last executing test programs: 1m20.156710728s ago: executing program 32 (id=19): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000080)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x80, &(0x7f0000001600)=[{&(0x7f00000014c0)="47d6f5c03be040e38aa14d552a4af2997e915779db33e5202875bbf68648a423349f568c90749a4956a90c6867351ca6b262cb3c19602c562838435f", 0x3c}, {&(0x7f0000001500)="9c72bafff5542e9d526adf19aafb656b8fd4a3578abd79c4a1b09179a5c31d63dff8f2b2e394e8e81270c346d85398c4aad4d225e7611bb837e0fdcd3a958ba439e0e24a6e2d0f8bd9a2455839aff69065dc3ebdc2240f7ed64bdbadf68b9336cf17475717a582978e7b560a27b98e84407ea1d5e7cd681f8d6d2307fc33dc59dc4116d56f556c44761d1e21b753eb6e5b7b3f07f515ef9da347cc8d53b649136e63140750194e9fb9a67eec6e0131498e02284a68dfebd5dbe6249cce5e85c37cc6100c686ea8466df3dd7159915c2cceee1b930866f0571329abb825428659a6f5786d7d111252ce13283a53a9ff34da", 0xf1}], 0x2, &(0x7f0000001640)=[{0x68, 0x10d, 0x800, "d68e46f8251ceea599f72d63a2c29dae088978d3aa271b1504cb75962baa333ff4106640b2bdf06b28d80d2f55cdf51d89d35f9d8f4b97296a16727162cc68d2947d30b5e10cf5b256a952aac85335ebaa5df6db7d"}], 0x68}}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x1, 0x2, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x7}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001740)="592a700cfa7087d4ed11", 0xa}, {&(0x7f0000001780)="74edd928f711557f37d6059451871884166b5c9c19d70683cf1a09ab76e78fc85b6c71507c0e470f63cd0bbb608707bedfb9fdf34fd721e50ec55203e84564b6342dca31d4ef56a61a23a565fabd5c6e27913ade823775aa62b0e8a5bbeede6258d613cb987ef5abcfd26937af9d1c61e331473bc19030d9e17c6c991e18fec5daf5df7f390f8a68fe9fa519cbc0769ccdbd8567df1ce5a311939e9304b69e721952292aeb2e04e6e17f1423dad997e90e84f6496dcf41394b", 0xb9}, {&(0x7f0000001840)="b1121145d25d655ceb30ab5e15a1893bee033421f94c6f7b9e17432cab442efd453388888c04631febaedf5b7f3ec1cd406d20a654abbc5fcd38096064c301d870064ca098b53f54c8587f98d313cc2c26c1727f1e512b97ea1c20d45582b2b28bdc1a4e542eb3b4b4bf599d124a7013d330751309d90d47384a76679cd0f012b79364619a21cfd362a444665c2ce374ba3c31d212b06cd126e9def34a62f032b9b1066fdd8aa6412e9b861463092ed414bd1f28f15aff5e337769ca87b5f606050e22e0dea94153a330387746d45adef2b0752a94c81172879fffe27c284b5e3f0d47cf42c235f3e4f02e3871", 0xed}, {&(0x7f0000001940)="e7aeb6d34c82158b2fc2f318a27c6cd9901822edbf9dcaef6e89bee7d24208f29074afbf4d5cd63806134bc163e1172066993773150ab3b02d5b08ae5483515e531329a612606301af374508c595b0322f0cd5f23bd1db7140da2dbbb70e16aca0c43b384af5ab1bd1881bb742f556d4fbdc2bea4b426585615226b471da22231db18926bfc236cdaa262c279b99b28a9bb5d94dfd42bfe434e1775a6aa70661d3b3f239bea57bfa436e9fb4ed3019f5f0a9f5a6bfebd864e37c6915ca4ff641b9d1361dda3926c019351f552e6db4a5bca3867a9462ab7b", 0xd8}, {&(0x7f0000001a40)="cd979270568e0dcd0299dc9c902bc515473c99d742245767a9575ef9e561dd461a05218e461b9b7c6e617da0b72a5a9b90e959ca78c7c5100eaa604ead09256dc2eb0bb31c76ac7a051e06d88c7f9f639f643fdb260b8e3a89b52ddb0f47917b496009fae3e1dc3604319a7292cd13ff1a42f2175615f28542f83b8a4f30b41d2688d9b98b0cc7", 0x87}], 0x5, &(0x7f0000001b80)=[{0x110, 0x10f, 0x0, "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"}, {0xe8, 0x10d, 0x9dff, "fe6ae6bb9e398c3c6d71576a6ce858aa963e4a1371ec96de0fa41330ea6cec5fa553d2564aff2c7b804c4c758e239158c1914841168f96ffccaf97ffd42ae1684af9f9ea34181f3ba4589e7f9a18cbcc6e7a49681e8f571be24c74575c70e415a7b8c299ba9f1f33a6fade4d825a9801ac9a6ecb52281c3daf7fb3d11386dec53c3e4dcba4ea78dcdc2c2c0d9f63f36ed42419a28d15fd3a74fbea653228139c38569be073360e182e40e5931fc8d80573069d6c4ebdea81bb61836415242bfdac408787e838a0c6f79b26344cf08641d200"}, {0x40, 0x101, 0x7, "4bab0141f561791a00f283d56d970cf6681eb8b11f8c34ca0a7792c415da703212bcd1de7fe5b8cb56102af61e"}, {0xa8, 0x88, 0x101, "c5441b76f62684457c30e926e09f530e54cd731413d5aea27c39ff5ebf96c56da0141e01c24488ffdd534676e81a22faa29b5ef5b026c91a1d6b647cc48f40e6fcd6d144b2ef4ed1306349b3a0d415996467871908832f155f0d899479b0637122f6c66dbc25012fa4d622835700cb324520d999dd776c72a1a31b07185cb94a1a529830661a2907e2b6b67547ecd4fecccc5f6388f2d5"}, {0x108, 0xe0da2bf5c39b1bf9, 0x0, "54e238b98c7381f9484bd8a5a63bedd6931c384ab6240ef9ea0edfd1de102d112293345fbf8fe44b25f56d44747350dc809751b784d55e6b7b421286de6f6f48e9a5e1c69014b5377169201e264cf8e9ac79b2174419f194e144ce745d9ade0f3bc38276e33216d58b593fdf118d44669cc4d44548ed23a92b775d1e524bba4845f61e8ddb3b3cf900354bceff95906ba5e0e4d387534fb9ee7613368b0ed54446ca13ab3168e9a4ef6ace627f2d79723943429b1c5b3629dbfa87fdb345013042762b2c386d9b01bfb3dd67cffb629e9e7712ba32b325c1fd98b3cb99165bc845ed8830dd4b975409ee14000391d16a56f6f1cfe5"}, {0x78, 0x111, 0x5, "56e8afabd8df4f46cd0b4fd0b091a9b80229fbdd17060fce1afbf4e54671f9640a14439beb1cc9abecbf264c2c9c82fba6eefebf606c5ef3d7b9fa1a87e601894d17f4933b1db7fd7108b398ad6751a67d6117e6c65aafdc8d3de56fbd8b750ae36b68"}, {0x110, 0x10c, 0xffffffff, "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"}, {0xc8, 0x10c, 0x6, "915a8954282b715f63662958f4120a921e388f7b489285a3cd0672390f1ede9272bad1ff1468fca7b746a89b27e4ff791f3f397bcb5dca3ee8cd91f3b99be2d1006ef62ef16565e2ba66e0f25ac3bddbe2187e61c2e30d051a2acc7d8e8262f58356430a03dd701f2c720b0adec6c2e5653c17d4eb0a4dec7209bca84058a072c0aa92eb80ef1baa0bdcc3d800c23ae6d016e39c586d87e831d1ba5cc6eb7e36c53c54dfc1a0a35e7a4ad57ab2410a2ef09c"}, {0x68, 0x1, 0xa2a7, "ebb63df6b13df04ae6fc6e6c85716cdeff5fefe3753c1dc7423ab751f34530ee4a8fcd46efcfbfedf212bf3cb60458535cd557d3b8f55aa63c307e4c71f63cb0d78208f6a419be5cfc0e5d8360e29b8ece"}], 0x6a0}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000002240)="9dfce561cf46f3d26bff7d2b663543ac0d8acf8fbf5103b119b029b74208c700aa0e09ed25fc3fcac6d4ce1bc6b8b1cd87c95ed8755e2176184d5aac12c07fe9bbde013860c88d226686123b1b78203da02777b952096971486817ef69f524b747597faf49299155ed68a8960b7e0accce857c15ded8fb13", 0x78}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="929a96913f551a79fe9c76af095223034a749847faeb43203afe4b4239f7e6faebd078c526f028bbcc73654831405ed02ba3de5363b1021eed41ea7063733fae030e64c0e66985e56829141eef22a364caa483dd24178a1a", 0x58}, {&(0x7f0000003340)="a3c23ed192e6e3cca8f7efa7196cbfa3d85b70592e7b0c1f18d0c46307679369fb00e51525d42da22526f6d420265b435562bb72574192708c71fe3acb17240e75f84ea3e62e1ab0a6b1fd3142c4e0a36ee87193d4f532558b0ca191b7ac1e73c17dffe5e348444611631c543fe84a2c2280b140f9cb19d58d01d560d5fc62df813b", 0x82}, {&(0x7f0000003400)="9cd51a34630b97f657e1444d825f47b7b1ffba9863e3e8c758b0a995225b2d41d65219349567df22382e4bfe077b91a4a0e5d652d8ecb36c7a113f02f16f5ee85bba5204f3ede30fdf4aff18beb67afab54cacb56bb729b520bebe1637071d0b57a623123c46f3", 0x67}], 0x5}}], 0x3, 0x0) unshare(0x62000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003740), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003800)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2503004d004c00018038000400200001000a004e2200008001ff05000000000000000000000066c786660000001400020002004e237f00000100000000000000000d0001007564703a73"], 0x60}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000036c0)={&(0x7f0000003600)={0xc0, 0x7, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x49, 0x7, 0x1, 0x0, "fe7b5bc7cf85215446bfa595a9ab7c057e03630bf9ae910ff8396bc8f335e6bf592ca62c8ff1c186fc352f0158905d00730613232b892470c784a8978748a3d2910ee6cdc2"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x11a3, &(0x7f0000000140)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x3, 0x7, &(0x7f0000001440)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000088000000b7000000000000009500000000000000"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000001300)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000001340)=0x2c) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 1m17.508346392s ago: executing program 33 (id=27): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x511001, 0x488) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2001000000a, 0x4000000000090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000005c0)='./file0\x00', 0x2808080, &(0x7f0000000600)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d302c756d61736b3d30303030303030303030303030303030303030303031322c636f6465706167653d3836302c756d61736b3d30303030303030303030303030303030303030303030322c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c696f636861727365743d63703733372c747a3d5554432c6e6f6e756d7461696c3d302c009056d8d195b3e20fee80f962745894b7a8d051b578dc26babbd9fddb86adcabf8d9e"], 0x81, 0x2ae, &(0x7f0000000700)="$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") r3 = open(&(0x7f00000009c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000000a00)=""/184, 0xb8) syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000300)='./file2\x00', 0xc, &(0x7f0000000340)=ANY=[], 0x1, 0x1ce, &(0x7f0000000380)="$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") r4 = open(&(0x7f0000000580)='./file1\x00', 0x4000, 0x32) read$FUSE(r4, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x4001, 0x8, 0x1000, 0x5}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r8 = timerfd_create(0x7, 0x80800) timerfd_settime(r8, 0x3, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1m9.559672792s ago: executing program 34 (id=53): syz_read_part_table(0x602, &(0x7f0000002c40)="$eJzs1M1rXFUYB+Dfna+bAUtCcecm0OCqfhBdiHRECe2QjQ3FL8SdImYhQkGwi9ihqdsW/wFLtYJkk61gFyLSVEqFdBW6lIBru3JwceXemfELXZmSFp5ncTjnvO97zpmZMyc81IqPP5n2qjKdpP1rVVU3/whXVfXX7FH66SZpT8evbp08tbq49tKZV5Juduqp7uuTdYsk/STlaFY8Vzenyyaa1XJ59+qtlXtbC7eP3dlZ6jUZv1W5Xgcn5rvJm0f+dtpn893zk8SJA/86eMhsD26UmxfPDi+dG6zvDTf2n3n3iZOPXU7x6dufnzj/WuvEG60mrZfWO5v/rG0VB7L//MK0v9fc8PRTze7nePnFaex40Z32OvWf4v9vzAOh/v2b+3c+yXBj/8qjF+5eGL/8+FcfPnX86N3vm/erftzGLzyymNkjCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcB9sD8psXjw7vHRusL4310yNMq5qaVXdtJN8kH7/z4p2RpPORwez/2zpwfrecGN/afe5L3+sTv/y2ZEnuzu73y7fbGJP//BvtUVxECfgMG0PbszP7l9nuLF/ZS5lxkXSK3K0SDVTJl/Pat5r2l7nMM8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy4Lp9aXVxrneknRd5KstJauFbPV+UkXvTrtj0Z/Jyknm8lq+Xy7tVbK/e2cvvYnZ2lL9am+ddbySjJ+z9dm09631SNeqF0k85hfUz+w+8BAAD///T+lB0=") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000100)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000240)=""/8, 0x8, 0x0, 0x0, 0x1, 0x10}}, 0x120) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000380)=""/155, 0x9b}, {0x0, 0x3}], 0x2) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$tun(r3, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaabb0000000000008847000f0f0000000000664b000000802f01ff010000000000000800000000000001fe8000000000000000000000000000360420880b000000000d000800d392f886098f5312ff078cc71e6d6598e384ea0cce43182bee44847b42fbe0673d7f60d4e47a55fd84eacd0045187c15170dadbcb816f336df9000f0010086dd080088be00000004110e290401000000ffffffff080022eb0000000023027263020000000000071500014e140800655800000000"], 0xbe) read$FUSE(r2, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000032c0)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000003300)={@rand_addr=' \x01\x00', 0x46, r7}) wait4(r5, 0x0, 0x20000000, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x20800, 0x0) readv(r8, &(0x7f00000004c0)=[{&(0x7f0000000840)=""/214, 0xd6}, {0x0}], 0x2) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYBLOB="4b7a9ce209cc1ffa19d378c673d6c115835460632e0d54aaea055607", @ANYRES64=r4, @ANYRESHEX=r9, @ANYRESHEX, @ANYRES64=r4], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) fsetxattr$security_selinux(r2, &(0x7f0000000a00), &(0x7f0000002b80)='system_u:object_r:userio_device_t:s0\x00', 0x25, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000003280)={0x1, 0x2}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002bc0)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b64a236d0100000000000000000000000000000000000000aa7576"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r11, &(0x7f0000000a00), &(0x7f0000000a40)=@tcp, 0x1}, 0x20) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000300)="c4e14de8204b0fae25090000008f68408e82850c0000c866470f38827e00f2148266f24f0faef2c401f92eebb9800000c00f3235000100000f3035080000000f22d83e650f139f851b000065263e262e65660f0f1c3700", 0x57}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x4, 0xe, 0x0, 0x0, 0x1, 0x8, 0x8, 0x81, 0x8, 0x8, 0x8, 0x7f, 0x0, 0x8, 0xa, 0x7, 0xf8, 0xd, 0x0, '\x00', 0x5}) ioctl$KVM_RUN(r10, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0c0000003b001b54d3618a7712f03fe3d45fbad9942fc05788688b83cc3fda0f8df5394ea08d6ac07befa85025f69371640616c4a4a3ae78b139931b861a2427d0"], 0x41) getsockopt(r12, 0x28, 0x0, 0x0, &(0x7f0000000040)=0x13) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x1ffe, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x5, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x9, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc, '\x00', 0x9}, {0xb, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1m5.326553038s ago: executing program 35 (id=61): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000002200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd01, &(0x7f0000002280)="04") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000f80), 0xfffffedf, 0x10, &(0x7f0000000fc0)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r1, 0x0, 0xe, 0x0, &(0x7f0000001080)="ad5ce39667bde4014c9745573838", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = getpgrp(0x0) syz_read_part_table(0x105b, &(0x7f00000010c0)="$eJzsz71tAjEABeB3VuLEyhzJCKmzROr0KWEMCsQQ17AUC1BQ0h3iOH4WQAjp+5onP+nZcniorub/r387HYZrPeXL0CUly9nH92vmNUkd+5990spnkm0/LRZjrHabr2OWltrOt713Q7tMb94pv+t7/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsEhAAD//xpBDoU=") r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/netlink\x00') lseek(r3, 0x339, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f00000000c0), 0x80000000, &(0x7f0000002140)) 56.226501028s ago: