.435601][ T8447] dump_stack+0x15/0x24 [ 342.439754][ T8447] should_fail_ex+0x3bf/0x510 [ 342.444871][ T8447] __should_failslab+0xac/0xf0 [ 342.449650][ T8447] should_failslab+0x9/0x20 [ 342.454155][ T8447] kmem_cache_alloc_node+0x42/0x330 [ 342.459366][ T8447] ? __alloc_skb+0xe8/0x4a0 [ 342.463871][ T8447] __alloc_skb+0xe8/0x4a0 [ 342.468202][ T8447] netlink_ack+0x373/0x1160 [ 342.472714][ T8447] ? __cfi_avc_has_perm+0x10/0x10 [ 342.477759][ T8447] ? __cfi_netlink_ack+0x10/0x10 [ 342.482786][ T8447] ? selinux_nlmsg_lookup+0x396/0x440 [ 342.488248][ T8447] netlink_rcv_skb+0x27e/0x450 [ 342.493015][ T8447] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 342.498494][ T8447] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 342.503798][ T8447] ? __netlink_lookup+0x387/0x3b0 [ 342.508825][ T8447] rtnetlink_rcv+0x1c/0x20 [ 342.513429][ T8447] netlink_unicast+0x8c1/0xa60 [ 342.518214][ T8447] netlink_sendmsg+0x8b9/0xbd0 [ 342.522985][ T8447] ? __cfi_netlink_sendmsg+0x10/0x10 [ 342.528275][ T8447] ? security_socket_sendmsg+0x93/0xb0 [ 342.533737][ T8447] ? __cfi_netlink_sendmsg+0x10/0x10 [ 342.539023][ T8447] ____sys_sendmsg+0x5fb/0x9c0 [ 342.543789][ T8447] ? __sys_sendmsg_sock+0x40/0x40 [ 342.548815][ T8447] ? import_iovec+0x7c/0xb0 [ 342.553322][ T8447] ___sys_sendmsg+0x2a2/0x360 [ 342.558009][ T8447] ? __sys_sendmsg+0x290/0x290 [ 342.562777][ T8447] ? security_file_alloc+0x33/0x130 [ 342.568068][ T8447] ? percpu_counter_add_batch+0x13c/0x160 [ 342.573795][ T8447] ? __fdget+0x19c/0x220 [ 342.578076][ T8447] __x64_sys_sendmsg+0x20d/0x2e0 [ 342.583034][ T8447] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 342.588491][ T8447] ? __kasan_check_write+0x14/0x20 [ 342.593599][ T8447] ? fpregs_restore_userregs+0x128/0x260 [ 342.599331][ T8447] ? switch_fpu_return+0xe/0x10 [ 342.604190][ T8447] x64_sys_call+0x171/0x9a0 [ 342.608699][ T8447] do_syscall_64+0x4c/0xa0 [ 342.613112][ T8447] ? clear_bhb_loop+0x30/0x80 [ 342.617883][ T8447] ? clear_bhb_loop+0x30/0x80 [ 342.622565][ T8447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.628555][ T8447] RIP: 0033:0x7f294cd9f559 [ 342.632995][ T8447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.652695][ T8447] RSP: 002b:00007f294dcb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.661111][ T8447] RAX: ffffffffffffffda RBX: 00007f294d025fa0 RCX: 00007f294cd9f559 [ 342.669080][ T8447] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000005 [ 342.677053][ T8447] RBP: 00007f294ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 342.685022][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.693081][ T8447] R13: 00007f294d026038 R14: 00007f294d025fa0 R15: 00007ffd0e0c1a88 [ 342.701054][ T8447] [ 342.714011][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2951'. [ 342.723911][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2951'. [ 342.736955][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2951'. [ 342.748081][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2951'. [ 342.765056][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2951'. [ 