last executing test programs: 11.19524799s ago: executing program 0 (id=1114): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000000)={0x6, 0x100, 0x5, 0x7, 0x8006, 0x2006681}) mprotect(&(0x7f00003ac000/0x1000)=nil, 0x1000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, 0x154}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000001c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x5, &(0x7f0000000040)=[{0x9, 0x4, 0xe, 0xffffff58}, {0x0, 0x0, 0x80, 0x7}, {0x8, 0x1, 0x1, 0x2}, {0x9, 0x8, 0x35, 0x3}, {0x8, 0x3, 0x0, 0x3}]}) 9.585944334s ago: executing program 0 (id=1120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 7.797253601s ago: executing program 0 (id=1123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r4}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x891e, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) 7.22694262s ago: executing program 4 (id=1129): creat(&(0x7f00000002c0)='./file0\x00', 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xed) utimensat(r2, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 7.050237713s ago: executing program 4 (id=1131): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x1506, &(0x7f0000001580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x605}) r6 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) read(r6, &(0x7f0000000040)=""/69, 0x45) write$UHID_INPUT(r6, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$UFFDIO_COPY(r6, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000adb000/0x2000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x2000}) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2004088, &(0x7f00000000c0), 0xfd, 0x530, &(0x7f0000000f00)="$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") 6.955099484s ago: executing program 0 (id=1132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r4}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x891e, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) 5.094014822s ago: executing program 4 (id=1134): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x604}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x9, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x8000000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300", 0x1e, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x40000) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1f0400000000000000004d0000000e0001006ecd09e87c2f0000080000000f0002006e657464657673696d3000000800a80000000000"], 0x3c}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3d45a46b678a2e5b247a74fb2c38c802a2a", 0x40, r9) keyctl$setperm(0x5, r9, 0x40000) ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000500)) ioctl$sock_bt_hci(r8, 0x400448e1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) 5.093569682s ago: executing program 2 (id=1135): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x28, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@typed={0x14, 0xbb, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x40, 0x3, 0x4, 0x1c, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x7, 0x9, 0xc43}}) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/32, 0x20, 0x6, 0x3, 0x3, 0x0, 0xa0}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGRDESC(r3, 0x90044802, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000080)={&(0x7f00000002c0)=""/195, 0xc3}) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f0000002640)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, &(0x7f0000002500)=[{&(0x7f00000001c0)="796746ffd1", 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f00000046c0)=""/236, 0xec}, 0x400101c0) write$UHID_DESTROY(r4, &(0x7f00000000c0), 0xfdf3) 5.089136873s ago: executing program 0 (id=1136): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000611920000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)={@private0, 0x0}, &(0x7f00000000c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xe4}, 0x1, r7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006c00011c8500"/20, @ANYRES32=r10, @ANYBLOB="000000000000000018003480"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x18c, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20004044}, 0x20004084) execve(&(0x7f00000004c0)='./file1\x00', 0xfffffffffffffffc, 0x0) 4.973275204s ago: executing program 3 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000ac0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='1-0:', @ANYRESDEC], 0x31) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x9}) epoll_wait(r4, &(0x7f00000001c0)=[{}], 0x1, 0x4a) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r5, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x90, 0xb, 0x6f0, 0x3, 0x6, 0xf, 0xb6, 0x38, 0x3b8, 0x5, 0x401, 0x20, 0x1, 0x4, 0x8, 0x2}, [{0x4, 0x5, 0x4, 0x8, 0xffff, 0xa4, 0xc, 0x58}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x458) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r7, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r8, 0x65, 0x9, 0x0, 0x0) r9 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r7, 0x0, 0x0, 0x800) sendmsg$tipc(r9, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, &(0x7f0000000500), 0x1}, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000680), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000440)={@mcast1, 0x0}, &(0x7f0000000480)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, r11, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008045}, 0x8000) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x54, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x0) 4.931623015s ago: executing program 1 (id=1138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4.891905006s ago: executing program 1 (id=1139): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @multicast1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x1, 0x5}, {}]}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000340)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r7, @ANYRES8=r7, @ANYRES64, @ANYRES64, @ANYRESHEX=0x0], 0x1, 0x14ee, &(0x7f0000002400)="$eJzs3Au0jtX2MPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpKsb+ic89ep842+b5y+z/8/9vyNscZecz97rneud77jfZ/n2WPvbzsOrlq/WqW6zAz/Efz7l1QAyAQA/QDgGgCIAKBU9lLZLx3PrDH1P3sQ8dd6aNqVrkBcSdL/9E36n75J/9M36X/6Jv1P36T/6Zv0P32T/guRnm2dnudaGel3yP3/9Ew+/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/hUjPrvT95/85I+M/nrErXcdfO67wy08IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRDpxLlxmAOCf8ytdlxBCCCGEEEIIIf46IeOVrkAIIYQQQgghhBD/7yEo0GAgggyQETJBZsgCV0FWuBqywTWQgGshO1wHOeB6yAm5IDfkgbyQD/KDBQIHDDEUgIKQhBugENwIKVAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6Ai3AmV4C6oDFWgKlSDu6E63AM14F6oCfdBLbgfzpX5e5V14SGoBw9DfXgEGsCj0BAaQWNoAk1/n48I8Jv82vAA1IEHf5f/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//L/LO/y++EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//XiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YGTvji/givoQvYXesrHpgT+yJvbAX9sG+2Bdfwf74Kr6Kr+FAHISD8XV8Hd/AoXgGh+FwHIEjsIIahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/B9nIMf4Ac4D+fhAlyIC3ERLsY0TMMleBaX4jJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgJ/gJbsftuBN34m7cjZ/ip/gZfoYDcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Ds/jebyAz+f9ut7uwusGgrrEKKMyqAwqk8qksqgsKqvKqrKpbCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkEpRKaqIKqK88qq4Kq5KqBKqpCqpSqlbVWl1myqjyqoWvrwqryqolr6iulNVUpVUZVVFVVXVVDVVXVVXNVQNVVPVVLVULVVbPaDqqB7YBx9SlzpTXw3CBmowNlSNVGPVRL2Bj6lmaig2Vy1US/WEGo7DsLVq5tuop1VbNRrbqWfVGHxOdVDjsKN6QXVSnVUX9aLqqpr7bqq7moQ9VE81FXup3qqP6qtmYhV1qWNV1WtqoBqkBqvX1QJ8Qw1Vb6phargaod5SI9UoNVqNUWPVODVeva0mqHfURPWumqQmqylqqpqmpqsZ6j01U81Ss9X7ao76QM1V89R8tUAtVB+qRWqxSlMfqSXqY7VULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VX2itqntaofaqXap3WqP+lTtVZ+pfepztV99oQ4oTAX4Uh1SX6nD6mt1RH2jjqpv1TH1nTquvlcn1El1Sv2gTqsf1Zlf3xsBQP2sLqhf1EUVFGjUSmttdKQz6Iw6k86ss+irdFZ9tc6mr9EJfa3Orq/TOfT1OqfOpXPrPDqvzqfza6tJO8061gV0QZ3UN+hC+kadogvrIrqo9rqYLq5v0iX0zbqkvkWX0rfq0vo2XUaX1eV0eX27rqDv0BX1nbqSvktX1lV0VV1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD/ahuqBvpxrqJbqof083047q5bqFb6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqF3Qn3Vl30b/oizrobrq7TtU9dE/9su6le+s+uq/up1/R/fWreoB+TQ/Ug/Rg/boeot/QQ/Wbepgerkfot/RIPUqP1mP0WD1Oj9dv6wn6HT1Rv6sn6cl6ip6qp+npus8/Vpr9f5D/zr/JH/Dro2/RW/UnepvernfonXqX3q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WX1W/6TP6/P6wj+eAzBolNHGmMhkMBlNJpPZZDFXmazmapPNXGMS5lqT3VxncpjrTU6Ty+Q2eUxek8/kN9aQcYZNbAqYgiZpbjCFzI0mxRQ2RUxR400xU9zc9B/n/1l9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEGWKMkVZoixR1ihrlC3KFiWiRJQ9yh7liK6Pcka5otxRnihvlC/KH9mIIhdxFEcFooJRMrohKhTdGKVEhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv6l64dwJtfjvpvtblNtD9vTvmx72d62j+1r+9lXbH/7qh1gX7MD7SA72L5uh9g37FD7ph1mh9sR9i070o6yo+0YO9aOs+Pt23aCfcdOtO/aSXaynWKn2ml2up1h37Mz7Sw7275v59gP7Fw7z863C+xC+6FdZBfbNPuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Sd2m91ud9iddpfdbffYT+1e+5ndZz+3++0X9oD9m1XwpT1kv7KH7df2iP3GHrXf2mP2O3vcfm9P2JP2lP3BnrY/2jP2rD1nf7Ln7c/2gv3FXrTh0sn9pY93MmQoA2WgTJSJslAWykpZKRtlowQlKDtlpxyUg3JSTspNuSkv5aX8lJ8uYWIqQAUoSUkqRIUohVKoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qA76U66i+6iKlSFqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVAml9llcVe5rO5ql81d434f53Z5XF6Xz+V31uV0uf4lJudciivsiriizrtirri76Q9xGVfWlXPl3e2ugrvDVfxDXN3d42q4e11Nd5+r5u7+l7iWu9/Vdo+4Ou5RV9c1cvVcE1ffPeIauEddQ9fINXZNXCv3pGvtnnJt3NOurXvmD/Eit9itdevcerfB7XWfuXPuJ3fUfevOu59dN9fd9XOvuP7uVTfAveYGukF/iEe4t9xIN8qNdmPcWDfuD/EUN9VNc9PdDPeem+lm/SFe6D50c1yam+vmufluwa/xpZrS3EduifvYLXXL3HK3wq10q9xqt+a/al3hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJyJM3MWvoqz8tWcja/hBF/L2fk6zsHXc07Oxbk5D+flfJyfLRM7Zo65ABfkJN/AhfhGTuHCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EV+U6uxHdxZa7CVbka383V+R6uwfdyTb6Pa/H9XJsf4Dr8INflh7geP8z1+RFuwI9yQ27EjbkJN+XHuBk/zs25BbfkJ7gVP8mt+Sluw09zW36G2/Gz3J6f4w78PHfkF7gTd+Yu/CJ35Ze4G3fnVO7BPfll7sW9uQ/35X78CvfnV3kAv8YDeRAP5td5CL/BQ/lNHsbDeQS/xSN5FI/mMTyWx/F4fpsn8Ds8kd/lSTyZp/BUnsbTeQa/xzN5Fs/m93kOf8BzeR7P5wW8kD/kRbyY0/gjXsIf81Jexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Et/F23sE7eRfv5j38Ke/lz3gff877+Qs+wH/jg/wlH+Kv+DB/zUf4Gz7K3/Ix/o6P8/d8gk/yKf6BT/OPfIbP8jn+ic/zz3yBf+GLHBhijFWsYxNHcYY4Y5wpzhxnia+Ks8ZXx9nia+JEfG2cPb4uzhFfH+eMc8W54zxx3jhfnD+2McUu5jiOC8QF42R8Q1wovjFOiQvHReKisY+LxcXjm+IS8c1xyfiWuFR8a1w6vi0uE5eNH7mvfHx7XCG+I64Y3xlXiu+KK8dV4qpxtfjuuHp8T1wjvjeuGd8Xl4zvj2vHD8R14gfjuvFDcb344bh+/EjcIH40bhg3ihvHTeKm8WNxs/jxuHncIm4ZPxG3ip+MW8dPxW3ip+O28TN/ejw17hH3jF+OX45DuFfPTy5ILkx+mFyUXJxMS36UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGUK1jODRK6+98ZHP4DP6TD6zz+Kv8ln91T6bv8Yn/LU+u7/O5/DX+5w+l8/t8/i8Pp/P760n7zz72BfwBX3S3+AL+Rt9ii/si/ii3vtivrhv4pv6pr6Zf9w39y18S/+Ef8I/6Z/0T/mn/NO+rX/Gt/PP+vb+Od/BP++f9y/4Tr6z7+Jf9F39S76b7+5Tfarv6Xv6Xr6X7xOB7+f7+f6+vx/gB/iBfqAf7Af7IX6IH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5KXP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkzJMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoR82+JQIBQMyXBDKBRuDCmhcCgSigYfioXi4aZQItwcSoZbQqlwaygdbgtlQtlQLjwaGoZGoXFoEpqGx0Kz8HhoHlqEluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIz4eO4YXQKXQOXcKLoWt4KXQL3UNq6BF6hpdDr9A79Al9Q7/wSugfXg0DwmthYBgUBofXw5DwRhga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBY+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwsHw5fhUPgqHA5fhyPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3Dx179Z636lbqILIYQQQvyPkfonx3v8m++pf4xLegLA1dvzHP7tcQ0AG3P+fd5b5W2VAICnu3d86J+jcuXU1H8+7lINUcF5AJC4nJ8BLsfLoCU8CW2gBZSAf/766rd6q87n+U/WT94KkOU3OZngcnx5/Zv/7f57q1Fz/nT9eQApBS/nZIbL8eX1S/5v1s/V7E/Wz/zleIDmv8nJCpfjy+sXh8fhGWjzLz8phBBCCCGEEEL8XW9Vrv2fXd9euj7Pay7nZITL8W+vz4UQQgghhBBCCPHf03Oduzz1WJs2LdrL5L/jZLe0SSZXZnKF35iEEEIIIYQQf7nLJ/1XuhIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+v/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA///apiom") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0}, 0x18) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYRES16=r5, @ANYRESOCT=r5, @ANYRESOCT=r2, @ANYRES16=r3, @ANYRESHEX=r2, @ANYRES8=r2, @ANYRESHEX=r9, @ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.138260887s ago: executing program 4 (id=1140): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x604}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x9, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x8000000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300", 0x1e, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x40000) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1f0400000000000000004d0000000e0001006ecd09e87c2f0000080000000f0002006e657464657673696d3000000800a80000000000"], 0x3c}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3d45a46b678a2e5b247a74fb2c38c802a2a", 0x40, r9) keyctl$setperm(0x5, r9, 0x40000) ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000500)) ioctl$sock_bt_hci(r8, 0x400448e1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) 4.121796287s ago: executing program 3 (id=1141): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x604}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x9, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x8000000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300", 