last executing test programs: 38.369127814s ago: executing program 1 (id=91): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20000010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x301400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") ftruncate(0xffffffffffffffff, 0x6000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x4000, 0x1, 0x2) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) 38.185903692s ago: executing program 1 (id=95): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x71d3754b44c8b55a) fcntl$dupfd(r3, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xfff7}}}}}}}}}, 0x0) syz_read_part_table(0x105b, &(0x7f0000001080)="$eJzsz7FRwzAYBeAnWxZ2Zc8CNXd0TMAKjEDthmXYhA2yTXJ2XGSCJMX3VdLTO/33h4fqkzYe55Z0P0OS+rJd/1M+h0wpyTjV5Pttrx9OpV+2bpu3rCRZkvV4/Ng/eO9uJ9Wky1rbbzvP1+Q1X393WhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntolAAD//2j9B+s=") 36.902934373s ago: executing program 1 (id=101): futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={{}, {0x77359400}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = openat(0xffffffffffffffff, 0x0, 0x10800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0x8, 0x590c0d22, 0x0, 0x9, 0x7, 0x3, 0x0, 0x0, 0x2}}, 0x50) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, @mcast2, {[], {0x0, 0xe23, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000640)=@ethernet={0x1, @broadcast}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002a40)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002c00)={'tunl0\x00', &(0x7f0000000340)={'sit0\x00', r7, 0x7800, 0x10, 0x9, 0xb, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x67, 0x0, 0x6, 0x2f, 0x0, @empty, @empty}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x4e23, 0x7c9a, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x2b, r7, r4}, {0x6, 0x0, 0x2ab, 0x9, 0x5, 0x40, 0x2, 0x6}, {0x81, 0x7, 0x4ab, 0x2}, 0x17, 0x6e6bb6, 0x2, 0x1, 0x1, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x3501, 0x0, 0x2, 0x9, 0x89d8, 0x1, 0xfffffff2}}, 0xe8) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}}, 0x44) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 36.39539101s ago: executing program 3 (id=108): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x68, 0x14, 0x70b, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0x4}, {0x10, 0xc}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xfc, 0x200, 0xc, 0x1, 0x0, 0x100005}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xc, 0x8, 0xd, 0x2, 0x9, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210000, &(0x7f0000000380)={[{@nodelalloc}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x28011, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200814, &(0x7f0000010180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@nojournal_checksum}, {@usrjquota}]}, 0x8, 0x543, &(0x7f0000000540)="$eJzs3c9vG1kdAPCvnbjJZp1NFvYACNiyLBS0qvOju9EKDrQXEFqthFhx4tANiTeKYtdRnC5NyCE5InFEohIn+BO4cUDqiQMSSNzgxqUckCqIQA1SkYxmPHXc/LK3jeMk/nykycx74/j7np333sxz3RfAwLoaEdsRcSUiPoyIiSw/l21xs7klj3u8u7Wwt7u1kItG44N/5tLzSV60/U7i5ew5RyPi+9+J+FHucNz6xubKfKVSXsvSU+vV1an6xub15XyWMzs3Mzf97o13Zk+trq9Xf/Po28vv/eB3v/3Cwz9vf/0nSbGKPx1Pz7XX4zQ1q16IYlvecES814tgfTKc/f1w8SSt7VMR8Uba/idiKH03u3NEswYALoBGYyIaE+3pTv7Y9SMBgPMpuf8vRi5fyuYCipHPl0rNObzXYixfqdXX35qo3b2zGOkc1mQU8h8tV8rT2VzhZBRySXomPd5Pzx5I34iIVyPi5yMvpenSQq2y2K+LHgAYcC8fGP//M9Ic/wGAS2603wUAAM6c8R8ABo/xHwAGT3fj/2Rk3/UEAC4B9/8AMHiM/wAweDqO/ztnUw4A4Ex87/33k62xl/3/14sfb9z9ZvHj64vl+kqp+rPxiNraammpVluqlEsLjUan56vUaqszb7eS9Y3N29Xa3Tvrt5er80vl2+VCj+sDAHT26usP/pqLiO1vvJRu0baWg7EaLrd8vwsA9M1QvwsA9I3v88Dg6uIe3zQAXHKd1vI89p8I3bf4K1xU1z5r/h8Glfl/GFzPN///rVMvB3D2zP/D4Go0clbyB4AB89xz/J0+MAQujE/w+f+zHxnc7015AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CIoplsuX0oX9thOfuZLpYjxiJiMQu6j5Up5OiJeiYi/jBRGkvRMvwsNALyg/D9y2fpf1ybeLB48eyX335F0HxE//uUHv7g3v76+NpPk/6uVv34/y5+90o8KAADtbh7Oao7T2b7tRv7x7tbC0+0si/joVnNx0STuXrY1zwzHcLofjUJEjP07l6WbkuuVoVOIv70TEZ/Zr/+9tgjFdA6kufLpwfhJ7PEexN9//Vvx/9SMn38mfj49l+wL6Wvx6VMoCwyaB7f2+8nHu1tJE8vaXz6upvuj2/9o2kO9uKf9396h/i/f6v+GDsXPpW3+ait9ckkevf377x7KbEw0z+1EfG74qPi5Vvwk2lH975td1vFvn//iG8eda/wq4locHb+pmnazU+vV1an6xub15er8UnmpfGd2dm5mbvrdG+/MTqVz1M2ffzjw9E+yZe5fOfa12YkYOyb+aKv+R48/X+my/r9+8uEPv3RC/K99+ej3/7UT4idj4le7jD8/dnP0uHNJ/MVj6j98Qvwk760u4z/8++Zilw8FAM5AfWNzZb5SKa91OEiuNTs9pm8HycXQC/z6/7KLxLMpc3Zdu30+XrrkILYjzkExOh3ksz/Z81Kevh7cat6+Re9CnNBpPH0nCj3tmoAeazX6Y2dIAAAAAAAAAAAAAACAfqtvbK6MRKW8Nho9+8ZSv+sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA//+ZIMOO") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 36.11348894s ago: executing program 3 (id=109): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x800) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000002740)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{&(0x7f0000001400)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0x1c, 0x0, 0x0, &(0x7f0000002840)=ANY=[], 0x1168}}], 0x2, 0x4048044) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000400)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000104010000000000000000db9a00000005adc70001000000"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES8=r0], 0x20}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2, 0x4e23, @loopback}, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x80040, 0x0) sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)="790fd6cc80014fb3d38ac820d42816f9ade1d26a88077427746d22b3035075a48fdc50d3ba4f8e5dc2a4cf137b5a8de8e5912ad70e8059bcd3dda2bed9b2a8c99ad225f8032e480c1dcf5b8ec26e66b4f55b89b5b6427327d3b2bda3e1a0ccf77c70dd77451477025ffbe23ff3db8df17c10f0d7d26786aa8da9d8f7cead46d67b71397df7961d900e1ed90491d45319064bbc26bc02eadf342ab5894cc9e467d724a080bba7ec70bbca2c168e0c8bc676621e76093ac66e178efef803154e18b521c31497b014b1c3ac9cf24cc2e8ae8b5361c6e431ccb959d1e1540f4d59", 0xdf}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="40083ed3fead485f5c0d77fbc1b4878eccf9a78f8e4c6ccaddbb68d33787f15063c48d093109d81ab2af6e305c2b9c0462c40474a06b0e8c60f044d0316b232db716a40d102bce7cc66a94983e8b70a6517c7eadc565107787d0f2358a55485edbd69d880e9bb4abc4ce3eea165dafecf4f8da1299d1f5ba200ed99e498a4c52b845ca189a51d07ad43d0e8958e8171dd1fb99f10ab8b647acb51a572c231b5afcc92f040e8e37f7a1ad2bdc3361d300"/185], 0x30, 0x4000005}, 0x40080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0004}]}) r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x13) waitid(0x1, r6, 0x0, 0x1000000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='cmdline\x00') exit(0xffff) preadv(r8, &(0x7f0000000100)=[{&(0x7f0000000540)=""/42, 0x2a}], 0x1, 0x0, 0x2) r9 = syz_clone3(&(0x7f00000004c0)={0x4050200, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r9, r9, 0x11) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000440)={0x1, 0x0, 0x2}) 36.051242933s ago: executing program 1 (id=110): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)=0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r1, &(0x7f00000003c0)) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESHEX=r2], 0x1, 0x392, &(0x7f0000001000)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 35.468697146s ago: executing program 1 (id=112): sched_setscheduler(0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket(0xf, 0x3, 0x2) write(r0, &(0x7f0000000380)="02", 0x33fe0) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, 0x9, 0x5}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@bh}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2b, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x1, 0x1, {@in6_addr=@mcast2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004001}, 0x40080c0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, 0x2}, &(0x7f0000000340)) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 35.343338023s ago: executing program 1 (id=116): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) r2 = timerfd_create(0x9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001940)="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", 0x559, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r3, r1, r0, 0x0) 35.336899494s ago: executing program 32 (id=116): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) r2 = timerfd_create(0x9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001940)="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", 0x559, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r3, r1, r0, 0x0) 35.208325921s ago: executing program 3 (id=119): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x40, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c37693ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) (rerun: 32) getdents64(r0, &(0x7f0000000140)=""/176, 0xb0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x4, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x91, 0x5) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000600000085000000a0000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2242, 0x114) (async) r4 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0xffffffffffffffff, 0x36, &(0x7f0000019080)=ANY=[@ANYBLOB="12010102000000ff5569554efbf67d398b6a05c2004000010203010902240001010a60020903f7d2070301030809210400060122eb0b09058103ff03fe0f02"], 0x0) (async) syz_usb_control_io$uac3(r4, &(0x7f0000000040)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00') readv(r5, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000300)=""/41, 0x29}], 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210000, &(0x7f0000000380)={[{@nodelalloc}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f00000190c0)="ff528aa69c2ad788512861d086cbad79ba3dd66b4006d70a96952fd8b9a2c0bcc1d2f29c94f0", 0x26}], 0x1, 0x5412, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f00006c9000/0x4000)=nil, 0x4000, 0x1) (async) mremap(&(0x7f00006cf000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000a98000/0x4000)=nil) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x28011, r7, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200814, &(0x7f0000010180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@nojournal_checksum}, {@usrjquota}]}, 0x8, 0x543, &(0x7f0000000540)="$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") ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000140)={0x17c04, r6, 0x3052, 0x973f, 0x81, 0x1}) 34.259185752s ago: executing program 3 (id=123): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)=0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r1, &(0x7f00000003c0)) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESHEX=r2], 0x1, 0x392, &(0x7f0000001000)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 33.827324993s ago: executing program 3 (id=124): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000b80)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) setgroups(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) r3 = syz_io_uring_setup(0x4c75, &(0x7f0000000080)={0x0, 0xdbc, 0x800, 0x3, 0x3b4, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f00000001c0)={0x16, 0x1, '\x00', @zc_export={r0}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000600)={0x1, 0x0, [{0x7, 0x1000, 0x1, 0x7eba, 0xffff, 0x9, 0xfffffffc}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000cc0)='./file2\x00', 0x1000418, &(0x7f0000000440), 0x1, 0x4f1, &(0x7f0000000e40)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090", &(0x7f0000000100), 0x1003}, 0x38) 33.470922608s ago: executing program 5 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1000, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000011c0)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e760c6966", 0x23) 33.425971358s ago: executing program 3 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 33.393156105s ago: executing program 33 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 33.350947843s ago: executing program 4 (id=129): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x68, 0x14, 0x70b, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0x4}, {0x10, 0xc}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xfc, 0x200, 0xc, 0x1, 0x0, 0x100005}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xc, 0x8, 0xd, 0x2, 0x9, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210000, &(0x7f0000000380)={[{@nodelalloc}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x28011, r4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200814, &(0x7f0000010180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@nojournal_checksum}, {@usrjquota}]}, 0x8, 0x543, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000340)='./file1\x00', 0x2) 33.209343664s ago: executing program 4 (id=131): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x97) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)="00214717a70700000000030600710a5e31163ceb9d068e78bb62667a3c5fa88fa2a03af1ea2d7f9ca831570233d4ee4fac1e", 0x32}], 0x1, 0x6, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="886c", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) sendmsg$inet(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)='c', 0x1}], 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x4f) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$AUDIT_GET(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x3e8, 0xc, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x4c001) sendmmsg$inet(r5, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 32.835194263s ago: executing program 4 (id=133): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x7b) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40408c0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x1a, 0x0, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x32, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 32.664716478s ago: executing program 4 (id=134): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)=0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r1, &(0x7f00000003c0)) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESHEX=r2], 0x1, 0x392, &(0x7f0000001000)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 32.539389535s ago: executing program 4 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000000), 0x4001) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$eJzs08FLbGUUAPBzp4bp9d5zHvGgRe3e8CCwhCQSciCRYXCjYmUuWgsuaiG4cDEo46zN/oHCVDA30t6laSAKuhJpJfMPKG1mETdG7zgQtal8ovx+i/nuPZx7vvPxnQnutVwUn1w/pYWI+OPvcp5FROHm7afOQ+FxfLH1ZWWyPj408Xl8lMRXEVF597pcEt2qSff7tFNn5FEcrx4MX+bj8MXJfmktl8V3chGLEfH1+Xrx0T81nf9vZ+bh2C7vFZcas9Xl+XIhqrVm/3Rn8mIwiVicygZr52p9rf3zxv+7f3uir/afOa3WmqXjgY2jdOzi+6cf5PePWx/+epXVc/N/4GH5tD1Sje79//C8flZvjb7cnOvrfT12F1ayi/89Wz/5redO+wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6u7fJeKxqz1eX58sxptdbsn36/8s63lW+++/jHwYXJtwencu2s5Db3Ly418tlbrVkqDGwcpWMX8XS2HXizk9d7ey1wh957HLHUnr/O/T6vn9Vboy835/p63zrbXVjJ4ulfPyy+4kYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHujEotpOjSRi0jil6QbTwvXayf0c7aOZfGRwmfJ6sHw5dazwxcn+6W18Sy+8yRLPF8vdqv13PYx+Jf+DAAA//84pm1S") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f0000000380)=0xe, 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x0) syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x1ea1e2) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004010, &(0x7f0000000040)=ANY=[], 0x3, 0x210, &(0x7f0000000140)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) 32.382939438s ago: executing program 4 (id=137): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000b80)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) setgroups(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) r3 = syz_io_uring_setup(0x4c75, &(0x7f0000000080)={0x0, 0xdbc, 0x800, 0x3, 0x3b4, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f00000001c0)={0x16, 0x1, '\x00', @zc_export={r0}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000cc0)='./file2\x00', 0x1000418, &(0x7f0000000440), 0x1, 0x4f1, &(0x7f0000000e40)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090", &(0x7f0000000100), 0x1003}, 0x38) 32.310808883s ago: executing program 34 (id=137): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000b80)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) setgroups(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) r3 = syz_io_uring_setup(0x4c75, &(0x7f0000000080)={0x0, 0xdbc, 0x800, 0x3, 0x3b4, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f00000001c0)={0x16, 0x1, '\x00', @zc_export={r0}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000cc0)='./file2\x00', 0x1000418, &(0x7f0000000440), 0x1, 0x4f1, &(0x7f0000000e40)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090", &(0x7f0000000100), 0x1003}, 0x38) 31.591878025s ago: executing program 5 (id=144): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)=0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r1, &(0x7f00000003c0)) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESHEX=r2], 0x1, 0x392, &(0x7f0000001000)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 31.448683406s ago: executing program 5 (id=145): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x7b) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40408c0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x1a, 0x0, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) (fail_nth: 5) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 31.196002579s ago: executing program 5 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000000), 0x4001) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f0000000380)=0xe, 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x0) syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x1ea1e2) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004010, &(0x7f0000000040)=ANY=[], 0x3, 0x210, &(0x7f0000000140)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) 31.14428938s ago: executing program 35 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000000), 0x4001) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f0000000380)=0xe, 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x0) syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x1ea1e2) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004010, &(0x7f0000000040)=ANY=[], 0x3, 0x210, &(0x7f0000000140)="$eJzsVc2K1EAQ/jqZ6SRzEM9evCyoBzPJrIKXhfUZ/MOD4OBmZDSLspuDuyCDT+DdmwcfQ9izF99AVi8KopdVvIgt/ZfOxI7rjo4g1gfT+aa6Ul1V3fkaBALhv8Wb15/3xae1tzGABCuIjP1dWFMEDf9X8ceHPQCPbzx7Ee1bl9g8o/ngX4UQh6wf44vYuxiiAvPOr5jnZQQ1v4IAZwy/BobU8JsIcNXwAgzXDb/jeF8OaZoCZZHeulduTKZlkU2mfeSSjeSwWi8+A2StHx4xbBiTEEIwDGqX7Z3du+OyLLaOSsTMWUK0fY43nf2d23svR5VfDKzV+X2ba3pq+po1+pertzRWwXDJ8Au6N6YlZZHD1X+i5+oPG1n8WBvHgh1RxBwlZ5ksFufXCJdLtaYGTYt0aL1lzynz7z3rWqu3tCrahLkv8jBnc/Lsjv6tDJdDfFWg91uRrfRJi4iAP57zMe9U0t44/nOheb4+v91ipv8fLZ/1jinuicOtzlpL1PbR81I2xFOGUw391FLyRF0Ww2rz/nB7Z/fsdHN82wbNzmXZ+dFQCZEe/RKo4idKnwYuftLlyxnHg3FVbeV6rP+P9OhT3EDpX3Dw0twd8ttSafadz4G6O60q6F+gnpKdDjuTR2eqBAKBsHScBFOarHTZEnOb1BO8qXYEAoFAIBAIBAKBQCAQ/jV8DwAA//9N00Ii") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) 17.434960347s ago: executing program 6 (id=249): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000040)='1\x00', 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090086dd60d2330000000000000000bbff02000000000000000000000000000186009078000002001100000000000000030aa78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af18020001ffffffffffffff80260004000318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x3}]}, @func_proto, @enum={0x0, 0x1, 0x0, 0x13, 0x4, [{0x2, 0x101}]}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000900)=""/252, 0x5c, 0xfc, 0x1}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r6 = socket$inet6(0xa, 0x800, 0x101) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f00000016c0)={0x8, {{0xa, 0x4e21, 0x6, @loopback, 0xc540}}, {{0xa, 0x4e24, 0x3, @private2}}}, 0x108) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e9d, @loopback}, 0xa) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, 0x0) 17.154883976s ago: executing program 6 (id=251): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210000, &(0x7f0000000380)={[{@nodelalloc}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200814, &(0x7f0000010180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@nojournal_checksum}, {@usrjquota}]}, 0x8, 0x543, &(0x7f0000000540)="$eJzs3c9vG1kdAPCvnbjJZp1NFvYACNiyLBS0qvOju9EKDrQXEFqthFhx4tANiTeKYtdRnC5NyCE5InFEohIn+BO4cUDqiQMSSNzgxqUckCqIQA1SkYxmPHXc/LK3jeMk/nykycx74/j7np333sxz3RfAwLoaEdsRcSUiPoyIiSw/l21xs7klj3u8u7Wwt7u1kItG44N/5tLzSV60/U7i5ew5RyPi+9+J+FHucNz6xubKfKVSXsvSU+vV1an6xub15XyWMzs3Mzf97o13Zk+trq9Xf/Po28vv/eB3v/3Cwz9vf/0nSbGKPx1Pz7XX4zQ1q16IYlvecES814tgfTKc/f1w8SSt7VMR8Uba/idiKH03u3NEswYALoBGYyIaE+3pTv7Y9SMBgPMpuf8vRi5fyuYCipHPl0rNObzXYixfqdXX35qo3b2zGOkc1mQU8h8tV8rT2VzhZBRySXomPd5Pzx5I34iIVyPi5yMvpenSQq2y2K+LHgAYcC8fGP//M9Ic/wGAS2603wUAAM6c8R8ABo/xHwAGT3fj/2Rk3/UEAC4B9/8AMHiM/wAweDqO/ztnUw4A4Ex87/33k62xl/3/14sfb9z9ZvHj64vl+kqp+rPxiNraammpVluqlEsLjUan56vUaqszb7eS9Y3N29Xa3Tvrt5er80vl2+VCj+sDAHT26usP/pqLiO1vvJRu0baWg7EaLrd8vwsA9M1QvwsA9I3v88Dg6uIe3zQAXHKd1vI89p8I3bf4K1xU1z5r/h8Glfl/GFzPN///rVMvB3D2zP/D4Go0clbyB4AB89xz/J0+MAQujE/w+f+zHxnc7015AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CIoplsuX0oX9thOfuZLpYjxiJiMQu6j5Up5OiJeiYi/jBRGkvRMvwsNALyg/D9y2fpf1ybeLB48eyX335F0HxE//uUHv7g3v76+NpPk/6uVv34/y5+90o8KAADtbh7Oao7T2b7tRv7x7tbC0+0si/joVnNx0STuXrY1zwzHcLofjUJEjP07l6WbkuuVoVOIv70TEZ/Zr/+9tgjFdA6kufLpwfhJ7PEexN9//Vvx/9SMn38mfj49l+wL6Wvx6VMoCwyaB7f2+8nHu1tJE8vaXz6upvuj2/9o2kO9uKf9396h/i/f6v+GDsXPpW3+ait9ckkevf377x7KbEw0z+1EfG74qPi5Vvwk2lH975td1vFvn//iG8eda/wq4locHb+pmnazU+vV1an6xub15er8UnmpfGd2dm5mbvrdG+/MTqVz1M2ffzjw9E+yZe5fOfa12YkYOyb+aKv+R48/X+my/r9+8uEPv3RC/K99+ej3/7UT4idj4le7jD8/dnP0uHNJ/MVj6j98Qvwk760u4z/8++Zilw8FAM5AfWNzZb5SKa91OEiuNTs9pm8HycXQC/z6/7KLxLMpc3Zdu30+XrrkILYjzkExOh3ksz/Z81Kevh7cat6+Re9CnNBpPH0nCj3tmoAeazX6Y2dIAAAAAAAAAAAAAACAfqtvbK6MRKW8Nho9+8ZSv+sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA//+ZIMOO") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 16.801036981s ago: executing program 6 (id=254): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x77}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 16.311227504s ago: executing program 6 (id=255): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)=0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r1, &(0x7f00000003c0)) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESHEX=r2], 0x1, 0x392, &(0x7f0000001000)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 16.276064511s ago: executing program 6 (id=256): syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000080)=ANY=[@ANYBLOB="696f636861727365743d617363690b00000000000001642c646d61736b3d30303030303030303030303030303030303030303030372c75697e3dbe7ec5ad07c4ae62584b73aa85f5c71c51ec27309fd1da6838b4ef46ffca8b37e02e4655108cd572ed11e301dfaa8848b1e47a", @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRES8, @ANYRES8], 0x1, 0x14f3, &(0x7f0000001580)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 15.708973021s ago: executing program 6 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r2, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002bbd7000fcdbdf25570000000c9599000100000050000000060095000900000006009500020000000600950804000000060095e1ff040000060095000800000006009500020000000600950003000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@journal_ioprio}]}, 0x0, 0xba5, &(0x7f0000000c00)="$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") 15.629948898s ago: executing program 36 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r2, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002bbd7000fcdbdf25570000000c9599000100000050000000060095000900000006009500020000000600950804000000060095e1ff040000060095000800000006009500020000000600950003000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@journal_ioprio}]}, 0x0, 0xba5, &(0x7f0000000c00)="$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") 11.17131972s ago: executing program 8 (id=292): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a00340b5c5fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d89cb9412c30c45f9d4d63d267d2a43f03a47fa56b300"/318], 0x1, 0x242, &(0x7f0000000300)="$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") (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) read$FUSE(r1, &(0x7f0000002b80)={0x2020}, 0x2020) write$char_usb(r1, &(0x7f0000000000)="fa6f0101e8e05f364c2f178ceccac30a0403b95f64", 0x15) 11.088830287s ago: executing program 8 (id=295): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210000, &(0x7f0000000380)={[{@nodelalloc}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200814, &(0x7f0000010180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@nojournal_checksum}, {@usrjquota}]}, 0x8, 0x543, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000340)='./file1\x00', 0x2) 10.98309814s ago: executing program 8 (id=296): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000000)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/4096, 0x1000, 0x1, &(0x7f0000001040)=""/70, 0x46}, &(0x7f0000001100)=0x40) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001140), 0x880, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001180)={'wlan1\x00'}) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001300)={0x0, r1}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x8, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x3e, 0x61, 0x0, 0x5f, 0x61, 0x5f, 0x5f, 0x30, 0x30]}}, &(0x7f0000001200)=""/142, 0x2f, 0x8e, 0x1, 0x2ab7, 0x10000, @value=r2}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000001380)='/dev/ashmem\x00') pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000001400)={'veth1_to_batadv\x00', 0x2}) r7 = inotify_init1(0x80800) statx(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x1000, 0x10, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f0000001580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r7, r8, r9) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000035c0)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000003600)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x4, 0x81, 0x3, 0x2, 0x6, 0x4}, {0x9, 0x1, 0x10000, 0x3, 0x8e}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000038c0)="07f0a77ac119c111fc204864d62349cb85fd72eea8c39105b40810439f7eac51295b0f04a16a8c7a9980f37ae3d6502dc1c3534e93e37cd45413e73446147988d4de02d178b782f47a1f81c63ee724ece71bfa56f90e12c1ef31efb8ec173f293e6b41e5505b5543784c3c828b4c945f04a24a8770bf8c875d53e3007b19eb49e1f775b25db2f1bbb0e6213697cc2d7ba201c534e1ee11fbbfe5218b46755d3aa76d4a12b5f9dea8b4f0050700fca665e26c5c6de7abba026a9b4f9e9c6fa54cf0f6657375af72d47d76220f049f4f1e0bdd880d9a403fa9bec047305a8fa09ea501db8f8033a7e2367b347c3fd81bae414c81d7918fb1774444b890e4ce4f9a") r11 = fcntl$dupfd(r3, 0x0, r3) poll(&(0x7f00000039c0)=[{r4, 0xc001}], 0x1, 0xfffffffb) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000003a40)={0x7ff, 0x0, &(0x7f0000003a00)=[r7, r1, 0xffffffffffffffff, r5]}, 0x4) mount$9p_unix(&(0x7f0000003a80)='./file0\x00', &(0x7f0000003ac0)='./file0/file0\x00', &(0x7f0000003b00), 0x200000, &(0x7f0000003b40)={'trans=unix,', {[{@noextend}, {@access_client}, {@cache_readahead}]}}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f0000003b80)=0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000003cc0)={r0, r6, 0xff, 0xe7, &(0x7f0000003bc0)="189b069547a515c02c20916dcb3006ec83edf54332c827f1d29754361085f92a7e03c9036119eb9d91ea0b02208672b5dfe6abb3662e37eb04eacf9a2bebdc5ba5f7adfdc7927ce824b4285ebf97255b608dd8b290736ab8cd847c98722e6b9ceafedd5267ce979304cb18612653e8b94295fa1219829888576a1d1406471c41c0eb118d02be97b930dc7ce0c6e8c4cf9f7bb9367feba4d231f6c00f4cf3daed3594b15c231aa4b7dd1aee736a1984c322e6295175f092b6729757ea23623b2440c6b56b81ac0f39cd60d6333aa8bdd96962962c5e3e13c31908b2978e6bbca9bea4da923f2dbc", 0x7f, 0x1d, 0x8f, 0xff, 0x800, 0x1, 0x6cc, 'syz1\x00'}) kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, r11, &(0x7f0000003d80)={r6, 0xffffffffffffffff, 0x4}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r12, &(0x7f0000003f00)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) 9.927930633s ago: executing program 8 (id=303): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000180100800c00018008000400", @ANYRES32=r0], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 9.927457883s ago: executing program 8 (id=304): syz_open_dev$vcsu(0x0, 0x3ff, 0x8001) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004340)=ANY=[@ANYBLOB="3800000001010103000000000000000002000000180001801400018008000100ffffffff08000200e00000010c00198008000100020000009d5cd1777111811158f7936a53a537f1"], 0x38}}, 0x0) 5.758545824s ago: executing program 9 (id=332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xaaf03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents(r1, &(0x7f0000000080)=""/7, 0x49) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c250000000000202020791af8ff00000000bfa100008000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000f0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000100)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd\xb4\xd9\x1b\xb1&\t^\xb6\xb7\xc2\xc1\xf7\x83\xad\xab?\xc2\r\f@&\xf1\xcci[5{\xc5\x17t\xd2w\x00\xac\x12\x0f\x8bM\x8eJ\x1fk\xd8\xe8\xa3\x0e\xda9\x82!Y\xd4\xbeP\xcaB\x8d\xd5/6\x81\xad\xfb+&\x87\x1b\x9f\x8bcsj@\xfc&0{L\x1f\xc8iszj\x84\xac\xc2VI\x16\xb5\xd6\x13\xae\xff\xad\xa5u\xd3Dy\xa1\x00\xa0\xd7\xfd\x8d\xd0\x85k\x19u&l5\xd2*ss\x1b\x12\x8cc|\xc6\xb52e\\\xeaB#w\x9b=\xfdF\xcb\xdbr\xfe\xfa\xb3\xad\x94J\"&\x17P\xf7=\x88Lf\xe5\\\x9agq\x9e\x17\x15L\xc7\xdco\xf4\xa4K\xb5\x06w\xa5\xe6\x9e%\xe5\xdc\xc8\xc9\xb8\xa9#\xe6\xcc\x9e\xb4\xc1\x9b\xeb\xf3\x1e\xa6?\x9f\xb5U\xae\xb3\x84\xf7\x05!z\x88\xc54-A\x10A\x8af\xc8\x82\xc9:0V\x89\xcb\xfag\xbe\xcaO[\xa9\xeb`\x026}\xff;\xe4:\'\xc1\x18\xbf\x03B\xc4N\xa0\xfd\xdbk\xa9p\xb9\x04\xfa\xa0\x13\xe5+\x95\xf5\xb1\xdc\x8b\xd2\xcbf\x84\xc6\xde!\x974\xe3\xc6\xa3Sa\x1eP\xf4\x9dd\x18gH\xf5E\xfb_\xdc0\x1d{iT\xf0o\x94') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$sierra_net(r3, &(0x7f0000000780)={0x14, &(0x7f0000000580)={0x20, 0x22, 0xd3, {0xd3, 0x22, "c9007c73d3cb440c6db2f793dfab981dc51a9cc7a9283701f4891996a80016163945f15dcb879b5e8bb9f7487a07aa8ddb970516d88549eb1de614814874a7c02b8258edaa854fb0c31f12275d558b77fbe207bb446ce826294ca2e79d1e2b3922817f988d66f5b62b4ad410afc1f69797303af2ff11d5a6e2afb32516014d6618c6b52d27264d677689082aa3b086338e2dc5e285dcf7bfb8808d2026633c910b0884a647c7dc6a8c32f001f7e5050d93efa36fc8969a64ff0ffb0c2b584fbe53537444ed3210d27ca406e1b41e792507"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000e00)={0x1c, &(0x7f0000000880)={0x40, 0x17, 0xc9, "5c0d7b3b72a4eca7da051aa110cf675d35e3ecb7f712a6c0fc4c71d22da87ed38dcb6aa12a1fd0ae853c58832722a8f99038cfe1e054d3b528e22be0692993285458479c6e602301fcbd1c5b50571bc830674844380a8d7f0274758bf37c0571a43b908ae4a780240a13d1d0cab1270a1aa6c56300b408bc4db1ff796c80fbee4754f230df203fb82f00d0f182ff13139cd763804ff136688633a1522ccbf712a138661a9779c5ba2d136624bc207daa944b41b0d9ebf874a38e189e1863bc69ff06124ffbd9177042"}, &(0x7f0000000980)={0xa1, 0x1, 0x400, "ccff01796b86a57eba67577ad14b18e2f7950ba88c7819016dca8753ebe3a28c96b32ad6ac4e91a14e257632d381025ca971833f9df0809dd64cfb73159d2ce8d063e4dc2769bffd617ac7055311e5350d037becaa598c3b7c17f2bbb01d50037b741b27de81ea43872867b25a0e1636b1aed87e6cc6177f2f55c49597737b7264148495d6e4e7f6c6b150c975cf794ffbced3bec69dc2d6ff77da5092b2c120e9aa72c8f966155933280593a72b9bd14725fad55eb33315f848e867e5cec4940847a4177e55e6baf9b6e8b846170936735ddf9a3835ef3a463ab07030c07de931e1cf98eb248401acfa0e2ed5d391a7140d272fe4fb04d0ec1256ca2f061381201f01d5e82c3c9b9dc1b48f6e4a22c5f9648c676f22b2f053ca16197168e3491dea941c7d335ac9b593e089a051fc6941c3da502413c51aa978c826b8071030218bf760375ca9002bf7735eb0a7a8346c76aaacb991f6f2ee6272ad0a61a5d4d97dcc12870e599c3688434b0a6e71a378bf624d38b0fe8f4969dc862c7f1585a02610ca16ff4c6bd0c8fc73c94429245dc070921111578be26e8b55e416e049b65803b7ab7d95d47cbf7427c164e06a9fbd373e339b91352ae1ad42ec2a52be7a40b533a5409487e9ae70ca93c638ed27319cfd5e1bc446ddfbb3a5d4a26860523b8d46e37c6df9c8c63c24e6bcb4f9eea2860b2875082b81d0052100a69d43ce1e27cef447fcb9d9a86008c9a872947d0f6655c8190c5cda55f1b55f60cc22d90c0163cbf071a327bc514abac395ae402f8bcd8398cad38e6fc1f4efc50e1ce6eb582591d4edb1131e1c573f572073ec8b8bfd73865783179b39845ff32175346ef015325e10b05945dd43f823439c69e425598aa010c766bedc2f2fadfa0757a2950f9cca524cb4bf9bb0082fdbbef62366aeba979c23b8cc3b1210f62df987429d98fbd10fb906aa73df67c94cee4d3245ae1138b912eb6f7a244512685bdfbae416c01dde195d919408500361036c53be21fabcbfc3dcad43073e0f389c02acc672e245118af82ec428754ef1632f26fa53e4a5536d71a316cfd7a7dc9ea3616b80723ece3c548764ac4c9b77e468c9f48681275df401c11046d78d3d7bdc2126e4abafd30512c20e37cd6997407fb8a73998ba2ab7ded72c810a38adc6900fc776f1079976ce9c9d96c8816d222a0e1b3c2196a5d9c46ae84b5d52d84092ed60732aaf21f544cc2ba8cf82b91ad9c0d55f38e44f637b705e4eacdb6c6087fe01a28ce56ac55b47477c812b163ccb31f2b92262e4fcc57ce653b7185ffd4aee849d0a6397c71a2b2bebb9b92b9a7032ee572af1c4fd1c78587d400c9d256b1a44ccbd6bd4ef9a2fbb8593b6b5e01b41071dc7bead28823a18c087668801297d1dd5214628908bd9210d4c6733955d733ed88439d1f4f88383a83f5598a7"}, &(0x7f0000000dc0)={0x21, 0x0, 0x2, "d17a"}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) socket(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xd10c652e554cd684, 0x100) 5.622450222s ago: executing program 2 (id=333): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) (async) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r0, &(0x7f0000002740)={0x1, 0x2d, 0xffffffffffffffff, 0x3a, 0x2, 0x2c}, 0x48) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_io_uring_setup(0x221d, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x49813}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) sendto$packet(r4, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5d}]}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000540000000000000070000006b1108000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', r8, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r9, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) 5.535021041s ago: executing program 2 (id=334): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}], &(0x7f00000005c0), 0x2}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x2, 0x77f83464) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x3}], 0x10000000000000a3, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004280)="81", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000280)="58d5", 0x2}], 0x1}}], 0x4, 0x60cd884) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0xffff, @empty}, {0x4, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}, 0x54, 0x0, 0x0, 0xfdffffffffffffff, 0x2e9d, &(0x7f0000000800)='lo\x00', 0x6, 0x400000000, 0x3}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(0xffffffffffffffff, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000005d80)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x110000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000000e3090e8c6bc3939644a532263efa6d80d3e29cc8a3b4ef9968a930e9b16f0aa9150ce6404ac8ff0492bfffc2a5ac73b23e17861b907c78104f69d2c795f11e162be8d58a512ec374397e2d8c2a0d1fa5bd64f54bd8fc3a5dadf89ca1018f5f10f0158e45da1aa3ff4730b49c1dbb2400313ad4c3ca18024e341ccd", @ANYRES32=r9, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700200100"/52], 0x4c}}, 0x801) 4.704971907s ago: executing program 2 (id=339): syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040400020806500007050102000200070582020002200904000104080662"], 0x0) syz_usb_connect$uac1(0x4, 0x126, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x86a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x114, 0x3, 0x1, 0x5f, 0xc0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x37}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x302, 0x3, 0x2, 0x4}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x1, 0x2, [0x8, 0x5], 0xff}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x9, 0x1, "10ce"}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x5, "fabdaee2"}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x7, "b095"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x8, 0x2, "9072b221ed7e63"}, @as_header={0x7, 0x24, 0x1, 0x93, 0x0, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfc, 0x1, 0x7, 0xff, 0xa}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x5, 0x8, "204869539d7417212a"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x0, 0x7, "ab34bb9a66"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x40, 0x1, 0x1, 0x10, "baca4138f374"}]}, {{0x9, 0x5, 0x1, 0x9, 0x718042d1ecdc17d4, 0x81, 0xfc, 0x0, {0x7, 0x25, 0x1, 0x4, 0x0, 0x275}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0xe, 0x40, "1a", "8adf"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5c, 0x4, 0x3c, 0x8, "1291", "8f33f1"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x2, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x40, 0x2, 0x6, 0x9}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x200, 0x81, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xff, 0x2, 0x1, 0xa, "90fb"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x2, 0x2, {0x7, 0x25, 0x1, 0x8, 0xda, 0xfff7}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x1, 0x2, 0xfc, 0xff, 0xd}, 0x8a, &(0x7f00000001c0)={0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x8000, 0xf000, 0x4, [0x60, 0xff0000, 0xf, 0x0, 0x7f800f, 0xffff00]}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x443}}]}) 4.539208731s ago: executing program 0 (id=340): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210000, &(0x7f0000000380)={[{@nodelalloc}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200814, &(0x7f0000010180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@nojournal_checksum}, {@usrjquota}]}, 0x8, 0x543, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000340)='./file1\x00', 0x2) 4.395648482s ago: executing program 0 (id=341): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 4.228449017s ago: executing program 0 (id=342): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000597000/0x3000)=nil) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000035c0)={{0x2, 0x4e21, @local}, {0x0, @broadcast}, 0x12, {0x2, 0x0, @private=0xa010102}, 'sit0\x00'}) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 3.914341974s ago: executing program 0 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000003200)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x9b, 0x9100302, 0x2, 0x9, 0x5, 0x101, 0x0, 0x0, 0x100, 0xf}}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e760c6966", 0x23) 3.913868034s ago: executing program 7 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x2f8d, &(0x7f0000000540)={0x0, 0xc383, 0x0, 0x3, 0x200004}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000080)={0x10000004}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000280)={0x2e, 0x55, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x2, 0xb4d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x9}}}, &(0x7f0000000300)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000280)={0x9}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48054) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000040)={0x0, 0x0}) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r12) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r13, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000340)={0x3, 0x0, [{0x40000001, 0x3d6, 0x9, 0xf2f, 0x9, 0xff, 0x5}, {0xd, 0xd, 0x4, 0xfffffffb, 0x400, 0x9, 0x2}, {0xc0000001, 0x8, 0x2, 0x9, 0x3, 0xa, 0xc7}]}) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000100)={[{0x88, 0x5, 0x9, 0x2, 0x2, 0x0, 0xe, 0x9d, 0x10, 0x6, 0x4, 0x2, 0x8}, {0x4, 0x6, 0xe, 0x42, 0x7, 0x3, 0x3, 0x2, 0x8, 0x5, 0x10, 0xf, 0x8000000000000001}, {0x6, 0x3, 0x8, 0xa, 0x2, 0x81, 0x80, 0x1, 0xde, 0x3, 0x23, 0x4, 0x7f000}], 0x1ff}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$EXT4_IOC_SETFSUUID(r8, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "0a0aa47c036443e3ebc83555c443c9b6"}) 3.687245151s ago: executing program 7 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}], [], 0x6b}}) 3.640497121s ago: executing program 7 (id=346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000001c0)=""/172) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000200)={0x80000001, 0x1801, 0xf, 0x40000a, 0x59, "d10900080000000000ffff0900000000000f00", 0x800, 0x3}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) pselect6(0x40, &(0x7f0000000000)={0x8e9, 0x7ff, 0x4, 0x9, 0x8, 0xffff, 0x5, 0x9}, &(0x7f0000000080)={0xfffffffffffffff9, 0xda4a, 0x2, 0x6, 0x7fffffffffffffff, 0x100000001, 0x100000001}, &(0x7f00000000c0)={0xff, 0x5, 0x3, 0x1, 0x4, 0x215, 0x7fffffff, 0x5}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x15]}, 0x8}) 3.572996035s ago: executing program 9 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}], [], 0x6b}}) (fail_nth: 1) 3.515038878s ago: executing program 9 (id=348): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fff) r2 = socket(0x2, 0x3, 0x67) prlimit64(0x0, 0x2, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setreuid(0xffffffffffffffff, 0xee00) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2a003, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xff, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000b80), 0x0, &(0x7f00000000c0)={[{@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@nfs_export_on}, {@redirect_dir_on}]}) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 3.514478288s ago: executing program 9 (id=349): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="79000000000000007911a800000000005e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x802, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_clone3(0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x4, 0x0, &(0x7f0000048000), 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext2\x00', &(0x7f0000000280)='./file1\x00', 0x1000040, &(0x7f00000009c0)={[], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\'-'}}, {@euid_lt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x39, 0x30, 0x36, 0x69, 0x31, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x31, 0x36], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x36, 0x38]}}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000180000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000240)=[{0x30, 0x1, 0x0, 0x8000}, {0x28, 0x1, 0x0, 0xfefff034}]}, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x9ffc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='9', 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x4) 2.199552616s ago: executing program 2 (id=350): mkdirat(0xffffffffffffff9c, 0x0, 0x33) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) epoll_create1(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = fsopen(0x0, 0x1) fsmount(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.70719683s ago: executing program 0 (id=351): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x3f, 0x70bd2d, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x8000000, 0x1000, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x68}}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r2, 0xffffffffffffffff, 0x0) 1.399272945s ago: executing program 9 (id=352): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 1.339488057s ago: executing program 8 (id=353): fchdir(0xffffffffffffffff) mmap(&(0x7f00000b1000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6f422000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033062cbd700000000000fc020000000000000000000000000000ac1e0000000e000000000900"/55, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000010000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000700000000000000000000000000000000000000020000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001500"], 0x144}}, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd}) 1.332302529s ago: executing program 0 (id=354): syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) (async) close_range(r5, 0xffffffffffffffff, 0x2) r6 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) (async) r7 = fsmount(r6, 0x1, 0x0) read(r7, 0x0, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f00000027c0)="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", 0x1047}, {&(0x7f0000000200)="31bf07d96692757e968a5e6a9a622c991bf7904c462a4de0c0c19ac8bd62bf91034496c79a3529c16853fd25d28ff99343211e2e161b6a4e28305ae4cb6ce311bbc67ab72a9abb7f6fbaa3f118170ccca4311ba419cadec35656e3d716a6f0d666f00ea2e0779ee2bcb4e9f7dce6fe", 0x6f}, {&(0x7f00000005c0)="b0c5588ad9ae08ed9072550832b47e64a765e053ebe40cc4f988854cb20eca9b25b80a26bddf346a236469f59e13c3efeb4416c4b9b218649d5b0a4437f02a1b9f", 0x41}, {&(0x7f0000000300)="477e8208db2992741f557ce382db219146ea24d9db2200083c5f63d6bfc36865b6ad551b485e641243fb122d9ff4c768968cd16b3a422fa2b5a687fbd2f7955de806919defd4147a3b6f12992314dfd3c885a060cbacae6e9a06b7776db27051ffdde72e942c083fc8c91d52d82f6a053f6693c2edcf5623fbd0f1208a3899cc146e8eddbdfdcf68e037dbda671a16a9c2365347c92ba2f01f0f305599ab7f0fe5ab2f594d859c9a871f5e7b379fac17fb87bdce3e2a0585f4975b2b743a3ba46fdef4dd780497390be436977cae625605125d", 0xd3}, {&(0x7f0000000400)="d172251a2562ae450ba1b350cb61ab3a9c3f97015df001072ed060829d544d5f7340e76fc75e17d741c9bb9e2658cf4b4f173a902669c520a1dfb85fbc306cba", 0x40}, {&(0x7f0000000440)="4c91e096291a9b6f57771152014a819c409dc8669f9d6149c0df6e25d8df775c600af73adaab044a2068e14830a9c4968ba37aa7203a0a90e0274adc74eb1e3f7e7a4e49ab", 0x45}, {&(0x7f00000004c0)="9bcb32acc27cf36f135eb2abdecc5094e852f10e33d5c322822f03b6eef3f1045d03d5030f5f4dbbdd83fbb66660961905554b724d90a8e2a8d6faf5f9b7883f51dabfae39f2646208f5b36f72c88084dcddedca33dc200606636f147463d5fbcddaff9b0e8b8a87dcabd0c3402dd61c648f494c3badb6b73caf20480558f33db9c91affeb202ce2944be56988ac9e1632e755bf15d5ff6b311d55804d4d591e40435fee161dd60079730bf4df7176f37c067956f41ddf10ced34888f436bd4a0687ec8b518679795608575a4d53b457eec631b5431a628e68e5cee30ab868400c173652fdee866733c7fa05dcba23a32ddd1cca400c90c30f", 0xf9}, {0x0}], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000140)=0xfffffff4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000080)) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004503003c000000000029907800000000000000004e2c934b437deb1f43cae99322cd59c356220000002890780400"/74], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004503003c000000000029907800000000000000004e2c934b437deb1f43cae99322cd59c356220000002890780400"/74], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x80, r9, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3a}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x85}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3697}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1.23225144s ago: executing program 37 (id=353): fchdir(0xffffffffffffffff) mmap(&(0x7f00000b1000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6f422000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033062cbd700000000000fc020000000000000000000000000000ac1e0000000e000000000900"/55, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000010000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000700000000000000000000000000000000000000020000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001500"], 0x144}}, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd}) 1.122545683s ago: executing program 38 (id=354): syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) (async) close_range(r5, 0xffffffffffffffff, 0x2) r6 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) (async) r7 = fsmount(r6, 0x1, 0x0) read(r7, 