executing program 36 (id=75): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x2) recvmmsg(r3, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2800091, &(0x7f00000005c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="d016c8d55cc9329d2e0101797fb5f52944f2b8694bae76ff77df23047285b916fba6b36c1b409890d28883acf4093105048a0c8cea76a257b7ee39a0fa772953b17ccd5d14328bcd8cd30f4cf0aa220eb9fcb0883de194766c39954634b5f9a0ca862e09200c5cf06ec1214c819ffadf5291b8ed1536d9145da9796ebeb922e3eea04914e29748eca2c90ffd65bace2ec8cb6808e9e719426ee9bb119acecbf8a735429439a2093d21aecabbdd15d44ddcf79b892ccb1b096880abd5988d69079281b4619ee58eaae0d054eaa813a0a1ee847cbef8563408ab7db29a8965f5a121b56175f4be4dfbf2e6da7e4b74b67f37ec6660227c655b67e0f1a41c18ae60ab4bf766c5460f296625113944f84df515da615e597357d29059cb92f354e88594b05de4328d59b0e0e099e996c126c6663c9751466f81e2059cd90aef508fa30a1b0cd6b0c1d9fc04a8831801d0c7ba813dc1e59614bf56c69ae20f1683889e7247a12b740a9656421981e0763c64e4ade9be51ff260d61fb3a8ad54bfe09225d3a8402f426fcd2243a4c246669dddec2bf5fd601dccfd57e680f0e869deffb3f91c6a12fd339a61bf2027566c590343154e79969abee74a57e0916438c58198a4816d31b2ee9d481fd2ea6264fa36185d7e025d245dc151fcb87c3502ef537695b244dccaf592c543565cccb52e177ecfa5a5adf612afe4b98edfaa1d2d4ad14ddf67ad5c33bc86967c305312b1df912286ad92e21fb025dc18c1f262f733eeaa0f17f437f41a2ea816cad63e736d6182b96da94b23dd86130a388b4b0b84554eb4ce851ce5610049ace33cf1282b21b771733baad9030dee46cd6209df098d04a131eafc8b2ed58c71461c50cadcc912ab0edd9eb090d36661df4653053608b6156d99298b7dfea7fe67ede7d040dac6ac66e78967eb3c05ddb469c90bc8e5a8f1c74088caa5ba98db4ffb9a8aca8f8f01a0383c349a5dfb139362a5f665abb5f5d07a5c59b5c35c7cb8bb53e6baaaa42352b09f443477dfa6bed6049339101ceecc3bd1b327fdf2ec8ed7d1e5cbd02d1630e34e6f2c7150f47ff9a974a88ac2e8f94fde99f4cad1554ca0f7520b0a5af672346f0cca349153c5b939a32b07ac78909bebdccdbd3b1ab3532c6d061c2665ee9d67887ec209d1cf5125989588c79a18b99e2ae30bf3bafeffd6b2ff032ba4b6f64b62abdf0f53feb4b7d722dfe13dddc79c9d6f655f01db1cf6d92057332a96d92069a4347235a08b6ae91417cee0fe37a339beaedcf50b3b68cf7b99d22b29d49137bbc7bc38ad6cf6e200e29b94077305293825c4476dc17634a3ecb1c75b289c8e270f68c9dcb8341471fef9a1b8e0d191a8cbe6192b0738f44144379b15d2db2269797c09c1789be60c9e52f452a5205c66782c91fd2573d27f65161a5eda08df1b0e7ee3d4e8b6c1a9b4fc87392e16e8c0dba1884adc52acc7cdd93c8f83feb5d44cab62b9856678eaaf9bb82825230c44ea177bb62ab36fcb8875bed5b4f9ad3eba65a75fc6428fe3abce7b42b992fa4dc218669e848f3d07553e6d381ecc3e1f9c9ac3650c1d11844cd29352132a07e9324b3fb70166977855669ec0cfe75cc34b8e21044e142ac7da564b1ececd3a985c4b3d0bdefec84a96c13c9a496b80cfc1a915804646fd14ca5e90b036c9f247f564af75ae851203c8640ecfa25c1837167c91b977a07fc1b88de3a257b3bb63a380bee62d7300dd84aa087f579172651f2db55f8e0c6efcf759a5343f5e59110177e3f7b948dcb0d33ab9ebec1d1b987c55d10bc6214cb81866dd5ae794ae89a3e9ceef6f73714138b69ccf6562a136bbff44eaf0d2b8587db3b9a6dbedb48930b9541e0d6c21239ec2ee78b77957742490c651cabdec8fe87731eaa77811ab31a6e47f21bc1e6000b20f6e9118bf7baeb6985047f937c7ca4e27ad16a8b108e0e1e7645c5e181bdf3354c7b11ff44c7a9600f8e0b4919f24cdf72abcacb509fe56418430bb1a46fe4044e886574c0ca22e1a9e316784510220d9e628744e9cb38c9805570935f0407f1596fb9965c1575963643d85a7f1e4f641d66c4fbb8d962857aea040d0d6f4e324bcc2c157efd5e9313a41069728ac75a84022814011420428f0c84d8808cf228379c5770a10dd4a2540ee9b49cf4c67423ce11545415cb3b3a271fad52979dfb205e765bbbdf27db6871373e5704aea7f8da0f71b6d2cd51a4c13e5140c9018d98c820e572df54a8accb9f378bf768325939913efdf90b69debc59d2d4195f2c60be37683201a157bdd25f365d35c97eb3d8579d98b1d270164b2f4b0f590f6cdbb9bcc8d0da4439b6cdad548c7a7976b89fabd64ee53f65c3bac50702a14d393bc1469db6f7fa5a607c6b09eb6157982fe7b70a50e2508bc9f2d6e6ed98f7f68e8a26683db2776f19422688d72c2d3c128c10382a81c970064dac4fdfd5873c711bdb902f70bb72c95b2db18ab3d4001f38a0d59a43b12f5002909513df9d90fe1abb35111ca57847f37b56242676fd2ca33b7bf0f858ccfc3c600af12235b26f488f94c6bbdee6d3b42f1cc9db75d8219b9a2c96f4ea153d3fa14517a1a5369c71f136c2a9ae234a85882d21b66354d08eadb2f68a5e932341596b44bea306f11a0a4ac5c2561c2540d025545a8735dbda092003709e8f4db40a744ae99f96750a036b0958a521202477b4d3eb94aada9a94045cdc70861a8d8fc08e79a960022f34231897f1a4816e998d0589146ce4b2426050d166424d7c3d5209f7814d824172aec43c4bd68f49855363917a71c7f91636f74bd0eeb4df24a846cb627ab8248b5400d3e2d8fe1297c6422cb5fae73be62c3015d4d4b5d40dd1206eb7228884ac609fbd255b12677ad5a535ec3bf2855ea4004ae625ceb787da5a2b17cf6de63a9890658e8f0fd497e029418752193344486d284059d1d7c13c8b170dc1a54db0192af587fdb94da913cfdefb2939c586f34ae3ec3d2fce5d08ba13de9bf027ff4fbfcb2cb2a20df6f5600a33c7d5026e5e6091fe904445ee23bcf156a7945136c4002a4b060085f36178f8909770847bba3ed7aa4ae35e76b77dd4782d73fa7f07e4b1851d51bac51bb8f6ab029a936e321c2401d061db416da765b6752b1c1b7562f2292315acb39b87d3763426dadf0b6097ad6221be9594ad73fe562b84c2e7113c8587bb6234b023bf421b1964fbda393f38a593c31a99679065f0bb2ed89d232b70355021def8327706e70a3f8efc42f048ef4de94e676e9d2c7bc618ee9b5778b90068f4405f0787682a5b7d1e641a5ad595ddbc2476b6b17ef86df5c474b8299a0ab5fe884bef5f172cf945224b5ddc24d7004ae2bcf26d6efa44f4fa9810f05c3430aa25812e31110a3e2ca2ef48189729ef0317e71895bda2106596351a3f77d1457361b7fe32ca77422e7eccb8ea3f8946a2ca0a031e2f2d0862bb3e64ecfaf4cf6b8c976de12848bb21ac75924245a95eab2509da5cfd9c1da5de34f473412611320096c82e9a924f343c1ee6008277d82020fd842669eb3e2945e96306b9cd869872687f421dd8f0c0891fc481c2a0154b23c229cc20444b4d8713722be4b9142c511f237cfd49a3fe8e296f8a6dbdb28e73e8f0b4c489287cee53388dc6d839d23db1f9e90ff475dd4ee5e728666edf8c9d872a6902204ee7d11e37fc32d4a7748267a26bab65335421f5898dfd50dfc2d0a9b9a7829fb1a5a6c2088337363f7a2088f2dfa9617fa299fbe2f6162aebb7847fad46017ff078c53354d7a8a7fe86e440299fe7d7d654ad045d5b9849a906b0ecce0cf46fc4f348a9c240e8f9d7efb699e9ff4868f28f560521502929c32d7447ab4b7c196fbb706c41bef4e8b655a185140d24d39f8c043fc5f304856cff55bd881ed52fe385f93d48320683fccc8299f514bdda70bae383c00e519c2bfc4ff03df76f91d270c86dd0499f145ada66dcb9d4cfbad8b97fa43873fb4695559af885daf12866be73f01c98ad836a652afbbb66e8ea6308884feae5efe796ce67ea24f83f3a7938c55f216daf22d0133cc0476d851b8449c10b5e6fa1c598c10de9f7085c66930cf24520fac24e71bebb0320c08e8cdf3fa2e8b2517285208de28e251f5b6f796d3ef0749bf67e1f2c178b0715705dfc0fdddf8d2a6c856323fd9af1a79855cc9ac9662df8664d483252a04ce639eeb4e73ea685e617e844b9aca90758f98c5ced2766f67e845ad3e8afa379bc56bb4512aab985d8e8e3ebcd3cb91ad2af343936c11e7e3dc549f9cdb754ef5296175e6252b22788bb4c25c7d785b82541c63c2bf84770ba032008b794bdd166402bb27fe65aaf15f2febf80e34038b771ed5fb7ed7417799a0d7895ec6226206c415da2dc59f09e1086a38b62ae2125522714a8f1ec56a4b376800937e62c42d030fb025789e1e30dc56df4d6658d67b1d0690b5d33364329b6f2e9e13166f5520064223661d08eb774dde4a6abb7e549b708ce92db767829ab585d3fdc773513d14dc8532618da09d60abcb341f50936bf45ce2d14dcc0ff14f9e58aa0069c0dcba9ee8f53f32b49450f18db0c47ce85ea935baa4729bd1d576364429e88b0b9792ff6e8095c0ca8701257685ce97a3b47340b45ff902d7fe66ad00e655902a98589e63a1f7916866f50a9ba8660e4c15b0aa60b14f21081923cdc61c085018d345592301a989ae3c64e7cff3f094e7fafe723eb2719a4fda9536005f84e5c8a107963f6b2681cff060dcd537481fb4f50c756df258bf7210c52252558c3df00c2e1f82cb1faa740de72d0f974de9cd4a2a1c37027d381f8689fd4d08f3a5c228a89e9b096a73189be0c8ce2660b571db8bed81252fa7d1122da07df6212a0d0adbf911d7dc16660bf7abf4764d4b7708d0912287493c8fddaea467cfaae7a24ba0907d98c847e8697d507cf82a86203a1d89c34b04db579ba03cb1cfbcdd65a652a36435c989b423de545f368bde41f33e76ee65ca5538bc89c29e36f725ad8385611ebd32afdb2e209676aff0df1577620524c6818e064cea1a349066c9ad27643494c91fb0af9c54ce88568197e8dea217df827981cf4b6affd2078fc5f09c5c292dc70000188e977901a20cafe90c3463a8274f02e65f8d3c42242c61813adb21a0807ad474347d429aadd7d05a63cedd93f9c6cfdc74996068dcbda1ec88621871e1f3dc67fb7e883150946ab498141775ec710413f0154f8ef088777997a5b9b3103f00a04b4ad3cb5018864c7e456b17d732274dce1c9b1a574a7a4e86b8f609c0a58a08e6acfc0ac0961604a8dc6663b0fcfae347881b7383577fb6267c30efe043e052a569eaa76d4e0168d6333bd11b9d5c1479a9b24216b9dd1b56dfc3a94ff37ae2a95844f6bd878a8191d078426c7932911acc89407709c1abd0165b0a53f93612574e77daf90d4f18566d1ed90764f19615c2a8e860d18d2f7bde00a865533418d070e175a09f237a63dd007916d9e80e8f2b985f6732274841aaa815afc8a769db6a18d4a832687731e54be2ffb182fd9802335ea2fde0a39fccf1ef3d8374fc416c5954697195acdafa90daf37c43b6fd218ee7b6365d1bcc3e5372ac6e30f474ccfa76c7004d7c860d13bc1bdfa121756d9d39478e18827a8dc8263771a62524eb2c32683117b47892fff88708b50082d3f9f50e66684ead47776fde241596c4005631e438d95b3213fd660f8824f27045d7e0c8974b0c44df4503bd2203681c159e389f5230d5ebf8025ae27c8348915dc014a1a539d", @ANYRES32], 0x55, 0x1be, &(0x7f0000001680)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./file2\x00', 0x80000, 0x82) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a40)={0x0, &(0x7f0000001a80)}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000001ac0)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) read$FUSE(r5, &(0x7f0000001b00)={0x2020}, 0x2020) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r8, 0x4018aee2, &(0x7f0000000200)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000001c0)={0xd8}}) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000240)={0x9bb4, 0x30a2}) 55.188069045s ago: executing program 37 (id=81): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x511001, 0x488) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2001000000a, 0x4000000000090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000005c0)='./file0\x00', 0x2808080, &(0x7f0000000600)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d302c756d61736b3d30303030303030303030303030303030303030303031322c636f6465706167653d3836302c756d61736b3d30303030303030303030303030303030303030303030322c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c696f636861727365743d63703733372c747a3d5554432c6e6f6e756d7461696c3d302c009056d8d195b3e20fee80f962745894b7a8d051b578dc26babbd9fddb86adcabf8d9e"], 0x81, 0x2ae, &(0x7f0000000700)="$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") r3 = open(&(0x7f00000009c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000000a00)=""/184, 0xb8) syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000300)='./file2\x00', 0xc, &(0x7f0000000340)=ANY=[], 0x1, 0x1ce, &(0x7f0000000380)="$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") r4 = open(&(0x7f0000000580)='./file1\x00', 0x4000, 0x32) read$FUSE(r4, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x44000) timerfd_create(0x7, 0x80800) 53.918153656s ago: executing program 38 (id=86): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x200001fec000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r2, 0x200001fe0000) 53.761641862s ago: executing program 39 (id=91): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x58) 52.345040889s ago: executing program 0 (id=82): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x7802, 0x2ccd, 0x2, {{0x5, 0x4, 0x0, 0x1c, 0x14, 0x64, 0x0, 0x81, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24004800) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0xff, 0x304, &(0x7f0000000bc0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000280)=0x5, 0x4) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x7) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x18, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a, 0x10}}}], 0x30}, 0xc4) 51.010709256s ago: executing program 0 (id=132): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 51.002454627s ago: executing program 0 (id=133): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010020000000010000002b00000000000000010000000000000001"], 0x0, 0x4c, 0x0, 0x1, 0x327}, 0x28) 50.948299842s ago: executing program 0 (id=134): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000980)='./proc/thread-self/fail-nth\x00', 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 50.706208598s ago: executing program 0 (id=137): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) 50.554076653s ago: executing program 0 (id=141): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 50.524009336s ago: executing program 40 (id=141): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 49.784664953s ago: executing program 7 (id=153): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f00000002c0)={{'fd', 0x3d, r0}}, 0x1, 0x0, 0x0) 49.784558573s ago: executing program 7 (id=154): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 49.108108703s ago: executing program 7 (id=163): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x4, 0x1, 0x91b3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000240)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000400), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r3 = socket(0x2d, 0x2, 0x0) setsockopt(r3, 0x11d, 0x1, 0x0, 0x0) 48.015470215s ago: executing program 7 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 47.996082137s ago: executing program 7 (id=187): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 47.928798804s ago: executing program 7 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000940)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 47.887104328s ago: executing program 41 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000940)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 27.167116507s ago: executing program 9 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 27.124547531s ago: executing program 9 (id=520): r0 = openat$md_sysfs(0xffffff9c, &(0x7f0000000580)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r0, &(0x7f00000005c0)=@str='512', 0x3) 27.124340491s ago: executing program 9 (id=523): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./proc\x00', 0x1a8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0) mount(0x0, &(0x7f0000000dc0)='./proc\x00', &(0x7f0000000e00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000e80)='7', 