0x1e, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x40000) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1f0400000000000000004d0000000e0001006ecd09e87c2f0000080000000f0002006e657464657673696d3000000800a80000000000"], 0x3c}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3d45a46b678a2e5b247a74fb2c38c802a2a", 0x40, r9) keyctl$setperm(0x5, r9, 0x40000) ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000500)) ioctl$sock_bt_hci(r8, 0x400448e1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) 3.871286901s ago: executing program 4 (id=1142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000611920000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000080)={@private0, 0x0}, &(0x7f00000000c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xe4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006c00011c8500"/20, @ANYRES32=r9, @ANYBLOB="000000000000000018003480"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x18c, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20004044}, 0x20004084) execve(&(0x7f00000004c0)='./file1\x00', 0xfffffffffffffffc, 0x0) 3.845279592s ago: executing program 2 (id=1143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r3}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x891e, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) 3.833619491s ago: executing program 1 (id=1144): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000040)=""/50, 0x32}], 0x4, 0x90, 0x4) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb6729418688ac68cb126474bb3660dab9e2086e246728d7a04000", "05e2e505", "12000700"}, 0x38) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3.211047981s ago: executing program 3 (id=1145): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x1506, &(0x7f0000001580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x605}) r6 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) read(r6, &(0x7f0000000040)=""/69, 0x45) write$UHID_INPUT(r6, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$UFFDIO_COPY(r6, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000adb000/0x2000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x2000}) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x4000) ioctl$EVIOCSKEYCODE_V2(r7, 0x80104592, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74f000000001200000100000900"}) 2.454838032s ago: executing program 2 (id=1146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r4}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x891e, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) 2.448402642s ago: executing program 1 (id=1147): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x604}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x9, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x8000000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300", 0x1e, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x40000) 2.315575724s ago: executing program 3 (id=1148): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r4}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x891e, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) 1.514093316s ago: executing program 0 (id=1149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.513406686s ago: executing program 1 (id=1150): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09090000000000000000010000d02200000008410000004c00180000006062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x80) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) accept(r6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) recvfrom$unix(r7, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETA(r8, 0x541a, 0xffffffffffffffff) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x18}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r9, &(0x7f0000000180)="d52e48855ad9a8cdee309e30d53821b5230e8b2cb16683783e5780b24f818817dc397e14bfeb389521653b5cd55a29e3acce5d0d6afa064b59aa10c79164a4e1214c66137d67"}, 0x20) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000002c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x2, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0xf000, 0x12, &(0x7f00000009c0)=""/18}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.512624237s ago: executing program 2 (id=1151): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffffc, 0x2) getdents(r3, 0x0, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a090000000000000000000008001e0001"], 0x2c}}, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r9 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/179, 0xb3}], 0x1}, 0xf}], 0x1, 0x7fb10727ddab, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) 1.512226987s ago: executing program 3 (id=1152): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x8) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r6, &(0x7f0000000180)='./file1\x00', r6, &(0x7f00000001c0)='./file3\x00', 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 874.064027ms ago: executing program 2 (id=1153): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x604}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x9, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x8000000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300", 0x1e, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x40000) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1f0400000000000000004d0000000e0001006ecd09e87c2f0000080000000f0002006e657464657673696d3000000800a80000000000"], 0x3c}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3d45a46b678a2e5b247a74fb2c38c802a2a", 0x40, r9) keyctl$setperm(0x5, r9, 0x40000) ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000500)) ioctl$sock_bt_hci(r8, 0x400448e1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) 793.454637ms ago: executing program 4 (id=1154): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09090000000000000000010000d02200000008410000004c00180000006062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x80) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) accept(r6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) recvfrom$unix(r7, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETA(r8, 0x541a, 0xffffffffffffffff) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x18}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r9, &(0x7f0000000180)="d52e48855ad9a8cdee309e30d53821b5230e8b2cb16683783e5780b24f818817dc397e14bfeb389521653b5cd55a29e3acce5d0d6afa064b59aa10c79164a4e1214c66137d67"}, 0x20) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000002c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x2, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0xf000, 0x12, &(0x7f00000009c0)=""/18}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 618.62675ms ago: executing program 3 (id=1155): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x604}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x9, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x8000000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300", 0x1e, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x40000) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1f0400000000000000004d0000000e0001006ecd09e87c2f0000080000000f0002006e657464657673696d3000000800a80000000000"], 0x3c}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3d45a46b678a2e5b247a74fb2c38c802a2a", 0x40, r9) keyctl$setperm(0x5, r9, 0x40000) ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000500)) ioctl$sock_bt_hci(r8, 0x400448e1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) 617.27685ms ago: executing program 1 (id=1156): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x9, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x8000000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300", 0x1e, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x40000) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1f0400000000000000004d0000000e0001006ecd09e87c2f0000080000000f0002006e657464657673696d3000000800a80000000000"], 0x3c}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3d45a46b678a2e5b247a74fb2c38c802a2a", 0x40, r9) keyctl$setperm(0x5, r9, 0x40000) ioctl$sock_bt_hci(r8, 0x400448e1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) 0s ago: executing program 2 (id=1157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r3}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x891e, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) kernel console output (not intermixed with test programs): 84888][ T1025] EXT4-fs (loop4): Remounting filesystem read-only [ 81.891607][ T1025] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 81.901889][ T1025] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 81.911172][ T1025] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.146: Failed to acquire dquot type 0 [ 81.925546][ T1025] EXT4-fs (loop4): Remounting filesystem read-only [ 81.933303][ T1025] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 81.943590][ T1025] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 81.952875][ T1025] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.146: Failed to acquire dquot type 0 [ 81.965119][ T1025] EXT4-fs (loop4): Remounting filesystem read-only [ 81.971794][ T1025] EXT4-fs (loop4): 1 orphan inode deleted [ 81.977418][ T1025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.986445][ T1025] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.039292][ T28] audit: type=1400 audit(1742698260.530:388): avc: denied { unmount } for pid=1016 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.216111][ T1016] EXT4-fs (loop4): unmounting filesystem. [ 82.357168][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.438106][ T1036] loop2: detected capacity change from 0 to 2048 [ 82.557101][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 82.564433][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 82.576940][ T1036] Alternate GPT is invalid, using primary GPT. [ 82.590202][ T1036] loop2: p1 p2 p3 [ 82.638538][ T6] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 82.718718][ T6] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 82.989384][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.009534][ T6] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.027025][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.045066][ T6] usb 4-1: Product: syz [ 83.055161][ T6] usb 4-1: Manufacturer: syz [ 83.065253][ T6] usb 4-1: SerialNumber: syz [ 83.092115][ T1031] loop0: detected capacity change from 0 to 40427 [ 83.120136][ T1031] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 83.126380][ T1031] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 83.138605][ T1031] F2FS-fs (loop0): invalid crc value [ 83.146605][ T1031] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 83.405829][ T6] usb 4-1: 0:2 : does not exist [ 83.425653][ T6] usb 4-1: USB disconnect, device number 4 [ 83.749600][ T1031] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 83.756580][ T1031] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.204422][ T1060] loop2: detected capacity change from 0 to 512 [ 84.221722][ T1061] capability: warning: `syz.4.157' uses 32-bit capabilities (legacy support in use) [ 84.356448][ T1060] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.154: inode #1: comm syz.2.154: iget: illegal inode # [ 84.450368][ T1060] EXT4-fs (loop2): Remounting filesystem read-only [ 84.456717][ T1060] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.154: error while reading EA inode 1 err=-117 [ 84.541799][ T1070] loop3: detected capacity change from 0 to 40427 [ 84.580702][ T1060] EXT4-fs (loop2): Remounting filesystem read-only [ 84.580730][ T1070] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 84.590987][ T1082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.160'. [ 84.601972][ T1070] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 84.608803][ T28] audit: type=1400 audit(1742698263.130:389): avc: denied { map } for pid=1080 comm="syz.0.160" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.615623][ T1060] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.154: inode #1: comm syz.2.154: iget: illegal inode # [ 84.640002][ T1081] loop1: detected capacity change from 0 to 512 [ 84.940477][ T1070] F2FS-fs (loop3): invalid crc value [ 84.944236][ T1060] EXT4-fs (loop2): Remounting filesystem read-only [ 84.962419][ T1060] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.154: error while reading EA inode 1 err=-117 [ 85.014255][ T1081] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.158: inode #1: comm syz.1.158: iget: illegal inode # [ 85.031307][ T1060] EXT4-fs (loop2): Remounting filesystem read-only [ 85.049569][ T1060] EXT4-fs (loop2): 1 orphan inode deleted [ 85.055551][ T1081] EXT4-fs (loop1): Remounting filesystem read-only [ 85.062658][ T1060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.071580][ T1070] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 85.075417][ T1081] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.158: error while