0x0, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f00000027c0)="a0a9ac73abf04c9bbea0cf4c9d4a8197815cae66de39bd5a2b4a50f756121b36b7d0cec4a3e4bbcb2ec5886c9f37328924540f3b723706e59dd8981d875285406e32e8220232cf69c09c3e1e4d274c1434bc3da9e33fcc1bebd50c19df17c456ef74d7494319f9e27992ea1df340119c841ac4324793e4d5423c49b317ccbf840ce57408052ab053efc77709a474553ed4605f6ac5f56eb7d7ce519aa5c985af9809ebaed43abddfc37b283f592e6756ab311535a4dd9f851398bb9c7cf25ddbcf9c175388906941c54b4ec317838ee3899501109457535f27860ff24d39c6a3fdf6156392e6cf85b5ee93f5094f07c4f7ea3fb8062571e6de4cf0b167bc6cfb76604f71c5953893fbb31fb61b2a212f069fb188c42ee963a4837cc79aab8cd51a5facb0046a7bffb5c41100c2f67868e7463c4ecce3946d064993e46ad06cd946eb8fe9787b2ef345f7f2ae1f0fc1578796d0842d9964dc9cbb294a2e365ed4f6118d5665493983d786b56c2f6207068365fe881db0e05277d04c3be72d7d3766932bb282969545a266df99759d66b599078e2bdccb8c2592137de5710d2b3af9decfad9aaef049bf57f31851775cff26f08405e5a79406218b1c57ad94e532cafd36309a56855aa56be65aecc53bc981a2eb2a5f302230255fc151d497ee402b43f5cab9237a182f165ffc3986cbb11619c2600a76524c4d470fc2b5bc55825800263cc26ea8f0b940c89a639bf50fceba8c94275cefcef64889cff2670adb02cb481269a8eba53a0977a9766b00063686e1e6c385f2aee3feccc7b594211b79289d36a44b0c4b263c517d7895b2bfd46cef5c0623ef18f31f47b3d4de6c6201330a7b747a34237d6c07c694afcddf31a4776b9023a365ce277d0b7e4a98bfd7512aa16cd87c0f18ff3dec7319b6a18b76cf9dea887c321e3b8467ecfaded5e88229905eab354cc1d032cb0dbe225ff63688b3ec66cadb1ecb70d32f15cd4c73fe39c81fde890e990ca80f98be30694d8e2f7dc47f2bc797ee1ffd26ac4a47aef6abf0550f8412f89d6866c629d6c3a08aaebac027db51e781b105c5bf3663bb01c7969ac85615c7768769f11d1200b46e36ca1a61f3bc8875dd448cc176c4ace50e1525919db519440ba052814a937103dbdd69bc07122c49fcc5e33c0efefd4be974cd920ba89d77f4d516bc581805b9e0a45b1532ea9817edb83ae591291f24ddb5f23eb7eacc12d562ddf60e7201b2bbcfaa5eddd8a6fa34a2712184e73fdd547bd50b23592adf284001f7b3800614a0f68400468259abe4a7bcdff2fd8d1a604719197cc12a10eaa476ad52666bb8065729c288d108ea1b61016b931870838deefc26eaa161d3379f35371b51b271865679003101dfe5488f3d15f597fc7840b21359c5ce2d7688949b8d61e34e3d2187bbe13417267683da73f163cfa26f374869b0709aa8da99027c22be5c534007ad3d2fcf78a0e4cd34fed64fdcfdea9fd1209fbc99276ecfca0ac78af76697106d4648c1c314db95df3841c176d766ce9401e3d537298b45354bafee2517bfabf4ea1fdf59efac39a9926c3fb1192cf5a3120405ec2b60b151532ff55fe4acb90411e10dad3255e2c8c9e8d1103d4ac52577950317e21ea4aa0d7228bb6e21c41701c7ba0658f6a6ddd522132da9a44a4442904c6cbfaa295d3d6f9fc7697c76666b08316fe171c3be82e210539976347ad25ee6063e0fb1b010ce4ac4bce8ee1e11a08cb8c8dfdfb6eacef7f2a2dc13f22ef50f4a011cd2bba9f4b7800ecc152b3b8f8ce30ab2dd748f7a62496578cd7f33f12ef6e859419099965159052b2324af338b8f6518aec9184a6e325a8d08278cc73d688449f366f22e3f9c6a2d6763504c665388476bf576550f39ed1188657dcb5aba607d415b090e05620086208ebbdc35bdb8da910af58112a927de5646bd4034a7cf76162bc6a46cf31f50f7100406c08e6109a53e13caf4a145f2c1df95af9727f13ef6344a147b431319272fe27fa83061dee388e71c702506579591aa0c6f577d4cccbd992d3b19e68a48a55a757be583ad636442ce98bfec473168a523f2fd82b7d4a1b4905511055545dfd9b0378d0072b123d195b68aa21064c32935fab697f020e1ae9e4ffd0643d298f3757868f6e5c38e9b9cf1449a6e142e44b751b6f3f4575322e1e0ce016cd0f742bbc236e003ba42fb2cafc2dc9319204a9ad4ed639db8e300339b21a3e1e38227bec81c4eccd8307be8c63c14abdf7bbd161b94c911dc0782d7395d760f994347b2e28130e357b54d6cdea7d137ce8a3f2c77de9852dd0e2db3de66e92f8c94758cb8d58b9dab1401168069ddbe2218b0c19fe8fc31d3b0059ec15b39556008275772ab02871d2f760c8a53a9e2ad2812b7b7d1bca6142f37d54187e5b24b7fb189655f04b6f65e29d9df5545dc2d5aaa6062a74635feb794382e7c6ba54b434ab2d02553657f9e8986a1935bcb7abc75dcc719aba41dbf95fa5024ab6628658be43b52ad3ecdf504c1cbf8a15188152840e137131f4301fe3b635bc111d5803776273228b7b2d9363235794436e7a25628c2014691b3ca1146f16caacab12bc0d7539dcd4254a2b2f8263efdb7d412783608c939208882243368d4092ad71a0b4af92647a6856b81e5209fd6448fcc3575a8cada7174f04c9ec6e4d2f55b7ebdcabbdcf6461bf5589ce639f4f256195cb3f53d1e7e039e4341b3eb97452272651714282f68264a0515d7af6dc1baddd38211d32844e3273e7b6e8bd9ca706905487470ac4db10ab14a7f69663cf909c0e63035d51ae2bd0295ccfea53ded32616beec3b0eb73128188d9746f2d84e1f2e1d9c2634a9acab205c9b5ac83fa5c3c1d0d29f88f2c04db051f567c40f8d372fa3bb89f79fb67233fdab282eaf7e28ba42565e4768485d097fa50a3f37a7aa32974aaeafc58676a8c443bcf8915c0528db6c273f8b4855fc7d0937d0e8edb60bb8deb8eee23024001f62d82d04fc887f09ffeaffdaf241e167803431d591bd25c00ed1a9efaa84d61b3220ba63cd288f8ac88ce94b36f1dfb61a377ec15a61892b81e7aae2a1b28f4bd891ad7747dd724d04309f7af7f86097ec89676c0df8981acde390b6fa9213e724ebf0605018fb60341b780f931931c2340c2a854af957c260cc2895bdfbd8fb16898f2d06e9679bbbbd2812fe3d383ffaabcc7559df30153eaf5849c79b043e413c9cf35ab38658ddb4a817a10d63d5972975aac0c14f3efc9d00dbe64da1c8c0509c8c0a95cd85a3f6f96d725400294208eaf44a143ed4b6c9be32d18befe1365f5ef36c52c744ec80f699ae2ed0c20a0064a468b9d1aa7616790b7497fb0ec7bf9a57419bf9c0e3b295ce327c30cf9987e0be678096928b21ef2fead5f82723915189d9092fa8f28a4cd7831db82dbf858f24992fb4af9f219825fc4b50e680b6e2817d67d6c2f8661ce51dc144f33ba41efeaedb3e0ee09649179d4b2efde87f36d91cc2982a7f485bf77f08f42de49934fd33a773781ddb32b7146d05a00f5351d27117a51591d53dd7eb47ba4c8a55aee0b2c228bb6d93ad61f7224876f96efdf3abab5082983521bcea28e87f251d584ad092e4a38b61f2da8b88c44c8333c08c3b15588639c16811770ae5985f24102d1808f8d0d30595153dabb0d00395d7ce1a60c31b1fc580ef5aea0987283927ad029a60536b212a9334de8b6c1cc2300a682a8aa43a0f19495934e9f0768bcf278e714fa54adb425c307679ebe7c8275ee711c2fcf0d28a278ce4459d2152c909240ba07a47925fd34e3bd20beaa826eb29c1fb10d6cebce07bf8c86a1e51afc0478910b57bd7485d192de0a7db68a90b772dd53de9e0614b698ea2af221a44c8964282a6fc2927f67c4524264e9f0cf215c3223c04f72679a8e4231fd78e24ac440a33370d4cb7df9a7a9382ee37dcf6be351f3cfc0d1e955a57ba34f060db0bec33c61e6628ec2c5f0e101d6b258da863cbf318bef36195e3cd5af848bdc91b8592e7b9525267160d5ff5fc11ee5127167fa4b49e0b18835275ebab7bd01b31ad5a7601ba681f488a5f184ab3c53c826098e34e181338db90a8b41295827d00dbb75987313aeb0f86fafdba410307c9bd5bf6e3ac4438c4a0409fbbf4d2bc717315e689b6af056ba36cd58bfc8046255bfb409cfb3e3c0df22efddc0c4f4c8f94fb6c71374fda317876f78029b8b8f16c3149f46801957ac959fd8a2fcc17008c0dc0605fd9105c1151b5d63083942dd1c5eb853138f0bb043472d3bbddb39611da72b16dad2d12c509caa3d6ba1f92041acd3b9d1a31d590df7dcf36fd368bc1fc340fd33524bbd0794592a42739f7ce845e3566b2206b25432bf4a6a012b15fd74410f3e1aa7602f96d6a5b9a903a232aa8898e802a526dc79c8051c0cf13e93f3b12583b6d0fb5aaecd51a69c3b6ecfddd1e36ec24f96162de4d680c000d25453c7ea01aedc45464e54746661eb826244d8358995c620a7c835cde51302fd2b63cd9e9416976705110a351cca0d6d24621065f379e6045bce40dc5242d58cfcc5ebbbe25d170dc7d8b1aae4c59b4ba2f9fa6804099236662676e1be8d04762bbe694dfba6dd5f14335e542472afe225efac132e9f0ad4066eee739098cc83972302317910c3ef6e6406d8bd2c8ed581ceb49802a8d990b8d63d8f5768a572b14d03912d5674b0381774927dff8ada9a72a2df034708e3a832877bcf8ffd03a513b5a5e8eb8aca059797a83a3923884821349181a6b535a260934e87046d4346661b5c6466fb4ccf14a7ac82eb78d59087c271f66d0c7577fdfed35e575bffaa31c3337130883f781804962e5b463c9285dfb6211b0d181bf5d2df51f71944b0ded9fe5bfbf69b20078a53b3f88469f876acae501d4bbec5c0c8c837d0e4e215847db6e6e8028bf6e07a7c2f1a69de1a30a66cef6f16219909020ad1b4d257c03b6c0e16b40201e541cb87123b29d93599f82e9087f1e16910f2ac80ec89e0408e8b1703845a40a15f2db678f2ee8b37a0f3b61539f0e5df4c24cacc8525dd8c49e12995a5c061ff31d8d91ae77e6986519484ab8503094f10ba7053ee084bb7a0789f7009091dff059590b4116c1a625d66c935f49ccd1232d35484749b402f74380e6352d205d24d9dffef8024afef1a1fecff82bf0944ac07177feaa89798d184f5c4412a140ad1274047fed344458e872e5677e3dd7237636e975a7144b1d3941ed1c87b3caef19a8c89549a4cef3876c2010022d215e80ca760a537185ca99b30652018a66d93116f65733eb4bfe667eb78357e19b9dab6fb3d2fecbd32e11ba81bcbb55d6fed7e696bbd36359b9970f6a4dcd4a9ca1b0fb19a1438543d03388c4427eef6f374450f768d59ad4250f37e90e988b60fe13b80f94d7eea50235cd6132c47b7be90f6099068d1c8d787b1e63327db2687761397661f5da928f09e8f2a88e5183dae64dfe203d02d3b63b3a63f7add108ced7925288094043d648fe0d9f8e40a31180a9081124a1d0ee40c3ab73de28adb10dcf56795f3d6fdf3ab4d437432f821b83e85160ac5420a3bb0883dcc25d346914cf6d045017958fa337019e042e87409e09ea8bae2b966e66416c487fe1e9d42402190f698e1b20a95db28fd4df1e7bd958fe962a65b43c18f5115b9a454b75c93d87ac79f1f1b929d71958fa36b6670c6c172e9e5831ad91c0075f731be70e557846c7e4311983cc329e4d15242cdcf608401e7137598ccf29b78f4b1556fc3a91e7e30cbe9b188a990e6b4b7bc3c7de0341a7ac2f818b202ee4f906d635404968760367fef4e557b5dd98fa87b36f9ad839277e55a8986c07af3d6c0bd88eb13803f7a7c14cca30db0", 0x1047}, {&(0x7f0000000200)="31bf07d96692757e968a5e6a9a622c991bf7904c462a4de0c0c19ac8bd62bf91034496c79a3529c16853fd25d28ff99343211e2e161b6a4e28305ae4cb6ce311bbc67ab72a9abb7f6fbaa3f118170ccca4311ba419cadec35656e3d716a6f0d666f00ea2e0779ee2bcb4e9f7dce6fe", 0x6f}, {&(0x7f00000005c0)="b0c5588ad9ae08ed9072550832b47e64a765e053ebe40cc4f988854cb20eca9b25b80a26bddf346a236469f59e13c3efeb4416c4b9b218649d5b0a4437f02a1b9f", 0x41}, {&(0x7f0000000300)="477e8208db2992741f557ce382db219146ea24d9db2200083c5f63d6bfc36865b6ad551b485e641243fb122d9ff4c768968cd16b3a422fa2b5a687fbd2f7955de806919defd4147a3b6f12992314dfd3c885a060cbacae6e9a06b7776db27051ffdde72e942c083fc8c91d52d82f6a053f6693c2edcf5623fbd0f1208a3899cc146e8eddbdfdcf68e037dbda671a16a9c2365347c92ba2f01f0f305599ab7f0fe5ab2f594d859c9a871f5e7b379fac17fb87bdce3e2a0585f4975b2b743a3ba46fdef4dd780497390be436977cae625605125d", 0xd3}, {&(0x7f0000000400)="d172251a2562ae450ba1b350cb61ab3a9c3f97015df001072ed060829d544d5f7340e76fc75e17d741c9bb9e2658cf4b4f173a902669c520a1dfb85fbc306cba", 0x40}, {&(0x7f0000000440)="4c91e096291a9b6f57771152014a819c409dc8669f9d6149c0df6e25d8df775c600af73adaab044a2068e14830a9c4968ba37aa7203a0a90e0274adc74eb1e3f7e7a4e49ab", 0x45}, {&(0x7f00000004c0)="9bcb32acc27cf36f135eb2abdecc5094e852f10e33d5c322822f03b6eef3f1045d03d5030f5f4dbbdd83fbb66660961905554b724d90a8e2a8d6faf5f9b7883f51dabfae39f2646208f5b36f72c88084dcddedca33dc200606636f147463d5fbcddaff9b0e8b8a87dcabd0c3402dd61c648f494c3badb6b73caf20480558f33db9c91affeb202ce2944be56988ac9e1632e755bf15d5ff6b311d55804d4d591e40435fee161dd60079730bf4df7176f37c067956f41ddf10ced34888f436bd4a0687ec8b518679795608575a4d53b457eec631b5431a628e68e5cee30ab868400c173652fdee866733c7fa05dcba23a32ddd1cca400c90c30f", 0xf9}, {0x0}], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000140)=0xfffffff4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000080)) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004503003c000000000029907800000000000000004e2c934b437deb1f43cae99322cd59c356220000002890780400"/74], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004503003c000000000029907800000000000000004e2c934b437deb1f43cae99322cd59c356220000002890780400"/74], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x80, r9, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3a}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x85}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3697}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1.097918378s ago: executing program 9 (id=357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) read(r0, &(0x7f0000000340)=""/199, 0xc7) syz_usb_connect$uac2(0x5, 0xa0, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4a, [{0x0, &(0x7f0000000000)=@string={0x0, 0x3, "26cb7a93abb89bd38b690340"}}, {0x0, &(0x7f0000000080)=@string={0x0, 0x3, "4c2f57229d6bb3903a7989feab71c586b1d6fb8801820fb579b67242fb792418ec7060d0cd3cbc256869cdaed473f4b720dec5bc9d62340cb883b8f1bc6cb311bf5fd2c7981bc55b94727f26538f8a8f441f5d0b55afd5d51e091a3f90996b87e9e4465557a91d68b3338ad854e5c510204404085461b5cc754fa85c61af441da2ef5e5999ac0504dce166880cff6fdda9de3f5a9ec84392c9f1d45f868fa8923fab894fa529d222a176d9d24eb3d18197a87340357d4ae1651d8a1f"}}, {0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x42c}}, {0x0, &(0x7f00000001c0)=@string={0x0, 0x3, "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"}}]}) 1.023750114s ago: executing program 39 (id=357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) read(r0, &(0x7f0000000340)=""/199, 0xc7) syz_usb_connect$uac2(0x5, 0xa0, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4a, [{0x0, &(0x7f0000000000)=@string={0x0, 0x3, "26cb7a93abb89bd38b690340"}}, {0x0, &(0x7f0000000080)=@string={0x0, 0x3, "4c2f57229d6bb3903a7989feab71c586b1d6fb8801820fb579b67242fb792418ec7060d0cd3cbc256869cdaed473f4b720dec5bc9d62340cb883b8f1bc6cb311bf5fd2c7981bc55b94727f26538f8a8f441f5d0b55afd5d51e091a3f90996b87e9e4465557a91d68b3338ad854e5c510204404085461b5cc754fa85c61af441da2ef5e5999ac0504dce166880cff6fdda9de3f5a9ec84392c9f1d45f868fa8923fab894fa529d222a176d9d24eb3d18197a87340357d4ae1651d8a1f"}}, {0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x42c}}, {0x0, &(0x7f00000001c0)=@string={0x0, 0x3, "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"}}]}) 805.95819ms ago: executing program 7 (id=359): tkill(0x0, 0x13) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xff, 0x73a, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) read$FUSE(r0, &(0x7f0000001bc0)={0x2020}, 0x2020) 773.528147ms ago: executing program 2 (id=360): tkill(0x0, 0x13) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xff, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") openat(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) read$FUSE(r0, &(0x7f0000001bc0)={0x2020}, 0x2020) (fail_nth: 1) 609.028692ms ago: executing program 7 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000003200)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x9b, 0x9100302, 0x2, 0x9, 0x5, 0x101, 0x0, 0x0, 0x100, 0xf}}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e760c6966", 0x23) 310.880215ms ago: executing program 2 (id=362): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}], [{@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$(\'(-\\]/#{'}}]}, 0x1, 0x504, &(0x7f0000000c40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x40016, [0x0, 0x0, 0x1, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x0, 0x0, 0x4003, 0x20, 0x403, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x6, 0x0, 0x0, 0x7c1, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x8001, 0x200080, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1fe, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x80000005, 0xfffffffd, 0x7, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffe, 0xfffffffc, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xfffc], [0x4, 0x2, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x2, 0x9, 0x1, 0x4000000, 0xfffffffe, 0x7, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffdfffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xe, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x1000000, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3], [0x40000000, 0x0, 0x74e2, 0x1, 0x0, 0x3, 0x4, 0x0, 0x7, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xfffffff4]}, 0x45c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1004020800000e03"], 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x8d6c30f34124690b, 0x55f}) (async) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x8d6c30f34124690b, 0x55f}) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, 0x0) (async) fcntl$lock(r3, 0x25, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L0mav1v63dMN+RABAADgL64Qtb/9L0w20oXC5GT9GtCh2FsoX19Y/F9EXJur3yMwGsXCpflyKb8gNxrFJL/+OdqUn27Jn86uG380MFLLT85eL89tdfCwy+2r9fmkrf+nflrjdV5gG9pB96EBa9Sr/x++t0k7Amw6v/+wezX1/25Ptqj4SxnYmfz+w+7Vqf/fjs9WvXfBdwZsf1V9GXa11ft/7+dtAtvXYLzZSNdue+54ty2wE3X//XdmADtY75vkh9Z87/9yojrU+a3h6PDEgOF1VdEzMdKhri1JpCOrDSywGBH9rTyyniryIWD3JzwU1lbgULS/NRCrbZV0fo5DRFS6bpV+Kj335/Lhfht/6UbytP6gzB4B5s9E2ehm8/lyPy32ebi7JH7rt/k53wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHaU3wMAAP//hKnQPw==") (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000640)=@req3={0x10, 0x0, 0x1, 0xe8c, 0x80, 0x6, 0x2}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000001180)=ANY=[@ANYRESHEX=r6, @ANYBLOB="03a9c9698a59934702626141b5fc7675f273d76b7dc84e184a4fabf5fae12cf62a771b70eeb4adf39cff24c586253d067d50297ea13dca2dfcd89726d3a5ec50ddb1271920f30897300ad276adef93fc5680a36d4280c910a4ed11f82aace851fc4a3070387ec0750320e7c18536af14ff407ae5fef1b7887f134abcba9aaa7d14df44", @ANYBLOB="9ea7224498eea13537e925d8c33d01d1a91ca1ee61a7460bb03877e2cdf5ee54e16d39bc346fea52beb30a355dcefc0d66155a39572107f482e45453f8226a7af7900b64e85a0d42bd6891904448d355993e891c9eee71715acab88b858a00c39be15ba567957da9c1aa1b9b3ba694939f01c56762b4a60fb39a2042c8b8c52f3cca23316610760e2a7a63b4deacf350012f522706d8d9c3866fe7505d021e3bdf96da7d7a627a9ed7cb68e307"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000001180)=ANY=[@ANYRESHEX=r6, @ANYBLOB="03a9c9698a59934702626141b5fc7675f273d76b7dc84e184a4fabf5fae12cf62a771b70eeb4adf39cff24c586253d067d50297ea13dca2dfcd89726d3a5ec50ddb1271920f30897300ad276adef93fc5680a36d4280c910a4ed11f82aace851fc4a3070387ec0750320e7c18536af14ff407ae5fef1b7887f134abcba9aaa7d14df44", @ANYBLOB="9ea7224498eea13537e925d8c33d01d1a91ca1ee61a7460bb03877e2cdf5ee54e16d39bc346fea52beb30a355dcefc0d66155a39572107f482e45453f8226a7af7900b64e85a0d42bd6891904448d355993e891c9eee71715acab88b858a00c39be15ba567957da9c1aa1b9b3ba694939f01c56762b4a60fb39a2042c8b8c52f3cca23316610760e2a7a63b4deacf350012f522706d8d9c3866fe7505d021e3bdf96da7d7a627a9ed7cb68e307"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 0s ago: executing program 7 (id=363): openat(0xffffffffffffffff, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2a8c3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x412, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x4, {0x7, 0x28, 0x0, 0xffffffff8509852a, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r1, 0x0) tkill(0x0, 0x13) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xff, 0x73a, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, 0x0, 0x2440, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) read$FUSE(r3, &(0x7f0000001bc0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): ce veth0_vlan left promiscuous mode [ 45.981866][ T803] netlink: 32 bytes leftover after parsing attributes in process `syz.6.139'. [ 46.026849][ T809] set_capacity_and_notify: 3 callbacks suppressed [ 46.026879][ T809] loop6: detected capacity change from 0 to 1024 [ 46.040453][ T809] EXT4-fs: Ignoring removed bh option [ 46.062433][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.069834][ T805] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.077792][ T805] device bridge_slave_0 entered promiscuous mode [ 46.085274][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.094369][ T805] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.094393][ T809] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 46.103944][ T805] device bridge_slave_1 entered promiscuous mode [ 46.139594][ T809] EXT4-fs warning (device loop6): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 46.188978][ T773] EXT4-fs (loop6): unmounting filesystem. [ 46.238376][ T819] loop5: detected capacity change from 0 to 512 [ 46.238610][ T821] loop0: detected capacity change from 0 to 1024 [ 46.269964][ T821] EXT4-fs: Ignoring removed bh option [ 46.275870][ T583] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 46.279073][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.291464][ T805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.299263][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.306564][ T805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.318266][ T817] loop6: detected capacity change from 0 to 2048 [ 46.333920][ T821] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.343297][ T730] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 46.362388][ T730] FAT-fs (loop5): Filesystem has been set read-only [ 46.376122][ T730] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 46.387551][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.398888][ T817] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 46.407510][ T821] EXT4-fs warning (device loop0): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 46.407912][ T817] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.424325][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.447268][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.457088][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.465385][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.481002][ T288] EXT4-fs (loop0): unmounting filesystem. [ 46.498634][ T583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 46.516214][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.524618][ T834] loop0: detected capacity change from 0 to 2048 [ 46.524789][ T583] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 46.555363][ T834] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.569478][ T805] device veth0_vlan entered promiscuous mode [ 46.576176][ T834] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.587455][ T583] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 46.590357][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.605806][ T583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.606864][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.614065][ T583] usb 3-1: Product: syz [ 46.624431][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.646995][ T583] usb 3-1: Manufacturer: syz [ 46.653201][ T583] usb 3-1: SerialNumber: syz [ 46.660004][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.679700][ T805] device veth1_macvtap entered promiscuous mode [ 46.688401][ T583] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 46.705005][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.724642][ T583] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 46.724642][ T583] Please send a copy of this message to and [ 46.752977][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.852200][ T844] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.860886][ T844] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.877634][ T807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.878673][ T844] device bridge_slave_0 entered promiscuous mode [ 46.888490][ T807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.895499][ T844] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.910467][ T844] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.919088][ T844] device bridge_slave_1 entered promiscuous mode [ 47.078674][ T849] loop7: detected capacity change from 0 to 2048 [ 47.242084][ T849] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 47.252477][ T849] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.401533][ T773] EXT4-fs (loop6): unmounting filesystem. [ 47.447172][ T583] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 47.535595][ T583] usb 3-1: USB disconnect, device number 7 [ 47.557904][ T288] EXT4-fs (loop0): unmounting filesystem. [ 47.821419][ T805] EXT4-fs (loop7): unmounting filesystem. [ 47.897371][ T10] device bridge_slave_1 left promiscuous mode [ 47.921114][ T862] FAULT_INJECTION: forcing a failure. [ 47.921114][ T862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.942527][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.956256][ T862] CPU: 1 PID: 862 Comm: syz.7.151 Not tainted syzkaller #0 [ 47.958524][ T864] loop0: detected capacity change from 0 to 1024 [ 47.964354][ T862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.964374][ T862] Call Trace: [ 47.964380][ T862] [ 47.964387][ T862] __dump_stack+0x21/0x24 [ 47.964416][ T862] dump_stack_lvl+0x110/0x170 [ 48.005002][ T862] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.010711][ T862] ? _parse_integer+0x2a/0x40 [ 48.015128][ T864] EXT4-fs: Ignoring removed bh option [ 48.018235][ T862] dump_stack+0x15/0x24 [ 48.018273][ T862] should_fail_ex+0x3bf/0x510 [ 48.018296][ T862] should_fail+0xb/0x10 [ 48.018313][ T862] should_fail_usercopy+0x1a/0x20 [ 48.018327][ T862] _copy_from_user+0x1e/0xc0 [ 48.018346][ T862] ___sys_sendmsg+0x1c3/0x360 [ 48.018989][ T862] ? __sys_sendmsg+0x290/0x290 [ 48.019010][ T862] ? __kasan_check_write+0x14/0x20 [ 48.019027][ T862] ? proc_fail_nth_write+0x180/0x200 [ 48.019048][ T862] ? vfs_write+0xa51/0xd00 [ 48.019066][ T862] ? __fdget+0x19c/0x220 [ 48.094950][ T862] __x64_sys_sendmsg+0x20d/0x2e0 [ 48.102088][ T862] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 48.109085][ T862] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 48.115930][ T862] x64_sys_call+0x171/0x9a0 [ 48.120887][ T862] do_syscall_64+0x4c/0xa0 [ 48.128525][ T862] ? clear_bhb_loop+0x30/0x80 [ 48.133416][ T862] ? clear_bhb_loop+0x30/0x80 [ 48.139789][ T862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.145857][ T862] RIP: 0033:0x7fb5c6b9e159 [ 48.150357][ T862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.173453][ T862] RSP: 002b:00007fb5c79d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.182194][ T862] RAX: ffffffffffffffda RBX: 00007fb5c6e25fa0 RCX: 00007fb5c6b9e159 [ 48.190948][ T862] RDX: 0000000000000000 RSI: 0000200000002580 RDI: 0000000000000003 [ 48.200721][ T862] RBP: 00007fb5c79d9090 R08: 0000000000000000 R09: 0000000000000000 [ 48.210156][ T862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.219631][ T862] R13: 00007fb5c6e26038 R14: 00007fb5c6e25fa0 R15: 00007ffc3f237d08 [ 48.230129][ T862] [ 48.238034][ T857] loop6: detected capacity change from 0 to 131072 [ 48.240947][ T10] device bridge_slave_0 left promiscuous mode [ 48.264950][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.266857][ T864] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.282422][ T857] F2FS-fs (loop6): invalid crc value [ 48.289377][ T10] device veth1_macvtap left promiscuous mode [ 48.311544][ T10] device veth0_vlan left promiscuous mode [ 48.319630][ T872] loop2: detected capacity change from 0 to 1024 [ 48.339402][ T872] EXT4-fs: Ignoring removed bh option [ 48.351398][ T864] EXT4-fs warning (device loop0): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 48.368592][ T857] F2FS-fs (loop6): Found nat_bits in checkpoint [ 48.402915][ T872] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.422232][ T857] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 48.447869][ T872] EXT4-fs warning (device loop2): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 48.508738][ T288] EXT4-fs (loop0): unmounting filesystem. [ 48.546092][ T221] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.557546][ T289] EXT4-fs (loop2): unmounting filesystem. [ 48.593632][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.604483][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.613812][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 48.613827][ T28] audit: type=1400 audit(1790281108.608:229): avc: denied { execute } for pid=884 comm="syz.2.157" path="/syzcgroup/cpu/syz2/memory.limit_in_bytes" dev="cgroup" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 48.658306][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.679759][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.697048][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.709279][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.719347][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.741666][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.753493][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.763743][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.772597][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.776311][ T221] usb 8-1: Using ep0 maxpacket: 32 [ 48.798569][ T221] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.803333][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.824325][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.833610][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.845405][ T221] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.846564][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.857736][ T221] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 48.883685][ T844] device veth0_vlan entered promiscuous mode [ 48.892186][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.892798][ T221] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 48.901696][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.923534][ T221] usb 8-1: Product: syz [ 48.923940][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.929447][ T221] usb 8-1: Manufacturer: syz [ 48.940420][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.955835][ T586] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 48.973296][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.983020][ T221] hub 8-1:4.0: USB hub found [ 48.984128][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.999144][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.012804][ T844] device veth1_macvtap entered promiscuous mode [ 49.033276][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.044622][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.056235][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.066561][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.099561][ T28] audit: type=1400 audit(1790281109.098:230): avc: denied { getopt } for pid=890 comm="syz.8.