342.769868][ T8460] ip_tables: iptables: counters copy to user failed while replacing table [ 342.774563][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2951'. [ 342.792008][ T8460] xt_CT: No such helper "syz1" [ 342.792238][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2951'. [ 342.806468][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2951'. [ 342.834287][ T8465] serio: Serial port ttyS3 [ 342.899191][ T8477] FAULT_INJECTION: forcing a failure. [ 342.899191][ T8477] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.906225][ T8475] loop3: detected capacity change from 0 to 256 [ 342.916615][ T8477] CPU: 1 PID: 8477 Comm: syz.2.2961 Not tainted syzkaller #0 [ 342.926370][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 342.936452][ T8477] Call Trace: [ 342.939756][ T8477] [ 342.940968][ T8481] overlayfs: failed to clone lowerpath [ 342.942705][ T8477] __dump_stack+0x21/0x24 [ 342.942733][ T8477] dump_stack_lvl+0x110/0x170 [ 342.942751][ T8477] ? __cfi_dump_stack_lvl+0x8/0x8 [ 342.942768][ T8477] ? stack_depot_save+0x13/0x20 [ 342.967105][ T8477] ? save_stack+0x145/0x230 [ 342.971627][ T8477] dump_stack+0x15/0x24 [ 342.975796][ T8477] should_fail_ex+0x3bf/0x510 [ 342.980482][ T8477] should_fail_alloc_page+0x61/0x90 [ 342.985695][ T8477] prepare_alloc_pages+0x131/0x570 [ 342.990956][ T8477] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 342.996185][ T8477] ? __kasan_check_write+0x14/0x20 [ 343.001312][ T8477] __alloc_pages+0x15b/0x610 [ 343.005920][ T8477] ? __cfi___alloc_pages+0x10/0x10 [ 343.011059][ T8477] ? free_unref_page+0x1dc/0x530 [ 343.016035][ T8477] ? __cfi_free_unref_page+0x10/0x10 [ 343.021352][ T8477] ? __free_pages+0x67/0x100 [ 343.025946][ T8477] __get_free_pages+0xe/0x30 [ 343.030545][ T8477] vcs_write+0xf4/0x1260 [ 343.034795][ T8477] ? iov_iter_iovec_advance+0x185/0x230 [ 343.040341][ T8477] ? __cfi_vcs_write+0x10/0x10 [ 343.045134][ T8477] ? iov_iter_advance+0x121/0x1b0 [ 343.050158][ T8477] do_iter_write+0x4b5/0xb30 [ 343.054771][ T8477] ? _copy_from_user+0x8f/0xc0 [ 343.059535][ T8477] ? vfs_iter_write+0xa0/0xa0 [ 343.064220][ T8477] ? import_iovec+0x7c/0xb0 [ 343.068727][ T8477] vfs_writev+0x339/0x5f0 [ 343.073063][ T8477] ? do_writev+0x2c0/0x2c0 [ 343.077482][ T8477] ? __se_sys_keyctl+0x420/0xe10 [ 343.082430][ T8477] ? __fdget_pos+0x1f2/0x380 [ 343.087022][ T8477] ? do_writev+0x76/0x2c0 [ 343.091355][ T8477] do_writev+0x14e/0x2c0 [ 343.095602][ T8477] ? do_readv+0x450/0x450 [ 343.099953][ T8477] ? fpregs_restore_userregs+0x128/0x260 [ 343.105591][ T8477] __x64_sys_writev+0x7d/0x90 [ 343.110265][ T8477] x64_sys_call+0xad/0x9a0 [ 343.114690][ T8477] do_syscall_64+0x4c/0xa0 [ 343.119229][ T8477] ? clear_bhb_loop+0x30/0x80 [ 343.123958][ T8477] ? clear_bhb_loop+0x30/0x80 [ 343.128652][ T8477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.134558][ T8477] RIP: 0033:0x7f294cd9f559 [ 343.138997][ T8477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.158610][ T8477] RSP: 002b:00007f294dcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 