reading EA inode 1 err=-117 [ 85.105459][ T1081] EXT4-fs (loop1): Remounting filesystem read-only [ 85.130418][ T1081] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.158: inode #1: comm syz.1.158: iget: illegal inode # [ 85.147418][ T1070] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 85.156370][ T1070] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.173975][ T1081] EXT4-fs (loop1): Remounting filesystem read-only [ 85.189235][ T1081] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.158: error while reading EA inode 1 err=-117 [ 85.217263][ T1081] EXT4-fs (loop1): Remounting filesystem read-only [ 85.227908][ T1081] EXT4-fs (loop1): 1 orphan inode deleted [ 85.240030][ T1081] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.347059][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 85.588804][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.600831][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 85.615915][ T24] usb 1-1: config 3 has an invalid interface number: 3 but max is 1 [ 85.633721][ T24] usb 1-1: config 3 has an invalid interface number: 66 but max is 1 [ 85.652322][ T24] usb 1-1: config 3 has no interface number 0 [ 85.678796][ T24] usb 1-1: config 3 has no interface number 1 [ 85.684933][ T24] usb 1-1: config 3 interface 3 has no altsetting 0 [ 85.703707][ T24] usb 1-1: config 3 interface 66 has no altsetting 0 [ 85.720888][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 85.738517][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.754293][ T24] usb 1-1: Product: syz [ 85.799559][ T24] usb 1-1: Manufacturer: syz [ 85.819411][ T24] usb 1-1: SerialNumber: syz [ 85.967884][ T295] EXT4-fs (loop2): unmounting filesystem. [ 85.988324][ T293] EXT4-fs (loop1): unmounting filesystem. [ 86.030017][ T1107] loop1: detected capacity change from 0 to 512 [ 86.047342][ T24] hub 1-1:3.3: bad descriptor, ignoring hub [ 86.054423][ T24] hub: probe of 1-1:3.3 failed with error -5 [ 86.069691][ T1105] loop3: detected capacity change from 0 to 2048 [ 86.074127][ T24] hub 1-1:3.66: bad descriptor, ignoring hub [ 86.076610][ T1107] EXT4-fs (loop1): Test dummy encryption mode enabled [ 86.096496][ T24] hub: probe of 1-1:3.66 failed with error -5 [ 86.102639][ T1107] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.135958][ T1107] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.167: bad orphan inode 131083 [ 86.147376][ T24] usb 1-1: USB disconnect, device number 7 [ 86.155209][ T1105] Alternate GPT is invalid, using primary GPT. [ 86.164776][ T1107] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 86.173445][ T1105] loop3: p1 p2 p3 [ 86.190074][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 86.190089][ T28] audit: type=1400 audit(1742698264.710:413): avc: denied { create } for pid=1106 comm="syz.1.167" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 86.190376][ T1107] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.167: reserved inode found cleared - inode=9 [ 86.243459][ T28] audit: type=1400 audit(1742698264.760:414): avc: denied { ioctl } for pid=1106 comm="syz.1.167" path="socket:[19477]" dev="sockfs" ino=19477 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.292678][ T28] audit: type=1400 audit(1742698264.800:415): avc: denied { bind } for pid=1106 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.348131][ T293] EXT4-fs (loop1): unmounting filesystem. [ 86.636880][ T1122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'. [ 86.665990][ T1117] loop3: detected capacity change from 0 to 40427 [ 86.695137][ T1117] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 86.710342][ T1117] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 86.719033][ T28] audit: type=1400 audit(1742698265.240:416): avc: denied { write } for pid=1125 comm="syz.0.173" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.719809][ T1127] usb usb8: usbfs: process 1127 (syz.0.173) did not claim interface 0 before use [ 86.758573][ T1117] F2FS-fs (loop3): invalid crc value [ 86.794912][ T1117] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 86.844294][ T1134] loop2: detected capacity change from 0 to 512 [ 86.870514][ T1117] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 86.880749][ T1117] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.902345][ T1134] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 87.138348][ T1134] EXT4-fs (loop2): Remounting filesystem read-only [ 87.155197][ T1134] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.174: invalid indirect mapped block 4278190080 (level 0) [ 87.192403][ T1134] EXT4-fs (loop2): Remounting filesystem read-only [ 87.212738][ T1134] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.174: invalid indirect mapped block 1 (level 1) [ 87.244001][ T1134] EXT4-fs (loop2): Remounting filesystem read-only [ 87.255949][ T1134] EXT4-fs (loop2): 1 truncate cleaned up [ 87.265852][ T1134] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.875445][ T649] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.938592][ T1156] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 88.054435][ T1155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.176'. [ 88.069341][ T649] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.122943][ T649] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.174806][ T649] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.208741][ T649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.234915][ T649] usb 3-1: SerialNumber: syz [ 88.378224][ T1158] loop0: detected capacity change from 0 to 40427 [ 88.392710][ T1158] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 88.403092][ T1158] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 88.423691][ T1158] F2FS-fs (loop0): invalid crc value [ 88.448040][ T1158] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 88.476171][ T649] usb 3-1: 0:2 : does not exist [ 88.488431][ T649] usb 3-1: unit 5: unexpected type 0x0b [ 88.500485][ T1158] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 88.509486][ T1158] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.515426][ T649] usb 3-1: USB disconnect, device number 3 [ 90.204255][ T295] EXT4-fs (loop2): unmounting filesystem. [ 90.288111][ T1189] syz.3.187[1189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.466888][ T1202] loop0: detected capacity change from 0 to 256 [ 90.571734][ T1204] loop2: detected capacity change from 0 to 1024 [ 90.670329][ T1202] FAT-fs (loop0): Unrecognized mount option "io;charset=macgaelic" or missing value [ 90.760579][ T465] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.861916][ T1203] fuse: Bad value for 'fd' [ 91.596913][ T1210] loop0: detected capacity change from 0 to 16 [ 91.633457][ T1210] erofs: (device loop0): mounted with root inode @ nid 36. [ 91.684405][ T28] audit: type=1400 audit(1742698270.193:417): avc: denied { read } for pid=1209 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.743854][ T28] audit: type=1400 audit(1742698270.243:418): avc: denied { setopt } for pid=1209 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.800575][ T28] audit: type=1400 audit(1742698270.243:419): avc: denied { write } for pid=1209 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.838766][ T1192] loop1: detected capacity change from 0 to 40427 [ 91.926183][ T1192] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 91.933019][ T1192] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 91.953108][ T1192] F2FS-fs (loop1): invalid crc value [ 91.973825][ T28] audit: type=1400 audit(1742698270.483:420): avc: denied { getopt } for pid=1195 comm="syz.3.189" laddr=fe80::11 lport=60 faddr=fe80::bb fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.977123][ T1192] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 92.047146][ T1221] loop2: detected capacity change from 0 to 16 [ 92.407026][ T1192] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 92.414898][ T1192] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.443980][ T28] audit: type=1400 audit(1742698270.953:421): avc: denied { setopt } for pid=1223 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.480830][ T1228] loop3: detected capacity change from 0 to 512 [ 92.494848][ T1228] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.520242][ T28] audit: type=1400 audit(1742698271.023:422): avc: denied { write } for pid=1223 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.558675][ T1228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 92.569619][ T1228] System zones: 1-12 [ 92.581405][ T1228] EXT4-fs (loop3): 1 truncate cleaned up [ 92.818065][ T1228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.211215][ T1230] loop0: detected capacity change from 0 to 40427 [ 93.291935][ T1230] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 93.337650][ T1230] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 93.473629][ T1230] F2FS-fs (loop0): invalid crc value [ 93.533915][ T1252] syz.1.200[1252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.632840][ T292] EXT4-fs (loop3): unmounting filesystem. [ 93.653052][ T1230] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 93.830441][ T1230] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 93.837559][ T1230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.893658][ T1264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'. [ 95.308476][ T1269] loop2: detected capacity change from 0 to 2048 [ 95.415388][ T1280] loop3: detected capacity change from 0 to 2048 [ 95.421637][ T28] audit: type=1400 audit(1742698273.933:423): avc: denied { nlmsg_write } for pid=1281 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 95.443060][ T1269] Alternate GPT is invalid, using primary GPT. [ 95.472002][ T1269] loop2: p1 p2 p3 [ 95.494239][ T1280] Alternate GPT is invalid, using primary GPT. [ 95.519352][ T1280] loop3: p1 p2 p3 [ 95.544790][ T454] udevd[454]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 95.547387][ T1284] loop2: detected capacity change from 0 to 1024 [ 95.555703][ T462] udevd[462]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 95.571970][ T465] udevd[465]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 95.617427][ T463] udevd[463]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 95.631289][ T465] udevd[465]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 95.648969][ T1284] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.660058][ T1286] udevd[1286]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 95.692563][ T1289] loop0: detected capacity change from 0 to 128 [ 95.707624][ T1289] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.720060][ T1289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.761244][ T1289] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.816922][ T294] EXT4-fs (loop0): unmounting filesystem. [ 95.961898][ T28] audit: type=1326 audit(1742698274.423:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1283 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2178d169 code=0x7ffc0000 [ 96.170708][ T28] audit: type=1326 audit(1742698274.423:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1283 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2178d169 code=0x7ffc0000 [ 96.195096][ T28] audit: type=1326 audit(1742698274.423:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1283 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3d2178d169 code=0x7ffc0000 [ 96.487107][ T1309] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 96.609752][ T295] EXT4-fs (loop2): unmounting filesystem. [ 96.626367][ T1313] usb usb8: usbfs: process 1313 (syz.0.213) did not claim interface 0 before use [ 96.694612][ T1319] netlink: 76 bytes leftover after parsing attributes in process `syz.2.216'. [ 96.751136][ T1317] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 96.964019][ T1327] loop1: detected capacity change from 0 to 512 [ 96.998328][ T1327] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.032395][ T1327] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.175361][ T1337] loop3: detected capacity change from 0 to 512 [ 97.202340][ T1337] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.220: bad orphan inode 13 [ 97.277998][ T1337] ext4_test_bit(bit=12, block=4) = 1 [ 97.283147][ T1337] is_bad_inode(inode)=0 [ 97.287300][ T1337] NEXT_ORPHAN(inode)=0 [ 97.291346][ T1337] max_ino=32 [ 97.294426][ T1337] i_nlink=1 [ 97.297659][ T1337] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.501211][ T1337] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.220: Unrecognised inode hash code 20 [ 97.545969][ T1337] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.220: Corrupt directory, running e2fsck is recommended [ 97.871046][ T1344] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.220: Unrecognised inode hash code 20 [ 97.994823][ T1345] FAULT_INJECTION: forcing a failure. [ 97.994823][ T1345] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.503505][ T1345] CPU: 1 PID: 1345 Comm: syz.2.221 Not tainted 6.1.128-syzkaller-00029-g5145d157731f #0 [ 98.513061][ T1345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.522966][ T1345] Call Trace: [ 98.526097][ T1345] [ 98.528856][ T1345] dump_stack_lvl+0x151/0x1b7 [ 98.533369][ T1345] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 98.538665][ T1345] dump_stack+0x15/0x18 [ 98.542655][ T1345] should_fail_ex+0x3d0/0x520 [ 98.547170][ T1345] should_fail+0xb/0x10 [ 98.551164][ T1345] should_fail_usercopy+0x1a/0x20 [ 98.556046][ T1345] strncpy_from_user+0x24/0x2b0 [ 98.560706][ T1345] ? finish_task_switch+0x167/0x7b0 [ 98.565745][ T1345] ? getname_flags+0xba/0x520 [ 98.570345][ T1345] getname_flags+0xf2/0x520 [ 98.574684][ T1345] ? preempt_schedule_irq+0xe7/0x140 [ 98.579802][ T1345] user_path_at_empty+0x2d/0x1a0 [ 98.584579][ T1345] __se_sys_utime+0x133/0x2b0 [ 98.589097][ T1345] ? __x64_sys_utime+0x70/0x70 [ 98.593688][ T1345] ? sysvec_reschedule_ipi+0x8f/0x170 [ 98.598901][ T1345] __x64_sys_utime+0x5b/0x70 [ 98.603323][ T1345] x64_sys_call+0x3c4/0x9a0 [ 98.607661][ T1345] do_syscall_64+0x3b/0xb0 [ 98.611915][ T1345] ? clear_bhb_loop+0x55/0xb0 [ 98.616427][ T1345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.622167][ T1345] RIP: 0033:0x7f3d2178d169 [ 98.626409][ T1345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.645853][ T1345] RSP: 002b:00007f3d22673038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 98.654096][ T1345] RAX: ffffffffffffffda RBX: 00007f3d219a6080 RCX: 00007f3d2178d169 [ 98.661911][ T1345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 98.669719][ T1345] RBP: 00007f3d22673090 R08: 0000000000000000 R09: 0000000000000000 [ 98.677532][ T1345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.685340][ T1345] R13: 0000000000000001 R14: 00007f3d219a6080 R15: 00007ffcf0014948 [ 98.693174][ T1345] [ 98.696792][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 98.696806][ T28] audit: type=1326 audit(1742698277.013:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566638d169 code=0x7ffc0000 [ 98.746635][ T293] EXT4-fs (loop1): unmounting filesystem. [ 98.754325][ T1344] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.220: Corrupt directory, running e2fsck is recommended [ 98.848221][ T1337] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.220: Unrecognised inode hash code 20 [ 98.866660][ T28] audit: type=1326 audit(1742698277.283:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f566638d169 code=0x7ffc0000 [ 98.867111][ T1337] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.220: Corrupt directory, running e2fsck is recommended [ 98.890635][ T28] audit: type=1326 audit(1742698277.283:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566638d169 code=0x7ffc0000 [ 98.916125][ T1337] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.220: corrupted in-inode xattr [ 98.937912][ T28] audit: type=1326 audit(1742698277.293:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f566638d169 code=0x7ffc0000 [ 98.961561][ T1351] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.220: Unrecognised inode hash code 20 [ 98.977150][ T28] audit: type=1326 audit(1742698277.293:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566638d169 code=0x7ffc0000 [ 99.007139][ T1351] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.220: Corrupt directory, running e2fsck is recommended [ 99.027218][ T1351] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.220: Unrecognised inode hash code 20 [ 99.047001][ T28] audit: type=1326 audit(1742698277.293:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f566638d169 code=0x7ffc0000 [ 99.100610][ T28] audit: type=1326 audit(1742698277.303:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566638d169 code=0x7ffc0000 [ 99.124261][ T28] audit: type=1326 audit(1742698277.303:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f566638d169 code=0x7ffc0000 [ 99.148306][ T28] audit: type=1326 audit(1742698277.343:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566638d169 code=0x7ffc0000 [ 99.177055][ T1351] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.220: Corrupt directory, running e2fsck is recommended [ 99.201027][ T28] audit: type=1326 audit(1742698277.343:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f566638d169 code=0x7ffc0000 [ 99.258245][ T292] EXT4-fs (loop3): unmounting filesystem. [ 99.375983][ T1371] usb usb8: usbfs: process 1371 (syz.0.226) did not claim interface 0 before use [ 99.569889][ T1376] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 99.945742][ T1384] syz.1.231[1384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.566148][ T1395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 100.737161][ T540] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.822095][ T1397] netlink: 80 bytes leftover after parsing attributes in process `syz.0.236'. [ 100.927064][ T540] usb 2-1: Using ep0 maxpacket: 8 [ 100.933030][ T540] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 100.941169][ T540] usb 2-1: config 179 has no interface number 0 [ 100.947265][ T540] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 100.958103][ T540] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 100.969133][ T540] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.980056][ T540] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 100.991288][ T540] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.004409][ T540] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 101.013215][ T540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.022207][ T1388] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.243546][ T1387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.251964][ T1387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.585361][ T1428] input: syz0 as /devices/virtual/input/input4 [ 101.768019][ T1430] loop0: detected capacity change from 0 to 128 [ 101.779134][ T1430] EXT4-fs (loop0): Test dummy encryption mode enabled [ 102.168990][ T1430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.266398][ T1424] loop2: detected capacity change from 0 to 40427 [ 102.290670][ T1424] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 102.298197][ T1424] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 102.307434][ T1424] F2FS-fs (loop2): invalid crc value [ 102.314142][ T1424] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 102.363840][ T1424] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 102.370887][ T1424] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.677923][ T294] EXT4-fs (loop0): unmounting filesystem. [ 103.237090][ T1461] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 103.436385][ T890] usb 2-1: USB disconnect, device number 2 [ 103.436385][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 103.436419][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 103.758536][ T1477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'. [ 104.066122][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 104.066235][ T28] audit: type=1400 audit(1742698282.563:480): avc: denied { getattr } for pid=1471 comm="syz.1.250" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 104.385832][ T1487] loop2: detected capacity change from 0 to 128 [ 104.392481][ T1487] ext4: Unknown parameter 'subj_user' [ 104.458870][ T1487] loop2: detected capacity change from 0 to 1024 [ 105.024263][ T1487] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.123162][ T1504] tmpfs: Unknown parameter 'nolazytime¢âÄž€ ¦ôàä©DlvpV‰‚´à ö˜9: óˆœ$ªVñQ™úÐ rejected, already enabled [ 120.711643][ T465] udevd[465]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 121.084095][ T1847] loop0: detected capacity change from 0 to 512 [ 121.090717][ T1847] EXT4-fs: Ignoring removed nobh option [ 121.098575][ T1847] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.110998][ T1847] EXT4-fs error (device loop0): __ext4_fill_super:5377: inode #2: comm syz.0.347: iget: bad extra_isize 544 (inode size 256) [ 121.124610][ T1847] EXT4-fs (loop0): get root inode failed [ 121.130509][ T1847] EXT4-fs (loop0): mount failed [ 121.144655][ T28] audit: type=1400 audit(1742698299.653:492): avc: denied { mount } for pid=1853 comm="syz.2.350" name="/" dev="ramfs" ino=21936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 122.187506][ T1882] tipc: Started in network mode [ 122.210428][ T1882] tipc: Node identity ac14140f, cluster identity 4711 [ 122.243606][ T1882] tipc: New replicast peer: 255.255.255.255 [ 122.255260][ T1882] tipc: Enabled bearer , priority 10 [ 123.116994][ T28] audit: type=1400 audit(1742698301.453:493): avc: denied { bind } for pid=1906 comm="syz.1.366" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.193465][ T1910] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 123.467287][ T28] audit: type=1400 audit(1742698301.623:494): avc: denied { name_bind } for pid=1906 comm="syz.1.366" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 123.514754][ T28] audit: type=1400 audit(1742698301.623:495): avc: denied { node_bind } for pid=1906 comm="syz.1.366" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 123.718376][ T890] tipc: Node number set to 2886997007 [ 124.037428][ T1924] tipc: Enabling of bearer rejected, already enabled [ 124.907315][ T28] audit: type=1400 audit(1742698303.423:496): avc: denied { audit_write } for pid=1944 comm="syz.3.379" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 124.961820][ T28] audit: type=1107 audit(1742698303.423:497): pid=1944 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ž äéÈ]ÛoóóÆbÃì' [ 125.121651][ T1957] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 125.208836][ T1940] loop0: detected capacity change from 0 to 40427 [ 125.367777][ T1940] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 125.387974][ T890] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.405859][ T1940] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 125.417819][ T1940] F2FS-fs (loop0): invalid crc value [ 125.445292][ T1940] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.549519][ T1940] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 125.556437][ T1940] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.579662][ T890] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 125.596988][ T890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.605161][ T890] usb 3-1: Product: syz [ 125.609192][ T890] usb 3-1: Manufacturer: syz [ 125.613573][ T890] usb 3-1: SerialNumber: syz [ 125.621836][ T28] audit: type=1400 audit(1742698304.133:498): avc: denied { mounton } for pid=1939 comm="syz.0.376" path="/73/bus/bus" dev="loop0" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 125.645225][ T360] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 125.665599][ T360] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 126.879992][ T890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.346986][ T890] usb 2-1: Using ep0 maxpacket: 32 [ 127.357888][ T890] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 127.455082][ T1989] loop0: detected capacity change from 0 to 40427 [ 127.519862][ T1989] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 127.537862][ T1989] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 127.546449][ T1989] F2FS-fs (loop0): Invalid log blocks per segment (5) [ 127.555124][ T1989] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 127.706615][ T1995] overlayfs: failed to clone upperpath [ 127.712219][ T890] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 127.721172][ T890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.729624][ T890] usb 2-1: Product: syz [ 127.733618][ T890] usb 2-1: Manufacturer: syz [ 127.738410][ T890] usb 2-1: SerialNumber: syz [ 127.743615][ T890] usb 2-1: config 0 descriptor?? [ 127.753710][ T1976] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 127.763934][ T1989] loop0: detected capacity change from 0 to 256 [ 127.777100][ T1989] exfat: Unknown parameter '18446744073709551615P™EzDÝÛf«ì4' [ 127.851113][ T1972] usb 3-1: USB disconnect, device number 6 [ 127.976034][ T890] usb 2-1: USB disconnect, device number 3 [ 128.045373][ T1998] overlayfs: failed to clone upperpath [ 128.498724][ T2011] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 129.398439][ T2022] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 131.392231][ T2036] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 131.579288][ T2047] device pim6reg1 entered promiscuous mode [ 132.385584][ T2057] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 132.739504][ T2051] loop0: detected capacity change from 0 to 40427 [ 132.797324][ T2051] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 132.803524][ T2051] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 132.812031][ T2067] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 132.830670][ T2051] F2FS-fs (loop0): invalid crc value [ 132.878382][ T2051] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 132.967267][ T2051] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 132.976283][ T2051] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.614260][ T2089] FAULT_INJECTION: forcing a failure. [ 134.614260][ T2089] name