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.132735][ T896] loop8: detected capacity change from 0 to 512 [ 49.166815][ T586] usb 3-1: config 1 has an invalid interface number: 232 but max is 2 [ 49.177389][ T586] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.190094][ T586] usb 3-1: config 1 has no interface number 2 [ 49.197437][ T221] hub 8-1:4.0: 2 ports detected [ 49.209664][ T586] usb 3-1: too many endpoints for config 1 interface 232 altsetting 255: 255, using maximum allowed: 30 [ 49.223524][ T586] usb 3-1: config 1 interface 232 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 49.223555][ T586] usb 3-1: config 1 interface 232 has no altsetting 0 [ 49.225119][ T586] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 49.263945][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.274555][ T586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.292167][ T586] usb 3-1: Product: syz [ 49.300855][ T586] usb 3-1: Manufacturer: syz [ 49.300875][ T586] usb 3-1: SerialNumber: syz [ 49.314807][ T586] usb 3-1: selecting invalid altsetting 1 [ 49.325409][ T901] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.160: bg 0: block 5: invalid block bitmap [ 49.329935][ T586] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 49.344655][ T901] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 49.353912][ T586] usb 3-1: selecting invalid altsetting 1 [ 49.368115][ T901] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.160: invalid indirect mapped block 3 (level 2) [ 49.374285][ T586] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 49.401201][ T901] EXT4-fs (loop8): 1 orphan inode deleted [ 49.412670][ T901] EXT4-fs (loop8): 1 truncate cleaned up [ 49.424225][ T586] usb 3-1: selecting invalid altsetting 1 [ 49.429073][ T901] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 49.438408][ T586] snd-usb-audio: probe of 3-1:1.232 failed with error -22 [ 49.466499][ T28] audit: type=1400 audit(1790281109.468:231): avc: denied { lock } for pid=900 comm="syz.8.160" path="/2/file0/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.496278][ T907] FAULT_INJECTION: forcing a failure. [ 49.496278][ T907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.514381][ T907] CPU: 1 PID: 907 Comm: syz.0.161 Not tainted syzkaller #0 [ 49.514409][ T907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.514419][ T907] Call Trace: [ 49.514425][ T907] [ 49.514432][ T907] __dump_stack+0x21/0x24 [ 49.514461][ T907] dump_stack_lvl+0x110/0x170 [ 49.514481][ T907] ? __cfi_dump_stack_lvl+0x8/0x8 [ 49.514503][ T907] dump_stack+0x15/0x24 [ 49.514523][ T907] should_fail_ex+0x3bf/0x510 [ 49.514541][ T907] should_fail+0xb/0x10 [ 49.514555][ T907] should_fail_usercopy+0x1a/0x20 [ 49.514572][ T907] copyin+0x20/0xa0 [ 49.514593][ T907] _copy_from_iter+0x3cd/0xfe0 [ 49.514616][ T907] ? __cfi__copy_from_iter+0x10/0x10 [ 49.514638][ T907] ? __kasan_check_write+0x14/0x20 [ 49.514655][ T907] ? __build_skb_around+0x24c/0x470 [ 49.514675][ T907] ? __check_object_size+0x45a/0x600 [ 49.514692][ T907] netlink_sendmsg+0x73b/0xbd0 [ 49.514714][ T907] ? __cfi_netlink_sendmsg+0x10/0x10 [ 49.514733][ T907] ? security_socket_sendmsg+0x93/0xb0 [ 49.514763][ T907] ? __cfi_netlink_sendmsg+0x10/0x10 [ 49.514782][ T907] ____sys_sendmsg+0x5fb/0x9c0 [ 49.514805][ T907] ? __sys_sendmsg_sock+0x40/0x40 [ 49.514828][ T907] ? import_iovec+0x7c/0xb0 [ 49.514843][ T907] ___sys_sendmsg+0x2a2/0x360 [ 49.514863][ T907] ? __sys_sendmsg+0x290/0x290 [ 49.514884][ T907] ? __kasan_check_write+0x14/0x20 [ 49.514899][ T907] ? proc_fail_nth_write+0x180/0x200 [ 49.514917][ T907] ? vfs_write+0xa51/0xd00 [ 49.514937][ T907] ? __fdget+0x19c/0x220 [ 49.514954][ T907] __x64_sys_sendmsg+0x20d/0x2e0 [ 49.514975][ T907] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 49.515000][ T907] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 49.515021][ T907] x64_sys_call+0x171/0x9a0 [ 49.515038][ T907] do_syscall_64+0x4c/0xa0 [ 49.515058][ T907] ? clear_bhb_loop+0x30/0x80 [ 49.515077][ T907] ? clear_bhb_loop+0x30/0x80 [ 49.515094][ T907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.515112][ T907] RIP: 0033:0x7f24c459e159 [ 49.515128][ T907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.515142][ T907] RSP: 002b:00007f24c53b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.515162][ T907] RAX: ffffffffffffffda RBX: 00007f24c4826090 RCX: 00007f24c459e159 [ 49.515174][ T907] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 49.515185][ T907] RBP: 00007f24c53b6090 R08: 0000000000000000 R09: 0000000000000000 [ 49.515196][ T907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.515207][ T907] R13: 00007f24c4826128 R14: 00007f24c4826090 R15: 00007ffe150ecc58 [ 49.515222][ T907] [ 49.545804][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 49.548785][ T6] usb 7-1: config 21 has an invalid descriptor of length 80, skipping remainder of the config [ 49.571954][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.232/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.573302][ T6] usb 7-1: config 21 has 2 interfaces, different from the descriptor's value: 3 [ 49.956251][ T221] hub 8-1:4.0: set hub depth failed [ 49.959149][ T844] EXT4-fs (loop8): unmounting filesystem. [ 49.969849][ T221] usb 8-1: USB disconnect, device number 2 [ 49.981353][ T6] usb 7-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 49.994458][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.008246][ T6] usb 7-1: Product: syz [ 50.014698][ T6] usb 7-1: Manufacturer: syz [ 50.020515][ T6] usb 7-1: SerialNumber: syz [ 50.042133][ T911] fuse: Unknown parameter 'group_idj¹ì %cÇï5SÐ"ÖÚ*\$çWVAù' [ 50.054685][ T911] overlayfs: overlapping lowerdir path [ 50.076955][ T10] device bridge_slave_1 left promiscuous mode [ 50.086303][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.095186][ T10] device bridge_slave_0 left promiscuous mode [ 50.101672][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.111489][ T10] device veth1_macvtap left promiscuous mode [ 50.118992][ T10] device veth0_vlan left promiscuous mode [ 50.227805][ T913] netlink: 8 bytes leftover after parsing attributes in process `syz.8.163'. [ 50.239302][ T889] netlink: 96 bytes leftover after parsing attributes in process `syz.6.158'. [ 50.280141][ T889] EXT4-fs: Ignoring removed bh option [ 50.310274][ T918] EXT4-fs: Ignoring removed bh option [ 50.322516][ T889] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 50.325148][ T919] EXT4-fs: Ignoring removed bh option [ 50.338563][ T889] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.368311][ T889] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm syz.6.158: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.385043][ T889] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 50.400919][ T889] EXT4-fs (loop6): This should not happen!! Data will be lost [ 50.400919][ T889] [ 50.412884][ T919] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 50.414278][ T28] audit: type=1400 audit(1790281110.418:232): avc: denied { map } for pid=888 comm="syz.6.158" path="/6/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.455524][ T918] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 50.469446][ T889] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: comm syz.6.158: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.496856][ T889] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: comm syz.6.158: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.517779][ T919] EXT4-fs warning (device loop0): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 50.540423][ T889] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: comm syz.6.158: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.542839][ T918] EXT4-fs warning (device loop8): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 50.572553][ T926] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: comm syz.6.158: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.589706][ T926] EXT4-fs error (device loop6): ext4_ext_remove_space:2945: inode #15: comm syz.6.158: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 50.611026][ T844] EXT4-fs (loop8): unmounting filesystem. [ 50.613618][ T926] EXT4-fs error (device loop6) in ext4_setattr:5697: Corrupt filesystem [ 50.621387][ T889] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: comm syz.6.158: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.630917][ T221] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 50.659706][ T288] EXT4-fs (loop0): unmounting filesystem. [ 50.660510][ T889] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: comm syz.6.158: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.684660][ T889] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: comm syz.6.158: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.700307][ T28] audit: type=1400 audit(1790281110.678:233): avc: denied { bind } for pid=928 comm="syz.8.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.751847][ T28] audit: type=1400 audit(1790281110.738:234): avc: denied { listen } for pid=928 comm="syz.8.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.778971][ T28] audit: type=1400 audit(1790281110.738:235): avc: denied { setopt } for pid=928 comm="syz.8.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.806819][ T28] audit: type=1400 audit(1790281110.778:236): avc: denied { ioctl } for pid=928 comm="syz.8.167" path="socket:[19142]" dev="sockfs" ino=19142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.853685][ T28] audit: type=1400 audit(1790281110.778:237): avc: denied { write } for pid=928 comm="syz.8.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.876452][ T28] audit: type=1400 audit(1790281110.848:238): avc: denied { bind } for pid=933 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.899851][ T221] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 50.911711][ T221] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 50.925257][ T221] usb 8-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 50.936285][ T221] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.947111][ T221] usb 8-1: Product: syz [ 50.953232][ T221] usb 8-1: Manufacturer: syz [ 50.960917][ T221] usb 8-1: SerialNumber: syz [ 50.986241][ T221] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 50.999816][ T221] ums-sddr09 8-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 50.999816][ T221] Please send a copy of this message to and [ 51.181996][ T915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.193190][ T915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.602802][ T909] syz.2.157 (909) used greatest stack depth: 21312 bytes left [ 51.640701][ T852] usb 3-1: USB disconnect, device number 8 [ 51.656408][ T221] ums-sddr09: probe of 8-1:1.0 failed with error -5 [ 51.674194][ T221] usb 8-1: USB disconnect, device number 3 [ 51.692001][ T947] set_capacity_and_notify: 4 callbacks suppressed [ 51.692023][ T947] loop2: detected capacity change from 0 to 512 [ 51.730961][ T947] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.761892][ T947] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 51.774803][ T947] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 51.793868][ T947] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.171: attempt to clear invalid blocks 2 len 1 [ 51.810148][ T947] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.171: invalid indirect mapped block 1819239214 (level 0) [ 51.826919][ T947] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.171: invalid indirect mapped block 1819239214 (level 1) [ 51.844709][ T947] EXT4-fs (loop2): 1 truncate cleaned up [ 51.853393][ T947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.877152][ T943] syzkaller0: renamed from team_slave_0 [ 51.910678][ T947] EXT4-fs error (device loop2): ext4_lookup:1855: inode #2: comm syz.2.171: 'file1' linked to parent dir [ 51.957624][ T6] usb 7-1: 0:2 : does not exist [ 51.984049][ T773] EXT4-fs (loop6): unmounting filesystem. [ 51.999747][ T957] loop8: detected capacity change from 0 to 1024 [ 52.014437][ T957] EXT4-fs: Ignoring removed oldalloc option [ 52.025086][ T289] EXT4-fs (loop2): unmounting filesystem. [ 52.040964][ T6] usb 7-1: USB disconnect, device number 2 [ 52.057361][ T957] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 52.116561][ T962] loop2: detected capacity change from 0 to 512 [ 52.140550][ T957] loop8: detected capacity change from 0 to 4096 [ 52.172801][ T957] EXT4-fs: Ignoring removed orlov option [ 52.196004][ T957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.226296][ T957] EXT4-fs (loop8): Test dummy encryption mode enabled [ 52.246118][ T957] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 52.269336][ T955] loop0: detected capacity change from 0 to 40427 [ 52.282304][ T955] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 52.290604][ T955] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 52.302185][ T955] F2FS-fs (loop0): invalid crc value [ 52.333470][ T955] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 52.354311][ T971] loop8: detected capacity change from 0 to 1024 [ 52.369745][ T971] EXT4-fs: Ignoring removed bh option [ 52.385105][ T955] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 52.393640][ T973] loop2: detected capacity change from 0 to 1024 [ 52.397046][ T955] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 52.406603][ T973] EXT4-fs: Ignoring removed bh option [ 52.415765][ T971] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 52.431922][ T6] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.445785][ T310] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 52.467946][ T967] f2fs_ckpt-7:0: attempt to access beyond end of device [ 52.467946][ T967] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.477220][ T971] EXT4-fs warning (device loop8): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 52.500858][ T973] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.525369][ T844] EXT4-fs (loop8): unmounting filesystem. [ 52.579051][ T973] EXT4-fs warning (device loop2): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 52.605681][ T980] FAULT_INJECTION: forcing a failure. [ 52.605681][ T980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.621616][ T980] CPU: 1 PID: 980 Comm: syz.8.180 Not tainted syzkaller #0 [ 52.626461][ T6] usb 7-1: Using ep0 maxpacket: 32 [ 52.630830][ T980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.643974][ T310] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.651924][ T980] Call Trace: [ 52.651938][ T980] [ 52.651946][ T980] __dump_stack+0x21/0x24 [ 52.651972][ T980] dump_stack_lvl+0x110/0x170 [ 52.651989][ T980] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.652008][ T980] ? __kasan_check_write+0x14/0x20 [ 52.652026][ T980] dump_stack+0x15/0x24 [ 52.652061][ T980] should_fail_ex+0x3bf/0x510 [ 52.652076][ T980] should_fail+0xb/0x10 [ 52.652088][ T980] should_fail_usercopy+0x1a/0x20 [ 52.652102][ T980] _copy_from_user+0x1e/0xc0 [ 52.652121][ T980] netlink_setsockopt+0x18e/0x700 [ 52.652144][ T980] ? __cfi_netlink_setsockopt+0x10/0x10 [ 52.652162][ T980] ? security_socket_setsockopt+0x93/0xb0 [ 52.687567][ T310] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.691993][ T980] ? __cfi_netlink_setsockopt+0x10/0x10 [ 52.692031][ T980] __sys_setsockopt+0x2ff/0x4e0 [ 52.692051][ T980] ? tokenize_frame_descr+0x10/0xc0 [ 52.692069][ T980] ? __cfi___sys_setsockopt+0x10/0x10 [ 52.700301][ T6] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 52.704628][ T980] ? ksys_write+0x1eb/0x260 [ 52.711364][ T6] usb 7-1: config 0 has no interface number 0 [ 52.718337][ T980] ? __cfi_ksys_write+0x10/0x10 [ 52.718373][ T980] __x64_sys_setsockopt+0xbf/0xd0 [ 52.718395][ T980] x64_sys_call+0x124/0x9a0 [ 52.718413][ T980] do_syscall_64+0x4c/0xa0 [ 52.724324][ T310] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.730818][ T980] ? clear_bhb_loop+0x30/0x80 [ 52.730851][ T980] ? clear_bhb_loop+0x30/0x80 [ 52.730866][ T980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.730882][ T980] RIP: 0033:0x7fe83179e159 [ 52.730896][ T980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.730909][ T980] RSP: 002b:00007fe832653028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.730927][ T980] RAX: ffffffffffffffda RBX: 00007fe831a25fa0 RCX: 00007fe83179e159 [ 52.730937][ T980] RDX: 000000000000000c RSI: 000000000000010e RDI: 0000000000000003 [ 52.730946][ T980] RBP: 00007fe832653090 R08: 000000000000000f R09: 0000000000000000 [ 52.730955][ T980] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 52.730964][ T980] R13: 00007fe831a26038 R14: 00007fe831a25fa0 R15: 00007ffcb0a2bc98 [ 52.730977][ T980] [ 52.870850][ T990] loop8: detected capacity change from 0 to 256 [ 52.878202][ T6] usb 7-1: config 0 interface 184 has no altsetting 0 [ 52.885143][ T289] EXT4-fs (loop2): unmounting filesystem. [ 52.890480][ T310] usb 8-1: config 0 interface 0 has no altsetting 0 [ 52.915056][ T990] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000003' [ 52.931897][ T310] usb 8-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 53.064009][ T310] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.074923][ T310] usb 8-1: config 0 descriptor?? [ 53.082034][ T6] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 53.105141][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.105262][ T990] loop8: detected capacity change from 0 to 2048 [ 53.116316][ T6] usb 7-1: Product: syz [ 53.129033][ T6] usb 7-1: Manufacturer: syz [ 53.134383][ T6] usb 7-1: SerialNumber: syz [ 53.139539][ T990] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 53.141110][ T6] usb 7-1: config 0 descriptor?? [ 53.170793][ T6] smsc75xx v1.0.0 [ 53.285353][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.8.185'. [ 53.306057][ T307] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 53.505861][ T310] samsung 0003:0419:0600.0002: nested delimiters [ 53.507148][ T307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 53.513375][ T310] samsung 0003:0419:0600.0002: item 0 4 2 10 parsing failed [ 53.526067][ T307] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 53.535259][ T310] samsung 0003:0419:0600.0002: parse failed [ 53.548764][ T307] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 53.554495][ T310] samsung: probe of 0003:0419:0600.0002 failed with error -22 [ 53.564672][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.586011][ T307] usb 1-1: Product: syz [ 53.591673][ T307] usb 1-1: Manufacturer: syz [ 53.597918][ T307] usb 1-1: SerialNumber: syz [ 53.605910][ T307] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 53.616333][ T307] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 53.616333][ T307] Please send a copy of this message to and [ 53.726712][ T583] usb 8-1: USB disconnect, device number 4 [ 53.792737][ T959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=959 comm=syz.6.174 [ 53.811615][ T995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.833300][ T995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.841508][ T6] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 53.857631][ T6] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 53.858480][ T844] EXT4-fs (loop8): unmounting filesystem. [ 53.870445][ T6] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 53.870530][ T6] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 53.872433][ T406] udevd[406]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:21.