0x1) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) 26.615146834s ago: executing program 9 (id=528): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000980)='./proc/thread-self/fail-nth\x00', 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 26.227058554s ago: executing program 9 (id=530): pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000680)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000006c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x2, 0x306, &(0x7f0000000480)=""/222}, 0x78) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0), 0x200002, 0x0) 25.796328938s ago: executing program 9 (id=538): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e1d, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000000c0)=0x2, 0x4) 25.77647605s ago: executing program 42 (id=538): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e1d, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000000c0)=0x2, 0x4) 19.860391461s ago: executing program 3 (id=625): r0 = userfaultfd(0x80001) r1 = socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(&(0x7f0000003500), &(0x7f0000003540)={'fscrypt:', @desc4}, &(0x7f0000003580)={0x0, "047f06d89ffd4b407acca522c938aa7586c007e302d7b50b3b6c86958c9672619d399f5fd281b4fbbca46c25e4d59ef94894f3ca93ff686638f36debba3b8cf6", 0x2d}, 0x48, 0xfffffffffffffffe) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000022c0)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000003600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003640)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000003680)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000036c0)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000003880)='./proc\x00', 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40104d04, &(0x7f00000038c0)="9c81") sched_setaffinity(0x0, 0x8, &(0x7f0000003900)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003940)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000003980)='./config\x00', &(0x7f00000039c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003a00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000003a40)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000003a80)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000003ac0)="1bd6c83a", 0x4, 0x8) 19.843106823s ago: executing program 3 (id=626): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 19.788191208s ago: executing program 3 (id=627): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffffb5404c40, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000740)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000780)={0x0, 0x595c, 0x800, 0x0, 0x34d}, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000ac0)=@x86={0x4, 0x7, 0xd6, 0x0, 0xb, 0x3, 0x9, 0x4, 0x8, 0x5, 0x2, 0x92, 0x0, 0xe, 0x0, 0x0, 0x5, 0x67, 0x30, '\x00', 0xb, 0xfffffffffffffffd}) r4 = userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) read$FUSE(r5, &(0x7f00000041c0)={0x2020}, 0xfffffec1) read$FUSE(r5, &(0x7f0000008340)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r4, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f000000a440)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f000000a480)={{}, {0x0, 0x989680}}, 0x0) 19.590240109s ago: executing program 1 (id=631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f00000000c0), 0x10) read(r1, &(0x7f0000000500)=""/4082, 0xff2) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000001500)=0x2, 0x4) sendmsg$can_raw(r1, &(0x7f0000001540)={&(0x7f0000001580)={0x1d, r2}, 0x10, &(0x7f00000015c0)={&(0x7f0000001600)=@can={{0x1, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "00119a7d1a39f603"}, 0x10}}, 0x4000040) 18.888286471s ago: executing program 3 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 18.444474717s ago: executing program 3 (id=648): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002440)={&(0x7f0000002480)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000001040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) 18.379381294s ago: executing program 1 (id=649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000001"], 0x48) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x43fffc, 0x180, 0x2, 0x0, 0xf1, 0x4, 0x7fffffffffffe, 0x5, 0x4005, 0x80000000, 0x0, 0x80000000045, 0xfffffffffffffffd, 0x8000000000bdb], 0xd5dd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.268337995s ago: executing program 3 (id=653): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='mountinfo\x00') r3 = epoll_create1(0x0) unshare(0x6020400) epoll_wait(r3, &(0x7f0000000880)=[{}], 0x1, 0x0) 18.138120558s ago: executing program 43 (id=653): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='mountinfo\x00') r3 = epoll_create1(0x0) unshare(0x6020400) epoll_wait(r3, &(0x7f0000000880)=[{}], 0x1, 0x0) 18.135092239s ago: executing program 1 (id=659): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$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") r0 = io_uring_setup(0x2dd0, &(0x7f0000000180)={0x0, 0x31f5, 0x61004, 0x1, 0x20b}) r1 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0xfffffffd, 0x0, 0x0, 0x16f, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x22, &(0x7f0000000340)=[{&(0x7f0000000480)=""/233}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}}, 0x0) r3 = socket(0x2, 0x3, 0x6) getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f00000000c0)={0x8, 'bridge0\x00', {'hsr0\x00'}}) 18.081428494s ago: executing program 1 (id=660): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 17.54066497s ago: executing program 1 (id=667): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b3"], 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) 17.396360905s ago: executing program 1 (id=669): r0 = io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003e00)={0x1, [{0x1, 0x8, 0x4, &(0x7f00000004c0)='.'}, {0x3, 0x0, 0x40, 0x0}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0xdc, 0x0}, {0x1, 0x0, 0x10001, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x81, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x2a358830, 0x0}, {0x1, 0x0, 0x200, 0x0}, {0x1, 0x0, 0x70, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 17.281177537s ago: executing program 44 (id=669): r0 = io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003e00)={0x1, [{0x1, 0x8, 0x4, &(0x7f00000004c0)='.'}, {0x3, 0x0, 0x40, 0x0}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0xdc, 0x0}, {0x1, 0x0, 0x10001, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x81, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x2a358830, 0x0}, {0x1, 0x0, 0x200, 0x0}, {0x1, 0x0, 0x70, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 11.372029357s ago: executing program 5 (id=777): socket(0x10, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) socket$inet_icmp(0x2, 0x2, 0x1) socket$key(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x143042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket(0x200000000000011, 0x2, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioperm(0x1000, 0x1000, 0x8000000000000001) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = gettid() tkill(r0, 0x21) 10.980957987s ago: executing program 5 (id=785): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x1, &(0x7f0000000500)=@raw=[@generic={0x95}], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.961566352s ago: executing program 5 (id=802): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = dup(r1) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 9.487123131s ago: executing program 5 (id=804): mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000019c0)='./sys\x00', &(0x7f0000001a00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000001a80)=ANY=[@ANYRES8, @ANYRESHEX], 0x8) 9.463071434s ago: executing program 5 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000026c0)='270', 0x3) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) 9.415952739s ago: executing program 5 (id=810): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x80080, &(0x7f0000000280)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000f80)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000fc0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001000)=0x2) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000180)=ANY=[], 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001140), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001180), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000011c0)=0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2, 0x1}}, 0x2e) 1.218989344s ago: executing program 2 (id=939): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 285.180891ms ago: executing program 2 (id=957): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/file0\x00', 0x3f) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x80442, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001a80)={0x2, 0x4e20, @local}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000001b00)=@filename='\\\\172.20.20.170\\share\x00', 0x0, &(0x7f0000001b80)='cifs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='8\n', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)="05010906a101050719e029e7150025017501950881029501750881019505750105081901290591029501750391019506", 0x30) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 255.952464ms ago: executing program 2 (id=959): add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="308205553082", 0xfffff, 0xffffffffffffffff) 203.741229ms ago: executing program 2 (id=961): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1a6) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0xfc, 0x1}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000380)=0x2) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f0000000480)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0x40086610, 0x0) 202.841589ms ago: executing program 6 (id=962): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000580)={0x0, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) read$FUSE(0xffffffffffffffff, &(0x7f0000002a80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='0x12', 0x4) 172.462223ms ago: executing program 6 (id=963): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000740)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 172.300033ms ago: executing program 6 (id=964): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000580)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000a80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000ac0)={0x4, 0x7, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x0, 0x37e9, 0x2f92) 171.576223ms ago: executing program 8 (id=965): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000840)={0x14, r0, 0x719, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4810) 124.157667ms ago: executing program 6 (id=966): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 124.045938ms ago: executing program 8 (id=967): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x3, 0x4, &(0x7f0000002ac0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000002b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25}, 0x94) 122.990827ms ago: executing program 4 (id=968): r0 = userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(&(0x7f0000003500), &(0x7f0000003540)={'fscrypt:', @desc4}, &(0x7f0000003580)={0x0, "047f06d89ffd4b407acca522c938aa7586c007e302d7b50b3b6c86958c9672619d399f5fd281b4fbbca46c25e4d59ef94894f3ca93ff686638f36debba3b8cf6", 0x2d}, 0x48, 0xfffffffffffffffe) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000003680)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000036c0)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000003880)='./proc\x00', 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40104d04, &(0x7f00000038c0)="9c81") sched_setaffinity(0x0, 0x8, &(0x7f0000003900)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003940)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000003980)='./config\x00', &(0x7f00000039c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003a00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000003a40)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000003a80)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000003ac0)="1bd6c83a", 0x4, 0x8) 100.48748ms ago: executing program 8 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/file0\x00', 0x3f) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x80442, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001a80)={0x2, 0x4e20, @local}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000001b00)=@filename='\\\\172.20.20.170\\share\x00', 0x0, &(0x7f0000001b80)='cifs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='8\n', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)="05010906a101050719e029e7150025017501950881029501750881019505750105081901290591029501750391019506", 0x30) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 99.21481ms ago: executing program 4 (id=970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x3c}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 82.248212ms ago: executing program 6 (id=971): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200004, 0x200004, 0x3}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)={0x54, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "07101000"}]}, 0x54}}, 0x0) 81.410212ms ago: executing program 2 (id=972): symlinkat(&(0x7f0000001040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 43.165226ms ago: executing program 8 (id=973): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000580)={0x0, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) read$FUSE(0xffffffffffffffff, &(0x7f0000002a80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='0x12', 0x4) 42.980046ms ago: executing program 6 (id=974): r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x1001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x2004885c}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x1234, @loopback}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) 42.866906ms ago: executing program 4 (id=975): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000740)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 42.790356ms ago: executing program 2 (id=976): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x200008, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000640)="$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") ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) 42.314116ms ago: executing program 4 (id=977): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) faccessat2(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x2, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000002cc0)='.