failslab, interval 1, probability 0, space 0, times 1 [ 134.694314][ T2089] CPU: 1 PID: 2089 Comm: syz.1.414 Not tainted 6.1.128-syzkaller-00029-g5145d157731f #0 [ 134.704007][ T2089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.713901][ T2089] Call Trace: [ 134.717017][ T2089] [ 134.719796][ T2089] dump_stack_lvl+0x151/0x1b7 [ 134.724326][ T2089] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 134.729614][ T2089] dump_stack+0x15/0x18 [ 134.733602][ T2089] should_fail_ex+0x3d0/0x520 [ 134.738115][ T2089] __should_failslab+0xaf/0xf0 [ 134.742709][ T2089] ? kvmalloc_node+0x221/0x640 [ 134.747314][ T2089] should_failslab+0x9/0x20 [ 134.751655][ T2089] __kmem_cache_alloc_node+0x3d/0x2a0 [ 134.756860][ T2089] ? kasan_save_alloc_info+0x1f/0x30 [ 134.761985][ T2089] ? kvmalloc_node+0x221/0x640 [ 134.766586][ T2089] __kmalloc_node+0xa3/0x1e0 [ 134.771010][ T2089] ? is_bpf_text_address+0x172/0x190 [ 134.776128][ T2089] kvmalloc_node+0x221/0x640 [ 134.780562][ T2089] ? __kernel_text_address+0xd/0x40 [ 134.785583][ T2089] ? vm_mmap+0xb0/0xb0 [ 134.789487][ T2089] ? arch_stack_walk+0xf3/0x140 [ 134.794176][ T2089] ? bpf_test_run_xdp_live+0x90/0x1f70 [ 134.799472][ T2089] bpf_test_run_xdp_live+0x286/0x1f70 [ 134.804678][ T2089] ? stack_trace_snprint+0xf0/0xf0 [ 134.809623][ T2089] ? __stack_depot_save+0x36/0x480 [ 134.814572][ T2089] ? kasan_set_track+0x60/0x70 [ 134.819168][ T2089] ? kasan_set_track+0x4b/0x70 [ 134.823770][ T2089] ? kasan_save_alloc_info+0x1f/0x30 [ 134.828891][ T2089] ? __kasan_kmalloc+0x9c/0xb0 [ 134.833491][ T2089] ? __kmalloc+0xb4/0x1e0 [ 134.837657][ T2089] ? bpf_prog_test_run_xdp+0x414/0x1130 [ 134.843038][ T2089] ? xdp_convert_md_to_buff+0x360/0x360 [ 134.848416][ T2089] ? x64_sys_call+0x87f/0x9a0 [ 134.852930][ T2089] ? do_syscall_64+0x3b/0xb0 [ 134.857360][ T2089] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.863268][ T2089] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 134.869341][ T2089] ? __kasan_check_write+0x14/0x20 [ 134.874283][ T2089] ? _copy_from_user+0x90/0xc0 [ 134.878881][ T2089] ? bpf_test_init+0x169/0x190 [ 134.883483][ T2089] ? xdp_convert_md_to_buff+0x5d/0x360 [ 134.888775][ T2089] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 134.893987][ T2089] ? dev_put+0x80/0x80 [ 134.897891][ T2089] ? __kasan_check_write+0x14/0x20 [ 134.902838][ T2089] ? fput+0x15b/0x1b0 [ 134.906654][ T2089] ? dev_put+0x80/0x80 [ 134.910561][ T2089] bpf_prog_test_run+0x3b0/0x630 [ 134.915336][ T2089] ? bpf_prog_query+0x260/0x260 [ 134.920025][ T2089] ? selinux_bpf+0xd2/0x100 [ 134.924363][ T2089] ? security_bpf+0x82/0xb0 [ 134.928704][ T2089] __sys_bpf+0x59f/0x7f0 [ 134.932797][ T2089] ? bpf_link_show_fdinfo+0x300/0x300 [ 134.937991][ T2089] ? __ia32_sys_read+0x90/0x90 [ 134.942593][ T2089] ? debug_smp_processor_id+0x17/0x20 [ 134.947794][ T2089] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 134.953701][ T2089] __x64_sys_bpf+0x7c/0x90 [ 134.957948][ T2089] x64_sys_call+0x87f/0x9a0 [ 134.962290][ T2089] do_syscall_64+0x3b/0xb0 [ 134.966542][ T2089] ? clear_bhb_loop+0x55/0xb0 [ 134.971056][ T2089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.976780][ T2089] RIP: 0033:0x7f02b2b8d169 [ 134.981036][ T2089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.000476][ T2089] RSP: 002b:00007f02b3a06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.008719][ T2089] RAX: ffffffffffffffda RBX: 00007f02b2da5fa0 RCX: 00007f02b2b8d169 [ 135.016533][ T2089] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 135.024349][ T2089] RBP: 00007f02b3a06090 R08: 0000000000000000 R09: 0000000000000000 [ 135.032158][ T2089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.039963][ T2089] R13: 0000000000000000 R14: 00007f02b2da5fa0 R15: 00007ffc850e61b8 [ 135.047781][ T2089] [ 135.203745][ T2106] usb usb8: usbfs: process 2106 (syz.0.419) did not claim interface 0 before use [ 135.385559][ T2108] futex_wake_op: syz.0.421 tries to shift op by -1; fix this program [ 135.578987][ T2108] loop0: detected capacity change from 0 to 512 [ 135.617882][ T2108] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 135.629811][ T2108] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.012393][ T2138] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 137.453156][ T2146] syz.3.430[2146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.453233][ T2146] syz.3.430[2146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.322705][ T294] EXT4-fs (loop0): unmounting filesystem. [ 138.454886][ T2168] loop0: detected capacity change from 0 to 2048 [ 138.519970][ T2168] Alternate GPT is invalid, using primary GPT. [ 138.526033][ T2168] loop0: p1 p2 p3 [ 138.627602][ T2163] loop1: detected capacity change from 0 to 40427 [ 138.719723][ T2163] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 138.746428][ T2163] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 138.777323][ T2163] F2FS-fs (loop1): invalid crc value [ 138.802963][ T2163] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 138.884401][ T2163] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 138.894727][ T2163] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.015847][ T2187] tipc: Enabling of bearer rejected, already enabled [ 141.679152][ T28] audit: type=1326 audit(1742698320.193:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2208 comm="syz.0.446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ec578d169 code=0x0 [ 142.966891][ T2225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.451'. [ 142.976244][ T40] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 143.223326][ T2217] loop1: detected capacity change from 0 to 40427 [ 143.244224][ T2217] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 143.245124][ T40] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.261559][ T40] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.274773][ T2217] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 143.283426][ T40] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.293428][ T2217] F2FS-fs (loop1): invalid crc value [ 143.298580][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.306487][ T40] usb 1-1: SerialNumber: syz [ 143.327669][ T2217] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 143.370682][ T2217] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 143.381861][ T2217] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.448676][ T2228] process 'syz.3.452' launched './file1' with NULL argv: empty string added [ 143.472724][ T28] audit: type=1400 audit(1742698321.973:500): avc: denied { execute_no_trans } for pid=2227 comm="syz.3.452" path="/92/file1" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.530596][ T28] audit: type=1400 audit(1742698322.043:501): avc: denied { listen } for pid=2208 comm="syz.0.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.550865][ T28] audit: type=1400 audit(1742698322.063:502): avc: denied { setopt } for pid=2208 comm="syz.0.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.923706][ T28] audit: type=1400 audit(1742698322.423:503): avc: denied { getopt } for pid=2208 comm="syz.0.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.123971][ T2246] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 144.605191][ T2220] loop2: detected capacity change from 0 to 131072 [ 144.685984][ T2220] F2FS-fs (loop2): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 144.718048][ T2220] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 144.726729][ T2220] F2FS-fs (loop2): invalid crc value [ 144.733723][ T2220] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.783518][ T2220] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 144.790781][ T2220] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 144.870410][ T28] audit: type=1400 audit(1742698323.383:504): avc: denied { execute } for pid=2219 comm="syz.2.449" name="file1" dev="loop2" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.892511][ T28] audit: type=1400 audit(1742698323.383:505): avc: denied { execute_no_trans } for pid=2219 comm="syz.2.449" path="/83/file0/file1" dev="loop2" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.005059][ T649] usb 1-1: USB disconnect, device number 8 [ 145.134440][ T28] audit: type=1400 audit(1742698323.643:506): avc: denied { write } for pid=2264 comm="syz.0.460" path="socket:[23728]" dev="sockfs" ino=23728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.173102][ T2268] xt_ecn: cannot match TCP bits for non-tcp packets [ 146.496728][ T2289] loop2: detected capacity change from 0 to 8192 [ 146.638793][ T2294] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 146.987193][ T2287] loop0: detected capacity change from 0 to 40427 [ 146.998393][ T2287] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 147.014465][ T2287] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 147.031261][ T2287] F2FS-fs (loop0): invalid crc value [ 147.058906][ T2287] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 147.077028][ T60] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 147.107462][ T2287] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 147.114384][ T2287] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 147.258057][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.270120][ T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.282579][ T60] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.686964][ T60] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 147.706518][ T60] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.731906][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.748092][ T60] usb 3-1: Product: syz [ 147.757220][ T60] usb 3-1: Manufacturer: syz [ 147.765796][ T60] usb 3-1: SerialNumber: syz [ 147.834478][ T2313] loop1: detected capacity change from 0 to 512 [ 148.184705][ T2313] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.189844][ T60] usb 3-1: 0:2 : does not exist [ 148.208313][ T2313] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.238176][ T60] usb 3-1: USB disconnect, device number 7 [ 148.343802][ T2322] loop0: detected capacity change from 0 to 512 [ 148.357066][ T2322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.365865][ T2322] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.472: inode #0: comm syz.0.472: iget: illegal inode # [ 148.379302][ T2322] EXT4-fs (loop0): Remounting filesystem read-only [ 148.385679][ T2322] EXT4-fs (loop0): get orphan inode failed [ 148.393999][ T2322] EXT4-fs (loop0): mount failed [ 148.811385][ T2329] usb usb8: usbfs: process 2329 (syz.2.475) did not claim interface 0 before use [ 149.938113][ T293] EXT4-fs (loop1): unmounting filesystem. [ 150.825490][ T2343] incfs: Options parsing error. -22 [ 150.831777][ T2343] incfs: mount failed -22 [ 151.358158][ T2359] tipc: Enabling of bearer rejected, already enabled [ 151.472011][ T2369] loop1: detected capacity change from 0 to 512 [ 151.570794][ T2369] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.623645][ T2369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 151.637085][ T2369] System zones: 1-12 [ 151.647596][ T2369] EXT4-fs (loop1): 1 truncate cleaned up [ 151.653061][ T2369] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.667409][ T2362] fuse: Unknown parameter 'w`5Ž¹Ã± ³ÚokÛÚ /×J{îÉc|ot°‹‰µÕ&‡>ï´3a£5ø²±ËOé!