343.167047][ T8477] RAX: ffffffffffffffda RBX: 00007f294d025fa0 RCX: 00007f294cd9f559 [ 343.175139][ T8477] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 343.183114][ T8477] RBP: 00007f294ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 343.191085][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.199061][ T8477] R13: 00007f294d026038 R14: 00007f294d025fa0 R15: 00007ffd0e0c1a88 [ 343.207142][ T8477] [ 343.235597][ T8475] FAT-fs (loop3): Directory bread(block 64) failed [ 343.250338][ T8475] FAT-fs (loop3): Directory bread(block 65) failed [ 343.270127][ T8475] FAT-fs (loop3): Directory bread(block 66) failed [ 343.272982][ T8489] overlayfs: failed to clone upperpath [ 343.283558][ T8475] FAT-fs (loop3): Directory bread(block 67) failed [ 343.308377][ T8489] overlayfs: failed to clone upperpath [ 343.309486][ T8475] FAT-fs (loop3): Directory bread(block 68) failed [ 343.321080][ T8475] FAT-fs (loop3): Directory bread(block 69) failed [ 343.331319][ T8497] FAULT_INJECTION: forcing a failure. [ 343.331319][ T8497] name fail_futex, interval 1, probability 0, space 0, times 0 [ 343.344380][ T8497] CPU: 1 PID: 8497 Comm: syz.2.2971 Not tainted syzkaller #0 [ 343.351966][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 343.362046][ T8497] Call Trace: [ 343.365374][ T8497] [ 343.368328][ T8497] __dump_stack+0x21/0x24 [ 343.372733][ T8497] dump_stack_lvl+0x110/0x170 [ 343.377440][ T8497] ? __cfi_dump_stack_lvl+0x8/0x8 [ 343.382490][ T8497] ? __schedule+0xcbb/0x1700 [ 343.387118][ T8497] dump_stack+0x15/0x24 [ 343.391307][ T8497] should_fail_ex+0x3bf/0x510 [ 343.396019][ T8497] should_fail+0xb/0x10 [ 343.400208][ T8497] get_futex_key+0x143/0xb10 [ 343.404838][ T8497] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 343.405509][ T8475] FAT-fs (loop3): Directory bread(block 70) failed [ 343.410670][ T8497] ? __cfi_get_futex_key+0x10/0x10 [ 343.410705][ T8497] futex_wake+0x150/0x8e0 [ 343.417559][ T8475] FAT-fs (loop3): Directory bread(block 71) failed [ 343.422408][ T8497] ? __cfi_futex_wait+0x10/0x10 [ 343.422436][ T8497] ? __cfi_avc_has_perm+0x10/0x10 [ 343.426806][ T8475] FAT-fs (loop3): Directory bread(block 72) failed [ 343.433254][ T8497] ? __cfi_futex_wake+0x10/0x10 [ 343.433281][ T8497] ? security_file_alloc+0x33/0x130 [ 343.433310][ T8497] ? selinux_socket_setsockopt+0x282/0x360 [ 343.433333][ T8497] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 343.433359][ T8497] do_futex+0x2bf/0x430 [ 343.438792][ T8475] FAT-fs (loop3): Directory bread(block 73) failed [ 343.443548][ T8497] ? ipv6_setsockopt+0xf6/0x1a0 [ 343.443581][ T8497] ? __cfi_do_futex+0x10/0x10 [ 343.443602][ T8497] __se_sys_futex+0x136/0x310 [ 343.443623][ T8497] ? __x64_sys_futex+0x100/0x100 [ 343.443642][ T8497] ? xfd_validate_state+0x70/0x150 [ 343.443672][ T8497] __x64_sys_futex+0xe5/0x100 [ 343.443690][ T8497] x64_sys_call+0x7ec/0x9a0 [ 343.495773][ T8475] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 343.497188][ T8497] do_syscall_64+0x4c/0xa0 [ 343.502273][ T8475] FAT-fs (loop3): Filesystem has been set read-only [ 343.507367][ T8497] ? clear_bhb_loop+0x30/0x80 [ 343.507398][ T8497] ? clear_bhb_loop+0x30/0x80 [ 343.520262][ T8475] syz.3.2962: attempt to access beyond end of device [ 343.520262][ T8475] loop3: rw=2049, sector=1736, nr_sectors = 64 limit=256 [ 343.525614][ T8497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.525650][ T8497] RIP: 0033:0x7f294cd9f559 [ 343.525668][ T8497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.525686][ T8497] RSP: 002b:00007f294dcb40e8 EFLAGS: 00000246 [ 343.530550][ T8475] syz.3.2962: attempt to access beyond end of device [ 343.530550][ T8475] loop3: rw=2049, sector=1864, nr_sectors = 4 limit=256 [ 343.536805][ T8497] ORIG_RAX: 00000000000000ca [ 343.536820][ T8497] RAX: ffffffffffffffda RBX: 00007f294d025fa8 RCX: 00007f294cd9f559 [ 343.536833][ T8497] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f294d025fac [ 343.536847][ T8497] RBP: 00007f294d025fa0 R08: 0012dee8f75ab518 R09: 0000000000000000 [ 343.536862][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.646251][ T8497] R13: 00007f294d026038 R14: 00007ffd0e0c19a0 R15: 00007ffd0e0c1a88 [ 343.654227][ T8497] [ 343.689373][ T8518] ================================================================== [ 343.697550][ T8518] BUG: KASAN: use-after-free in sk_skb_adjust_room+0x34e/0x610 [ 343.705139][ T8518] Read of size 8 at addr ffff8881202b5948 by task syz.7.2989/8518 [ 343.713064][ T8518] [ 343.715415][ T8518] CPU: 0 PID: 8518 Comm: syz.7.2989 Not tainted syzkaller #0 [ 343.722813][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 343.732897][ T8518] Call Trace: [ 343.736211][ T8518] [ 343.739169][ T8518] __dump_stack+0x21/0x24 [ 343.743629][ T8518] dump_stack_lvl+0x110/0x170 [ 343.748433][ T8518] ? __cfi_dump_stack_lvl+0x8/0x8 [ 343.753501][ T8518] ? pskb_expand_head+0x436/0x12b0 [ 343.758669][ T8518] ? sk_skb_adjust_room+0x34e/0x610 [ 343.763915][ T8518] print_address_description+0x71/0x200 [ 343.769518][ T8518] print_report+0x4a/0x60 [ 343.773894][ T8518] kasan_report+0x122/0x150 [ 343.778529][ T8518] ? sk_skb_adjust_room+0x34e/0x610 [ 343.783771][ T8518] __asan_report_load8_noabort+0x14/0x20 [ 343.789433][ T8518] sk_skb_adjust_room+0x34e/0x610 [ 343.794503][ T8518] bpf_prog_e15ab8bd9cea3c06+0x19/0x20 [ 343.799994][ T8518] sk_psock_verdict_recv+0x6d8/0x7b0 [ 343.805320][ T8518] unix_stream_read_skb+0x13d/0x300 [ 343.810553][ T8518] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 343.816479][ T8518] ? __cfi_sk_psock_verdict_recv+0x10/0x10 [ 343.822409][ T8518] ? __cfi_unix_stream_read_skb+0x10/0x10 [ 343.828159][ T8518] ? __kasan_check_write+0x14/0x20 [ 343.833303][ T8518] ? _raw_spin_lock+0x94/0xf0 [ 343.838012][ T8518] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 343.843842][ T8518] sk_psock_verdict_data_ready+0xaf/0x1d0 [ 343.849621][ T8518] unix_stream_sendmsg+0x631/0xa80 [ 343.854865][ T8518] ? __cfi_unix_stream_sendmsg+0x10/0x10 [ 343.860537][ T8518] ? security_socket_sendmsg+0x93/0xb0 [ 343.866033][ T8518] __sys_sendto+0x4ac/0x660 [ 343.870576][ T8518] ? __cfi___sys_sendto+0x10/0x10 [ 343.875640][ T8518] ? __this_cpu_preempt_check+0x13/0x20 [ 343.881391][ T8518] ? xfd_validate_state+0x70/0x150 [ 343.886549][ T8518] ? __kasan_check_write+0x14/0x20 [ 343.891702][ T8518] __x64_sys_sendto+0xe5/0x100 [ 343.896607][ T8518] x64_sys_call+0x83/0x9a0 [ 343.901063][ T8518] do_syscall_64+0x4c/0xa0 [ 343.905527][ T8518] ? clear_bhb_loop+0x30/0x80 [ 343.910327][ T8518] ? clear_bhb_loop+0x30/0x80 [ 343.915047][ T8518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.921065][ T8518] RIP: 0033:0x7ff3c919f559 [ 343.925518][ T8518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.945186][ T8518] RSP: 002b:00007ff3ca013028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 343.953625][ T8518] RAX: ffffffffffffffda RBX: 00007ff3c9425fa0 RCX: 00007ff3c919f559 [ 343.961613][ T8518] RDX: 0000000000000001 RSI: 0000200000002340 RDI: 0000000000000005 [ 343.969608][ T8518] RBP: 00007ff3c9236b20 R08: 0000000000000000 R09: 0000000000000000 [ 343.977661][ T8518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.985797][ T8518] R13: 00007ff3c9426038 R14: 00007ff3c9425fa0 R15: 00007ffe4db81488 [ 343.993798][ T8518] [ 343.996825][ T8518] [ 343.999135][ T8518] Allocated by task 8245: [ 344.003545][ T8518] kasan_set_track+0x4b/0x70 [ 344.008134][ T8518] kasan_save_alloc_info+0x1f/0x30 [ 344.013237][ T8518] __kasan_slab_alloc+0x72/0x80 [ 344.018127][ T8518] slab_post_alloc_hook+0x4f/0x2d0 [ 344.023272][ T8518] kmem_cache_alloc+0x166/0x320 [ 344.028126][ T8518] sk_prot_alloc+0x5f/0x320 [ 344.032635][ T8518] sk_alloc+0x3b/0x460 [ 344.036707][ T8518] unix_create1+0xb8/0x710 [ 344.041134][ T8518] unix_create+0x149/0x200 [ 344.045552][ T8518] __sock_create+0x39e/0x7c0 [ 344.050228][ T8518] __sys_socketpair+0x1a1/0x5b0 [ 344.055086][ T8518] __x64_sys_socketpair+0x9b/0xb0 [ 344.060184][ T8518] x64_sys_call+0x6e/0x9a0 [ 344.064612][ T8518] do_syscall_64+0x4c/0xa0 [ 344.069044][ T8518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.075006][ T8518] [ 344.077335][ T8518] Freed by task 8245: [ 344.081345][ T8518] kasan_set_track+0x4b/0x70 [ 344.085943][ T8518] kasan_save_free_info+0x2b/0x40 [ 344.091017][ T8518] ____kasan_slab_free+0x132/0x180 [ 344.096125][ T8518] __kasan_slab_free+0x11/0x20 [ 344.100883][ T8518] slab_free_freelist_hook+0xc2/0x190 [ 344.106262][ T8518] kmem_cache_free+0x12d/0x300 [ 344.111023][ T8518] __sk_destruct+0x4b4/0x5e0 [ 344.115617][ T8518] __sk_free+0x30a/0x400 [ 344.119853][ T8518] sk_free+0x54/0x90 [ 344.123737][ T8518] unix_release_sock+0xb6d/0xe60 [ 344.128664][ T8518] unix_release+0x9d/0xd0 [ 344.133018][ T8518] sock_close+0xc9/0x220 [ 344.137258][ T8518] __fput+0x1fd/0x8f0 [ 344.141236][ T8518] ____fput+0x15/0x20 [ 344.145226][ T8518] task_work_run+0x1e1/0x250 [ 344.149900][ T8518] do_exit+0xb0d/0x29f0 [ 344.154060][ T8518] do_group_exit+0x21b/0x2e0 [ 344.158646][ T8518] get_signal+0x167c/0x1700 [ 344.163192][ T8518] arch_do_signal_or_restart+0xd1/0x11c0 [ 344.169122][ T8518] exit_to_user_mode_loop+0x7a/0xb0 [ 