\x00', 0x2) 313.571µs ago: executing program 8 (id=978): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) 206.351µs ago: executing program 4 (id=979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) 107.56µs ago: executing program 8 (id=980): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5801000010000104000030000000000000000000", @ANYRES32, @ANYBLOB="00000000000000008c0012800c0001006d6163766c616e007c0002800a000400aaaaaaaaaaaa0000060002000002"], 0x158}}, 0x0) 0s ago: executing program 4 (id=981): r0 = userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(&(0x7f0000003500), &(0x7f0000003540)={'fscrypt:', @desc4}, &(0x7f0000003580)={0x0, "047f06d89ffd4b407acca522c938aa7586c007e302d7b50b3b6c86958c9672619d399f5fd281b4fbbca46c25e4d59ef94894f3ca93ff686638f36debba3b8cf6", 0x2d}, 0x48, 0xfffffffffffffffe) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000003680)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000036c0)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000003880)='./proc\x00', 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40104d04, &(0x7f00000038c0)="9c81") sched_setaffinity(0x0, 0x8, &(0x7f0000003900)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003940)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000003980)='./config\x00', &(0x7f00000039c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003a00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000003a40)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000003a80)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000003ac0)="1bd6c83a", 0x4, 0x8) kernel console output (not intermixed with test programs): utex_wake+0x150/0x8e0 [ 65.861377][ T1277] ? __cfi_futex_wait+0x10/0x10 [ 65.866237][ T1277] ? __cfi_futex_wake+0x10/0x10 [ 65.871099][ T1277] ? vfs_write+0xa51/0xd00 [ 65.875529][ T1277] do_futex+0x2bf/0x430 [ 65.879700][ T1277] ? __cfi_do_futex+0x10/0x10 [ 65.884383][ T1277] ? __kasan_check_write+0x14/0x20 [ 65.889502][ T1277] ? mutex_unlock+0x8f/0x230 [ 65.894103][ T1277] __se_sys_futex+0x136/0x310 [ 65.898788][ T1277] ? __x64_sys_futex+0x100/0x100 [ 65.903736][ T1277] ? xfd_validate_state+0x70/0x150 [ 65.908864][ T1277] __x64_sys_futex+0xe5/0x100 [ 65.913551][ T1277] x64_sys_call+0x7ec/0x9a0 [ 65.918059][ T1277] do_syscall_64+0x4c/0xa0 [ 65.922481][ T1277] ? clear_bhb_loop+0x30/0x80 [ 65.927166][ T1277] ? clear_bhb_loop+0x30/0x80 [ 65.931850][ T1277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.937751][ T1277] RIP: 0033:0x7f99b319f559 [ 65.942167][ T1277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.961778][ T1277] RSP: 002b:00007f99b1bf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 65.970206][ T1277] RAX: ffffffffffffffda RBX: 00007f99b3425fa8 RCX: 00007f99b319f559 [ 65.978185][ T1277] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f99b3425fac [ 65.986179][ T1277] RBP: 00007f99b3425fa0 R08: 002b19f038cb025c R09: 0000000000000000 [ 65.994164][ T1277] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 66.002139][ T1277] R13: 00007f99b3426038 R14: 00007ffec860ade0 R15: 00007ffec860aec8 [ 66.010124][ T1277] [ 66.168979][ T1291] loop9: detected capacity change from 0 to 8192 [ 66.181714][ T387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 66.193279][ T1291] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 66.194022][ T387] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 66.203004][ T1291] FAT-fs (loop9): Filesystem has been set read-only [ 66.212441][ T387] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 66.225767][ T387] usb 5-1: Product: syz [ 66.230020][ T387] usb 5-1: Manufacturer: syz [ 66.234772][ T387] usb 5-1: SerialNumber: syz [ 66.255617][ T387] usb 5-1: config 0 descriptor?? [ 66.272645][ T1214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 66.281667][ T387] hub 5-1:0.0: bad descriptor, ignoring hub [ 66.287716][ T387] hub: probe of 5-1:0.0 failed with error -5 [ 66.360610][ T1297] FAULT_INJECTION: forcing a failure. [ 66.360610][ T1297] name failslab, interval 1, probability 0, space 0, times 0 [ 66.543167][ T316] usb 5-1: USB disconnect, device number 3 [ 66.560776][ T1297] CPU: 0 PID: 1297 Comm: syz.3.291 Not tainted syzkaller #0 [ 66.568098][ T1297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 66.578160][ T1297] Call Trace: [ 66.581440][ T1297] [ 66.584367][ T1297] __dump_stack+0x21/0x24 [ 66.588699][ T1297] dump_stack_lvl+0x110/0x170 [ 66.593381][ T1297] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.598407][ T1297] dump_stack+0x15/0x24 [ 66.602565][ T1297] should_fail_ex+0x3bf/0x510 [ 66.607252][ T1297] __should_failslab+0xac/0xf0 [ 66.612021][ T1297] should_failslab+0x9/0x20 [ 66.616525][ T1297] kmem_cache_alloc_node+0x42/0x330 [ 66.621729][ T1297] ? apply_wqattrs_prepare+0xfbf/0x1cb0 [ 66.627289][ T1297] apply_wqattrs_prepare+0xfbf/0x1cb0 [ 66.632673][ T1297] apply_workqueue_attrs+0xdb/0x180 [ 66.637911][ T1297] alloc_workqueue+0xdda/0x1320 [ 66.642778][ T1297] ? snprintf+0xe5/0x140 [ 66.647033][ T1297] ? __cfi_alloc_workqueue+0x10/0x10 [ 66.652325][ T1297] ? vscnprintf+0x70/0x80 [ 66.656655][ T1297] ? sysvec_reschedule_ipi+0x78/0x80 [ 66.661954][ T1297] hci_register_dev+0x190/0x960 [ 66.666821][ T1297] hci_uart_tty_ioctl+0x8a7/0xa70 [ 66.671853][ T1297] ? __cfi_hci_uart_tty_ioctl+0x10/0x10 [ 66.677399][ T1297] tty_ioctl+0x8ef/0xc60 [ 66.681654][ T1297] ? __cfi_tty_ioctl+0x10/0x10 [ 66.686423][ T1297] __se_sys_ioctl+0x12f/0x1b0 [ 66.691108][ T1297] __x64_sys_ioctl+0x7b/0x90 [ 66.695718][ T1297] x64_sys_call+0x58b/0x9a0 [ 66.700243][ T1297] do_syscall_64+0x4c/0xa0 [ 66.704667][ T1297] ? clear_bhb_loop+0x30/0x80 [ 66.709359][ T1297] ? clear_bhb_loop+0x30/0x80 [ 66.714052][ T1297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.719955][ T1297] RIP: 0033:0x7ff80519f559 [ 66.724371][ T1297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.743978][ T1297] RSP: 002b:00007ff806144028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.752384][ T1297] RAX: ffffffffffffffda RBX: 00007ff805425fa0 RCX: 00007ff80519f559 [ 66.760426][ T1297] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 66.768380][ T1297] RBP: 00007ff805236b20 R08: 0000000000000000 R09: 0000000000000000 [ 66.776332][ T1297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.784283][ T1297] R13: 00007ff805426038 R14: 00007ff805425fa0 R15: 00007ffc49d3e758 [ 66.792243][ T1297] [ 66.797005][ T1297] Bluetooth: Can't register HCI device [ 66.956064][ T1322] loop3: detected capacity change from 0 to 256 [ 66.978016][ T1322] exfat: Deprecated parameter 'utf8' [ 66.990899][ T1322] exfat: Unknown parameter 'zero_size_dir' [ 67.032856][ T1328] xt_hashlimit: size too large, truncated to 1048576 [ 67.109377][ T1336] loop2: detected capacity change from 0 to 128 [ 67.256395][ T1334] xt_hashlimit: size too large, truncated to 1048576 [ 67.331434][ T1349] xt_l2tp: wrong L2TP version: 0 [ 67.508669][ T1360] loop9: detected capacity change from 0 to 256 [ 67.741562][ T1375] loop9: detected capacity change from 0 to 2048 [ 67.806647][ T1375] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 68.065677][ T1401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.332'. [ 68.097649][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.106389][ T1401] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.123109][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.145004][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.183511][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 68.183527][ T28] audit: type=1400 audit(1793196376.899:381): avc: denied { search } for pid=1410 comm="syz.2.337" name="/" dev="configfs" ino=14362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.247832][ T28] audit: type=1400 audit(1793196376.959:382): avc: denied { create } for pid=1417 comm="syz.2.340" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.278934][ T28] audit: type=1400 audit(1793196376.989:383): avc: denied { read write } for pid=1417 comm="syz.2.340" name="md0" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.310502][ T28] audit: type=1400 audit(1793196376.989:384): avc: denied { open } for pid=1417 comm="syz.2.340" path="/57/md0" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.338565][ T28] audit: type=1400 audit(1793196376.989:385): avc: denied { unlink } for pid=805 comm="syz-executor" name="md0" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.365891][ T1422] loop2: detected capacity change from 0 to 512 [ 68.401519][ T1422] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.342: Invalid inode bitmap blk 4 in block_group 0 [ 68.423626][ T1422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 68.462297][ T805] EXT4-fs (loop2): unmounting filesystem. [ 68.493570][ T28] audit: type=1400 audit(1793196377.209:386): avc: denied { read append } for pid=1425 comm="syz.2.343" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.517117][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.530608][ T694] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.565508][ T726] EXT4-fs (loop9): unmounting filesystem. [ 68.575944][ T28] audit: type=1400 audit(1793196377.209:387): avc: denied { open } for pid=1425 comm="syz.2.343" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.618622][ T28] audit: type=1400 audit(1793196377.249:388): avc: denied { ioctl } for pid=1425 comm="syz.2.343" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.663309][ T28] audit: type=1400 audit(1793196377.269:389): avc: denied { write } for pid=1427 comm="syz.2.344" name="configs" dev="configfs" ino=21062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.670794][ T694] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.720525][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 68.729385][ T28] audit: type=1400 audit(1793196377.269:390): avc: denied { add_name } for pid=1427 comm="syz.2.344" name="c.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.731867][ T60] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 68.808469][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.825050][ T60] usb 7-1: config 0 descriptor?? [ 68.836707][ T60] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 68.851262][ T60] usb 7-1: Detected FT2233HP [ 69.045788][ T387] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 69.052843][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 69.061317][ T60] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 69.089945][ T1447] FAULT_INJECTION: forcing a failure. [ 69.089945][ T1447] name failslab, interval 1, probability 0, space 0, times 0 [ 69.103334][ T1447] CPU: 0 PID: 1447 Comm: syz.4.353 Not tainted syzkaller #0 [ 69.110647][ T1447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.120704][ T1447] Call Trace: [ 69.123967][ T1447] [ 69.126878][ T1447] __dump_stack+0x21/0x24 [ 69.131186][ T1447] dump_stack_lvl+0x110/0x170 [ 69.135838][ T1447] ? __cfi_dump_stack_lvl+0x8/0x8 [ 69.140837][ T1447] ? kasan_save_alloc_info+0x1f/0x30 [ 69.146104][ T1447] ? __kasan_slab_alloc+0x72/0x80 [ 69.151112][ T1447] ? slab_post_alloc_hook+0x4f/0x2d0 [ 69.156386][ T1447] ? __cfi_mas_destroy+0x10/0x10 [ 69.161313][ T1447] dump_stack+0x15/0x24 [ 69.165472][ T1447] should_fail_ex+0x3bf/0x510 [ 69.170135][ T1447] ? __anon_vma_prepare+0x51/0x410 [ 69.175232][ T1447] __should_failslab+0xac/0xf0 [ 69.179980][ T1447] should_failslab+0x9/0x20 [ 69.184465][ T1447] kmem_cache_alloc+0x3b/0x320 [ 69.189208][ T1447] ? mas_wr_end_piv+0x290/0x990 [ 69.194040][ T1447] __anon_vma_prepare+0x51/0x410 [ 69.198960][ T1447] do_fault+0x133d/0x1e30 [ 69.203271][ T1447] ? pte_marker_clear+0x220/0x220 [ 69.208272][ T1447] ? uprobe_mmap+0x181/0x1150 [ 69.212933][ T1447] ? __kasan_check_read+0x11/0x20 [ 69.217969][ T1447] handle_mm_fault+0x1363/0x26b0 [ 69.222898][ T1447] ? __cfi_handle_mm_fault+0x10/0x10 [ 69.228193][ T1447] ? mtree_load+0x539/0x740 [ 69.232685][ T1447] __get_user_pages+0x34b/0xdb0 [ 69.237521][ T1447] ? populate_vma_page_range+0x120/0x120 [ 69.243135][ T1447] ? do_mmap+0x8bd/0xdd0 [ 69.247361][ T1447] ? userfaultfd_unmap_complete+0x28f/0x310 [ 69.253240][ T1447] __mm_populate+0x2ea/0x430 [ 69.257816][ T1447] ? __cfi___mm_populate+0x10/0x10 [ 69.262919][ T1447] vm_mmap_pgoff+0x271/0x3f0 [ 69.267532][ T1447] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 69.272647][ T1447] ? __fget_files+0x2d1/0x330 [ 69.277340][ T1447] ksys_mmap_pgoff+0x161/0x1d0 [ 69.282127][ T1447] __x64_sys_mmap+0xfa/0x110 [ 69.286730][ T1447] x64_sys_call+0x8fd/0x9a0 [ 69.291250][ T1447] do_syscall_64+0x4c/0xa0 [ 69.295677][ T1447] ? clear_bhb_loop+0x30/0x80 [ 69.300343][ T1447] ? clear_bhb_loop+0x30/0x80 [ 69.305017][ T1447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.310894][ T1447] RIP: 0033:0x7ff15cb9f559 [ 69.315311][ T1447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.334898][ T1447] RSP: 002b:00007ff15da93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 69.343297][ T1447] RAX: ffffffffffffffda RBX: 00007ff15ce25fa0 RCX: 00007ff15cb9f559 [ 69.351257][ T1447] RDX: 0000000000000002 RSI: 0000000000008000 RDI: 0000200000938000 [ 69.359210][ T1447] RBP: 00007ff15cc36b20 R08: 0000000000000004 R09: 0000000041877000 [ 69.367167][ T1447] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000000 [ 69.375151][ T1447] R13: 00007ff15ce26038 R14: 00007ff15ce25fa0 R15: 00007ffc472790f8 [ 69.383113][ T1447] [ 69.491508][ T387] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.502622][ T387] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.511795][ T387] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.521256][ T387] usb 10-1: config 0 descriptor?? [ 69.603746][ T1462] loop2: detected capacity change from 0 to 8192 [ 69.630996][ T1462] loop2: p1 < > p2 p4 < p5 > [ 69.635777][ T1462] loop2: partition table partially beyond EOD, truncated [ 69.643177][ T1462] loop2: p1 start 134217728 is beyond EOD, truncated [ 69.649894][ T1462] loop2: p2 size 591360 extends beyond EOD, truncated [ 69.657788][ T1462] loop2: p5 size 591360 extends beyond EOD, truncated [ 69.690551][ T694] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.702965][ T371] udevd[371]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 69.710184][ T662] udevd[662]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 69.713431][ T312] udevd[312]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 69.735302][ T387] usbhid 10-1:0.0: can't add hid device: -71 [ 69.744323][ T387] usbhid: probe of 10-1:0.0 failed with error -71 [ 69.753073][ T387] usb 10-1: USB disconnect, device number 5 [ 69.910729][ T694] usb 5-1: Using ep0 maxpacket: 16 [ 69.921649][ T694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.928630][ T1484] FAULT_INJECTION: forcing a failure. [ 69.928630][ T1484] name failslab, interval 1, probability 0, space 0, times 0 [ 69.932846][ T694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.952692][ T1484] CPU: 0 PID: 1484 Comm: syz.2.367 Not tainted syzkaller #0 [ 69.957301][ T694] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.962230][ T1484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.962246][ T1484] Call Trace: [ 69.962251][ T1484] [ 69.962259][ T1484] __dump_stack+0x21/0x24 [ 69.962281][ T1484] dump_stack_lvl+0x110/0x170 [ 69.975679][ T694] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.985076][ T1484] ? __cfi_dump_stack_lvl+0x8/0x8 [ 69.985102][ T1484] dump_stack+0x15/0x24 [ 69.985115][ T1484] should_fail_ex+0x3bf/0x510 [ 69.985133][ T1484] __should_failslab+0xac/0xf0 [ 69.985152][ T1484] should_failslab+0x9/0x20 [ 69.985169][ T1484] __kmem_cache_alloc_node+0x3d/0x2d0 [ 69.985188][ T1484] ? shmem_initxattrs+0xcd/0x1e0 [ 69.985209][ T1484] ? shmem_initxattrs+0xcd/0x1e0 [ 69.985229][ T1484] __kmalloc+0xa4/0x1e0 [ 69.989102][ T694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.991414][ T1484] shmem_initxattrs+0xcd/0x1e0 [ 69.991445][ T1484] security_inode_init_security+0x295/0x3c0 [ 69.999709][ T694] usb 5-1: config 0 descriptor?? [ 70.000407][ T1484] ? __cfi_shmem_initxattrs+0x10/0x10 [ 70.000435][ T1484] ? __cfi_security_inode_init_security+0x10/0x10 [ 70.000458][ T1484] ? __kasan_check_write+0x14/0x20 [ 70.000475][ T1484] ? set_cached_acl+0xdd/0x180 [ 70.000496][ T1484] ? simple_acl_create+0x191/0x1c0 [ 70.000517][ T1484] shmem_mknod+0xb8/0x1d0 [ 70.106162][ T1484] shmem_rename2+0x204/0x3f0 [ 70.110744][ T1484] ? down_write+0xd/0x30 [ 70.114981][ T1484] ? __cfi_shmem_rename2+0x10/0x10 [ 70.120076][ T1484] vfs_rename+0xd58/0x10f0 [ 70.124519][ T1484] ? __cfi_vfs_rename+0x10/0x10 [ 70.129365][ T1484] ? simple_lookup+0xc3/0xf0 [ 70.133938][ T1484] ? lookup_one_qstr_excl+0x133/0x270 [ 70.139304][ T1484] do_renameat2+0x965/0xfc0 [ 70.143806][ T1484] ? __cfi_do_renameat2+0x10/0x10 [ 70.148816][ T1484] ? strncpy_from_user+0x172/0x2c0 [ 70.153918][ T1484] ? getname_flags+0x205/0x510 [ 70.158679][ T1484] __x64_sys_renameat2+0xd8/0xf0 [ 70.163607][ T1484] x64_sys_call+0x6b8/0x9a0 [ 70.168102][ T1484] do_syscall_64+0x4c/0xa0 [ 70.172499][ T1484] ? clear_bhb_loop+0x30/0x80 [ 70.177260][ T1484] ? clear_bhb_loop+0x30/0x80 [ 70.181924][ T1484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.187834][ T1484] RIP: 0033:0x7fb9ead9f559 [ 70.192246][ T1484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.212725][ T1484] RSP: 002b:00007fb9ebc5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 70.221143][ T1484] RAX: ffffffffffffffda RBX: 00007fb9eb025fa0 RCX: 00007fb9ead9f559 [ 70.229109][ T1484] RDX: ffffffffffffff9c RSI: 0000200000000240 RDI: ffffffffffffff9c [ 70.237058][ T1484] RBP: 00007fb9eae36b20 R08: 0000000000000004 R09: 0000000000000000 [ 70.245020][ T1484] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.252974][ T1484] R13: 00007fb9eb026038 R14: 00007fb9eb025fa0 R15: 00007ffcefd7ef28 [ 70.260940][ T1484] [ 70.369971][ T1493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.417947][ T694] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input4 [ 70.455978][ T1499] loop2: detected capacity change from 0 to 512 [ 70.464024][ T1499] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.374: bad orphan inode 15 [ 70.474315][ T1499] ext4_test_bit(bit=14, block=5) = 0 [ 70.479673][ T1499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.490770][ T1499] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 70.492043][ T694] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 70.505412][ T1499] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.374: bit already cleared for inode 13 [ 70.549936][ T805] EXT4-fs (loop2): unmounting filesystem. [ 70.620572][ T387] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 70.622698][ T694] usb 5-1: USB disconnect, device number 4 [ 70.700643][ T1463] ftdi_sio ttyUSB0: ftdi_set_termios FAILED to set databits/stopbits/parity [ 70.709777][ T1463] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate [ 70.717742][ T1463] ftdi_sio ttyUSB0: failed to set flow control: -32 [ 70.727979][ T1412] ftdi_sio ttyUSB0: failed to get modem status: -32 [ 70.735309][ T1412] ftdi_sio ttyUSB0: error from flowcontrol urb [ 70.758741][ T60] usb 7-1: USB disconnect, device number 2 [ 70.767645][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 70.778966][ T60] ftdi_sio 7-1:0.0: device disconnected [ 70.779222][ T1515] loop2: detected capacity change from 0 to 256 [ 70.794229][ T1515] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.820593][ T387] usb 10-1: Using ep0 maxpacket: 32 [ 70.827463][ T387] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.839983][ T1518] loop3: detected capacity change from 0 to 1024 [ 70.841477][ T387] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 70.855614][ T387] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.856809][ T1518] EXT4-fs: quotafile must be on filesystem root [ 70.870821][ T387] usb 10-1: config 0 descriptor?? [ 70.891991][ T1520] xt_hashlimit: size too large, truncated to 1048576 [ 71.124104][ T1441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.135245][ T1441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.217504][ T1535] xt_l2tp: missing protocol rule (udp|l2tpip) [ 71.237138][ T1535] loop4: detected capacity change from 0 to 512 [ 71.281742][ T1535] EXT4-fs error (device loop4): __ext4_iget:5104: inode #11: block 1: comm syz.4.387: invalid block [ 71.294418][ T1535] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.387: couldn't read orphan inode 11 (err -117) [ 71.306904][ T1535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 71.334383][ T1535] FAULT_INJECTION: forcing a failure. [ 71.334383][ T1535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.347612][ T1535] CPU: 1 PID: 1535 Comm: syz.4.387 Not tainted syzkaller #0 [ 71.354910][ T1535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.364948][ T1535] Call Trace: [ 71.368210][ T1535] [ 71.371146][ T1535] __dump_stack+0x21/0x24 [ 71.375457][ T1535] dump_stack_lvl+0x110/0x170 [ 71.380107][ T1535] ? __cfi_dump_stack_lvl+0x8/0x8 [ 71.385108][ T1535] ? vsnprintf+0x14e/0x1990 [ 71.389588][ T1535] ? memcpy+0x56/0x70 [ 71.393550][ T1535] dump_stack+0x15/0x24 [ 71.397685][ T1535] should_fail_ex+0x3bf/0x510 [ 71.402365][ T1535] should_fail+0xb/0x10 [ 71.406517][ T1535] should_fail_usercopy+0x1a/0x20 [ 71.411521][ T1535] _copy_to_user+0x1e/0x90 [ 71.415934][ T1535] bpf_verifier_vlog+0x179/0x390 [ 71.420880][ T1535] __btf_verifier_log+0xdf/0x130 [ 71.425827][ T1535] ? kasan_save_alloc_info+0x1f/0x30 [ 71.431107][ T1535] ? __kasan_kmalloc+0x95/0xb0 [ 71.435864][ T1535] ? btf_check_sec_info+0x350/0x350 [ 71.441054][ T1535] ? btf_parse_hdr+0x1ee/0x800 [ 71.445807][ T1535] ? memcpy+0x56/0x70 [ 71.449773][ T1535] btf_parse_hdr+0x433/0x800 [ 71.454348][ T1535] btf_new_fd+0x398/0x7a0 [ 71.458670][ T1535] bpf_btf_load+0x6f/0x90 [ 71.462980][ T1535] __sys_bpf+0x5d5/0x850 [ 71.467205][ T1535] ? bpf_link_show_fdinfo+0x330/0x330 [ 71.472563][ T1535] ? fpregs_restore_userregs+0x128/0x260 [ 71.478183][ T1535] __x64_sys_bpf+0x7c/0x90 [ 71.482580][ T1535] x64_sys_call+0x488/0x9a0 [ 71.487071][ T1535] do_syscall_64+0x4c/0xa0 [ 71.491466][ T1535] ? clear_bhb_loop+0x30/0x80 [ 71.496128][ T1535] ? clear_bhb_loop+0x30/0x80 [ 71.500801][ T1535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.506681][ T1535] RIP: 0033:0x7ff15cb9f559 [ 71.511080][ T1535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.530667][ T1535] RSP: 002b:00007ff15da93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.539068][ T1535] RAX: ffffffffffffffda RBX: 00007ff15ce25fa0 RCX: 00007ff15cb9f559 [ 71.547026][ T1535] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 71.554985][ T1535] RBP: 00007ff15cc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 71.562937][ T1535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.570891][ T1535] R13: 00007ff15ce26038 R14: 00007ff15ce25fa0 R15: 00007ffc472790f8 [ 71.578846][ T1535] [ 71.678749][ T1064] EXT4-fs (loop4): unmounting filesystem. [ 71.786442][ T1543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.803696][ T1543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.834990][ T1554] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 71.838844][ T1559] tipc: Started in network mode [ 71.913050][ T1554] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.924399][ T1559] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 71.933569][ T1559] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 71.942253][ T1559] tipc: Enabled bearer , priority 10 [ 71.985221][ T932] EXT4-fs (loop6): unmounting filesystem. [ 72.135314][ T1579] set_capacity_and_notify: 2 callbacks suppressed [ 72.135330][ T1579] loop6: detected capacity change from 0 to 40427 [ 72.141893][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.158051][ T1579] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 72.164921][ T1579] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 72.174012][ T1579] F2FS-fs (loop6): invalid crc value [ 72.214842][ T1579] F2FS-fs (loop6): Found nat_bits in checkpoint [ 72.688031][ T1579] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 73.081236][ T1579] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 73.138625][ T24] usb 10-1: USB disconnect, device number 6 [ 73.146428][ T1607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.415'. [ 73.197506][ T1611] loop9: detected capacity change from 0 to 1024 [ 73.249484][ T1611] EXT4-fs: Ignoring removed oldalloc option [ 73.273998][ T307] tipc: Node number set to 1 [ 73.283921][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 73.283935][ T28] audit: type=1400 audit(1793196381.999:409): avc: denied { read } for pid=1612 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.291468][ T1619] device-mapper: table: 252:0: zero: unknown target type [ 73.319499][ T1611] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 73.343359][ T1619] device-mapper: ioctl: error adding target to table [ 73.350325][ T1611] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.379719][ T1627] xt_l2tp: missing protocol rule (udp|l2tpip) [ 73.380634][ T726] EXT4-fs (loop9): unmounting filesystem. [ 73.390906][ T1627] loop2: detected capacity change from 0 to 512 [ 73.421536][ T1627] EXT4-fs error (device loop2): __ext4_iget:5104: inode #11: block 1: comm syz.2.422: invalid block [ 73.464418][ T1637] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 73.484381][ T1627] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.422: couldn't read orphan inode 11 (err -117) [ 73.581127][ T1627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 73.619649][ T1627] FAULT_INJECTION: forcing a failure. [ 73.619649][ T1627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.799890][ T1633] loop6: detected capacity change from 0 to 131072 [ 73.808550][ T1641] loop9: detected capacity change from 0 to 256 [ 73.820540][ T1633] F2FS-fs (loop6): invalid crc value [ 74.014694][ T1633] F2FS-fs (loop6): Found nat_bits in checkpoint [ 74.106365][ T1633] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 74.263366][ T1627] CPU: 1 PID: 1627 Comm: syz.2.422 Not tainted syzkaller #0 [ 74.270701][ T1627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 74.280753][ T1627] Call Trace: [ 74.284032][ T1627] [ 74.286951][ T1627] __dump_stack+0x21/0x24 [ 74.291279][ T1627] dump_stack_lvl+0x110/0x170 [ 74.295951][ T1627] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.300970][ T1627] ? vsnprintf+0x14e/0x1990 [ 74.305464][ T1627] ? memcpy+0x56/0x70 [ 74.309440][ T1627] dump_stack+0x15/0x24 [ 74.313587][ T1627] should_fail_ex+0x3bf/0x510 [ 74.318260][ T1627] should_fail+0xb/0x10 [ 74.322407][ T1627] should_fail_usercopy+0x1a/0x20 [ 74.327430][ T1627] _copy_to_user+0x1e/0x90 [ 74.331841][ T1627] bpf_verifier_vlog+0x179/0x390 [ 74.336778][ T1627] __btf_verifier_log+0xdf/0x130 [ 74.341720][ T1627] ? kasan_save_alloc_info+0x1f/0x30 [ 74.347002][ T1627] ? __kasan_kmalloc+0x95/0xb0 [ 74.351765][ T1627] ? btf_check_sec_info+0x350/0x350 [ 74.356986][ T1627] ? btf_parse_hdr+0x1ee/0x800 [ 74.361746][ T1627] ? memcpy+0x56/0x70 [ 74.365729][ T1627] btf_parse_hdr+0x498/0x800 [ 74.370321][ T1627] btf_new_fd+0x398/0x7a0 [ 74.374651][ T1627] bpf_btf_load+0x6f/0x90 [ 74.378979][ T1627] __sys_bpf+0x5d5/0x850 [ 74.383213][ T1627] ? bpf_link_show_fdinfo+0x330/0x330 [ 74.388581][ T1627] ? fpregs_restore_userregs+0x128/0x260 [ 74.394209][ T1627] __x64_sys_bpf+0x7c/0x90 [ 74.398625][ T1627] x64_sys_call+0x488/0x9a0 [ 74.403123][ T1627] do_syscall_64+0x4c/0xa0 [ 74.407529][ T1627] ? clear_bhb_loop+0x30/0x80 [ 74.412202][ T1627] ? clear_bhb_loop+0x30/0x80 [ 74.416880][ T1627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.422778][ T1627] RIP: 0033:0x7fb9ead9f559 [ 74.427187][ T1627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.446791][ T1627] RSP: 002b:00007fb9ebc5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.455207][ T1627] RAX: ffffffffffffffda RBX: 00007fb9eb025fa0 RCX: 00007fb9ead9f559 [ 74.463191][ T1627] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 74.471158][ T1627] RBP: 00007fb9eae36b20 R08: 0000000000000000 R09: 0000000000000000 [ 74.479123][ T1627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.487089][ T1627] R13: 00007fb9eb026038 R14: 00007fb9eb025fa0 R15: 00007ffcefd7ef28 [ 74.495061][ T1627] [ 74.606398][ T1651] netlink: 64 bytes leftover after parsing attributes in process `syz.9.428'. [ 74.616487][ T28] audit: type=1400 audit(1793196383.329:410): avc: denied { connect } for pid=1648 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.695602][ T1660] loop4: detected capacity change from 0 to 256 [ 74.711157][ T805] EXT4-fs (loop2): unmounting filesystem. [ 74.718879][ T1660] exfat: Deprecated parameter 'utf8' [ 74.741573][ T1660] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 74.765213][ T28] audit: type=1400 audit(1793196383.479:411): avc: denied { create } for pid=1664 comm="syz.2.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.814798][ T28] audit: type=1400 audit(1793196383.499:412): avc: denied { write } for pid=1659 comm="syz.4.433" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.856856][ T1670] loop9: detected capacity change from 0 to 512 [ 74.863801][ T1660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.871814][ T1663] device-mapper: table: 252:1: integrity: unknown target type [ 74.879948][ T1663] device-mapper: ioctl: error adding target to table [ 74.880608][ T1660] overlayfs: missing 'lowerdir' [ 74.891588][ T28] audit: type=1400 audit(1793196383.499:413): avc: denied { add_name } for pid=1659 comm="syz.4.433" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.928151][ T28] audit: type=1400 audit(1793196383.499:414): avc: denied { associate } for pid=1659 comm="syz.4.433" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.965896][ T28] audit: type=1400 audit(1793196383.519:415): avc: denied { mounton } for pid=1659 comm="syz.4.433" path="/34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=1048790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.012771][ T1670] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 75.021750][ T1670] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.541032][ T1693] loop4: detected capacity change from 0 to 131072 [ 76.870774][ T1693] F2FS-fs (loop4): invalid crc value [ 76.876877][ T726] EXT4-fs (loop9): unmounting filesystem. [ 76.897267][ T1693] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.912787][ T1704] ip_tables: iptables: counters copy to user failed while replacing table [ 76.941069][ T1693] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 77.012095][ T1710] device-mapper: table: 252:2: integrity: unknown target type [ 77.019903][ T1710] device-mapper: ioctl: error adding target to table [ 77.439098][ T1747] loop4: detected capacity change from 0 to 512 [ 77.449401][ T1749] netlink: 16 bytes leftover after parsing attributes in process `syz.6.464'. [ 77.477262][ T1749] bridge_slave_0: default FDB implementation only supports local addresses [ 77.503748][ T1747] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 77.513007][ T1747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 77.527966][ T1747] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.540194][ T1747] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #13: comm syz.4.463: iget: bad i_size value: 12154761577498 [ 77.570566][ T1747] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.463: couldn't read orphan inode 13 (err -117) [ 77.592805][ T1747] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.621766][ T1747] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.463: dx entry: limit 65535 != root limit 120 [ 77.629420][ T1740] loop3: detected capacity change from 0 to 131072 [ 77.641689][ T1747] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.463: Corrupt directory, running e2fsck is recommended [ 77.654971][ T1740] F2FS-fs (loop3): invalid crc value [ 77.671247][ T1740] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.703352][ T1064] EXT4-fs (loop4): unmounting filesystem. [ 77.709175][ T1740] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 77.780488][ T28] audit: type=1400 audit(1793196386.489:416): avc: denied { ioctl } for pid=1763 comm="syz.4.468" path="socket:[25696]" dev="sockfs" ino=25696 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.790547][ T60] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 78.020538][ T60] usb 10-1: Using ep0 maxpacket: 32 [ 78.027839][ T60] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 78.032112][ T1776] loop2: detected capacity change from 0 to 256 [ 78.049661][ T60] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 78.143931][ T1776] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 78.182192][ T60] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 78.274526][ T60] usb 10-1: Product: syz [ 78.284006][ T60] usb 10-1: Manufacturer: syz [ 78.291927][ T28] audit: type=1400 audit(1793196387.009:417): avc: denied { read write open } for pid=1775 comm="syz.2.475" path="/101/bus/file1" dev="loop2" ino=1048791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.321519][ T60] usb 10-1: SerialNumber: syz [ 78.339721][ T60] usb 10-1: config 0 descriptor?? [ 78.353009][ T1727] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 78.373159][ T60] hub 10-1:0.0: bad descriptor, ignoring hub [ 78.386418][ T60] hub: probe of 10-1:0.0 failed with error -5 [ 78.573042][ T1792] loop2: detected capacity change from 0 to 8192 [ 78.780625][ T60] usb 10-1: USB disconnect, device number 7 [ 79.210558][ T60] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 79.284277][ T1812] FAULT_INJECTION: forcing a failure. [ 79.284277][ T1812] name failslab, interval 1, probability 0, space 0, times 0 [ 79.296973][ T1812] CPU: 0 PID: 1812 Comm: syz.6.488 Not tainted syzkaller #0 [ 79.304266][ T1812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.314317][ T1812] Call Trace: [ 79.317591][ T1812] [ 79.320514][ T1812] __dump_stack+0x21/0x24 [ 79.324841][ T1812] dump_stack_lvl+0x110/0x170 [ 79.329508][ T1812] ? __cfi_dump_stack_lvl+0x8/0x8 [ 79.334526][ T1812] dump_stack+0x15/0x24 [ 79.338675][ T1812] should_fail_ex+0x3bf/0x510 [ 79.343339][ T1812] __should_failslab+0xac/0xf0 [ 79.348098][ T1812] should_failslab+0x9/0x20 [ 79.352588][ T1812] __kmem_cache_alloc_node+0x3d/0x2d0 [ 79.357943][ T1812] ? neigh_hash_alloc+0xb3/0x2b0 [ 79.362858][ T1812] ? neigh_hash_alloc+0xb3/0x2b0 [ 79.367776][ T1812] __kmalloc+0xa4/0x1e0 [ 79.371926][ T1812] neigh_hash_alloc+0xb3/0x2b0 [ 79.376677][ T1812] ___neigh_create+0xea0/0x1db0 [ 79.381506][ T1812] ? __cfi_arp_hash+0x10/0x10 [ 79.386191][ T1812] ? neigh_lookup+0x342/0x400 [ 79.390889][ T1812] ? __cfi_arp_key_eq+0x10/0x10 [ 79.395730][ T1812] __neigh_create+0x31/0x40 [ 79.400219][ T1812] arp_req_set+0x3ed/0x7d0 [ 79.404645][ T1812] ? arp_req_delete+0x440/0x440 [ 79.409483][ T1812] ? __kasan_check_write+0x14/0x20 [ 79.414579][ T1812] ? mutex_lock+0x93/0x1b0 [ 79.418986][ T1812] ? __cfi_mutex_lock+0x10/0x10 [ 79.423818][ T1812] ? full_name_hash+0x9d/0xf0 [ 79.428477][ T1812] arp_ioctl+0x3b7/0x500 [ 79.431608][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 79.432701][ T1812] ? __cfi_arp_ioctl+0x10/0x10 [ 79.445296][ T60] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 79.448373][ T1812] ? __asan_set_shadow_00+0xe/0x10 [ 79.458975][ T60] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 79.462581][ T1812] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 79.462619][ T1812] inet_ioctl+0x3ab/0x490 [ 79.462636][ T1812] ? __cfi_inet_ioctl+0x10/0x10 [ 79.462651][ T1812] ? futex_wake+0x5fa/0x8e0 [ 79.489308][ T1812] ? ioctl_has_perm+0x3a6/0x4f0 [ 79.494156][ T1812] sock_do_ioctl+0x114/0x330 [ 79.498732][ T1812] ? sock_show_fdinfo+0xb0/0xb0 [ 79.503565][ T1812] ? selinux_file_ioctl+0x3ad/0x4c0 [ 79.508747][ T1812] ? __cfi_do_futex+0x10/0x10 [ 79.513404][ T1812] sock_ioctl+0x475/0x700 [ 79.517717][ T1812] ? __cfi_sock_ioctl+0x10/0x10 [ 79.522550][ T1812] ? __fget_files+0x2d1/0x330 [ 79.527218][ T1812] ? security_file_ioctl+0x95/0xc0 [ 79.532310][ T1812] ? __cfi_sock_ioctl+0x10/0x10 [ 79.537141][ T1812] __se_sys_ioctl+0x12f/0x1b0 [ 79.541806][ T1812] __x64_sys_ioctl+0x7b/0x90 [ 79.546378][ T1812] x64_sys_call+0x58b/0x9a0 [ 79.550862][ T1812] do_syscall_64+0x4c/0xa0 [ 79.555535][ T1812] ? clear_bhb_loop+0x30/0x80 [ 79.560209][ T1812] ? clear_bhb_loop+0x30/0x80 [ 79.564869][ T1812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.570744][ T1812] RIP: 0033:0x7f99b319f559 [ 79.575141][ T1812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.594732][ T1812] RSP: 002b:00007f99b1bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.603127][ T1812] RAX: ffffffffffffffda RBX: 00007f99b3425fa0 RCX: 00007f99b319f559 [ 79.611081][ T1812] RDX: 00002000000011c0 RSI: 0000000000008955 RDI: 0000000000000003 [ 79.619049][ T1812] RBP: 00007f99b3236b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.627048][ T1812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.635014][ T1812] R13: 00007f99b3426038 R14: 00007f99b3425fa0 R15: 00007ffec860aec8 [ 79.642982][ T1812] [ 79.668203][ T60] usb 10-1: Product: syz [ 79.672551][ T60] usb 10-1: Manufacturer: syz [ 79.677393][ T60] usb 10-1: SerialNumber: syz [ 79.701889][ T60] usb 10-1: config 0 descriptor?? [ 79.712390][ T1727] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 79.720046][ T60] hub 10-1:0.0: bad descriptor, ignoring hub [ 79.729850][ T60] hub: probe of 10-1:0.0 failed with error -5 [ 79.738484][ T1820] FAULT_INJECTION: forcing a failure. [ 79.738484][ T1820] name failslab, interval 1, probability 0, space 0, times 0 [ 79.759059][ T28] audit: type=1400 audit(1793196388.469:418): avc: denied { connect } for pid=1815 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.778849][ T1820] CPU: 0 PID: 1820 Comm: syz.6.492 Not tainted syzkaller #0 [ 79.786159][ T1820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.796223][ T1820] Call Trace: [ 79.799508][ T1820] [ 79.802435][ T1820] __dump_stack+0x21/0x24 [ 79.806766][ T1820] dump_stack_lvl+0x110/0x170 [ 79.811452][ T1820] ? __cfi_dump_stack_lvl+0x8/0x8 [ 79.816478][ T1820] ? __kasan_check_write+0x14/0x20 [ 79.821591][ T1820] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 79.827054][ T1820] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 79.832949][ T1820] dump_stack+0x15/0x24 [ 79.837107][ T1820] should_fail_ex+0x3bf/0x510 [ 79.841794][ T1820] __should_failslab+0xac/0xf0 [ 79.846567][ T1820] should_failslab+0x9/0x20 [ 79.851075][ T1820] slab_pre_alloc_hook+0x30/0x1d0 [ 79.856130][ T1820] ? __sock_create+0x39e/0x7c0 [ 79.860906][ T1820] ? __sys_socket+0xcd/0x1a0 [ 79.865504][ T1820] ? __x64_sys_socket+0x7a/0x90 [ 79.870363][ T1820] kmem_cache_alloc_lru+0x49/0x280 [ 79.875489][ T1820] ? __d_alloc+0x34/0x6d0 [ 79.879830][ T1820] __d_alloc+0x34/0x6d0 [ 79.883995][ T1820] d_alloc_pseudo+0x1d/0x70 [ 79.888508][ T1820] alloc_file_pseudo+0xe0/0x200 [ 79.893365][ T1820] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 79.898834][ T1820] ? _raw_spin_unlock+0x4c/0x70 [ 79.903691][ T1820] ? alloc_fd+0x4c1/0x570 [ 79.908035][ T1820] sock_alloc_file+0xba/0x270 [ 79.912725][ T1820] __sys_socket+0x138/0x1a0 [ 79.917242][ T1820] __x64_sys_socket+0x7a/0x90 [ 79.921937][ T1820] x64_sys_call+0x449/0x9a0 [ 79.926453][ T1820] do_syscall_64+0x4c/0xa0 [ 79.930875][ T1820] ? clear_bhb_loop+0x30/0x80 [ 79.935561][ T1820] ? clear_bhb_loop+0x30/0x80 [ 79.940256][ T1820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.946160][ T1820] RIP: 0033:0x7f99b319f559 [ 79.950588][ T1820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.970213][ T1820] RSP: 002b:00007f99b1bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 79.978636][ T1820] RAX: ffffffffffffffda RBX: 00007f99b3425fa0 RCX: 00007f99b319f559 [ 79.986619][ T1820] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 79.994599][ T1820] RBP: 00007f99b3236b20 R08: 0000000000000000 R09: 0000000000000000 [ 80.002580][ T1820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.010557][ T1820] R13: 00007f99b3426038 R14: 00007f99b3425fa0 R15: 00007ffec860aec8 [ 80.018534][ T1820] [ 80.048170][ T1827] netlink: 'syz.6.494': attribute type 7 has an invalid length. [ 80.056201][ T1827] netlink: 'syz.6.494': attribute type 5 has an invalid length. [ 80.065216][ T60] usb 10-1: USB disconnect, device number 8 [ 80.072110][ T1827] netlink: 17 bytes leftover after parsing attributes in process `syz.6.494'. [ 80.097647][ T1834] netlink: 'syz.6.497': attribute type 4 has an invalid length. [ 80.125695][ T28] audit: type=1400 audit(1793196388.829:419): avc: denied { bind } for pid=1835 comm="syz.6.