éô¡^Æ>VžŒÇÊÉöÄ° [ 151.667409][ T2362] ÓÒ0x0000000000000006' [ 151.707305][ T293] EXT4-fs (loop1): unmounting filesystem. [ 151.713178][ T2378] loop2: detected capacity change from 0 to 512 [ 151.737057][ T2378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 151.747387][ T2370] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 151.756501][ T28] audit: type=1400 audit(1742698330.263:507): avc: denied { relabelto } for pid=2361 comm="syz.0.484" name="93" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 151.782121][ T28] audit: type=1400 audit(1742698330.263:508): avc: denied { associate } for pid=2361 comm="syz.0.484" name="93" dev="tmpfs" ino=533 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 151.810332][ T2378] EXT4-fs (loop2): 1 truncate cleaned up [ 151.815871][ T2378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.902998][ T28] audit: type=1400 audit(1742698330.343:509): avc: denied { mount } for pid=2377 comm="syz.2.488" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 152.747215][ T2384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.224049][ T28] audit: type=1400 audit(1742698331.733:510): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 153.228514][ T295] EXT4-fs (loop2): unmounting filesystem. [ 154.087198][ T2367] Bluetooth: hci0: command 0x1003 tx timeout [ 154.087227][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.423252][ T28] audit: type=1400 audit(1742698332.923:511): avc: denied { write } for pid=294 comm="syz-executor" name="93" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 154.453526][ T2397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.487403][ T2397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.516527][ T28] audit: type=1400 audit(1742698332.923:512): avc: denied { remove_name } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 154.542471][ T28] audit: type=1400 audit(1742698333.023:513): avc: denied { getopt } for pid=2394 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.806855][ T2404] usb usb8: usbfs: process 2404 (syz.2.490) did not claim interface 0 before use [ 154.818686][ T2403] loop1: detected capacity change from 0 to 256 [ 154.900089][ T2403] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 154.948861][ T28] audit: type=1400 audit(1742698333.463:514): avc: denied { setattr } for pid=2400 comm="syz.1.493" name=".pending_reads" dev="loop1" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.099676][ T28] audit: type=1400 audit(1742698333.503:515): avc: denied { rmdir } for pid=294 comm="syz-executor" name="93" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 155.222067][ T2410] loop0: detected capacity change from 0 to 256 [ 155.447092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 155.455207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.463388][ T2410] FAT-fs (loop0): bogus number of FAT sectors [ 155.469393][ T2410] FAT-fs (loop0): Can't find a valid FAT filesystem [ 155.487447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 155.495597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.503737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.525525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.551831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.556850][ T465] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.560310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.661229][ T2413] tipc: Started in network mode [ 155.669291][ T2413] tipc: Node identity ac14140f, cluster identity 4711 [ 155.676519][ T2413] tipc: New replicast peer: 255.255.255.255 [ 155.683410][ T2413] tipc: Enabled bearer , priority 10 [ 155.729257][ T2419] syz.2.496 uses obsolete (PF_INET,SOCK_PACKET) [ 156.410413][ T2432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2432 comm=syz.0.500 [ 156.558469][ T2432] bridge0: port 2(gretap1) entered blocking state [ 156.572023][ T2432] bridge0: port 2(gretap1) entered disabled state [ 156.612952][ T2432] device gretap1 entered promiscuous mode [ 156.622372][ T28] audit: type=1400 audit(1742698335.133:516): avc: denied { getopt } for pid=2439 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.646182][ T2432] bridge0: port 2(gretap1) entered blocking state [ 156.652482][ T2432] bridge0: port 2(gretap1) entered forwarding state [ 156.690325][ T2432] loop0: detected capacity change from 0 to 16 [ 156.706755][ T2432] erofs: Unknown parameter '18446744073709551615ÿÿ' [ 156.709878][ C1] bridge0: received packet on gretap1 with own address as source address (addr:f2:4f:c5:52:a9:ed, vlan:0) [ 156.797016][ T890] tipc: Node number set to 2886997007 [ 157.049935][ T2454] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 157.734049][ C1] bridge0: received packet on gretap1 with own address as source address (addr:f2:4f:c5:52:a9:ed, vlan:0) [ 157.745625][ C1] bridge0: received packet on gretap1 with own address as source address (addr:f2:4f:c5:52:a9:ed, vlan:0) [ 157.768839][ T2438] loop2: detected capacity change from 0 to 40427 [ 157.881570][ T2438] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 157.898188][ T2460] tipc: Enabling of bearer rejected, already enabled [ 157.918017][ T2438] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 158.008644][ T2438] F2FS-fs (loop2): invalid crc value [ 158.103725][ T2438] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 158.226023][ T2438] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 158.243170][ T2438] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 159.007546][ C1] bridge0: received packet on gretap1 with own address as source address (addr:f2:4f:c5:52:a9:ed, vlan:0) [ 159.019148][ C1] bridge0: received packet on gretap1 with own address as source address (addr:f2:4f:c5:52:a9:ed, vlan:0) [ 159.048061][ T2474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.510'. [ 160.062690][ C1] bridge0: received packet on gretap1 with own address as source address (addr:f2:4f:c5:52:a9:ed, vlan:0) [ 160.161859][ T2464] loop0: detected capacity change from 0 to 40427 [ 160.191917][ T2464] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 160.210989][ T2464] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 160.315351][ T2464] F2FS-fs (loop0): invalid crc value [ 160.379690][ T2464] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 160.401702][ T2490] netlink: 'syz.3.513': attribute type 7 has an invalid length. [ 160.409256][ T2490] netlink: 'syz.3.513': attribute type 8 has an invalid length. [ 160.693772][ T2464] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 160.703765][ T2464] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.810789][ T300] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.987209][ T300] usb 2-1: Using ep0 maxpacket: 8 [ 161.994592][ T300] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.069844][ T300] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.088160][ T300] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.104045][ T300] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.195121][ T2506] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 162.226983][ T2505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.515'. [ 162.438635][ T300] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.451676][ T300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.463668][ T300] usb 2-1: Product: syz [ 162.548980][ T300] usb 2-1: Manufacturer: syz [ 162.557603][ T300] usb 2-1: SerialNumber: syz [ 162.615468][ T28] audit: type=1400 audit(1742698341.123:517): avc: denied { watch } for pid=2512 comm="syz.0.518" path="/99/file0" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.928677][ T300] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 162.952918][ T2518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 162.963560][ T2518] device gretap2 entered promiscuous mode [ 162.979131][ T2511] loop2: detected capacity change from 0 to 128 [ 162.985296][ T28] audit: type=1400 audit(1742698341.493:518): avc: denied { create } for pid=2517 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.016090][ C1] bridge0: received packet on gretap1 with own address as source address (addr:f2:4f:c5:52:a9:ed, vlan:0) [ 163.027356][ T300] cdc_ncm 2-1:1.0: bind() failure [ 163.027696][ T2511] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.034724][ T300] usb 2-1: USB disconnect, device number 4 [ 163.053084][ T2511] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.169423][ T2526] loop2: detected capacity change from 0 to 512 [ 163.176331][ T2526] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.185649][ T2526] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 163.196410][ T2530] loop0: detected capacity change from 0 to 16 [ 163.203062][ T2530] erofs: Unknown parameter '' [ 163.211575][ T2526] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 163.220612][ T2526] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 163.228562][ T2526] System zones: 0-2, 18-18, 34-34 [ 163.234464][ T2526] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 163.249158][ T2526] EXT4-fs (loop2): 1 truncate cleaned up [ 163.254699][ T2526] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 166.165869][ T379] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.246783][ T295] EXT4-fs (loop2): unmounting filesystem. [ 166.351681][ T2561] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 166.417087][ T379] usb 1-1: Using ep0 maxpacket: 32 [ 166.451930][ T379] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 166.932231][ T379] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 167.137148][ T379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.145030][ T379] usb 1-1: Product: syz [ 167.151218][ T379] usb 1-1: Manufacturer: syz [ 167.155679][ T379] usb 1-1: SerialNumber: syz [ 167.295441][ T379] usb 1-1: config 0 descriptor?? [ 167.481264][ T2538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.665251][ C0] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.812504][ T28] audit: type=1400 audit(1742698347.323:519): avc: denied { block_suspend } for pid=2575 comm="syz.2.537" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.899549][ T300] usb 1-1: USB disconnect, device number 9 [ 170.430572][ T2605] futex_wake_op: syz.1.542 tries to shift op by -1; fix this program [ 170.441541][ T2605] loop1: detected capacity change from 0 to 512 [ 170.505156][ T2605] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 170.514170][ T2605] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.702705][ T2626] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 172.170546][ C1] bridge0: received packet on gretap1 with own address as source address (addr:f2:4f:c5:52:a9:ed, vlan:0) [ 172.605331][ T2639] netlink: 'syz.2.550': attribute type 4 has an invalid length. [ 172.756004][ T2639] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.550'. [ 172.826856][ T2643] loop2: detected capacity change from 0 to 1024 [ 172.842120][ T2631] loop0: detected capacity change from 0 to 40427 [ 172.853002][ T2643] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 172.879072][ T2643] EXT4-fs (loop2): can't mount with commit=3, fs mounted w/o journal [ 172.887537][ T2631] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 172.899485][ T2631] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 172.908789][ T2631] F2FS-fs (loop0): invalid crc value [ 172.915470][ T2631] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 172.945374][ T2643] loop2: detected capacity change from 0 to 1024 [ 172.953329][ T2643] EXT4-fs: Ignoring removed orlov option [ 172.963499][ T2631] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 172.970500][ T2631] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 172.972180][ T2643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 173.490973][ T293] EXT4-fs (loop1): unmounting filesystem. [ 177.759802][ T2674] EXT4-fs (loop2): unmounting filesystem. [ 177.827780][ T2669] device syzkaller0 entered promiscuous mode [ 178.866479][ T2694] loop1: detected capacity change from 0 to 512 [ 179.499111][ T2707] futex_wake_op: syz.0.566 tries to shift op by -1; fix this program [ 179.510086][ T2707] loop0: detected capacity change from 0 to 512 [ 179.529289][ T2707] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 180.836539][ T2707] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.972175][ T2723] futex_wake_op: syz.3.569 tries to shift op by -1; fix this program [ 181.397043][ T2726] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 182.822045][ T294] EXT4-fs (loop0): unmounting filesystem. [ 182.921008][ T2756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 182.940290][ T2756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 182.949549][ T2756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 182.965555][ T2756] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 182.982713][ T2760] loop1: detected capacity change from 0 to 128 [ 183.003428][ T2760] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 183.036676][ T2756] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 550) [ 183.067025][ T2756] FAT-fs (loop1): Filesystem has been set read-only [ 183.117717][ T293] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 550) [ 183.161822][ T2764] loop0: detected capacity change from 0 to 512 [ 183.197449][ T2766] bridge0: port 3(gretap0) entered blocking state [ 183.205041][ T2764] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.224040][ T2766] bridge0: port 3(gretap0) entered disabled state [ 183.230693][ T2764] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.241900][ T2766] device gretap0 entered promiscuous mode [ 183.257275][ T2766] bridge0: port 3(gretap0) entered blocking state [ 183.263532][ T2766] bridge0: port 3(gretap0) entered forwarding state [ 183.293248][ T2767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.580'. [ 186.880789][ T294] EXT4-fs (loop0): unmounting filesystem. [ 187.007041][ C1] bridge0: received packet on gretap1 with own address as source address (addr:f2:4f:c5:52:a9:ed, vlan:0) [ 187.039601][ T2799] futex_wake_op: syz.0.585 tries to shift op by -1; fix this program [ 187.050500][ T2799] loop0: detected capacity change from 0 to 512 [ 187.108276][ T2795] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 187.170910][ T2799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 187.179848][ T2799] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.330778][ T2811] netlink: 104 bytes leftover after parsing attributes in process `syz.3.593'. [ 187.348503][ T2811] syz.3.593 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 187.814216][ T28] audit: type=1400 audit(1742698366.323:520): avc: denied { create } for pid=2818 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 187.856293][ T28] audit: type=1400 audit(1742698366.333:521): avc: denied { sys_admin } for pid=2818 