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.933140][ T6] usb 7-1: USB disconnect, device number 3 [ 53.953250][ T1006] FAULT_INJECTION: forcing a failure. [ 53.953250][ T1006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.973657][ T1006] CPU: 0 PID: 1006 Comm: syz.8.188 Not tainted syzkaller #0 [ 53.983114][ T1006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.994755][ T1006] Call Trace: [ 53.998602][ T1006] [ 54.002514][ T1006] __dump_stack+0x21/0x24 [ 54.007408][ T1006] dump_stack_lvl+0x110/0x170 [ 54.014915][ T1006] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.020670][ T1006] dump_stack+0x15/0x24 [ 54.026538][ T1006] should_fail_ex+0x3bf/0x510 [ 54.032640][ T1006] should_fail+0xb/0x10 [ 54.039262][ T1006] should_fail_usercopy+0x1a/0x20 [ 54.046464][ T1006] _copy_to_user+0x1e/0x90 [ 54.051702][ T1006] simple_read_from_buffer+0xe9/0x160 [ 54.059763][ T1006] proc_fail_nth_read+0x1a6/0x220 [ 54.067575][ T1006] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 54.074357][ T1006] ? security_file_permission+0x94/0xb0 [ 54.081469][ T1006] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 54.088007][ T1006] vfs_read+0x286/0x930 [ 54.094793][ T1006] ? __cfi_vfs_read+0x10/0x10 [ 54.100526][ T1006] ? __kasan_check_write+0x14/0x20 [ 54.109682][ T1006] ? mutex_lock+0x93/0x1b0 [ 54.114601][ T1006] ? __cfi_mutex_lock+0x10/0x10 [ 54.119739][ T1006] ? __fdget_pos+0x2cd/0x380 [ 54.125072][ T1006] ? ksys_read+0x70/0x260 [ 54.130137][ T1006] ksys_read+0x14a/0x260 [ 54.134452][ T1006] ? __cfi_ksys_read+0x10/0x10 [ 54.140410][ T1006] ? debug_smp_processor_id+0x17/0x20 [ 54.146873][ T1006] __x64_sys_read+0x7b/0x90 [ 54.151854][ T1006] x64_sys_call+0x2f/0x9a0 [ 54.159082][ T1006] do_syscall_64+0x4c/0xa0 [ 54.164056][ T1006] ? clear_bhb_loop+0x30/0x80 [ 54.169392][ T1006] ? clear_bhb_loop+0x30/0x80 [ 54.175487][ T1006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.182527][ T1006] RIP: 0033:0x7fe83175e98e [ 54.187599][ T1006] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.211779][ T1006] RSP: 002b:00007fe832652fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.221219][ T1006] RAX: ffffffffffffffda RBX: 00007fe8326536c0 RCX: 00007fe83175e98e [ 54.230070][ T1006] RDX: 000000000000000f RSI: 00007fe8326530a0 RDI: 0000000000000003 [ 54.239468][ T1006] RBP: 00007fe832653090 R08: 0000000000000000 R09: 0000000000000000 [ 54.248684][ T1006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.258613][ T1006] R13: 00007fe831a26038 R14: 00007fe831a25fa0 R15: 00007ffcb0a2bc98 [ 54.269317][ T1006] [ 54.319903][ T1010] loop2: detected capacity change from 0 to 512 [ 54.346352][ T307] ums-sddr09: probe of 1-1:1.0 failed with error -32 [ 54.367285][ T307] usb 1-1: USB disconnect, device number 6 [ 54.411477][ T1012] EXT4-fs: Ignoring removed bh option [ 54.470244][ T1012] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 54.526364][ T1012] EXT4-fs warning (device loop7): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 54.545033][ T1008] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 54.552520][ T1008] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 54.571097][ T1008] F2FS-fs (loop8): invalid crc value [ 54.602368][ T805] EXT4-fs (loop7): unmounting filesystem. [ 54.644311][ T1021] EXT4-fs: Ignoring removed bh option [ 54.653283][ T1008] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 54.680902][ T1024] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 54.702168][ T1024] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.703231][ T1027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 54.727959][ T1008] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 54.737146][ T1027] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.738436][ T1021] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 54.760397][ T28] kauditd_printk_skb: 553 callbacks suppressed [ 54.760413][ T28] audit: type=1400 audit(1790281114.758:792): avc: denied { mounton } for pid=1023 comm="syz.7.194" path="/6/file0/file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.760496][ T1024] overlayfs: missing 'lowerdir' [ 54.769417][ T1008] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 54.836166][ T289] EXT4-fs (loop2): unmounting filesystem. [ 54.843774][ T1021] EXT4-fs warning (device loop6): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 54.844649][ T1019] f2fs_ckpt-7:8: attempt to access beyond end of device [ 54.844649][ T1019] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 54.906473][ T773] EXT4-fs (loop6): unmounting filesystem. [ 54.969810][ T1039] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.981594][ T28] audit: type=1400 audit(1790281114.968:793): avc: denied { bind } for pid=1043 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.005878][ T1039] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.044288][ T28] audit: type=1400 audit(1790281114.968:794): avc: denied { name_bind } for pid=1043 comm="syz.2.196" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 55.087370][ T1055] ip_tables: iptables: counters copy to user failed while replacing table [ 55.101986][ T805] EXT4-fs (loop7): unmounting filesystem. [ 55.108407][ T28] audit: type=1400 audit(1790281114.968:795): avc: denied { node_bind } for pid=1043 comm="syz.2.196" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 55.139344][ T28] audit: type=1400 audit(1790281115.008:796): avc: denied { remount } for pid=1023 comm="syz.7.194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.148895][ T288] EXT4-fs (loop0): unmounting filesystem. [ 55.169828][ T28] audit: type=1400 audit(1790281115.008:797): avc: denied { unlink } for pid=1023 comm="syz.7.194" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.214657][ T28] audit: type=1326 audit(1790281115.088:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1054 comm="syz.6.201" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d79d9e159 code=0x7ffc0000 [ 55.249529][ T307] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 55.249987][ T28] audit: type=1326 audit(1790281115.088:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1054 comm="syz.6.201" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d79d9e159 code=0x7ffc0000 [ 55.285069][ T1063] overlayfs: './bus' not a directory [ 55.316303][ T28] audit: type=1326 audit(1790281115.088:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1054 comm="syz.6.201" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d79d9e159 code=0x7ffc0000 [ 55.318582][ T1057] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 55.361065][ T28] audit: type=1326 audit(1790281115.088:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1054 comm="syz.6.201" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d79d9e159 code=0x7ffc0000 [ 55.407413][ T1070] EXT4-fs: Ignoring removed bh option [ 55.415851][ T307] usb 3-1: device descriptor read/64, error -71 [ 55.457079][ T1070] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 55.472879][ T1057] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.487318][ T1057] FAULT_INJECTION: forcing a failure. [ 55.487318][ T1057] name failslab, interval 1, probability 0, space 0, times 0 [ 55.526129][ T1057] CPU: 1 PID: 1057 Comm: syz.8.198 Not tainted syzkaller #0 [ 55.537821][ T1057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.548946][ T1057] Call Trace: [ 55.552685][ T1057] [ 55.555824][ T1057] __dump_stack+0x21/0x24 [ 55.562918][ T1057] dump_stack_lvl+0x110/0x170 [ 55.568502][ T1057] ? __cfi_dump_stack_lvl+0x8/0x8 [ 55.574424][ T1057] dump_stack+0x15/0x24 [ 55.580834][ T1057] should_fail_ex+0x3bf/0x510 [ 55.586754][ T1057] ? getname_flags+0xba/0x510 [ 55.593261][ T1057] __should_failslab+0xac/0xf0 [ 55.598318][ T1057] should_failslab+0x9/0x20 [ 55.602853][ T1057] kmem_cache_alloc+0x3b/0x320 [ 55.608522][ T1057] getname_flags+0xba/0x510 [ 55.614777][ T1057] ? __cfi_vfs_write+0x10/0x10 [ 55.619713][ T1057] getname+0x19/0x20 [ 55.624500][ T1057] __se_sys_quotactl+0x1fd/0x710 [ 55.629445][ T1057] ? __x64_sys_quotactl+0xb0/0xb0 [ 55.634629][ T1057] ? __kasan_check_write+0x14/0x20 [ 55.640311][ T1057] ? fput+0x154/0x1a0 [ 55.646068][ T1057] ? ksys_write+0x1fa/0x260 [ 55.651238][ T1057] __x64_sys_quotactl+0x9b/0xb0 [ 55.658455][ T1057] x64_sys_call+0x8da/0x9a0 [ 55.663727][ T1057] do_syscall_64+0x4c/0xa0 [ 55.668172][ T1057] ? clear_bhb_loop+0x30/0x80 [ 55.673914][ T1057] ? clear_bhb_loop+0x30/0x80 [ 55.682253][ T1057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.689460][ T1057] RIP: 0033:0x7fe83179e159 [ 55.694559][ T1057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.716408][ T1057] RSP: 002b:00007fe832653028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 55.725039][ T1057] RAX: ffffffffffffffda RBX: 00007fe831a25fa0 RCX: 00007fe83179e159 [ 55.733015][ T1057] RDX: 000000000000ee00 RSI: 0000200000000040 RDI: ffffffff80000701 [ 55.740988][ T1057] RBP: 00007fe832653090 R08: 0000000000000000 R09: 0000000000000000 [ 55.750144][ T1057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.758755][ T1057] R13: 00007fe831a26038 R14: 00007fe831a25fa0 R15: 00007ffcb0a2bc98 [ 55.768116][ T1057] [ 55.774134][ T1070] EXT4-fs warning (device loop0): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 55.817827][ T1078] ip_tables: iptables: counters copy to user failed while replacing table [ 55.867611][ T1076] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 55.961795][ T1086] EXT4-fs: Ignoring removed bh option [ 55.968748][ T307] usb 3-1: device descriptor read/64, error -71 [ 56.042901][ T1082] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 56.050874][ T1082] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 56.061908][ T1086] EXT4-fs warning (device loop0): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 56.062352][ T1082] F2FS-fs (loop6): invalid crc value [ 56.115683][ T1082] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 56.145799][ T583] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 56.163333][ T1097] device ip6tnl2 entered promiscuous mode [ 56.166666][ T1082] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 56.182545][ T1082] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 56.239010][ T1089] f2fs_ckpt-7:6: attempt to access beyond end of device [ 56.239010][ T1089] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.255810][ T307] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 56.268701][ T1097] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.366924][ T583] usb 9-1: config 1 has an invalid interface number: 2 but max is 1 [ 56.385782][ T583] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.399917][ T583] usb 9-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 56.410698][ T583] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.425820][ T307] usb 3-1: device descriptor read/64, error -71 [ 56.428534][ T1097] FAULT_INJECTION: forcing a failure. [ 56.428534][ T1097] name failslab, interval 1, probability 0, space 0, times 0 [ 56.434698][ T583] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.465464][ T583] usb 9-1: config 1 interface 1 has no altsetting 0 [ 56.484556][ T583] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.507466][ T583] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.516127][ T583] usb 9-1: Product: syz [ 56.524567][ T1097] CPU: 0 PID: 1097 Comm: syz.0.212 Not tainted syzkaller #0 [ 56.532172][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.533456][ T583] usb 9-1: Manufacturer: syz [ 56.543722][ T1097] Call Trace: [ 56.543738][ T1097] [ 56.543749][ T1097] __dump_stack+0x21/0x24 [ 56.543792][ T1097] dump_stack_lvl+0x110/0x170 [ 56.548751][ T583] usb 9-1: SerialNumber: syz [ 56.555421][ T1097] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.555459][ T1097] ? d_add+0x45/0x50 [ 56.590534][ T1097] dump_stack+0x15/0x24 [ 56.595228][ T1097] should_fail_ex+0x3bf/0x510 [ 56.601318][ T1097] __should_failslab+0xac/0xf0 [ 56.607473][ T1097] should_failslab+0x9/0x20 [ 56.613099][ T1097] slab_pre_alloc_hook+0x30/0x1d0 [ 56.618834][ T1097] kmem_cache_alloc_lru+0x49/0x280 [ 56.624717][ T1097] ? new_inode_pseudo+0x8f/0x1f0 [ 56.629778][ T1097] ? __cfi_lookup_one_len+0x10/0x10 [ 56.635100][ T1097] new_inode_pseudo+0x8f/0x1f0 [ 56.640208][ T1097] new_inode+0x28/0x1e0 [ 56.646035][ T1097] ? start_creating+0x1f6/0x300 [ 56.656198][ T1097] ? debugfs_create_dir+0x1c/0x4d0 [ 56.662614][ T1097] debugfs_create_dir+0xf2/0x4d0 [ 56.668980][ T1097] kvm_create_vm_debugfs+0x1ff/0x980 [ 56.676236][ T1097] ? __kasan_kmalloc+0x95/0xb0 [ 56.682125][ T1097] ? hardware_enable_all+0x120/0x120 [ 56.689682][ T1097] kvm_dev_ioctl+0xe3a/0x1200 [ 56.697086][ T1097] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 56.703770][ T1097] ? security_file_ioctl+0x95/0xc0 [ 56.710302][ T1097] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 56.719037][ T1097] __se_sys_ioctl+0x12f/0x1b0 [ 56.725020][ T1097] __x64_sys_ioctl+0x7b/0x90 [ 56.734004][ T1097] x64_sys_call+0x58b/0x9a0 [ 56.740384][ T1097] do_syscall_64+0x4c/0xa0 [ 56.749373][ T1097] ? clear_bhb_loop+0x30/0x80 [ 56.754500][ T1097] ? clear_bhb_loop+0x30/0x80 [ 56.760567][ T1097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.765871][ T307] usb 3-1: device descriptor read/64, error -71 [ 56.766960][ T1097] RIP: 0033:0x7f24c459e159 [ 56.766996][ T1097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.806128][ T1097] RSP: 002b:00007f24c53d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.806162][ T1097] RAX: ffffffffffffffda RBX: 00007f24c4825fa0 RCX: 00007f24c459e159 [ 56.806177][ T1097] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 56.806189][ T1097] RBP: 00007f24c463506b R08: 0000000000000000 R09: 0000000000000000 [ 56.806202][ T1097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.806213][ T1097] R13: 00007f24c4826038 R14: 00007f24c4825fa0 R15: 00007ffe150ecc58 [ 56.806233][ T1097] [ 56.810900][ T583] usb 9-1: selecting invalid altsetting 0 [ 56.810962][ T583] usb 9-1: selecting invalid altsetting 0 [ 56.810987][ T583] cdc_ncm 9-1:1.0: bind() failure [ 56.811853][ T1097] debugfs: out of free dentries, can not create directory '1097-10' [ 56.822109][ T583] usb 9-1: selecting invalid altsetting 0 [ 56.822133][ T583] cdc_ncm: probe of 9-1:1.1 failed with error -22 [ 56.822199][ T583] usb 9-1: selecting invalid altsetting 0 [ 56.822212][ T583] cdc_mbim: probe of 9-1:1.1 failed with error -22 [ 56.842987][ T583] usb 9-1: USB disconnect, device number 2 [ 56.971407][ T307] usb usb3-port1: attempt power cycle [ 56.998652][ T1101] F2FS-fs (loop7): invalid crc value [ 57.037904][ T1101] F2FS-fs (loop7): Found nat_bits in checkpoint [ 57.134582][ T1118] FAULT_INJECTION: forcing a failure. [ 57.134582][ T1118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.158624][ T1116] set_capacity_and_notify: 15 callbacks suppressed [ 57.158647][ T1116] loop0: detected capacity change from 0 to 1024 [ 57.185883][ T1118] CPU: 1 PID: 1118 Comm: syz.6.217 Not tainted syzkaller #0 [ 57.193599][ T1116] EXT4-fs: Ignoring removed bh option [ 57.194366][ T1118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.194380][ T1118] Call Trace: [ 57.194386][ T1118] [ 57.194393][ T1118] __dump_stack+0x21/0x24 [ 57.225089][ T1118] dump_stack_lvl+0x110/0x170 [ 57.229978][ T1118] ? __cfi_dump_stack_lvl+0x8/0x8 [ 57.235291][ T1118] ? vfs_write+0xa51/0xd00 [ 57.240787][ T1118] dump_stack+0x15/0x24 [ 57.245505][ T1118] should_fail_ex+0x3bf/0x510 [ 57.252469][ T1118] should_fail+0xb/0x10 [ 57.257941][ T1118] should_fail_usercopy+0x1a/0x20 [ 57.263620][ T1118] strncpy_from_user+0x24/0x2c0 [ 57.269124][ T1118] __se_sys_request_key+0xb5/0x350 [ 57.275830][ T1118] ? __x64_sys_request_key+0xb0/0xb0 [ 57.282868][ T1118] __x64_sys_request_key+0x9b/0xb0 [ 57.289420][ T1118] x64_sys_call+0x69c/0x9a0 [ 57.295537][ T1118] do_syscall_64+0x4c/0xa0 [ 57.301090][ T1118] ? clear_bhb_loop+0x30/0x80 [ 57.306650][ T1118] ? clear_bhb_loop+0x30/0x80 [ 57.313292][ T1118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.320580][ T1118] RIP: 0033:0x7f5d79d9e159 [ 57.325599][ T1118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.349992][ T1118] RSP: 002b:00007f5d7acf1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 57.360043][ T1118] RAX: ffffffffffffffda RBX: 00007f5d7a025fa0 RCX: 00007f5d79d9e159 [ 57.369346][ T1118] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 57.379598][ T1118] RBP: 00007f5d7acf1090 R08: 0000000000000000 R09: 0000000000000000 [ 57.388575][ T1118] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 57.397425][ T1118] R13: 00007f5d7a026038 R14: 00007f5d7a025fa0 R15: 00007ffe2d3a33d8 [ 57.406476][ T1118] [ 57.412362][ T1101] F2FS-fs (loop7): Start checkpoint disabled! [ 57.419996][ T1101] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 57.428060][ T1101] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 57.475835][ T307] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 57.517469][ T307] usb 3-1: device descriptor read/8, error -71 [ 57.552050][ T1127] FAULT_INJECTION: forcing a failure. [ 57.552050][ T1127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 57.593633][ T1127] CPU: 0 PID: 1127 Comm: syz.8.221 Not tainted syzkaller #0 [ 57.604215][ T1127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.620414][ T1127] Call Trace: [ 57.624505][ T1127] [ 57.627753][ T1127] __dump_stack+0x21/0x24 [ 57.633173][ T1127] dump_stack_lvl+0x110/0x170 [ 57.638331][ T1127] ? __cfi_dump_stack_lvl+0x8/0x8 [ 57.645274][ T1127] ? page_add_file_rmap+0x49f/0x650 [ 57.652692][ T1127] ? next_uptodate_page+0x89e/0x8d0 [ 57.659236][ T1127] dump_stack+0x15/0x24 [ 57.666512][ T1127] should_fail_ex+0x3bf/0x510 [ 57.675023][ T1127] should_fail_alloc_page+0x61/0x90 [ 57.684159][ T1127] prepare_alloc_pages+0x131/0x570 [ 57.687089][ T307] usb 3-1: device descriptor read/8, error -71 [ 57.694193][ T1127] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 57.694231][ T1127] ? __cfi_filemap_map_pages+0x10/0x10 [ 57.694251][ T1127] __alloc_pages+0x15b/0x610 [ 57.725272][ T1127] ? __cfi___alloc_pages+0x10/0x10 [ 57.732177][ T1127] ? do_fault+0x1b23/0x1e30 [ 57.738380][ T1127] ? memcg_rstat_updated+0x56/0x110 [ 57.746251][ T1127] __folio_alloc+0x12/0x40 [ 57.755012][ T1127] handle_mm_fault+0x1989/0x26b0 [ 57.762182][ T1127] ? __cfi_handle_mm_fault+0x10/0x10 [ 57.768698][ T1127] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 57.776026][ T1127] ? fput+0x154/0x1a0 [ 57.782127][ T1127] do_user_addr_fault+0x900/0x1030 [ 57.787650][ T1127] ? debug_smp_processor_id+0x17/0x20 [ 57.794098][ T1127] exc_page_fault+0x51/0xb0 [ 57.800403][ T1127] asm_exc_page_fault+0x27/0x30 [ 57.807131][ T1127] RIP: 0033:0x7fe83165f6cb [ 57.813176][ T1127] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 57.836492][ T1127] RSP: 002b:00007fe832651fa0 EFLAGS: 00010206 [ 57.843769][ T1127] RAX: 0000000000000000 RBX: 00007fe831a25fa0 RCX: 0000000000000000 [ 57.853654][ T1127] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000180 [ 57.862727][ T1127] RBP: 00007fe832653090 R08: 0000000000000000 R09: 0000000000000000 [ 57.872450][ T1127] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000001 [ 57.881485][ T1127] R13: 00007fe831a26038 R14: 00007fe831a25fa0 R15: 00007ffcb0a2bc98 [ 57.890535][ T1127] [ 57.895890][ T1127] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 57.985830][ T307] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.025703][ T10] kworker/u4:1: attempt to access beyond end of device [ 58.025703][ T10] loop7: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 58.033271][ T1149] device ip6gre1 entered promiscuous mode [ 58.126942][ T1151] loop0: detected capacity change from 0 to 512 [ 58.204217][ T1153] loop7: detected capacity change from 0 to 512 [ 58.226410][ T1153] ext4: Unknown parameter 'appraise' [ 58.269437][ T1155] loop7: detected capacity change from 0 to 1024 [ 58.300920][ T1144] loop8: detected capacity change from 0 to 40427 [ 58.325120][ T1144] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 58.335590][ T1155] EXT4-fs: Ignoring removed bh option [ 58.344344][ T1144] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 58.356036][ T1144] F2FS-fs (loop8): invalid crc value [ 58.389262][ T1144] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 58.445812][ T307] usb 3-1: device not accepting address 12, error -71 [ 58.472245][ T307] usb usb3-port1: unable to enumerate USB device [ 58.505190][ T1167] FAULT_INJECTION: forcing a failure. [ 58.505190][ T1167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.528959][ T1167] CPU: 1 PID: 1167 Comm: syz.7.231 Not tainted syzkaller #0 [ 58.538523][ T1167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.543568][ T1169] loop0: detected capacity change from 0 to 128 [ 58.551283][ T1167] Call Trace: [ 58.551297][ T1167] [ 58.551303][ T1167] __dump_stack+0x21/0x24 [ 58.551331][ T1167] dump_stack_lvl+0x110/0x170 [ 58.552470][ T1167] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.552500][ T1167] dump_stack+0x15/0x24 [ 58.552518][ T1167] should_fail_ex+0x3bf/0x510 [ 58.552535][ T1167] should_fail+0xb/0x10 [ 58.552548][ T1167] should_fail_usercopy+0x1a/0x20 [ 58.608392][ T1167] _copy_from_user+0x1e/0xc0 [ 58.614513][ T1167] __sys_bpf+0x2a0/0x850 [ 58.620523][ T1167] ? bpf_link_show_fdinfo+0x330/0x330 [ 58.626626][ T1167] ? __cfi_ksys_write+0x10/0x10 [ 58.632026][ T1167] ? debug_smp_processor_id+0x17/0x20 [ 58.636193][ T1144] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 58.638293][ T1167] __x64_sys_bpf+0x7c/0x90 [ 58.638322][ T1167] x64_sys_call+0x488/0x9a0 [ 58.646482][ T1144] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 58.651906][ T1167] do_syscall_64+0x4c/0xa0 [ 58.651941][ T1167] ? clear_bhb_loop+0x30/0x80 [ 58.677706][ T1167] ? clear_bhb_loop+0x30/0x80 [ 58.684379][ T1167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.693293][ T1167] RIP: 0033:0x7fb5c6b9e159 [ 58.701258][ T1167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.702206][ T1157] f2fs_ckpt-7:8: attempt to access beyond end of device [ 58.702206][ T1157] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.731299][ T1167] RSP: 002b:00007fb5c79d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.731352][ T1167] RAX: ffffffffffffffda RBX: 00007fb5c6e25fa0 RCX: 00007fb5c6b9e159 [ 58.731364][ T1167] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 58.731373][ T1167] RBP: 00007fb5c79d9090 R08: 0000000000000000 R09: 0000000000000000 [ 58.731383][ T1167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.731392][ T1167] R13: 00007fb5c6e26038 R14: 00007fb5c6e25fa0 R15: 00007ffc3f237d08 [ 58.731409][ T1167] [ 58.821398][ T1174] capability: warning: `syz.7.234' uses 32-bit capabilities (legacy support in use) [ 58.929054][ T1185] loop7: detected capacity change from 0 to 1024 [ 58.946758][ T1185] EXT4-fs: Ignoring removed bh option [ 59.029602][ T1191] FAULT_INJECTION: forcing a failure. [ 59.029602][ T1191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.046646][ T307] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 59.057883][ T1191] CPU: 1 PID: 1191 Comm: syz.8.237 Not tainted syzkaller #0 [ 59.067749][ T1191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.079433][ T1191] Call Trace: [ 59.083368][ T1191] [ 59.087452][ T1191] __dump_stack+0x21/0x24 [ 59.092459][ T1191] dump_stack_lvl+0x110/0x170 [ 59.097706][ T1191] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.104247][ T1191] ? avc_has_perm+0x163/0x250 [ 59.113779][ T1191] dump_stack+0x15/0x24 [ 59.119019][ T1191] should_fail_ex+0x3bf/0x510 [ 59.124083][ T1191] should_fail+0xb/0x10 [ 59.125791][ T6] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 59.128295][ T1191] should_fail_usercopy+0x1a/0x20 [ 59.145375][ T1191] _copy_from_user+0x1e/0xc0 [ 59.151001][ T1191] do_fcntl+0x53c/0x1110 [ 59.158132][ T1191] ? putname+0x111/0x160 [ 59.163883][ T1191] ? match_file+0x130/0x130 [ 59.169822][ T1191] ? do_sys_openat2+0x715/0x820 [ 59.174945][ T1191] ? kill_fasync+0x210/0x210 [ 59.179940][ T1191] ? __kasan_check_read+0x11/0x20 [ 59.185784][ T1191] ? __fdget_pos+0x2d4/0x380 [ 59.190667][ T1191] ? security_file_fcntl+0x95/0xc0 [ 59.196264][ T1191] __se_sys_fcntl+0xdf/0x1b0 [ 59.201315][ T1191] ? debug_smp_processor_id+0x17/0x20 [ 59.207018][ T1191] __x64_sys_fcntl+0x7b/0x90 [ 59.212425][ T1191] x64_sys_call+0x1a9/0x9a0 [ 59.216987][ T1191] do_syscall_64+0x4c/0xa0 [ 59.221962][ T1191] ? clear_bhb_loop+0x30/0x80 [ 59.227925][ T1191] ? clear_bhb_loop+0x30/0x80 [ 59.232896][ T1191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.235912][ T221] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 59.239525][ T1191] RIP: 0033:0x7fe83179e159 [ 59.253161][ T1191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.274387][ T1191] RSP: 002b:00007fe832653028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 59.287574][ T1191] RAX: ffffffffffffffda RBX: 00007fe831a25fa0 RCX: 00007fe83179e159 [ 59.295874][ T6] usb 1-1: device descriptor read/64, error -71 [ 59.296253][ T1191] RDX: 0000200000000040 RSI: 0000000000000007 RDI: 0000000000000004 [ 59.311796][ T1191] RBP: 00007fe832653090 R08: 0000000000000000 R09: 0000000000000000 [ 59.320005][ T1191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.328689][ T1191] R13: 00007fe831a26038 R14: 00007fe831a25fa0 R15: 00007ffcb0a2bc98 [ 59.336826][ T1191] [ 59.380693][ T1201] FAULT_INJECTION: forcing a failure. [ 59.380693][ T1201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.399132][ T1201] CPU: 1 PID: 1201 Comm: syz.8.245 Not tainted syzkaller #0 [ 59.408276][ T1201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.421657][ T1201] Call Trace: [ 59.425214][ T1201] [ 59.428808][ T1201] __dump_stack+0x21/0x24 [ 59.433158][ T1201] dump_stack_lvl+0x110/0x170 [ 59.437404][ T221] usb 7-1: unable to get BOS descriptor or descriptor too short [ 59.437863][ T1201] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.447541][ T221] usb 7-1: not running at top speed; connect to a high speed hub [ 59.452993][ T1201] ? _parse_integer+0x2a/0x40 [ 59.468594][ T1201] dump_stack+0x15/0x24 [ 59.473443][ T1201] should_fail_ex+0x3bf/0x510 [ 59.473785][ T221] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 59.478263][ T1201] should_fail+0xb/0x10 [ 59.478291][ T1201] should_fail_usercopy+0x1a/0x20 [ 59.478307][ T1201] _copy_from_user+0x1e/0xc0 [ 59.478327][ T1201] ___sys_sendmsg+0x1c3/0x360 [ 59.478349][ T1201] ? __sys_sendmsg+0x290/0x290 [ 59.498562][ T221] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.498843][ T1201] ? __kasan_check_write+0x14/0x20 [ 59.506508][ T221] usb 7-1: Product: syz [ 59.511782][ T1201] ? proc_fail_nth_write+0x180/0x200 [ 59.517754][ T221] usb 7-1: Manufacturer: syz [ 59.522451][ T1201] ? vfs_write+0xa51/0xd00 [ 59.532408][ T221] usb 7-1: SerialNumber: syz [ 59.537137][ T1201] ? __fdget+0x19c/0x220 [ 59.537167][ T1201] __x64_sys_sendmsg+0x20d/0x2e0 [ 59.537191][ T1201] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 59.575878][ T6] usb 1-1: device descriptor read/64, error -71 [ 59.577589][ T1201] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 59.597218][ T1201] x64_sys_call+0x171/0x9a0 [ 59.602066][ T1201] do_syscall_64+0x4c/0xa0 [ 59.607294][ T1201] ? clear_bhb_loop+0x30/0x80 [ 59.612200][ T1201] ? clear_bhb_loop+0x30/0x80 [ 59.617334][ T1201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.623851][ T1201] RIP: 0033:0x7fe83179e159 [ 59.628273][ T1201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.645866][ T586] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 59.648757][ T1201] RSP: 002b:00007fe832653028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.648786][ T1201] RAX: ffffffffffffffda RBX: 00007fe831a25fa0 RCX: 00007fe83179e159 [ 59.674601][ T1201] RDX: 0000000000000000 RSI: 0000200000002580 RDI: 0000000000000003 [ 59.683544][ T1201] RBP: 00007fe832653090 R08: 0000000000000000 R09: 0000000000000000 [ 59.694609][ T1201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.704492][ T1201] R13: 00007fe831a26038 R14: 00007fe831a25fa0 R15: 00007ffcb0a2bc98 [ 59.715349][ T1201] [ 59.732203][ T1203] loop8: detected capacity change from 0 to 512 [ 59.745806][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 59.746020][ T1203] EXT4-fs (loop8): orphan cleanup on readonly fs [ 59.766555][ T221] usb 7-1: MIDIStreaming interface descriptor not found [ 59.776458][ T1203] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 59.792152][ T307] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.809637][ T307] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.809849][ T221] usb 7-1: USB disconnect, device number 4 [ 59.821879][ T1203] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 59.836567][ T586] usb 8-1: Using ep0 maxpacket: 32 [ 59.847744][ T1203] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.246: attempt to clear invalid blocks 2 len 1 [ 59.853003][ T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 59.878373][ T1203] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.246: invalid indirect mapped block 1819239214 (level 0) [ 59.894701][ T307] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 59.895045][ T586] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 59.906547][ T307] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 59.920603][ T586] usb 8-1: config 0 has no interface number 0 [ 59.928754][ T1203] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.246: invalid indirect mapped block 1819239214 (level 1) [ 59.937605][ T586] usb 8-1: config 0 interface 184 has no altsetting 0 [ 59.954659][ T307] usb 3-1: Product: syz [ 59.962998][ T1203] EXT4-fs (loop8): 1 truncate cleaned up [ 59.967951][ T307] usb 3-1: Manufacturer: syz [ 59.985893][ T586] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 59.999259][ T307] hub 3-1:4.0: USB hub found [ 60.000626][ T586] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.014534][ T586] usb 8-1: Product: syz [ 60.019311][ T586] usb 8-1: Manufacturer: syz [ 60.026539][ T586] usb 8-1: SerialNumber: syz [ 60.042268][ T586] usb 8-1: config 0 descriptor?? [ 60.051682][ T586] smsc75xx v1.0.0 [ 60.086111][ T6] usb 1-1: device descriptor read/64, error -71 [ 60.183092][ T1206] loop8: detected capacity change from 0 to 40427 [ 60.196140][ T1206] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 60.202727][ T1206] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 60.222133][ T1206] F2FS-fs (loop8): invalid crc value [ 60.229780][ T307] hub 3-1:4.0: 2 ports detected [ 60.237574][ T1206] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 60.285622][ T1206] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 60.294866][ T1206] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 60.342969][ T1207] f2fs_ckpt-7:8: attempt to access beyond end of device [ 60.342969][ T1207] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.358483][ T1214] loop6: detected capacity change from 0 to 512 [ 60.359658][ T6] usb 1-1: device descriptor read/64, error -71 [ 60.385704][ T1214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 60.395488][ T1214] System zones: 1-12 [ 60.413384][ T1214] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.249: missing EA_INODE flag [ 60.428174][ T1214] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.249: error while reading EA inode 12 err=-117 [ 60.444216][ T1214] EXT4-fs (loop6): 1 orphan inode deleted [ 60.475916][ T6] usb usb1-port1: attempt power cycle [ 60.484306][ T1218] FAULT_INJECTION: forcing a failure. [ 60.484306][ T1218] name failslab, interval 1, probability 0, space 0, times 0 [ 60.497790][ T1218] CPU: 0 PID: 1218 Comm: syz.8.250 Not tainted syzkaller #0 [ 60.505102][ T1218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.515261][ T1218] Call Trace: [ 60.518648][ T1218] [ 60.521790][ T1218] __dump_stack+0x21/0x24 [ 60.532153][ T1218] dump_stack_lvl+0x110/0x170 [ 60.537423][ T1218] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.544195][ T1218] ? __cfi_vfs_write+0x10/0x10 [ 60.549176][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 60.549192][ T28] audit: type=1400 audit(1790281120.498:823): avc: denied { append } for pid=1213 comm="syz.6.249" path="/25/file0/blkio.bfq.io_merged" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.549436][ T1218] dump_stack+0x15/0x24 [ 60.565785][ T28] audit: type=1400 audit(1790281120.568:824): avc: denied { map } for pid=1213 comm="syz.6.249" path="/25/file0/blkio.bfq.io_merged" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.584633][ T1218] should_fail_ex+0x3bf/0x510 [ 60.584670][ T1218] __should_failslab+0xac/0xf0 [ 60.584690][ T1218] should_failslab+0x9/0x20 [ 60.584705][ T1218] __kmem_cache_alloc_node+0x3d/0x2d0 [ 60.584725][ T1218] ? __se_sys_memfd_create+0xf2/0x3c0 [ 60.647612][ T307] hub 3-1:4.0: set hub depth failed [ 60.649620][ T1218] ? ksys_write+0x1fa/0x260 [ 60.662023][ T1218] ? __se_sys_memfd_create+0xf2/0x3c0 [ 60.663775][ T1195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1195 comm=syz.7.242 [ 60.668315][ T1218] __kmalloc+0xa4/0x1e0 [ 60.668345][ T1218] ? strnlen_user+0x10d/0x190 [ 60.668364][ T1218] __se_sys_memfd_create+0xf2/0x3c0 [ 60.668382][ T1218] __x64_sys_memfd_create+0x5b/0x70 [ 60.697903][ T307] usb 3-1: USB disconnect, device number 13 [ 60.699927][ T1218] x64_sys_call+0x235/0x9a0 [ 60.725666][ T1218] do_syscall_64+0x4c/0xa0 [ 60.730118][ T1218] ? clear_bhb_loop+0x30/0x80 [ 60.735615][ T1218] ? clear_bhb_loop+0x30/0x80 [ 60.740843][ T1218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.747056][ T1218] RIP: 0033:0x7fe83179e159 [ 60.752367][ T1218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.778382][ T1218] RSP: 002b:00007fe832652e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 60.788400][ T1218] RAX: ffffffffffffffda RBX: 0000000000000496 RCX: 00007fe83179e159 [ 60.799883][ T1218] RDX: 00007fe832652ee0 RSI: 0000000000000000 RDI: 00007fe83183524b [ 60.808727][ T1218] RBP: 0000200000000e40 R08: 00000000ffffffff R09: 0000000000000000 [ 60.820693][ T1218] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000480 [ 60.832341][ T1218] R13: 00007fe832652ee0 R14: 00007fe832652ea0 R15: 00002000000002c0 [ 60.842392][ T1218] [ 60.846981][ T586] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 60.859943][ T586] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 60.872515][ T586] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 60.884269][ T586] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 60.889479][ T1221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1221 comm=syz.8.252 [ 60.899896][ T586] usb 8-1: USB disconnect, device number 5 [ 60.950693][ T1225] EXT4-fs: Ignoring removed bh option [ 61.014708][ T1230] FAULT_INJECTION: forcing a failure. [ 61.014708][ T1230] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.029972][ T1230] CPU: 1 PID: 1230 Comm: syz.6.254 Not tainted syzkaller #0 [ 61.041827][ T1230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.054107][ T1230] Call Trace: [ 61.058783][ T1230] [ 61.063767][ T1230] __dump_stack+0x21/0x24 [ 61.068486][ T1230] dump_stack_lvl+0x110/0x170 [ 61.074824][ T1230] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.080461][ T1230] ? is_bpf_text_address+0x177/0x190 [ 61.085812][ T1230] ? kernel_text_address+0xa0/0xd0 [ 61.092530][ T1230] dump_stack+0x15/0x24 [ 61.097235][ T1230] should_fail_ex+0x3bf/0x510 [ 61.102017][ T1230] should_fail_alloc_page+0x61/0x90 [ 61.107685][ T1230] prepare_alloc_pages+0x131/0x570 [ 61.113148][ T1230] ? avc_has_perm_noaudit+0x390/0x490 [ 61.120508][ T1230] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 61.127354][ T1230] ? avc_has_perm_noaudit+0x30a/0x490 [ 61.134707][ T1230] __alloc_pages+0x15b/0x610 [ 61.139842][ T1230] ? __cfi___alloc_pages+0x10/0x10 [ 61.146228][ T1230] ? __kasan_check_write+0x14/0x20 [ 61.152087][ T1230] ? mutex_lock+0x93/0x1b0 [ 61.157384][ T1230] ? __cfi_avc_has_perm+0x10/0x10 [ 61.164258][ T1230] pipe_write+0x588/0x1960 [ 61.169057][ T1230] ? __cfi_pipe_write+0x10/0x10 [ 61.174091][ T1230] ? selinux_file_permission+0x3ef/0x510 [ 61.180105][ T1230] ? fsnotify_perm+0x67/0x5b0 [ 61.185846][ T1230] ? security_file_permission+0x8a/0xb0 [ 61.192719][ T1230] vfs_write+0x5ef/0xd00 [ 61.197909][ T1230] ? __cfi_vfs_write+0x10/0x10 [ 61.204484][ T1230] ? __fget_files+0x2d1/0x330 [ 61.209891][ T1230] ? __fdget_pos+0x1f2/0x380 [ 61.216572][ T1230] ? ksys_write+0x70/0x260 [ 61.222501][ T1230] ksys_write+0x14a/0x260 [ 61.225792][ T6] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 61.228331][ T1230] ? __cfi_ksys_write+0x10/0x10 [ 61.247440][ T1230] ? do_user_addr_fault+0x9a5/0x1030 [ 61.255084][ T1230] ? debug_smp_processor_id+0x17/0x20 [ 61.262855][ T1230] __x64_sys_write+0x7b/0x90 [ 61.266917][ T6] usb 1-1: device descriptor read/8, error -71 [ 61.270411][ T1230] x64_sys_call+0x27b/0x9a0 [ 61.270443][ T1230] do_syscall_64+0x4c/0xa0 [ 61.298788][ T1230] ? clear_bhb_loop+0x30/0x80 [ 61.305633][ T1230] ? clear_bhb_loop+0x30/0x80 [ 61.311396][ T1230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.319281][ T1230] RIP: 0033:0x7f5d79d5e98e [ 61.325614][ T1230] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.359257][ T1230] RSP: 002b:00007f5d7acf0ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.370760][ T1230] RAX: ffffffffffffffda RBX: 00007f5d7acf16c0 RCX: 00007f5d79d5e98e [ 61.379989][ T1230] RDX: 0000000000000029 RSI: 00007f5d7acf0e90 RDI: 0000000000000002 [ 61.388519][ T1230] RBP: 00007f5d7acf0e90 R08: 0000000000000000 R09: 0000000000000000 [ 61.399076][ T1230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 61.407925][ T1230] R13: 00007f5d79ff27a0 R14: 00007f5d79fe94a0 R15: 0000000000000001 [ 61.416746][ T1230] [ 61.428813][ T6] usb 1-1: device descriptor read/8, error -71 [ 61.513966][ T773] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 61.526633][ T773] FAT-fs (loop6): Filesystem has been set read-only [ 61.544569][ T773] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 61.561887][ T1239] FAULT_INJECTION: forcing a failure. [ 61.561887][ T1239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.584961][ T1239] CPU: 0 PID: 1239 Comm: syz.8.259 Not tainted syzkaller #0 [ 61.590868][ T1235] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.594144][ T1239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.594168][ T1239] Call Trace: [ 61.594176][ T1239] [ 61.594184][ T1239] __dump_stack+0x21/0x24 [ 61.594222][ T1239] dump_stack_lvl+0x110/0x170 [ 61.629316][ T28] audit: type=1400 audit(1790281121.588:825): avc: denied { ioctl } for pid=1234 comm="syz.2.258" path="/38/file1/file1" dev="loop2" ino=12 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.632805][ T1239] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.673215][ T1239] dump_stack+0x15/0x24 [ 61.678705][ T1239] should_fail_ex+0x3bf/0x510 [ 61.684305][ T1239] should_fail+0xb/0x10 [ 61.689575][ T1239] should_fail_usercopy+0x1a/0x20 [ 61.695637][ T1239] _copy_to_user+0x1e/0x90 [ 61.702300][ T1239] simple_read_from_buffer+0xe9/0x160 [ 61.708654][ T1239] proc_fail_nth_read+0x1a6/0x220 [ 61.713696][ T1239] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 61.719517][ T1239] ? security_file_permission+0x94/0xb0 [ 61.725126][ T1239] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 61.731205][ T1239] vfs_read+0x286/0x930 [ 61.735361][ T1239] ? __cfi_vfs_read+0x10/0x10 [ 61.740400][ T1239] ? __kasan_check_write+0x14/0x20 [ 61.745953][ T1239] ? mutex_lock+0x93/0x1b0 [ 61.752498][ T1239] ? __cfi_mutex_lock+0x10/0x10 [ 61.757983][ T1239] ? __fdget_pos+0x2cd/0x380 [ 61.763044][ T1239] ? ksys_read+0x70/0x260 [ 61.769130][ T1239] ksys_read+0x14a/0x260 [ 61.775140][ T1239] ? __cfi_ksys_read+0x10/0x10 [ 61.779906][ T1239] ? do_user_addr_fault+0x9a5/0x1030 [ 61.785192][ T1239] ? debug_smp_processor_id+0x17/0x20 [ 61.790917][ T1239] __x64_sys_read+0x7b/0x90 [ 61.795609][ T1239] x64_sys_call+0x2f/0x9a0 [ 61.800140][ T1239] do_syscall_64+0x4c/0xa0 [ 61.807949][ T1239] ? clear_bhb_loop+0x30/0x80 [ 61.812637][ T1239] ? clear_bhb_loop+0x30/0x80 [ 61.817306][ T1239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.823188][ T1239] RIP: 0033:0x7fe83175e98e [ 61.827593][ T1239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.851106][ T1239] RSP: 002b:00007fe832652fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.862560][ T1239] RAX: ffffffffffffffda RBX: 00007fe8326536c0 RCX: 00007fe83175e98e [ 61.872162][ T1239] RDX: 000000000000000f RSI: 00007fe8326530a0 RDI: 0000000000000003 [ 61.888672][ T1239] RBP: 00007fe832653090 R08: 0000000000000000 R09: 0000000000000000 [ 61.898401][ T1239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.907101][ T1239] R13: 00007fe831a26038 R14: 00007fe831a25fa0 R15: 00007ffcb0a2bc98 [ 61.916536][ T1239] [ 62.045416][ T1250] EXT4-fs: Ignoring removed bh option [ 62.063727][ T1251] FAULT_INJECTION: forcing a failure. [ 62.063727][ T1251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.116353][ T1251] CPU: 0 PID: 1251 Comm: syz.8.265 Not tainted syzkaller #0 [ 62.124102][ T1251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.136795][ T1251] Call Trace: [ 62.140915][ T1251] [ 62.144836][ T1251] __dump_stack+0x21/0x24 [ 62.151020][ T1251] dump_stack_lvl+0x110/0x170 [ 62.157844][ T1251] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.164136][ T1251] ? _parse_integer+0x2a/0x40 [ 62.170548][ T1251] dump_stack+0x15/0x24 [ 62.174824][ T1251] should_fail_ex+0x3bf/0x510 [ 62.179544][ T1251] should_fail+0xb/0x10 [ 62.185055][ T1251] should_fail_usercopy+0x1a/0x20 [ 62.190854][ T1251] _copy_from_user+0x1e/0xc0 [ 62.195485][ T1251] ___sys_sendmsg+0x1c3/0x360 [ 62.200574][ T1251] ? __sys_sendmsg+0x290/0x290 [ 62.205410][ T1251] ? __kasan_check_write+0x14/0x20 [ 62.210632][ T1251] ? proc_fail_nth_write+0x180/0x200 [ 62.215939][ T1251] ? vfs_write+0xa51/0xd00 [ 62.220476][ T1251] ? __fdget+0x19c/0x220 [ 62.225521][ T1251] __x64_sys_sendmsg+0x20d/0x2e0 [ 62.230892][ T1251] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 62.237078][ T1251] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 62.243792][ T1251] x64_sys_call+0x171/0x9a0 [ 62.248612][ T1251] do_syscall_64+0x4c/0xa0 [ 62.253748][ T1251] ? clear_bhb_loop+0x30/0x80 [ 62.258803][ T1251] ? clear_bhb_loop+0x30/0x80 [ 62.264034][ T1251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.270660][ T1251] RIP: 0033:0x7fe83179e159 [ 62.275887][ T1251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.303987][ T1251] RSP: 002b:00007fe832653028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.314147][ T1251] RAX: ffffffffffffffda RBX: 00007fe831a25fa0 RCX: 00007fe83179e159 [ 62.323292][ T1251] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 62.332420][ T1251] RBP: 00007fe832653090 R08: 0000000000000000 R09: 0000000000000000 [ 62.341974][ T1251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.351183][ T1251] R13: 00007fe831a26038 R14: 00007fe831a25fa0 R15: 00007ffcb0a2bc98 [ 62.359445][ T1251] [ 62.459528][ T1245] set_capacity_and_notify: 4 callbacks suppressed [ 62.459556][ T1245] loop7: detected capacity change from 0 to 40427 [ 62.512533][ T1245] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 62.577394][ T1245] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 62.677366][ T1245] F2FS-fs (loop7): invalid crc value [ 63.588233][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.608117][ T1245] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 63.630570][ T1261] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.656299][ T1261] device bridge_slave_0 entered promiscuous mode [ 63.707293][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.724757][ T1280] loop8: detected capacity change from 0 to 256 [ 63.745331][ T1261] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.754399][ T1245] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 63.791079][ T1280] exfat: Bad value for 'uid' [ 63.795880][ T1245] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 63.806330][ T1261] device bridge_slave_1 entered promiscuous mode [ 63.845890][ T39] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 63.866552][ T1272] f2fs_ckpt-7:7: attempt to access beyond end of device [ 63.866552][ T1272] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.910470][ T634] device bridge_slave_1 left promiscuous mode [ 63.918686][ T634] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.947210][ T634] device bridge_slave_0 left promiscuous mode [ 63.965901][ T634] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.006880][ T634] device veth1_macvtap left promiscuous mode [ 64.014953][ T634] device veth0_vlan left promiscuous mode [ 64.053446][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 64.081446][ T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 64.103704][ T39] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 64.125786][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.166016][ T39] usb 3-1: Product: syz [ 64.176299][ T39] usb 3-1: Manufacturer: syz [ 64.184808][ T39] usb 3-1: SerialNumber: syz [ 64.204601][ T39] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 64.230146][ T39] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 64.230146][ T39] Please send a copy of this message to and [ 64.306134][ T28] audit: type=1400 audit(1790281124.308:826): avc: denied { create } for pid=1289 comm="syz.7.272" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.385563][ T28] audit: type=1400 audit(1790281124.358:827): avc: denied { write } for pid=1289 comm="syz.7.272" name="file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.415606][ T1275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.448256][ T1275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.463356][ T1260] loop0: detected capacity change from 0 to 131072 [ 64.484178][ T1260] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(512) [ 64.500032][ T28] audit: type=1400 audit(1790281124.358:828): avc: denied { open } for pid=1289 comm="syz.7.272" path="/20/file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.537037][ T1260] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 64.566022][ T1260] F2FS-fs (loop0): Unrecognized mount option "inline_xa—tr_s000Ôh=àŸÄg eckpoint=disable" or missing value [ 64.595785][ T28] audit: type=1400 audit(1790281124.428:829): avc: denied { create } for pid=1294 comm="syz.8.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 64.620052][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.624888][ T28] audit: type=1400 audit(1790281124.428:830): avc: denied { sys_admin } for pid=1294 comm="syz.8.276" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 64.641204][ T1302] loop7: detected capacity change from 0 to 1024 [ 64.679421][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.690997][ T28] audit: type=1400 audit(1790281124.478:831): avc: denied { unlink } for pid=805 comm="syz-executor" name="file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.707825][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.738985][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.751402][ T1302] EXT4-fs: Ignoring removed bh option [ 64.758792][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.766387][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.777315][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.787370][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.796987][ T1302] EXT4-fs mount: 22 callbacks suppressed [ 64.797004][ T1302] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 64.822653][ T39] ums-sddr09: probe of 3-1:1.0 failed with error -32 [ 64.845986][ T39] usb 3-1: USB disconnect, device number 14 [ 64.866381][ T28] audit: type=1400 audit(1790281124.868:832): avc: denied { read write } for pid=1306 comm="syz.0.278" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.867511][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.905853][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.916871][ T1307] input: syz0 as /devices/virtual/input/input5 [ 64.919236][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.942264][ T1309] loop8: detected capacity change from 0 to 512 [ 64.955867][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.967544][ T805] EXT4-fs (loop7): unmounting filesystem. [ 64.993902][ T1312] loop7: detected capacity change from 0 to 512 [ 65.006611][ T1309] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 65.019296][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.037201][ T1309] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.051765][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.070054][ T1312] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 65.092333][ T1312] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.107729][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.119879][ T844] EXT4-fs (loop8): unmounting filesystem. [ 65.136282][ T1312] FAULT_INJECTION: forcing a failure. [ 65.136282][ T1312] name failslab, interval 1, probability 0, space 0, times 0 [ 65.154993][ T1312] CPU: 1 PID: 1312 Comm: syz.7.280 Not tainted syzkaller #0 [ 65.164762][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.177788][ T1312] Call Trace: [ 65.181958][ T1312] [ 65.185204][ T1312] __dump_stack+0x21/0x24 [ 65.189540][ T1312] dump_stack_lvl+0x110/0x170 [ 65.194851][ T1312] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.201479][ T1312] dump_stack+0x15/0x24 [ 65.206021][ T1312] should_fail_ex+0x3bf/0x510 [ 65.211416][ T1312] ? getname_flags+0xba/0x510 [ 65.217248][ T1312] __should_failslab+0xac/0xf0 [ 65.223695][ T1312] should_failslab+0x9/0x20 [ 65.228582][ T1312] kmem_cache_alloc+0x3b/0x320 [ 65.236562][ T1312] getname_flags+0xba/0x510 [ 65.244561][ T1312] ? __cfi_vfs_write+0x10/0x10 [ 65.253445][ T1312] getname+0x19/0x20 [ 65.258268][ T1312] __se_sys_quotactl+0x1fd/0x710 [ 65.266021][ T1312] ? __x64_sys_quotactl+0xb0/0xb0 [ 65.271791][ T1312] ? __kasan_check_write+0x14/0x20 [ 65.277991][ T1312] ? fput+0x154/0x1a0 [ 65.283039][ T1312] ? ksys_write+0x1fa/0x260 [ 65.288541][ T1312] __x64_sys_quotactl+0x9b/0xb0 [ 65.294729][ T1312] x64_sys_call+0x8da/0x9a0 [ 65.299514][ T1312] do_syscall_64+0x4c/0xa0 [ 65.303933][ T1312] ? clear_bhb_loop+0x30/0x80 [ 65.308888][ T1312] ? clear_bhb_loop+0x30/0x80 [ 65.313858][ T1312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.319986][ T1312] RIP: 0033:0x7fb5c6b9e159 [ 65.325205][ T1312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.346484][ T1312] RSP: 002b:00007fb5c79d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 65.355434][ T1312] RAX: ffffffffffffffda RBX: 00007fb5c6e25fa0 RCX: 00007fb5c6b9e159 [ 65.363525][ T1312] RDX: 000000000000ee00 RSI: 0000200000000040 RDI: ffffffff80000701 [ 65.374020][ T1312] RBP: 00007fb5c79d9090 R08: 0000000000000000 R09: 0000000000000000 [ 65.382011][ T1312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.391207][ T1312] R13: 00007fb5c6e26038 R14: 00007fb5c6e25fa0 R15: 00007ffc3f237d08 [ 65.399652][ T1312] [ 65.403456][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.426169][ T1319] loop2: detected capacity change from 0 to 1024 [ 65.443281][ T1319] EXT4-fs: Ignoring removed bh option [ 65.450304][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.462458][ T805] EXT4-fs (loop7): unmounting filesystem. [ 65.473941][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.485439][ T1319] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.527379][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.536972][ T1261] device veth0_vlan entered promiscuous mode [ 65.546324][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.552889][ T1315] loop0: detected capacity change from 0 to 40427 [ 65.553921][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.576809][ T1325] loop7: detected capacity change from 0 to 512 [ 65.584114][ T1325] ext4: Unknown parameter 'subj_role' [ 65.597901][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 65.597916][ T28] audit: type=1400 audit(1790281125.598:838): avc: denied { create } for pid=1324 comm="syz.7.