344.174419][ T8518] exit_to_user_mode_prepare+0x87/0xd0 [ 344.179888][ T8518] syscall_exit_to_user_mode+0x1a/0x30 [ 344.185352][ T8518] do_syscall_64+0x58/0xa0 [ 344.189800][ T8518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.195685][ T8518] [ 344.198077][ T8518] The buggy address belongs to the object at ffff8881202b5900 [ 344.198077][ T8518] which belongs to the cache UNIX-STREAM of size 1152 [ 344.212206][ T8518] The buggy address is located 72 bytes inside of [ 344.212206][ T8518] 1152-byte region [ffff8881202b5900, ffff8881202b5d80) [ 344.225472][ T8518] [ 344.227811][ T8518] The buggy address belongs to the physical page: [ 344.234221][ T8518] page:ffffea000480ad00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1202b4 [ 344.244665][ T8518] head:ffffea000480ad00 order:2 compound_mapcount:0 compound_pincount:0 [ 344.253086][ T8518] flags: 0x4000000000010200(slab|head|zone=1) [ 344.259170][ T8518] raw: 4000000000010200 0000000000000000 dead000000000001 ffff88810887be00 [ 344.267763][ T8518] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 344.276351][ T8518] page dumped because: kasan: bad access detected [ 344.282757][ T8518] page_owner tracks the page as allocated [ 344.288458][ T8518] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 226, tgid 226 (sshd-session), ts 15634400891, free_ts 0 [ 344.309817][ T8518] post_alloc_hook+0x1f5/0x210 [ 344.314592][ T8518] prep_new_page+0x1c/0x110 [ 344.319094][ T8518] get_page_from_freelist+0x2ca9/0x2d20 [ 344.324854][ T8518] __alloc_pages+0x1fa/0x610 [ 344.329453][ T8518] alloc_slab_page+0x6e/0xf0 [ 344.334052][ T8518] new_slab+0x98/0x3e0 [ 344.338114][ T8518] ___slab_alloc+0x70f/0xb70 [ 344.342693][ T8518] __slab_alloc+0x5e/0xa0 [ 344.347024][ T8518] kmem_cache_alloc+0x1a8/0x320 [ 344.351876][ T8518] sk_prot_alloc+0x5f/0x320 [ 344.356370][ T8518] sk_alloc+0x3b/0x460 [ 344.360430][ T8518] unix_create1+0xb8/0x710 [ 344.364833][ T8518] unix_create+0x149/0x200 [ 344.369323][ T8518] __sock_create+0x39e/0x7c0 [ 344.373905][ T8518] __sys_socketpair+0x218/0x5b0 [ 344.378744][ T8518] __x64_sys_socketpair+0x9b/0xb0 [ 344.383763][ T8518] page_owner free stack trace missing [ 344.389200][ T8518] [ 344.391514][ T8518] Memory state around the buggy address: [ 344.397151][ T8518] ffff8881202b5800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 344.405297][ T8518] ffff8881202b5880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 344.413363][ T8518] >ffff8881202b5900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.421411][ T8518] ^ [ 344.427814][ T8518] ffff8881202b5980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.435879][ T8518] ffff8881202b5a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.443944][ T8518] ================================================================== [ 344.453218][ T8518] Disabling lock debugging due to kernel taint [ 344.458772][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 344.458787][ T28] audit: type=1400 audit(2000000066.015:7392): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1