comm="syz.2.595" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 187.882475][ T2806] loop1: detected capacity change from 0 to 40427 [ 187.916964][ T28] audit: type=1400 audit(1742698366.353:522): avc: denied { associate } for pid=2822 comm="syz.2.595" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 187.945004][ T2806] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 187.956979][ T2806] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 187.981799][ T2806] F2FS-fs (loop1): invalid crc value [ 188.020614][ T2827] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 188.032001][ T2827] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.039088][ T2827] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.052038][ T2806] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 188.140579][ T2806] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 188.151872][ T2806] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.950227][ T2846] fuse: Bad value for 'fd' [ 189.263177][ T2863] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 190.076063][ T294] EXT4-fs (loop0): unmounting filesystem. [ 190.193296][ T2876] loop0: detected capacity change from 0 to 128 [ 191.709639][ T2910] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 192.488208][ T28] audit: type=1326 audit(1742698371.003:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1858d169 code=0x7ffc0000 [ 192.607628][ T28] audit: type=1326 audit(1742698371.023:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1858d169 code=0x7ffc0000 [ 192.890793][ T28] audit: type=1326 audit(1742698371.023:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f1f1858d169 code=0x7ffc0000 [ 193.094487][ T28] audit: type=1326 audit(1742698371.153:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1858d169 code=0x7ffc0000 [ 193.136578][ T2897] fuse: Bad value for 'fd' [ 193.151143][ T28] audit: type=1326 audit(1742698371.153:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1858d169 code=0x7ffc0000 [ 193.193767][ T28] audit: type=1326 audit(1742698371.163:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f1858d169 code=0x7ffc0000 [ 193.239625][ T28] audit: type=1326 audit(1742698371.163:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1858d169 code=0x7ffc0000 [ 193.266300][ T2929] loop0: detected capacity change from 0 to 40427 [ 193.276519][ T2929] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 193.288947][ T2929] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 193.299856][ T2929] F2FS-fs (loop0): invalid crc value [ 193.314048][ T2929] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 193.357577][ T2929] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 193.366569][ T2929] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 193.597484][ T2897] syz.2.614 (2897) used greatest stack depth: 16784 bytes left [ 194.403522][ T2972] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 194.767859][ T2823] syz.2.595 (2823) used greatest stack depth: 14736 bytes left [ 195.137536][ T2983] loop1: detected capacity change from 0 to 512 [ 195.169821][ T2983] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.178710][ T2983] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.436178][ T2988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.640'. [ 196.265409][ T2993] fuse: Bad value for 'fd' [ 196.419526][ T293] EXT4-fs (loop1): unmounting filesystem. [ 196.502102][ T3004] loop1: detected capacity change from 0 to 2048 [ 196.545375][ T3004] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.564011][ T3004] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.652191][ T3004] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.645: bg 0: block 345: padding at end of block bitmap is not set [ 196.787360][ T293] EXT4-fs (loop1): unmounting filesystem. [ 196.904468][ T3021] loop1: detected capacity change from 0 to 128 [ 196.989261][ T3018] loop0: detected capacity change from 0 to 40427 [ 197.060490][ T3018] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 198.289004][ T3018] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 198.339278][ T3018] F2FS-fs (loop0): invalid crc value [ 198.464760][ T3018] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 198.547652][ T3018] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 198.554983][ T3018] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.635621][ T3034] loop1: detected capacity change from 0 to 40427 [ 198.692049][ T3045] netlink: 48 bytes leftover after parsing attributes in process `syz.2.656'. [ 198.701019][ T28] audit: type=1400 audit(1742698377.203:530): avc: denied { nlmsg_read } for pid=3043 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.716972][ T3034] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 198.735798][ T3034] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 198.762904][ T3034] F2FS-fs (loop1): invalid crc value [ 198.771435][ T3034] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 198.951922][ T3034] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 198.962122][ T3034] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 201.131200][ T3079] fuse: Bad value for 'group_id' [ 201.343567][ T28] audit: type=1400 audit(1742698379.613:531): avc: denied { ioctl } for pid=3072 comm="syz.4.665" path="socket:[26111]" dev="sockfs" ino=26111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.379382][ T3075] loop1: detected capacity change from 0 to 40427 [ 201.390462][ T28] audit: type=1400 audit(1742698379.673:532): avc: denied { create } for pid=3072 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.498640][ T28] audit: type=1400 audit(1742698379.763:533): avc: denied { setopt } for pid=3072 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.537285][ T3075] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 201.545729][ T3075] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 201.770868][ T28] audit: type=1400 audit(1742698379.983:534): avc: denied { read } for pid=3077 comm="syz.0.662" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 201.798721][ T28] audit: type=1400 audit(1742698379.983:535): avc: denied { open } for pid=3077 comm="syz.0.662" path="net:[4026532395]" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 201.822160][ T3087] 9pnet_fd: Insufficient options for proto=fd [ 201.828723][ T3075] F2FS-fs (loop1): invalid crc value [ 201.888772][ T3075] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 201.914078][ T3094] futex_wake_op: syz.4.669 tries to shift op by -1; fix this program [ 201.956044][ T3075] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 201.965174][ T3075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 202.071832][ T3091] loop0: detected capacity change from 0 to 40427 [ 202.086698][ T3091] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 202.106270][ T3091] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 202.115442][ T3091] F2FS-fs (loop0): invalid crc value [ 202.122477][ T3091] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.179596][ T3091] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 202.186548][ T3091] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 202.221955][ T28] audit: type=1400 audit(1742698380.733:536): avc: denied { read } for pid=3090 comm="syz.0.668" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 202.245397][ T28] audit: type=1400 audit(1742698380.733:537): avc: denied { open } for pid=3090 comm="syz.0.668" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 202.781356][ T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 202.841037][ T3115] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 203.082921][ T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 204.515090][ T3137] xt_bpf: check failed: parse error [ 204.521498][ T3139] xt_bpf: check failed: parse error [ 204.567060][ T3124] loop1: detected capacity change from 0 to 40427 [ 204.588806][ T3124] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 204.594979][ T3124] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 204.604566][ T3124] F2FS-fs (loop1): invalid crc value [ 204.611055][ T3124] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 204.644052][ T3124] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 204.651385][ T3124] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 204.697062][ T28] audit: type=1400 audit(1742698383.183:538): avc: denied { name_bind } for pid=3138 comm="syz.2.679" src=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 204.786512][ T28] audit: type=1400 audit(1742698383.183:539): avc: denied { node_bind } for pid=3138 comm="syz.2.679" saddr=2001:: src=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 205.620773][ T649] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.107076][ T3197] futex_wake_op: syz.2.696 tries to shift op by -1; fix this program [ 207.217477][ T649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 207.237274][ T649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 207.246762][ T649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 207.256289][ T649] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 207.265247][ T649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.341258][ T649] usb 1-1: config 0 descriptor?? [ 207.347302][ T649] usb 1-1: MIDIStreaming interface descriptor not found [ 207.547613][ T3216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.555992][ T3216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.564936][ T6] usb 1-1: USB disconnect, device number 10 [ 208.926385][ T3227] loop0: detected capacity change from 0 to 40427 [ 208.987468][ T3227] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 208.996347][ T3227] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 209.007978][ T3227] F2FS-fs (loop0): invalid crc value [ 209.026832][ T3244] 9p: Unknown access argument 00000000000000000000ÝèIJ­Àhð|žIÙ½«Tâ%à 2DÂ0òðMPìIûàßéíœFc!€C= [ 209.026832][ T3244] M€Âxϱü·YÌd¬çЯ&[|ßZÍbüB, priority 10 [ 247.341120][ T4083] loop1: detected capacity change from 0 to 40427 [ 247.359838][ T4083] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 247.366253][ T4083] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 247.379227][ T4083] F2FS-fs (loop1): invalid crc value [ 247.389439][ T4083] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 247.496801][ T4083] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 247.503773][ T4083] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 248.135672][ T1987] tipc: Node number set to 2886997007 [ 250.677503][ T4120] futex_wake_op: syz.2.955 tries to shift op by -1; fix this program [ 250.767296][ T4124] tipc: Enabling of bearer rejected, already enabled [ 250.929153][ T4131] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 251.128274][ T4130] loop1: detected capacity change from 0 to 40427 [ 251.135533][ T4130] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 251.142114][ T4130] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 251.151964][ T4130] F2FS-fs (loop1): invalid crc value [ 251.170136][ T4130] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 251.239101][ T4130] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 251.248562][ T4130] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 251.583478][ T4150] syz.3.962[4150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.583542][ T4150] syz.3.962[4150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.731076][ T4165] xt_time: unknown flags 0xc [ 253.099389][ T4162] loop1: detected capacity change from 0 to 40427 [ 253.117756][ T4162] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 253.124047][ T4162] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 253.133350][ T4162] F2FS-fs (loop1): invalid crc value [ 253.141193][ T4162] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 253.172694][ T4162] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 253.179619][ T4162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 254.050324][ T4183] tipc: Enabling of bearer rejected, already enabled [ 256.795543][ T4209] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 257.721179][ T4214] futex_wake_op: syz.4.980 tries to shift op by -1; fix this program [ 257.741857][ T4216] futex_wake_op: syz.0.978 tries to shift op by -1; fix this program [ 257.759226][ T4216] loop0: detected capacity change from 0 to 512 [ 257.802305][ T4216] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 257.813913][ T4216] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.933239][ T4235] tipc: Started in network mode [ 258.938127][ T4235] tipc: Node identity ac14140f, cluster identity 4711 [ 258.944811][ T4235] tipc: New replicast peer: 255.255.255.255 [ 258.957630][ T4235] tipc: Enabled bearer , priority 10 [ 259.966964][ T24] tipc: Node number set to 2886997007 [ 260.047432][ T28] audit: type=1400 audit(1742698438.563:561): avc: denied { mounton } for pid=4254 comm="syz.3.989" path="/212/file0" dev="tmpfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 261.078550][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 262.021570][ T4262] loop1: detected