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.609391][ T1319] EXT4-fs warning (device loop2): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 65.634503][ T28] audit: type=1400 audit(1790281125.628:839): avc: denied { getopt } for pid=1324 comm="syz.7.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.652692][ T1315] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 65.683498][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.691801][ T1315] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 65.694302][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.714955][ T1315] F2FS-fs (loop0): invalid crc value [ 65.724370][ T1261] device veth1_macvtap entered promiscuous mode [ 65.734127][ T289] EXT4-fs (loop2): unmounting filesystem. [ 65.735907][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.750115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.750418][ T1315] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 65.790510][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.802332][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.808841][ T28] audit: type=1400 audit(1790281125.808:840): avc: denied { create } for pid=1336 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.846925][ T1339] device bridge_slave_0 left promiscuous mode [ 65.856226][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.858785][ T1342] FAULT_INJECTION: forcing a failure. [ 65.858785][ T1342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.864889][ T1315] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 65.885464][ T1342] CPU: 0 PID: 1342 Comm: syz.2.287 Not tainted syzkaller #0 [ 65.898052][ T1315] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 65.906693][ T1342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.906712][ T1342] Call Trace: [ 65.906718][ T1342] [ 65.906726][ T1342] __dump_stack+0x21/0x24 [ 65.906754][ T1342] dump_stack_lvl+0x110/0x170 [ 65.906773][ T1342] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.906793][ T1342] dump_stack+0x15/0x24 [ 65.967627][ T1342] should_fail_ex+0x3bf/0x510 [ 65.972605][ T1342] should_fail+0xb/0x10 [ 65.979095][ T1342] should_fail_usercopy+0x1a/0x20 [ 65.985924][ T1342] _copy_to_user+0x1e/0x90 [ 65.992597][ T1342] simple_read_from_buffer+0xe9/0x160 [ 66.000315][ T1342] proc_fail_nth_read+0x1a6/0x220 [ 66.007193][ T1342] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 66.013249][ T1342] ? security_file_permission+0x94/0xb0 [ 66.020412][ T1342] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 66.023526][ T1332] f2fs_ckpt-7:0: attempt to access beyond end of device [ 66.023526][ T1332] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.028868][ T1342] vfs_read+0x286/0x930 [ 66.028902][ T1342] ? __cfi_vfs_read+0x10/0x10 [ 66.028916][ T1342] ? __kasan_check_write+0x14/0x20 [ 66.028933][ T1342] ? mutex_lock+0x93/0x1b0 [ 66.028948][ T1342] ? __cfi_mutex_lock+0x10/0x10 [ 66.028962][ T1342] ? __fdget_pos+0x2cd/0x380 [ 66.028977][ T1342] ? ksys_read+0x70/0x260 [ 66.028990][ T1342] ksys_read+0x14a/0x260 [ 66.029007][ T1342] ? __cfi_ksys_read+0x10/0x10 [ 66.029022][ T1342] ? debug_smp_processor_id+0x17/0x20 [ 66.029039][ T1342] __x64_sys_read+0x7b/0x90 [ 66.029052][ T1342] x64_sys_call+0x2f/0x9a0 [ 66.029068][ T1342] do_syscall_64+0x4c/0xa0 [ 66.029087][ T1342] ? clear_bhb_loop+0x30/0x80 [ 66.119504][ T1342] ? clear_bhb_loop+0x30/0x80 [ 66.126722][ T1342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.132616][ T1342] RIP: 0033:0x7f1b0675e98e [ 66.137051][ T1342] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.156741][ T1342] RSP: 002b:00007f1b076c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.165184][ T1342] RAX: ffffffffffffffda RBX: 00007f1b076c46c0 RCX: 00007f1b0675e98e [ 66.174549][ T1342] RDX: 000000000000000f RSI: 00007f1b076c40a0 RDI: 0000000000000003 [ 66.184885][ T1342] RBP: 00007f1b076c4090 R08: 0000000000000000 R09: 0000000000000000 [ 66.193497][ T1342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.202554][ T1342] R13: 00007f1b06a26038 R14: 00007f1b06a25fa0 R15: 00007ffda3dc3c98 [ 66.211588][ T1342] [ 66.232464][ T28] audit: type=1400 audit(1790281126.228:841): avc: denied { search } for pid=1346 comm="syz.2.290" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 66.258315][ T1350] FAULT_INJECTION: forcing a failure. [ 66.258315][ T1350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.268548][ T1347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 66.278462][ T1350] CPU: 1 PID: 1350 Comm: syz.9.291 Not tainted syzkaller #0 [ 66.289015][ T1350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.303828][ T1350] Call Trace: [ 66.307776][ T1350] [ 66.311506][ T1350] __dump_stack+0x21/0x24 [ 66.318110][ T1350] dump_stack_lvl+0x110/0x170 [ 66.324378][ T1350] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.331417][ T1350] ? stack_trace_save+0xa6/0xf0 [ 66.340914][ T1350] ? __stack_depot_save+0x36/0x490 [ 66.347269][ T1350] dump_stack+0x15/0x24 [ 66.356049][ T1350] should_fail_ex+0x3bf/0x510 [ 66.362908][ T1350] should_fail_alloc_page+0x61/0x90 [ 66.369848][ T1350] prepare_alloc_pages+0x131/0x570 [ 66.375426][ T1350] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 66.381355][ T1350] __alloc_pages+0x15b/0x610 [ 66.386066][ T1350] ? __cfi___alloc_pages+0x10/0x10 [ 66.391653][ T1350] ? __kasan_check_write+0x14/0x20 [ 66.397351][ T1350] ? proc_fail_nth_write+0x180/0x200 [ 66.403450][ T1350] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 66.410737][ T1350] __folio_alloc+0x12/0x40 [ 66.415401][ T1350] handle_mm_fault+0x1989/0x26b0 [ 66.420703][ T1350] ? __cfi_handle_mm_fault+0x10/0x10 [ 66.426184][ T1350] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 66.432158][ T1350] ? ksys_write+0x1eb/0x260 [ 66.437483][ T1350] do_user_addr_fault+0x900/0x1030 [ 66.443424][ T1350] ? debug_smp_processor_id+0x17/0x20 [ 66.449112][ T1350] exc_page_fault+0x51/0xb0 [ 66.453639][ T1350] asm_exc_page_fault+0x27/0x30 [ 66.458872][ T1350] RIP: 0033:0x7ff94b2659e6 [ 66.463736][ T1350] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 58 01 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 66.484711][ T1350] RSP: 002b:00007ff94c17df60 EFLAGS: 00010206 [ 66.491010][ T1350] RAX: 0000000000000000 RBX: 00007ff94b625fa0 RCX: 0000000000000000 [ 66.500411][ T1350] RDX: 00002000000000c0 RSI: 00002000000000c0 RDI: 00007ff94b435b28 [ 66.509262][ T1350] RBP: 00007ff94c180090 R08: 00007ff94b252850 R09: 0000000000000000 [ 66.519643][ T1350] R10: 0000000000000006 R11: 00002000000000c0 R12: 000000000000002d [ 66.528676][ T1350] R13: 00002000000000c0 R14: 0000000000000006 R15: 00007ffe3e4d9198 [ 66.538521][ T1350] [ 66.549410][ T28] audit: type=1400 audit(1790281126.268:842): avc: denied { append } for pid=1346 comm="syz.2.290" name="uprobe_events" dev="tracefs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 66.577062][ T28] audit: type=1400 audit(1790281126.268:843): avc: denied { mounton } for pid=1345 comm="syz.7.288" path="/25/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 66.606612][ T1350] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 66.618202][ T1353] loop8: detected capacity change from 0 to 494 [ 66.634981][ T28] audit: type=1400 audit(1790281126.578:844): avc: denied { ioctl } for pid=1346 comm="syz.2.290" path="socket:[21694]" dev="sockfs" ino=21694 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.663401][ T28] audit: type=1400 audit(1790281126.578:845): avc: denied { ioctl } for pid=1346 comm="syz.2.290" path="socket:[21693]" dev="sockfs" ino=21693 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.699584][ T28] audit: type=1400 audit(1790281126.578:846): avc: denied { ioctl } for pid=1346 comm="syz.2.290" path="/newroot/46/tracing/uprobe_events" dev="tracefs" ino=17 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 66.739218][ T1362] EXT4-fs: Ignoring removed bh option [ 66.747529][ T1362] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 66.765271][ T844] EXT4-fs (loop8): unmounting filesystem. [ 66.972790][ T1370] FAULT_INJECTION: forcing a failure. [ 66.972790][ T1370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.976172][ T586] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 66.988966][ T1370] CPU: 1 PID: 1370 Comm: syz.7.297 Not tainted syzkaller #0 [ 67.006335][ T1370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.016834][ T1370] Call Trace: [ 67.020121][ T1370] [ 67.023104][ T1370] __dump_stack+0x21/0x24 [ 67.027506][ T1370] dump_stack_lvl+0x110/0x170 [ 67.032342][ T1370] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.037373][ T1370] ? lock_sock_nested+0x212/0x290 [ 67.042415][ T1370] dump_stack+0x15/0x24 [ 67.046653][ T1370] should_fail_ex+0x3bf/0x510 [ 67.051344][ T1370] should_fail+0xb/0x10 [ 67.055685][ T1370] should_fail_usercopy+0x1a/0x20 [ 67.063129][ T1370] _copy_from_user+0x1e/0xc0 [ 67.072019][ T1370] l2cap_sock_setsockopt+0xc86/0x1de0 [ 67.079707][ T1370] ? selinux_socket_setsockopt+0x282/0x360 [ 67.092713][ T1370] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 67.099680][ T1370] ? __cfi_l2cap_sock_setsockopt+0x10/0x10 [ 67.107323][ T1370] ? __fget_files+0x2d1/0x330 [ 67.112421][ T1370] ? security_socket_setsockopt+0x93/0xb0 [ 67.119256][ T1370] ? __cfi_l2cap_sock_setsockopt+0x10/0x10 [ 67.126848][ T1370] __sys_setsockopt+0x2ff/0x4e0 [ 67.131723][ T1370] ? __cfi___sys_setsockopt+0x10/0x10 [ 67.138347][ T1370] ? ksys_write+0x1fa/0x260 [ 67.144059][ T1370] ? __cfi_ksys_write+0x10/0x10 [ 67.149898][ T1370] __x64_sys_setsockopt+0xbf/0xd0 [ 67.156094][ T1370] x64_sys_call+0x124/0x9a0 [ 67.160877][ T1370] do_syscall_64+0x4c/0xa0 [ 67.165851][ T1370] ? clear_bhb_loop+0x30/0x80 [ 67.171092][ T1370] ? clear_bhb_loop+0x30/0x80 [ 67.176409][ T1370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.182893][ T1370] RIP: 0033:0x7fb5c6b9e159 [ 67.187885][ T1370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.208427][ T1370] RSP: 002b:00007fb5c79d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.216924][ T1370] RAX: ffffffffffffffda RBX: 00007fb5c6e25fa0 RCX: 00007fb5c6b9e159 [ 67.225048][ T1370] RDX: 0000000000000008 RSI: 0000000000000112 RDI: 0000000000000004 [ 67.233044][ T1370] RBP: 00007fb5c79d9090 R08: 0000000000000004 R09: 0000000000000000 [ 67.236871][ T586] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.241030][ T1370] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 67.241049][ T1370] R13: 00007fb5c6e26038 R14: 00007fb5c6e25fa0 R15: 00007ffc3f237d08 [ 67.241066][ T1370] [ 67.281568][ T586] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 67.311015][ T586] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 67.312502][ T1377] binder: 1376:1377 ioctl c0306201 200000000480 returned -14 [ 67.331153][ T586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.341467][ T586] usb 3-1: Product: syz [ 67.345784][ T586] usb 3-1: Manufacturer: syz [ 67.350769][ T586] usb 3-1: SerialNumber: syz [ 67.359536][ T586] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 67.376745][ T586] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 67.376745][ T586] Please send a copy of this message to and [ 67.416414][ T1374] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 67.428354][ T1374] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 67.442563][ T1374] F2FS-fs (loop9): invalid crc value [ 67.457022][ T1374] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 67.486184][ T1374] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 67.494156][ T1374] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 67.517982][ T1388] f2fs_ckpt-7:9: attempt to access beyond end of device [ 67.517982][ T1388] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.560045][ T1360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.570386][ T1360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.604814][ T1395] FAULT_INJECTION: forcing a failure. [ 67.604814][ T1395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.620586][ T1395] CPU: 1 PID: 1395 Comm: syz.9.302 Not tainted syzkaller #0 [ 67.627895][ T1395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.638313][ T1395] Call Trace: [ 67.641620][ T1395] [ 67.644560][ T1395] __dump_stack+0x21/0x24 [ 67.649335][ T1395] dump_stack_lvl+0x110/0x170 [ 67.655166][ T1395] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.656896][ T28] audit: type=1400 audit(1790281127.618:847): avc: denied { mount } for pid=1396 comm="syz.8.303" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 67.660485][ T1395] dump_stack+0x15/0x24 [ 67.660517][ T1395] should_fail_ex+0x3bf/0x510 [ 67.696238][ T1395] should_fail+0xb/0x10 [ 67.701163][ T1395] should_fail_usercopy+0x1a/0x20 [ 67.706895][ T1395] _copy_from_user+0x1e/0xc0 [ 67.711523][ T1395] __sys_bpf+0x2a0/0x850 [ 67.716213][ T1395] ? bpf_link_show_fdinfo+0x330/0x330 [ 67.722735][ T1395] ? __cfi_ksys_write+0x10/0x10 [ 67.727959][ T1395] ? debug_smp_processor_id+0x17/0x20 [ 67.734217][ T1395] __x64_sys_bpf+0x7c/0x90 [ 67.738923][ T1395] x64_sys_call+0x488/0x9a0 [ 67.744544][ T1395] do_syscall_64+0x4c/0xa0 [ 67.749382][ T1395] ? clear_bhb_loop+0x30/0x80 [ 67.756067][ T1395] ? clear_bhb_loop+0x30/0x80 [ 67.761586][ T1395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.768001][ T1395] RIP: 0033:0x7ff94b39e159 [ 67.772809][ T1395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.800897][ T1395] RSP: 002b:00007ff94c180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.814069][ T1395] RAX: ffffffffffffffda RBX: 00007ff94b625fa0 RCX: 00007ff94b39e159 [ 67.824128][ T1395] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 67.833963][ T1395] RBP: 00007ff94c180090 R08: 0000000000000000 R09: 0000000000000000 [ 67.842215][ T1395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.851595][ T1395] R13: 00007ff94b626038 R14: 00007ff94b625fa0 R15: 00007ffe3e4d9198 [ 67.859757][ T1395] [ 67.878563][ T586] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 67.892055][ T586] usb 3-1: USB disconnect, device number 15 [ 67.906452][ T1399] FAULT_INJECTION: forcing a failure. [ 67.906452][ T1399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.922024][ T1399] CPU: 0 PID: 1399 Comm: syz.9.305 Not tainted syzkaller #0 [ 67.930540][ T1399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.943650][ T1399] Call Trace: [ 67.947023][ T1399] [ 67.950216][ T1399] __dump_stack+0x21/0x24 [ 67.954567][ T1399] dump_stack_lvl+0x110/0x170 [ 67.959594][ T1399] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.964894][ T1399] ? _parse_integer+0x2a/0x40 [ 67.972301][ T1399] dump_stack+0x15/0x24 [ 67.978226][ T1399] should_fail_ex+0x3bf/0x510 [ 67.985446][ T1399] should_fail+0xb/0x10 [ 67.990533][ T1399] should_fail_usercopy+0x1a/0x20 [ 67.996550][ T1399] _copy_from_user+0x1e/0xc0 [ 68.002178][ T1399] ___sys_sendmsg+0x1c3/0x360 [ 68.007483][ T1399] ? __sys_sendmsg+0x290/0x290 [ 68.013236][ T1399] ? __kasan_check_write+0x14/0x20 [ 68.018908][ T1399] ? proc_fail_nth_write+0x180/0x200 [ 68.024222][ T1399] ? vfs_write+0xa51/0xd00 [ 68.028753][ T1399] ? __fdget+0x19c/0x220 [ 68.033098][ T1399] __x64_sys_sendmsg+0x20d/0x2e0 [ 68.038175][ T1399] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 68.043656][ T1399] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 68.049834][ T1399] x64_sys_call+0x171/0x9a0 [ 68.050211][ T1401] set_capacity_and_notify: 2 callbacks suppressed [ 68.050234][ T1401] loop0: detected capacity change from 0 to 1024 [ 68.057299][ T1399] do_syscall_64+0x4c/0xa0 [ 68.057335][ T1399] ? clear_bhb_loop+0x30/0x80 [ 68.057353][ T1399] ? clear_bhb_loop+0x30/0x80 [ 68.057368][ T1399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.057383][ T1399] RIP: 0033:0x7ff94b39e159 [ 68.057409][ T1399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.077608][ T1401] EXT4-fs: Ignoring removed bh option [ 68.125994][ T1399] RSP: 002b:00007ff94c180028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.134422][ T1399] RAX: ffffffffffffffda RBX: 00007ff94b625fa0 RCX: 00007ff94b39e159 [ 68.142590][ T1399] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 68.150569][ T1399] RBP: 00007ff94c180090 R08: 0000000000000000 R09: 0000000000000000 [ 68.158540][ T1399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.166526][ T1399] R13: 00007ff94b626038 R14: 00007ff94b625fa0 R15: 00007ffe3e4d9198 [ 68.174494][ T1399] [ 68.217857][ T1401] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.239904][ T1408] device batadv_slave_0 entered promiscuous mode [ 68.250158][ T1407] device batadv_slave_0 left promiscuous mode [ 68.270220][ T288] EXT4-fs (loop0): unmounting filesystem. [ 68.323400][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 68.341591][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 68.486415][ T583] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 68.528591][ T1416] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 68.538451][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.572559][ T1416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 68.592675][ T1416] netlink: 13 bytes leftover after parsing attributes in process `syz.2.311'. [ 68.618844][ T1432] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 68.629169][ T1432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 68.646591][ T1432] netlink: 13 bytes leftover after parsing attributes in process `syz.2.311'. [ 68.675848][ T583] usb 8-1: Using ep0 maxpacket: 32 [ 68.684138][ T583] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 68.700863][ T583] usb 8-1: config 0 has no interface number 0 [ 68.722207][ T583] usb 8-1: config 0 interface 184 has no altsetting 0 [ 68.753033][ T583] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 68.763106][ T583] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.772345][ T583] usb 8-1: Product: syz [ 68.777507][ T583] usb 8-1: Manufacturer: syz [ 68.782324][ T583] usb 8-1: SerialNumber: syz [ 68.788582][ T583] usb 8-1: config 0 descriptor?? [ 68.809734][ T583] smsc75xx v1.0.0 [ 68.910858][ T1439] loop9: detected capacity change from 0 to 8192 [ 69.010264][ T1445] FAULT_INJECTION: forcing a failure. [ 69.010264][ T1445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.033339][ T1445] CPU: 0 PID: 1445 Comm: syz.0.316 Not tainted syzkaller #0 [ 69.040678][ T1445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.050762][ T1445] Call Trace: [ 69.054063][ T1445] [ 69.057013][ T1445] __dump_stack+0x21/0x24 [ 69.061370][ T1445] dump_stack_lvl+0x110/0x170 [ 69.066072][ T1445] ? __cfi_dump_stack_lvl+0x8/0x8 [ 69.071209][ T1445] dump_stack+0x15/0x24 [ 69.075385][ T1445] should_fail_ex+0x3bf/0x510 [ 69.080077][ T1445] should_fail+0xb/0x10 [ 69.084246][ T1445] should_fail_usercopy+0x1a/0x20 [ 69.089369][ T1445] _copy_from_user+0x1e/0xc0 [ 69.093983][ T1445] __sys_bpf+0x2a0/0x850 [ 69.098718][ T1445] ? bpf_link_show_fdinfo+0x330/0x330 [ 69.104911][ T1445] ? trace_event_raw_event_sys_enter+0xf1/0x120 [ 69.114261][ T1445] __x64_sys_bpf+0x7c/0x90 [ 69.120198][ T1445] x64_sys_call+0x488/0x9a0 [ 69.125254][ T1445] do_syscall_64+0x4c/0xa0 [ 69.129710][ T1445] ? clear_bhb_loop+0x30/0x80 [ 69.134416][ T1445] ? clear_bhb_loop+0x30/0x80 [ 69.139123][ T1445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.145047][ T1445] RIP: 0033:0x7f24c459e159 [ 69.149490][ T1445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.169721][ T1445] RSP: 002b:00007f24c53d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.178255][ T1445] RAX: ffffffffffffffda RBX: 00007f24c4825fa0 RCX: 00007f24c459e159 [ 69.186345][ T1445] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 69.195440][ T1445] RBP: 00007f24c53d7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.203703][ T1445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.211983][ T1445] R13: 00007f24c4826038 R14: 00007f24c4825fa0 R15: 00007ffe150ecc58 [ 69.220411][ T1445] [ 69.298888][ T1453] loop0: detected capacity change from 0 to 1024 [ 69.309103][ T1453] EXT4-fs: Ignoring removed bh option [ 69.331028][ T1453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 69.356554][ T288] EXT4-fs (loop0): unmounting filesystem. [ 69.401772][ T583] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 69.413148][ T583] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 69.423446][ T583] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 69.434131][ T583] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 69.447979][ T583] usb 8-1: USB disconnect, device number 6 [ 69.655857][ T307] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 69.857255][ T307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 69.872777][ T307] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 69.886410][ T307] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 69.896014][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.904355][ T307] usb 1-1: Product: syz [ 69.916245][ T307] usb 1-1: Manufacturer: syz [ 69.928375][ T307] usb 1-1: SerialNumber: syz [ 69.936918][ T102] udevd[102]: could not touch /run/udev/queue: No such file or directory [ 69.938063][ T307] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 69.954693][ T102] udevd[102]: could not touch /run/udev/queue: No such file or directory [ 69.964082][ T307] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 69.964082][ T307] Please send a copy of this message to and [ 69.996477][ T102] udevd[102]: could not touch /run/udev/queue: No such file or directory [ 70.005122][ T102] udevd[102]: could not touch /run/udev/queue: No such file or directory [ 70.057043][ T102] udevd[102]: could not touch /run/udev/queue: No such file or directory [ 70.096729][ T102] udevd[102]: could not touch /run/udev/queue: No such file or directory [ 70.114574][ T102] udevd[102]: could not touch /run/udev/queue: No such file or directory [ 70.126394][ T1469] FAULT_INJECTION: forcing a failure. [ 70.126394][ T1469] name failslab, interval 1, probability 0, space 0, times 0 [ 70.136841][ T102] udevd[102]: could not touch /run/udev/queue: No such file or directory [ 70.139871][ T1469] CPU: 1 PID: 1469 Comm: syz.9.326 Not tainted syzkaller #0 [ 70.149836][ T1457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.155140][ T1469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.173656][ T1469] Call Trace: [ 70.176963][ T1469] [ 70.177178][ T102] udevd[102]: could not touch /run/udev/queue: No such file or directory [ 70.179902][ T1469] __dump_stack+0x21/0x24 [ 70.179942][ T1469] dump_stack_lvl+0x110/0x170 [ 70.189209][ T1457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.192770][ T1469] ? __cfi_dump_stack_lvl+0x8/0x8 [ 70.205926][ T102] udevd[102]: could not touch /run/udev/queue: No such file or directory [ 70.210141][ T1469] ? _parse_integer_limit+0x18e/0x1d0 [ 70.210177][ T1469] dump_stack+0x15/0x24 [ 70.210202][ T1469] should_fail_ex+0x3bf/0x510 [ 70.232777][ T1469] __should_failslab+0xac/0xf0 [ 70.237576][ T1469] should_failslab+0x9/0x20 [ 70.242108][ T1469] __kmem_cache_alloc_node+0x3d/0x2d0 [ 70.247516][ T1469] ? trace_parser_get_init+0x3d/0xb0 [ 70.252829][ T1469] ? __kasan_check_write+0x14/0x20 [ 70.258006][ T1469] ? mutex_unlock+0x8f/0x230 [ 70.262991][ T1469] ? trace_parser_get_init+0x3d/0xb0 [ 70.268321][ T1469] __kmalloc+0xa4/0x1e0 [ 70.272592][ T1469] trace_parser_get_init+0x3d/0xb0 [ 70.277737][ T1469] ftrace_event_write+0x11d/0x2a0 [ 70.282804][ T1469] ? __cfi_ftrace_event_write+0x10/0x10 [ 70.288470][ T1469] ? fsnotify_perm+0x67/0x5b0 [ 70.293230][ T1469] ? security_file_permission+0x8a/0xb0 [ 70.299256][ T1469] ? security_file_permission+0x94/0xb0 [ 70.304868][ T1469] ? __cfi_ftrace_event_write+0x10/0x10 [ 70.310449][ T1469] vfs_write+0x3fb/0xd00 [ 70.314724][ T1469] ? __cfi_vfs_write+0x10/0x10 [ 70.319502][ T1469] ? __kasan_check_write+0x14/0x20 [ 70.324638][ T1469] ? mutex_lock+0x93/0x1b0 [ 70.329074][ T1469] ? __cfi_mutex_lock+0x10/0x10 [ 70.334061][ T1469] ? __fdget_pos+0x2cd/0x380 [ 70.338717][ T1469] ? ksys_write+0x70/0x260 [ 70.343340][ T1469] ksys_write+0x14a/0x260 [ 70.345873][ T586] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 70.347719][ T1469] ? __cfi_ksys_write+0x10/0x10 [ 70.347747][ T1469] ? trace_event_raw_event_sys_enter+0xf1/0x120 [ 70.366276][ T1469] __x64_sys_write+0x7b/0x90 [ 70.370895][ T1469] x64_sys_call+0x27b/0x9a0 [ 70.375442][ T1469] do_syscall_64+0x4c/0xa0 [ 70.380190][ T1469] ? clear_bhb_loop+0x30/0x80 [ 70.385952][ T1469] ? clear_bhb_loop+0x30/0x80 [ 70.392230][ T1469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.400261][ T1469] RIP: 0033:0x7ff94b39e159 [ 70.405141][ T1469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.427905][ T1469] RSP: 002b:00007ff94c180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.437848][ T1469] RAX: ffffffffffffffda RBX: 00007ff94b625fa0 RCX: 00007ff94b39e159 [ 70.447668][ T1469] RDX: 0000000000000003 RSI: 0000200000000440 RDI: 0000000000000003 [ 70.458087][ T1469] RBP: 00007ff94c180090 R08: 0000000000000000 R09: 0000000000000000 [ 70.473424][ T1469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.485551][ T1469] R13: 00007ff94b626038 R14: 00007ff94b625fa0 R15: 00007ffe3e4d9198 [ 70.495206][ T1469] [ 70.565855][ T504] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.566044][ T723] Bluetooth: hci0: command 0x1003 tx timeout [ 70.597229][ T586] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.611689][ T586] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.627068][ T586] usb 8-1: config 0 interface 0 has no altsetting 0 [ 70.636202][ T586] usb 8-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 70.650705][ T586] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.671364][ T586] usb 8-1: config 0 descriptor?? [ 70.737009][ T307] ums-sddr09: probe of 1-1:1.0 failed with error -5 [ 70.757770][ T307] usb 1-1: USB disconnect, device number 11 [ 70.785954][ T852] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 70.865915][ T583] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 70.995854][ T852] usb 10-1: Using ep0 maxpacket: 32 [ 71.007353][ T852] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.019738][ T852] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.047346][ T852] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 71.056675][ T583] usb 3-1: Using ep0 maxpacket: 32 [ 71.062375][ T852] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 71.071596][ T852] usb 10-1: Product: syz [ 71.077188][ T583] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.088236][ T852] usb 10-1: Manufacturer: syz [ 71.093373][ T583] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.116477][ T852] hub 10-1:4.0: USB hub found [ 71.136812][ T583] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 71.144358][ T586] hid-penmount 0003:14E1:6000.0003: hidraw0: USB HID v0.00 Device [HID 14e1:6000] on usb-dummy_hcd.7-1/input0 [ 71.146361][ T583] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 71.167356][ T583] usb 3-1: Product: syz [ 71.171611][ T583] usb 3-1: Manufacturer: syz [ 71.200918][ T583] hub 3-1:4.0: USB hub found [ 71.313158][ T852] hub 10-1:4.0: 2 ports detected [ 71.376933][ T1465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.403458][ T583] hub 3-1:4.0: 2 ports detected [ 71.413821][ T1465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.430929][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 71.430949][ T28] audit: type=1400 audit(1790281131.428:856): avc: denied { create } for pid=1481 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.479944][ T28] audit: type=1400 audit(1790281131.468:857): avc: denied { mount } for pid=1481 comm="syz.0.330" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 71.514466][ T852] hub 10-1:4.0: hub_hub_status failed (err = -71) [ 71.526210][ T852] hub 10-1:4.0: config failed, can't get hub status (err -71) [ 71.568831][ T1482] loop0: detected capacity change from 0 to 8192 [ 71.596716][ T852] usb 10-1: USB disconnect, device number 2 [ 71.605943][ T583] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 71.613479][ T583] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 71.687710][ T583] usb 3-1: USB disconnect, device number 16 [ 72.031502][ T903] usb 8-1: USB disconnect, device number 7 [ 72.245549][ T28] audit: type=1400 audit(1790281132.238:858): avc: denied { write } for pid=1495 comm="syz.2.334" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.303403][ T1497] binder: BINDER_SET_CONTEXT_MGR already set [ 72.312205][ T28] audit: type=1400 audit(1790281132.298:859): avc: denied { map } for pid=1495 comm="syz.2.334" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.337141][ T1501] SELinux: policydb version 0 does not match my version range 15-33 [ 72.337216][ T1501] SELinux: failed to load policy [ 72.337561][ T1502] SELinux: policydb version 0 does not match my version range 15-33 [ 72.346068][ T586] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 72.351954][ T1502] SELinux: failed to load policy [ 72.371943][ T28] audit: type=1400 audit(1790281132.318:860): avc: denied { load_policy } for pid=1500 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 72.380074][ T1497] binder: 1495:1497 ioctl 4018620d 200000004a80 returned -16 [ 72.436287][ T28] audit: type=1400 audit(1790281132.418:861): avc: denied { create } for pid=1500 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.482632][ T1505] FAULT_INJECTION: forcing a failure. [ 72.482632][ T1505] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.500261][ T1505] CPU: 1 PID: 1505 Comm: syz.0.337 Not tainted syzkaller #0 [ 72.505983][ T903] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 72.508909][ T1505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.527481][ T1505] Call Trace: [ 72.531043][ T1505] [ 72.534071][ T1505] __dump_stack+0x21/0x24 [ 72.538536][ T1505] dump_stack_lvl+0x110/0x170 [ 72.544049][ T1505] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.549998][ T1505] ? is_bpf_text_address+0x177/0x190 [ 72.557942][ T1505] ? kernel_text_address+0xa0/0xd0 [ 72.565694][ T1505] dump_stack+0x15/0x24 [ 72.574142][ T1505] should_fail_ex+0x3bf/0x510 [ 72.579395][ T1505] should_fail_alloc_page+0x61/0x90 [ 72.586551][ T1505] prepare_alloc_pages+0x131/0x570 [ 72.593367][ T1505] ? avc_has_perm_noaudit+0x390/0x490 [ 72.600151][ T1505] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 72.605958][ T1505] ? avc_has_perm_noaudit+0x30a/0x490 [ 72.616546][ T1505] __alloc_pages+0x15b/0x610 [ 72.625629][ T1505] ? __cfi___alloc_pages+0x10/0x10 [ 72.634002][ T1505] ? __kasan_check_write+0x14/0x20 [ 72.641011][ T1505] ? mutex_lock+0x93/0x1b0 [ 72.645672][ T1505] ? __cfi_avc_has_perm+0x10/0x10 [ 72.651432][ T1505] pipe_write+0x588/0x1960 [ 72.656217][ T1505] ? __cfi_pipe_write+0x10/0x10 [ 72.661090][ T1505] ? selinux_file_permission+0x3ef/0x510 [ 72.666771][ T1505] ? fsnotify_perm+0x67/0x5b0 [ 72.671568][ T1505] ? security_file_permission+0x8a/0xb0 [ 72.677138][ T1505] vfs_write+0x5ef/0xd00 [ 72.681496][ T1505] ? __cfi_vfs_write+0x10/0x10 [ 72.686930][ T1505] ? __kasan_check_read+0x11/0x20 [ 72.693059][ T1505] ? __fget_files+0x2d1/0x330 [ 72.697850][ T1505] ? __fdget_pos+0x1f2/0x380 [ 72.702444][ T1505] ? ksys_write+0x70/0x260 [ 72.706967][ T1505] ksys_write+0x14a/0x260 [ 72.711504][ T1505] ? __cfi_ksys_write+0x10/0x10 [ 72.716654][ T1505] ? trace_event_raw_event_sys_enter+0xf1/0x120 [ 72.723163][ T1505] __x64_sys_write+0x7b/0x90 [ 72.727836][ T1505] x64_sys_call+0x27b/0x9a0 [ 72.732332][ T1505] do_syscall_64+0x4c/0xa0 [ 72.736799][ T1505] ? clear_bhb_loop+0x30/0x80 [ 72.741505][ T1505] ? clear_bhb_loop+0x30/0x80 [ 72.746206][ T1505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.752133][ T1505] RIP: 0033:0x7f24c455e98e [ 72.756638][ T1505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.778073][ T1505] RSP: 002b:00007f24c53d6ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.787198][ T1505] RAX: ffffffffffffffda RBX: 00007f24c53d76c0 RCX: 00007f24c455e98e [ 72.795189][ T1505] RDX: 0000000000000029 RSI: 00007f24c53d6e90 RDI: 0000000000000002 [ 72.803294][ T1505] RBP: 00007f24c53d6e90 R08: 0000000000000000 R09: 0000000000000000 [ 72.811531][ T1505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 72.819563][ T1505] R13: 00007f24c47f27a0 R14: 00007f24c47e94a0 R15: 0000000000000001 [ 72.827548][ T1505] [ 72.855903][ T586] usb 10-1: Using ep0 maxpacket: 32 [ 72.863180][ T586] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 72.872461][ T586] usb 10-1: config 0 has no interface number 0 [ 72.878957][ T586] usb 10-1: config 0 interface 184 has no altsetting 0 [ 72.893206][ T1507] loop0: detected capacity change from 0 to 2048 [ 72.904011][ T586] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 72.916228][ T1507] EXT4-fs: Ignoring removed bh option [ 72.924716][ T586] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.934674][ T903] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.947808][ T903] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 72.958572][ T586] usb 10-1: Product: syz [ 72.963143][ T586] usb 10-1: Manufacturer: syz [ 72.968225][ T586] usb 10-1: SerialNumber: syz [ 72.973262][ T1507] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.973890][ T903] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 72.983544][ T1507] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.993349][ T586] usb 10-1: config 0 descriptor?? [ 73.008806][ T903] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.021950][ T903] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 8.00 [ 73.025369][ T28] audit: type=1400 audit(1790281133.028:862): avc: denied { create } for pid=1506 comm="syz.0.338" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.033227][ T903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.062675][ T586] smsc75xx v1.0.0 [ 73.086508][ T903] pl2303 8-1:1.0: required interrupt-in endpoint missing [ 73.212132][ T288] EXT4-fs (loop0): unmounting filesystem. [ 73.250139][ T1515] loop0: detected capacity change from 0 to 1024 [ 73.276550][ T1515] EXT4-fs: Ignoring removed bh option [ 73.299976][ T28] audit: type=1400 audit(1790281133.298:863): avc: denied { write } for pid=1486 comm="syz.7.331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.303752][ T852] usb 8-1: USB disconnect, device number 8 [ 73.349016][ T1515] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 73.365986][ T583] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 73.396597][ T288] EXT4-fs (loop0): unmounting filesystem. [ 73.567282][ T583] usb 3-1: config 1 has an invalid interface number: 4 but max is 0 [ 73.587927][ T583] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.610081][ T583] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 73.642630][ T583] usb 3-1: config 1 has no interface number 1 [ 73.664239][ T583] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 73.686232][ T586] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 73.703663][ T583] usb 3-1: config 1 interface 0 has no altsetting 0 [ 73.707626][ T586] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 73.723030][ T583] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 73.734304][ T586] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 73.742592][ T583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.755939][ T586] smsc75xx: probe of 10-1:0.184 failed with error -71 [ 73.763493][ T583] usb 3-1: Product: syz [ 73.773598][ T583] usb 3-1: Manufacturer: syz [ 73.783728][ T583] usb 3-1: SerialNumber: syz [ 73.788399][ T586] usb 10-1: USB disconnect, device number 3 [ 73.812299][ T583] usb-storage 3-1:1.4: USB Mass Storage device detected [ 73.852130][ T583] usb-storage 3-1:1.4: Quirks match for vid 174c pid 55aa: 400000 [ 73.871648][ T583] scsi host1: usb-storage 3-1:1.4 [ 73.884824][ T583] usb-storage 3-1:1.0: USB Mass Storage device detected [ 73.900612][ T583] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 74.034325][ T583] usb 3-1: USB disconnect, device number 17 [ 74.135835][ T307] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 74.269114][ T1546] loop9: detected capacity change from 0 to 512 [ 74.287641][ T1546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 74.297946][ T1546] System zones: 1-12 [ 74.303425][ T1546] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.349: missing EA_INODE flag [ 74.317936][ T1546] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.349: error while reading EA inode 12 err=-117 [ 74.332438][ T1546] EXT4-fs (loop9): 1 orphan inode deleted [ 74.338326][ T1546] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 74.348402][ T307] usb 1-1: Using ep0 maxpacket: 32 [ 74.386818][ T307] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.490496][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 74.499067][ T307] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.512549][ T307] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 74.521933][ T307] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 74.533456][ T307] usb 1-1: Product: syz [ 74.538067][ T307] usb 1-1: Manufacturer: syz [ 74.558088][ T307] hub 1-1:4.0: USB hub found [ 75.036040][ T28] audit: type=1400 audit(1790281134.948:864): avc: denied { read write open } for pid=1545 comm="syz.9.349" path="/17/file0/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.192862][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 75.554345][ T307] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 75.570016][ T24] usb 8-1: device descriptor read/all, error -71 [ 75.616759][ T307] usb 1-1: USB disconnect, device number 12 [ 75.631559][ T406] udevd[406]: Failed to set SELinux security context system_u:object_r:device_t for /dev/char/189:11: No such file or directory [ 75.657599][ T28] audit: type=1404 audit(1790281135.008:865): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 76.085733][ C0] sched: RT throttling activated [ 76.459615][ T1261] EXT4-fs (loop9): unmounting filesystem. [ 76.466326][ T8] tipc: Disabling bearer [ 76.482222][ T8] tipc: Left network mode [ 76.584397][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 76.584416][ T28] audit: type=1400 audit(1790281136.578:882): avc: denied { execmem } for pid=1554 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 76.726828][ T28] audit: type=1400 audit(1790281136.718:883): avc: denied { execmem } for pid=1555 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 76.791160][ T28] audit: type=1400 audit(1790281136.788:884): avc: denied { execmem } for pid=1556 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 76.833794][ T28] audit: type=1400 audit(1790281136.818:885): avc: denied { execmem } for pid=1557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 76.881332][ T28] audit: type=1400 audit(1790281136.828:886): avc: denied { execmem } for pid=1558 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 76.937303][ T28] audit: type=1400 audit(1790281136.868:887): avc: denied { execmem } for pid=1559 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 76.988260][ T28] audit: type=1400 audit(1790281136.868:888): avc: denied { execmem } for pid=1560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 77.041698][ T28] audit: type=1400 audit(1790281136.878:889): avc: denied { execmem } for pid=1561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 77.048119][ T1572] FAULT_INJECTION: forcing a failure. [ 77.048119][ T1572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.077716][ T28] audit: type=1400 audit(1790281136.918:890): avc: denied { read write } for pid=805 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.094218][ T1572] CPU: 0 PID: 1572 Comm: syz.2.360 Not tainted syzkaller #0 [ 77.110271][ T1572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.115410][ T28] audit: type=1400 audit(1790281136.928:891): avc: denied { execmem } for pid=1562 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 77.120434][ T1572] Call Trace: [ 77.120448][ T1572] [ 77.120457][ T1572] __dump_stack+0x21/0x24 [ 77.120486][ T1572] dump_stack_lvl+0x110/0x170 [ 77.155245][ T1572] ? __cfi_dump_stack_lvl+0x8/0x8 [ 77.160294][ T1572] ? __filemap_get_folio+0x848/0xa70 [ 77.165604][ T1572] dump_stack+0x15/0x24 [ 77.169881][ T1572] should_fail_ex+0x3bf/0x510 [ 77.174675][ T1572] should_fail+0xb/0x10 [ 77.179168][ T1572] should_fail_usercopy+0x1a/0x20 [ 77.184511][ T1572] _copy_to_iter+0x184/0xe60 [ 77.189245][ T1572] ? __cfi__copy_to_iter+0x10/0x10 [ 77.195389][ T1572] copy_page_to_iter+0x22e/0x340 [ 77.202253][ T1572] shmem_file_read_iter+0x58d/0x800 [ 77.208213][ T1572] vfs_read+0x46e/0x930 [ 77.212621][ T1572] ? __cfi_vfs_read+0x10/0x10 [ 77.217695][ T1572] ? __cfi_mutex_lock+0x10/0x10 [ 77.223115][ T1572] ? __fdget_pos+0x2cd/0x380 [ 77.228693][ T1572] ? ksys_read+0x70/0x260 [ 77.233676][ T1572] ksys_read+0x14a/0x260 [ 77.238347][ T1572] ? __cfi_ksys_read+0x10/0x10 [ 77.243235][ T1572] ? trace_event_raw_event_sys_enter+0xf1/0x120 [ 77.249515][ T1572] __x64_sys_read+0x7b/0x90 [ 77.255220][ T1572] x64_sys_call+0x2f/0x9a0 [ 77.259700][ T1572] do_syscall_64+0x4c/0xa0 [ 77.264168][ T1572] ? clear_bhb_loop+0x30/0x80 [ 77.268905][ T1572] ? clear_bhb_loop+0x30/0x80 [ 77.274221][ T1572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.282269][ T1572] RIP: 0033:0x7f1b0679e159 [ 77.286890][ T1572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.311464][ T1572] RSP: 002b:00007f1b076c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.323473][ T1572] RAX: ffffffffffffffda RBX: 00007f1b06a25fa0 RCX: 00007f1b0679e159 [ 77.337628][ T1572] RDX: 0000000000002020 RSI: 0000200000001bc0 RDI: 0000000000000003 [ 77.348374][ T1572] RBP: 00007f1b076c4090 R08: 0000000000000000 R09: 0000000000000000 [ 77.358528][ T1572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.368884][ T1572] R13: 00007f1b06a26038 R14: 00007f1b06a25fa0 R15: 00007ffda3dc3c98 [ 77.378843][ T1572] [ 77.589514][ T8] device bridge_slave_1 left promiscuous mode [ 77.596874][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.620826][ T8] device bridge_slave_0 left promiscuous mode [ 77.629925][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.641116][ T8] device bridge_slave_1 left promiscuous mode [ 77.648887][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.656853][ T8] device bridge_slave_0 left promiscuous mode [ 77.663227][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.673626][ T8] device veth1_macvtap left promiscuous mode [ 77.680303][ T8] device veth0_vlan left promiscuous mode [ 77.688925][ T8] device veth1_macvtap left promiscuous mode [ 77.695091][ T8] device veth0_vlan left promiscuous mode [ 77.779359][ T1597] syz.2.362 (1597) used greatest stack depth: 20744 bytes left [ 79.157968][ T8] device bridge_slave_1 left promiscuous mode [ 79.164132][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.173702][ T8] device bridge_slave_1 left promiscuous mode [ 79.180647][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.189998][ T8] device bridge_slave_0 left promiscuous mode [ 79.196945][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.206687][ T8] device bridge_slave_1 left promiscuous mode [ 79.213301][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.224999][ T8] device veth1_macvtap left promiscuous mode [ 79.231638][ T8] device veth0_vlan left promiscuous mode [ 79.238624][ T8] device veth1_macvtap left promiscuous mode [ 79.245178][ T8] device veth0_vlan left promiscuous mode [ 79.252338][ T8] device veth1_macvtap left promiscuous mode [ 79.259012][ T8] device veth0_vlan left promiscuous mode [ 81.585832][ T28] kauditd_printk_skb: 22915 callbacks suppressed [ 81.585852][ T28] audit: type=1400 audit(1790281141.588:23807): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.595254][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.613635][ T28] audit: type=1400 audit(1790281141.588:23808): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.620124][ T141] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 81.641708][ T28] audit: type=1400 audit(1790281141.588:23809): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.649350][ T141] audit: backlog limit exceeded [ 81.670492][ T28] audit: type=1400 audit(1790281141.588:23810): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.675632][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.696520][ T28] audit: type=1400 audit(1790281141.588:23811): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.703092][ T141] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 86.595805][ T28] kauditd_printk_skb: 34974 callbacks suppressed [ 86.595825][ T28] audit: type=1400 audit(1790281146.588:58785): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.605662][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.630658][ T28] audit: type=1400 audit(1790281146.598:58786): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.630727][ T141] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 86.660567][ T28] audit: type=1400 audit(1790281146.598:58787): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.660677][ T141] audit: backlog limit exceeded [ 86.685793][ T28] audit: type=1400 audit(1790281146.598:58788): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.691570][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.712058][ T28] audit: type=1400 audit(1790281146.598:58789): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.718507][ T141] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 91.605937][ T28] kauditd_printk_skb: 35535 callbacks suppressed [ 91.605958][ T28] audit: type=1400 audit(1790281151.608:94324): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.615648][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.634615][ T28] audit: type=1400 audit(1790281151.608:94325): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.641117][ T141] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 91.662945][ T28] audit: type=1400 audit(1790281151.608:94326): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.670528][ T141] audit: backlog limit exceeded [ 91.691922][ T28] audit: type=1400 audit(1790281151.608:94327): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.698621][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.730739][ T28] audit: type=1400 audit(1790281151.608:94328): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.738079][ T141] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 96.615809][ T28] kauditd_printk_skb: 34036 callbacks suppressed [ 96.615831][ T28] audit: type=1400 audit(1790281156.608:128364): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.634626][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.647437][ T28] audit: type=1400 audit(1790281156.618:128365): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.654547][ T141] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 96.679788][ T28] audit: type=1400 audit(1790281156.618:128366): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.688385][ T141] audit: backlog limit exceeded [ 96.712319][ T28] audit: type=1400 audit(1790281156.618:128367): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.721164][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.745069][ T28] audit: type=1400 audit(1790281156.618:128368): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.751719][ T141] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64