capacity change from 0 to 128 [ 262.028262][ T4262] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.108224][ T294] EXT4-fs (loop0): unmounting filesystem. [ 262.125927][ T4272] tipc: Enabling of bearer rejected, already enabled [ 263.404008][ T4299] futex_wake_op: syz.3.1003 tries to shift op by -1; fix this program [ 263.628247][ T4303] futex_wake_op: syz.4.1005 tries to shift op by -1; fix this program [ 264.186708][ T4314] futex_wake_op: syz.1.1007 tries to shift op by -1; fix this program [ 264.197037][ T4314] loop1: detected capacity change from 0 to 512 [ 264.209804][ T4314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 264.218662][ T4314] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.705422][ T4323] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 266.150871][ T4335] tipc: Enabling of bearer rejected, already enabled [ 266.328215][ T4339] loop0: detected capacity change from 0 to 40427 [ 266.377725][ T4339] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 266.384096][ T4339] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 266.409894][ T4339] F2FS-fs (loop0): invalid crc value [ 266.462469][ T4339] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 266.607973][ T4339] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 266.615409][ T4339] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 266.652116][ T4354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'. [ 266.832528][ T4351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1016'. [ 267.145359][ T4372] tipc: Enabling of bearer rejected, already enabled [ 267.290823][ T293] EXT4-fs (loop1): unmounting filesystem. [ 267.583052][ T4379] loop1: detected capacity change from 0 to 40427 [ 267.590259][ T4383] futex_wake_op: syz.4.1025 tries to shift op by -1; fix this program [ 267.612388][ T4379] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 267.625876][ T4379] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 267.648479][ T4379] F2FS-fs (loop1): invalid crc value [ 267.671865][ T4379] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 267.730433][ T4379] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 267.747113][ T4379] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 267.802076][ T4393] futex_wake_op: syz.0.1027 tries to shift op by -1; fix this program [ 267.813334][ T4393] loop0: detected capacity change from 0 to 512 [ 267.831506][ T4393] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 267.840448][ T4393] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.398824][ T4419] tipc: Enabling of bearer rejected, already enabled [ 269.575046][ T4423] futex_wake_op: syz.2.1034 tries to shift op by -1; fix this program [ 270.778771][ T4436] loop1: detected capacity change from 0 to 40427 [ 270.791493][ T4436] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 270.801625][ T4436] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 270.810654][ T4436] F2FS-fs (loop1): invalid crc value [ 270.817596][ T294] EXT4-fs (loop0): unmounting filesystem. [ 270.825764][ T4436] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 270.860606][ T4436] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 270.867812][ T4436] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 272.274255][ T4470] tipc: Enabling of bearer rejected, already enabled [ 272.510030][ T4472] loop0: detected capacity change from 0 to 40427 [ 272.524688][ T4472] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 272.551213][ T4472] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 272.560330][ T4472] F2FS-fs (loop0): invalid crc value [ 272.628579][ T4472] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 272.769619][ T4488] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 272.863450][ T4472] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 272.870373][ T4472] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 273.166960][ T24] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 273.347714][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 273.355975][ T24] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 273.365998][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.376488][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.386164][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.394200][ T24] usb 2-1: Product: syz [ 273.403067][ T24] usb 2-1: Manufacturer: syz [ 273.408004][ T24] usb 2-1: SerialNumber: syz [ 273.574460][ T4511] loop0: detected capacity change from 0 to 1024 [ 273.793570][ T4511] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 274.501655][ T4518] fuse: Bad value for 'group_id' [ 275.038867][ T4530] tipc: Enabling of bearer rejected, already enabled [ 275.668185][ T4541] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 276.118384][ T28] audit: type=1400 audit(1742698454.633:562): avc: denied { mount } for pid=4550 comm="syz.4.1067" name="/" dev="configfs" ino=14432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 276.132450][ T24] usb 2-1: 0:2 : does not exist [ 276.179302][ T24] usb 2-1: USB disconnect, device number 8 [ 277.392936][ T4567] tipc: Enabling of bearer rejected, already enabled [ 278.137036][ T4588] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 278.658072][ T4589] overlayfs: failed to clone upperpath [ 279.140493][ T465] udevd[465]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 279.209006][ T4598] futex_wake_op: syz.1.1081 tries to shift op by -1; fix this program [ 279.250621][ T4598] loop1: detected capacity change from 0 to 512 [ 279.381216][ T4598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 279.414614][ T4598] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.469030][ T4606] futex_wake_op: syz.2.1084 tries to shift op by -1; fix this program [ 279.679021][ T4611] loop0: detected capacity change from 0 to 512 [ 279.685647][ T4611] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.692307][ T4611] ext3: Unknown parameter 'fsmagic' [ 279.834741][ T4613] tipc: Enabling of bearer rejected, already enabled [ 280.101742][ T4624] futex_wake_op: syz.3.1090 tries to shift op by -1; fix this program [ 280.330961][ T4633] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 281.331951][ T4649] tipc: Enabling of bearer rejected, already enabled [ 282.336967][ T293] EXT4-fs (loop1): unmounting filesystem. [ 282.526641][ T4677] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 283.139898][ T4684] tipc: Enabling of bearer rejected, already enabled [ 283.205389][ T4690] overlayfs: failed to clone upperpath [ 283.380218][ T4696] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 283.744376][ T4707] futex_wake_op: syz.2.1116 tries to shift op by -1; fix this program [ 284.185368][ T4716] futex_wake_op: syz.1.1119 tries to shift op by -1; fix this program [ 284.196475][ T4716] loop1: detected capacity change from 0 to 512 [ 284.219038][ T4716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 284.227894][ T4716] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.055246][ T28] audit: type=1400 audit(1742698463.553:563): avc: denied { read } for pid=4725 comm="syz.0.1120" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 285.105407][ T28] audit: type=1400 audit(1742698463.553:564): avc: denied { open } for pid=4725 comm="syz.0.1120" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 285.321437][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 285.333360][ T4735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1121'. [ 286.749199][ T28] audit: type=1400 audit(1742698464.953:565): avc: denied { ioctl } for pid=4725 comm="syz.0.1120" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 287.011411][ T4752] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 287.197321][ T293] EXT4-fs (loop1): unmounting filesystem. [ 287.360253][ T4758] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 288.967503][ T4765] overlayfs: failed to clone upperpath [ 289.582415][ T4782] futex_wake_op: syz.0.1136 tries to shift op by -1; fix this program [ 289.593905][ T4782] loop0: detected capacity change from 0 to 512 [ 289.618969][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'. [ 289.698738][ T4782] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 289.708927][ T4782] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.257558][ T4799] loop1: detected capacity change from 0 to 256 [ 290.306796][ T4799] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 290.784795][ T4809] futex_wake_op: syz.4.1142 tries to shift op by -1; fix this program [ 290.925583][ T4816] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 293.008309][ T4832] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 293.335568][ T4844] overlayfs: failed to clone upperpath [ 293.746030][ T4837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'. [ 293.756293][ T4837] device batadv_slave_0 entered promiscuous mode [ 294.687089][ T4784] ------------[ cut here ]------------ [ 294.692403][ T4784] kernel BUG at fs/buffer.c:2714! [ 294.715642][ T4784] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 294.721553][ T4784] CPU: 0 PID: 4784 Comm: kmmpd-loop0 Not tainted 6.1.128-syzkaller-00029-g5145d157731f #0 [ 294.731275][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.741167][ T4784] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 294.746374][ T4784] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 bc e6 ff e9 b0 fe ff ff e8 ba 12 9f ff 0f 0b e8 b3 12 9f ff <0f> 0b e8 ac 12 9f ff 0f 0b e8 a5 12 9f ff 0f 0b e8 9e 12 9f ff 0f [ 294.765812][ T4784] RSP: 0018:ffffc9000dcefc20 EFLAGS: 00010293 [ 294.771716][ T4784] RAX: ffffffff81d683dd RBX: 0000000000000000 RCX: ffff888119900000 [ 294.779530][ T4784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.787340][ T4784] RBP: ffffc9000dcefc70 R08: ffffffff81d67fb0 R09: ffffed10200bbad3 [ 294.795147][ T4784] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 294.802959][ T4784] R13: 1ffff110200bbad2 R14: ffff8881005dd690 R15: 0000000000003801 [ 294.810774][ T4784] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 294.819535][ T4784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.825957][ T4784] CR2: 00007fff4622eec8 CR3: 000000012f5d7000 CR4: 00000000003506b0 [ 294.833772][ T4784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 294.841586][ T4784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 294.849402][ T4784] Call Trace: [ 294.852522][ T4784] [ 294.855303][ T4784] ? __die_body+0x62/0xb0 [ 294.859465][ T4784] ? die+0x88/0xb0 [ 294.863046][ T4784] ? do_trap+0x103/0x330 [ 294.867101][ T4784] ? submit_bh_wbc+0x4cd/0x4f0 [ 294.871698][ T4784] ? handle_invalid_op+0x95/0xc0 [ 294.876468][ T4784] ? submit_bh_wbc+0x4cd/0x4f0 [ 294.881071][ T4784] ? exc_invalid_op+0x32/0x50 [ 294.885586][ T4784] ? asm_exc_invalid_op+0x1b/0x20 [ 294.890447][ T4784] ? submit_bh_wbc+0xa0/0x4f0 [ 294.894959][ T4784] ? submit_bh_wbc+0x4cd/0x4f0 [ 294.899556][ T4784] ? submit_bh_wbc+0x4cd/0x4f0 [ 294.904155][ T4784] ? __kasan_check_read+0x11/0x20 [ 294.909017][ T4784] submit_bh+0x1d/0x30 [ 294.912923][ T4784] write_mmp_block_thawed+0x3a0/0x570 [ 294.918186][ T4784] ? read_mmp_block+0x7d0/0x7d0 [ 294.922829][ T4784] ? update_process_times+0x1b0/0x1b0 [ 294.928036][ T4784] write_mmp_block+0x12b/0x2a0 [ 294.932638][ T4784] kmmpd+0x40c/0xa10 [ 294.936362][ T4784] ? write_mmp_block_thawed+0x570/0x570 [ 294.941744][ T4784] ? __kthread_parkme+0x12d/0x180 [ 294.946601][ T4784] kthread+0x26d/0x300 [ 294.950503][ T4784] ? write_mmp_block_thawed+0x570/0x570 [ 294.955886][ T4784] ? kthread_blkcg+0xd0/0xd0 [ 294.960327][ T4784] ret_from_fork+0x1f/0x30 [ 294.964566][ T4784] [ 294.967443][ T4784] Modules linked in: [ 295.029210][ T4862] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 295.041825][ T4784] ---[ end trace 0000000000000000 ]--- [ 295.047421][ T4784] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 295.052683][ T4784] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 bc e6 ff e9 b0 fe ff ff e8 ba 12 9f ff 0f 0b e8 b3 12 9f ff <0f> 0b e8 ac 12 9f ff 0f 0b e8 a5 12 9f ff 0f 0b e8 9e 12 9f ff 0f [ 295.072709][ T4784] RSP: 0018:ffffc9000dcefc20 EFLAGS: 00010293 [ 295.078994][ T4784] RAX: ffffffff81d683dd RBX: 0000000000000000 RCX: ffff888119900000 [ 295.095098][ T4784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.111806][ T4784] RBP: ffffc9000dcefc70 R08: ffffffff81d67fb0 R09: ffffed10200bbad3 [ 295.135991][ T4784] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 295.151735][ T4784] R13: 1ffff110200bbad2 R14: ffff8881005dd690 R15: 0000000000003801 [ 295.168394][ T4784] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 295.199256][ T4784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.205814][ T4784] CR2: 00007f5667171d58 CR3: 000000011fd37000 CR4: 00000000003506b0 [ 295.215198][ T4784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.223803][ T4784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 295.262892][ T4784] Kernel panic - not syncing: Fatal exception [ 295.269089][ T4784] Kernel Offset: disabled [ 295.273215][ T4784] Rebooting in 86400 seconds..