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.194615][ T28] audit: type=1400 audit(1793196388.829:420): avc: denied { name_bind } for pid=1835 comm="syz.6.498" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 80.250717][ T28] audit: type=1400 audit(1793196388.829:421): avc: denied { node_bind } for pid=1835 comm="syz.6.498" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 80.302356][ T1841] loop6: detected capacity change from 0 to 16 [ 80.330896][ T1841] erofs: (device loop6): mounted with root inode @ nid 36. [ 80.351038][ T1841] process 'syz.6.499' launched './file1' with NULL argv: empty string added [ 80.370356][ T28] audit: type=1400 audit(1793196389.079:422): avc: denied { execute_no_trans } for pid=1840 comm="syz.6.499" path="/70/file1/file1" dev="loop6" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.394626][ T1841] erofs: (device loop6): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 80.406992][ T1841] erofs: (device loop6): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 80.620538][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 80.936895][ T28] audit: type=1400 audit(1793196389.649:423): avc: denied { read } for pid=1845 comm="syz.9.504" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.957553][ T1851] loop2: detected capacity change from 0 to 131072 [ 80.967411][ T1863] loop4: detected capacity change from 0 to 256 [ 80.968477][ T28] audit: type=1400 audit(1793196389.679:424): avc: denied { open } for pid=1845 comm="syz.9.504" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.978082][ T1851] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 80.999209][ T1863] exfat: Deprecated parameter 'namecase' [ 81.005335][ T1851] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 81.006061][ T1851] F2FS-fs (loop2): invalid crc value [ 81.016312][ T1863] exfat: Deprecated parameter 'utf8' [ 81.037315][ T1851] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.038786][ T1863] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 81.066240][ T28] audit: type=1400 audit(1793196389.779:425): avc: denied { ioctl } for pid=1845 comm="syz.9.504" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.101397][ T1851] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 81.108596][ T1851] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 81.292978][ T1878] loop4: detected capacity change from 0 to 16 [ 81.300775][ T1878] erofs: (device loop4): mounted with root inode @ nid 36. [ 81.310124][ T1878] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 81.320605][ T1878] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 81.615443][ T28] audit: type=1400 audit(1793196390.329:426): avc: denied { setopt } for pid=1883 comm="syz.6.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.664223][ T1898] FAULT_INJECTION: forcing a failure. [ 81.664223][ T1898] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.679831][ T1898] CPU: 1 PID: 1898 Comm: syz.9.523 Not tainted syzkaller #0 [ 81.687147][ T1898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.688785][ T1904] overlayfs: failed to resolve 'upper': -2 [ 81.697205][ T1898] Call Trace: [ 81.697215][ T1898] [ 81.697223][ T1898] __dump_stack+0x21/0x24 [ 81.697249][ T1898] dump_stack_lvl+0x110/0x170 [ 81.697264][ T1898] ? __cfi_dump_stack_lvl+0x8/0x8 [ 81.723250][ T1898] ? __get_user_pages+0x34b/0xdb0 [ 81.728266][ T1898] ? internal_get_user_pages_fast+0x45e/0x800 [ 81.734324][ T1898] ? get_user_pages_fast+0x6a/0x90 [ 81.739444][ T1898] ? get_futex_key+0x1ab/0xb10 [ 81.744224][ T1898] ? do_futex+0x1de/0x430 [ 81.748546][ T1898] ? __se_sys_futex+0x136/0x310 [ 81.753377][ T1898] ? __x64_sys_futex+0xe5/0x100 [ 81.758211][ T1898] dump_stack+0x15/0x24 [ 81.762352][ T1898] should_fail_ex+0x3bf/0x510 [ 81.767021][ T1898] should_fail_alloc_page+0x61/0x90 [ 81.772221][ T1898] prepare_alloc_pages+0x131/0x570 [ 81.777332][ T1898] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 81.782541][ T1898] __alloc_pages+0x15b/0x610 [ 81.787121][ T1898] ? __cfi___alloc_pages+0x10/0x10 [ 81.792218][ T1898] ? __cfi___anon_vma_interval_tree_augment_rotate+0x10/0x10 [ 81.799576][ T1898] ? up_write+0x7b/0x290 [ 81.803810][ T1898] ? __anon_vma_prepare+0x38b/0x410 [ 81.808993][ T1898] __folio_alloc+0x12/0x40 [ 81.813398][ T1898] wp_page_copy+0x258/0x1490 [ 81.817972][ T1898] ? 0xffffffffa00041c0 [ 81.822107][ T1898] ? __kernel_text_address+0xd/0x30 [ 81.827319][ T1898] ? unwind_get_return_address+0x4d/0x90 [ 81.832940][ T1898] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 81.839082][ T1898] ? fault_dirty_shared_page+0x310/0x310 [ 81.844699][ T1898] ? vm_normal_page+0x1eb/0x200 [ 81.849562][ T1898] do_wp_page+0x9b5/0xf70 [ 81.853881][ T1898] handle_mm_fault+0x114f/0x26b0 [ 81.858828][ T1898] ? __cfi_handle_mm_fault+0x10/0x10 [ 81.864104][ T1898] __get_user_pages+0x34b/0xdb0 [ 81.868944][ T1898] ? populate_vma_page_range+0x120/0x120 [ 81.874575][ T1898] get_user_pages_unlocked+0x236/0x700 [ 81.880023][ T1898] ? __cfi_get_user_pages_unlocked+0x10/0x10 [ 81.886016][ T1898] ? kasan_set_track+0x4b/0x70 [ 81.890776][ T1898] internal_get_user_pages_fast+0x45e/0x800 [ 81.896678][ T1898] ? get_user_pages_fast_only+0x50/0x50 [ 81.902226][ T1898] get_user_pages_fast+0x6a/0x90 [ 81.907153][ T1898] get_futex_key+0x1ab/0xb10 [ 81.911742][ T1898] ? __cfi_get_futex_key+0x10/0x10 [ 81.916858][ T1898] ? __kasan_kmalloc+0x95/0xb0 [ 81.921616][ T1898] ? futex_setup_timer+0xb0/0xc0 [ 81.926566][ T1898] futex_lock_pi+0x1d6/0x970 [ 81.931173][ T1898] ? __cfi_futex_lock_pi+0x10/0x10 [ 81.936280][ T1898] ? futex_wake+0x5fa/0x8e0 [ 81.940780][ T1898] ? __cfi_futex_wake+0x10/0x10 [ 81.945627][ T1898] ? vfs_write+0xa51/0xd00 [ 81.950032][ T1898] do_futex+0x1de/0x430 [ 81.954182][ T1898] ? __cfi_do_futex+0x10/0x10 [ 81.958854][ T1898] ? __kasan_check_write+0x14/0x20 [ 81.963968][ T1898] ? mutex_unlock+0x8f/0x230 [ 81.968550][ T1898] __se_sys_futex+0x136/0x310 [ 81.973223][ T1898] ? __x64_sys_futex+0x100/0x100 [ 81.978171][ T1898] ? xfd_validate_state+0x70/0x150 [ 81.983278][ T1898] ? __kasan_check_write+0x14/0x20 [ 81.988381][ T1898] __x64_sys_futex+0xe5/0x100 [ 81.993052][ T1898] x64_sys_call+0x7ec/0x9a0 [ 81.997540][ T1898] do_syscall_64+0x4c/0xa0 [ 82.001937][ T1898] ? clear_bhb_loop+0x30/0x80 [ 82.006594][ T1898] ? clear_bhb_loop+0x30/0x80 [ 82.011252][ T1898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.017157][ T1898] RIP: 0033:0x7f00a139f559 [ 82.021561][ T1898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.041146][ T1898] RSP: 002b:00007f00a2341028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.049546][ T1898] RAX: ffffffffffffffda RBX: 00007f00a1625fa0 RCX: 00007f00a139f559 [ 82.057500][ T1898] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000000 [ 82.065464][ T1898] RBP: 00007f00a1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.073444][ T1898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.081427][ T1898] R13: 00007f00a1626038 R14: 00007f00a1625fa0 R15: 00007ffdf8f54928 [ 82.089412][ T1898] [ 82.184035][ T1910] FAULT_INJECTION: forcing a failure. [ 82.184035][ T1910] name failslab, interval 1, probability 0, space 0, times 0 [ 82.199165][ T1910] CPU: 0 PID: 1910 Comm: syz.9.528 Not tainted syzkaller #0 [ 82.206489][ T1910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.216533][ T1910] Call Trace: [ 82.219796][ T1910] [ 82.222707][ T1910] __dump_stack+0x21/0x24 [ 82.227024][ T1910] dump_stack_lvl+0x110/0x170 [ 82.231697][ T1910] ? __cfi_dump_stack_lvl+0x8/0x8 [ 82.236708][ T1910] dump_stack+0x15/0x24 [ 82.240872][ T1910] should_fail_ex+0x3bf/0x510 [ 82.245548][ T1910] __should_failslab+0xac/0xf0 [ 82.250296][ T1910] should_failslab+0x9/0x20 [ 82.254789][ T1910] __kmem_cache_alloc_node+0x3d/0x2d0 [ 82.260165][ T1910] ? ovl_alloc_entry+0x24/0x80 [ 82.264922][ T1910] ? ovl_alloc_entry+0x24/0x80 [ 82.269679][ T1910] __kmalloc+0xa4/0x1e0 [ 82.270518][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.273818][ T1910] ovl_alloc_entry+0x24/0x80 [ 82.285855][ T1910] ovl_lookup+0x1212/0x18d0 [ 82.290349][ T1910] ? ovl_lookup+0x10d1/0x18d0 [ 82.295020][ T1910] ? __cfi_ovl_lookup+0x10/0x10 [ 82.299858][ T1910] ? __kasan_check_write+0x14/0x20 [ 82.304970][ T1910] ? _raw_spin_lock+0x94/0xf0 [ 82.309627][ T1910] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.314806][ T1910] ? __d_alloc+0x4d5/0x6d0 [ 82.319222][ T1910] ? d_alloc+0x1f4/0x260 [ 82.323591][ T1910] lookup_one_qstr_excl+0x125/0x270 [ 82.328787][ T1910] filename_create+0x23d/0x440 [ 82.333540][ T1910] ? kern_path_create+0x1b0/0x1b0 [ 82.338556][ T1910] do_mkdirat+0x5c/0x4d0 [ 82.342780][ T1910] ? getname_flags+0x205/0x510 [ 82.347529][ T1910] __x64_sys_mkdirat+0x89/0xa0 [ 82.352288][ T1910] x64_sys_call+0x73d/0x9a0 [ 82.356772][ T1910] do_syscall_64+0x4c/0xa0 [ 82.361169][ T1910] ? clear_bhb_loop+0x30/0x80 [ 82.365829][ T1910] ? clear_bhb_loop+0x30/0x80 [ 82.370492][ T1910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.376374][ T1910] RIP: 0033:0x7f00a139f559 [ 82.380768][ T1910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.400352][ T1910] RSP: 002b:00007f00a2341028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 82.408752][ T1910] RAX: ffffffffffffffda RBX: 00007f00a1625fa0 RCX: 00007f00a139f559 [ 82.416703][ T1910] RDX: 00000000000001ff RSI: 0000200000000400 RDI: ffffffffffffff9c [ 82.424658][ T1910] RBP: 00007f00a1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.432614][ T1910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.440586][ T1910] R13: 00007f00a1626038 R14: 00007f00a1625fa0 R15: 00007ffdf8f54928 [ 82.448547][ T1910] [ 82.554896][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 82.573252][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.574431][ T1917] FAULT_INJECTION: forcing a failure. [ 82.574431][ T1917] name fail_futex, interval 1, probability 0, space 0, times 0 [ 82.594919][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.606746][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.618242][ T1917] CPU: 0 PID: 1917 Comm: syz.2.531 Not tainted syzkaller #0 [ 82.619983][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 82.626802][ T1917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.626818][ T1917] Call Trace: [ 82.626824][ T1917] [ 82.626830][ T1917] __dump_stack+0x21/0x24 [ 82.626853][ T1917] dump_stack_lvl+0x110/0x170 [ 82.661008][ T1917] ? __cfi_dump_stack_lvl+0x8/0x8 [ 82.666027][ T1917] ? __kasan_check_read+0x11/0x20 [ 82.671041][ T1917] ? folio_memcg_lock+0x96/0x1b0 [ 82.675962][ T1917] dump_stack+0x15/0x24 [ 82.680102][ T1917] should_fail_ex+0x3bf/0x510 [ 82.684761][ T1917] should_fail+0xb/0x10 [ 82.688899][ T1917] get_futex_key+0x143/0xb10 [ 82.693489][ T1917] ? __cfi_get_futex_key+0x10/0x10 [ 82.698608][ T1917] futex_wake+0x150/0x8e0 [ 82.702928][ T1917] ? cgroup_rstat_updated+0xf0/0x360 [ 82.708204][ T1917] ? __cfi_futex_wake+0x10/0x10 [ 82.713042][ T1917] ? __this_cpu_preempt_check+0x13/0x20 [ 82.718576][ T1917] ? memcg_rstat_updated+0x56/0x110 [ 82.723761][ T1917] ? __kasan_check_read+0x11/0x20 [ 82.728771][ T1917] ? __seccomp_filter+0x499/0x1a50 [ 82.733885][ T1917] do_futex+0x2bf/0x430 [ 82.738024][ T1917] ? __cfi_do_futex+0x10/0x10 [ 82.742679][ T1917] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 82.747881][ T1917] __se_sys_futex+0x136/0x310 [ 82.752541][ T1917] ? __x64_sys_futex+0x100/0x100 [ 82.757461][ T1917] ? up_read+0x56/0x1d0 [ 82.761604][ T1917] ? __secure_computing+0xea/0x290 [ 82.766698][ T1917] __x64_sys_futex+0xe5/0x100 [ 82.771357][ T1917] x64_sys_call+0x7ec/0x9a0 [ 82.775845][ T1917] do_syscall_64+0x4c/0xa0 [ 82.780241][ T1917] ? clear_bhb_loop+0x30/0x80 [ 82.784902][ T1917] ? clear_bhb_loop+0x30/0x80 [ 82.789563][ T1917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.795439][ T1917] RIP: 0033:0x7fb9ead9f559 [ 82.799842][ T1917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.819434][ T1917] RSP: 002b:00007fb9ebc5b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.827829][ T1917] RAX: ffffffffffffffda RBX: 00007fb9eb025fa8 RCX: 00007fb9ead9f559 [ 82.835785][ T1917] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb9eb025fac [ 82.843739][ T1917] RBP: 00007fb9eb025fa0 R08: 00205f5abfa38a84 R09: 0000000000000000 [ 82.851694][ T1917] R10: 0000000000000110 R11: 0000000000000246 R12: 0000000000000000 [ 82.859648][ T1917] R13: 00007fb9eb026038 R14: 00007ffcefd7ee40 R15: 00007ffcefd7ef28 [ 82.867606][ T1917] [ 82.878256][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.890721][ T24] usb 5-1: config 0 descriptor?? [ 83.152399][ T1942] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.159465][ T1942] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.166973][ T1942] device bridge_slave_0 entered promiscuous mode [ 83.175859][ T1942] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.183338][ T1942] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.193251][ T1942] device bridge_slave_1 entered promiscuous mode [ 83.320489][ T24] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0002/input/input5 [ 83.469985][ T1952] loop6: detected capacity change from 0 to 256 [ 83.470179][ T24] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 83.500117][ T1952] FAT-fs (loop6): Directory bread(block 64) failed [ 83.521053][ T1942] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.528117][ T1942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.535435][ T1942] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.542488][ T1942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.551329][ T1952] FAT-fs (loop6): Directory bread(block 65) failed [ 83.563500][ T1952] FAT-fs (loop6): Directory bread(block 66) failed [ 83.570275][ T1952] FAT-fs (loop6): Directory bread(block 67) failed [ 83.580608][ T1952] FAT-fs (loop6): Directory bread(block 68) failed [ 83.589291][ T1952] FAT-fs (loop6): Directory bread(block 69) failed [ 83.608576][ T1952] FAT-fs (loop6): Directory bread(block 70) failed [ 83.610550][ T1957] loop3: detected capacity change from 0 to 512 [ 83.622806][ T1952] FAT-fs (loop6): Directory bread(block 71) failed [ 83.629450][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.639103][ T1957] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.652133][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.653241][ T24] usb 5-1: USB disconnect, device number 5 [ 83.660258][ T1952] FAT-fs (loop6): Directory bread(block 72) failed [ 83.669618][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.673774][ T1952] FAT-fs (loop6): Directory bread(block 73) failed [ 83.694099][ T542] device bridge_slave_1 left promiscuous mode [ 83.697871][ T1957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.701318][ T542] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.709376][ T1957] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.727818][ T542] device bridge_slave_0 left promiscuous mode [ 83.734227][ T542] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.747894][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 83.747906][ T28] audit: type=1400 audit(1793196392.459:431): avc: denied { create } for pid=1956 comm="syz.3.545" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 83.795946][ T542] device veth1_macvtap left promiscuous mode [ 83.802521][ T542] device veth0_vlan left promiscuous mode [ 83.809296][ T790] EXT4-fs (loop3): unmounting filesystem. [ 83.823816][ T1963] loop3: detected capacity change from 0 to 256 [ 83.847902][ T28] audit: type=1326 audit(1793196392.559:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz.3.547" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80519f559 code=0x7ffc0000 [ 84.189779][ T28] audit: type=1326 audit(1793196392.559:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz.3.547" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7ff80519f559 code=0x7ffc0000 [ 84.235252][ T28] audit: type=1326 audit(1793196392.559:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz.3.547" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80519f559 code=0x7ffc0000 [ 84.438457][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.447020][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.468696][ T1942] device veth0_vlan entered promiscuous mode [ 84.489595][ T1942] device veth1_macvtap entered promiscuous mode [ 84.498897][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.524279][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.534811][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.542839][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.551095][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.559307][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.567759][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.593208][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.615449][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.640957][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.654095][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.672770][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.687437][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.769140][ T28] audit: type=1400 audit(1793196393.479:435): avc: denied { mount } for pid=1942 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.963753][ T28] audit: type=1400 audit(1793196393.669:436): avc: denied { write } for pid=2005 comm="syz.4.561" name="snmp" dev="proc" ino=4026532639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.022679][ T2019] syz.1.565 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.204821][ T2039] loop2: detected capacity change from 0 to 512 [ 85.246499][ T2039] EXT4-fs: Ignoring removed bh option [ 85.270915][ T2039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.297039][ T2039] EXT4-fs (loop2): Test dummy encryption mode enabled [ 85.760522][ T28] audit: type=1400 audit(1793196394.469:437): avc: denied { append } for pid=2057 comm="syz.6.581" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 85.789944][ T2039] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 85.789944][ T2039] [ 85.808255][ T2060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 85.820424][ T2039] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 85.831090][ T2039] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.843785][ T2062] loop6: detected capacity change from 0 to 512 [ 85.881429][ T2062] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 85.891163][ T2039] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.905048][ T2062] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.583: invalid indirect mapped block 256 (level 1) [ 85.918889][ T2039] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 85.929393][ T2062] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.583: invalid indirect mapped block 2683928664 (level 1) [ 85.929410][ T2039] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.574: Corrupt directory, running e2fsck is recommended [ 85.932264][ T2039] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.967814][ T2039] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 85.967939][ T2062] EXT4-fs (loop6): 1 truncate cleaned up [ 85.977975][ T2039] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.574: Corrupt directory, running e2fsck is recommended [ 86.012303][ T2067] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.054052][ T2062] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 86.065185][ T2067] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 86.092706][ T2067] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.574: Corrupt directory, running e2fsck is recommended [ 86.604232][ T2070] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.669291][ T2078] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.690630][ T2039] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.574: path /128/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 86.721820][ T2078] overlayfs: missing 'lowerdir' [ 86.729912][ T2080] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.583: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 86.792474][ T2039] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 22: comm syz.2.574: path /128/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 86.866376][ T2039] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 8: comm syz.2.574: path /128/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 86.920114][ T932] EXT4-fs (loop6): unmounting filesystem. [ 86.944045][ T805] EXT4-fs (loop2): unmounting filesystem. [ 86.999318][ T28] audit: type=1400 audit(1793196395.709:438): avc: denied { mounton } for pid=2099 comm="syz.2.597" path="/130/file0" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.180855][ T2126] loop3: detected capacity change from 0 to 512 [ 87.189271][ T2126] EXT4-fs: Ignoring removed bh option [ 87.214408][ T2126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.223779][ T2126] EXT4-fs (loop3): Test dummy encryption mode enabled [ 87.260832][ T2126] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 87.260832][ T2126] [ 87.271648][ T2126] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 87.280707][ T2126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.312260][ T2126] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.327994][ T2126] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 87.479052][ T2126] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.606: Corrupt directory, running e2fsck is recommended [ 88.146068][ T2136] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.174859][ T2136] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 88.187700][ T2136] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.606: Corrupt directory, running e2fsck is recommended [ 88.202918][ T2126] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.218166][ T2126] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 88.228896][ T2126] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.606: Corrupt directory, running e2fsck is recommended [ 88.243209][ T2136] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.280911][ T2126] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.606: path /101/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 88.320437][ T2126] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 22: comm syz.3.606: path /101/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 88.363432][ T2126] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 8: comm syz.3.606: path /101/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 88.369660][ T2155] FAULT_INJECTION: forcing a failure. [ 88.369660][ T2155] name failslab, interval 1, probability 0, space 0, times 0 [ 88.396031][ T2155] CPU: 0 PID: 2155 Comm: syz.4.618 Not tainted syzkaller #0 [ 88.403337][ T2155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.413414][ T2155] Call Trace: [ 88.416699][ T2155] [ 88.419631][ T2155] __dump_stack+0x21/0x24 [ 88.423972][ T2155] dump_stack_lvl+0x110/0x170 [ 88.428654][ T2155] ? __cfi_dump_stack_lvl+0x8/0x8 [ 88.433705][ T2155] ? tipc_nametbl_publish+0x169/0x2d0 [ 88.439105][ T2155] ? tipc_sk_join+0x3a0/0x680 [ 88.443790][ T2155] ? tipc_setsockopt+0x6b8/0x960 [ 88.448736][ T2155] dump_stack+0x15/0x24 [ 88.452893][ T2155] should_fail_ex+0x3bf/0x510 [ 88.457583][ T2155] __should_failslab+0xac/0xf0 [ 88.462365][ T2155] should_failslab+0x9/0x20 [ 88.466874][ T2155] __kmem_cache_alloc_node+0x3d/0x2d0 [ 88.472262][ T2155] ? tipc_topsrv_queue_evt+0x148/0x310 [ 88.477732][ T2155] ? tipc_topsrv_queue_evt+0x310/0x310 [ 88.483203][ T2155] ? tipc_topsrv_queue_evt+0x148/0x310 [ 88.486172][ T2156] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.488669][ T2155] kmalloc_trace+0x29/0xb0 [ 88.495802][ T2156] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.500059][ T2155] tipc_topsrv_queue_evt+0x148/0x310 [ 88.508170][ T2156] device bridge_slave_0 entered promiscuous mode [ 88.512314][ T2155] tipc_sub_report_overlap+0x4c0/0x890 [ 88.512341][ T2155] tipc_nametbl_insert_publ+0xfeb/0x1470 [ 88.519663][ T2156] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.524091][ T2155] tipc_nametbl_publish+0x169/0x2d0 [ 88.524118][ T2155] tipc_sk_publish+0x1f7/0x440 [ 88.524140][ T2155] ? tipc_sk_withdraw+0x630/0x630 [ 88.530041][ T2156] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.536747][ T2155] ? tipc_nametbl_build_group+0x3ad/0x400 [ 88.536773][ T2155] ? tipc_group_create+0x3c5/0x590 [ 88.542618][ T2156] device bridge_slave_1 entered promiscuous mode [ 88.546686][ T2155] tipc_sk_join+0x3a0/0x680 [ 88.580273][ T2155] ? __tipc_sendstream+0x1190/0x1190 [ 88.585572][ T2155] ? __kasan_check_write+0x14/0x20 [ 88.590696][ T2155] tipc_setsockopt+0x6b8/0x960 [ 88.595469][ T2155] ? __cfi_tipc_setsockopt+0x10/0x10 [ 88.600580][ T2156] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.600757][ T2155] ? security_socket_setsockopt+0x93/0xb0 [ 88.607789][ T2156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.613478][ T2155] ? __cfi_tipc_setsockopt+0x10/0x10 [ 88.613497][ T2155] __sys_setsockopt+0x2ff/0x4e0 [ 88.620768][ T2156] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.625932][ T2155] ? __cfi___sys_setsockopt+0x10/0x10 [ 88.630783][ T2156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.637757][ T2155] ? __this_cpu_preempt_check+0x13/0x20 [ 88.655802][ T2155] ? xfd_validate_state+0x70/0x150 [ 88.660680][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.660930][ T2155] ? __kasan_check_write+0x14/0x20 [ 88.673238][ T2155] ? fpregs_restore_userregs+0x128/0x260 [ 88.678858][ T2155] __x64_sys_setsockopt+0xbf/0xd0 [ 88.683869][ T2155] x64_sys_call+0x124/0x9a0 [ 88.688361][ T2155] do_syscall_64+0x4c/0xa0 [ 88.692765][ T2155] ? clear_bhb_loop+0x30/0x80 [ 88.697422][ T2155] ? clear_bhb_loop+0x30/0x80 [ 88.702080][ T2155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.707987][ T2155] RIP: 0033:0x7ff15cb9f559 [ 88.712405][ T2155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.732013][ T2155] RSP: 002b:00007ff15da93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.740423][ T2155] RAX: ffffffffffffffda RBX: 00007ff15ce25fa0 RCX: 00007ff15cb9f559 [ 88.748376][ T2155] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 88.756335][ T2155] RBP: 00007ff15cc36b20 R08: 000000000000002e R09: 0000000000000000 [ 88.764297][ T2155] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 88.772255][ T2155] R13: 00007ff15ce26038 R14: 00007ff15ce25fa0 R15: 00007ffc472790f8 [ 88.780219][ T2155] [ 88.785574][ T790] EXT4-fs (loop3): unmounting filesystem. [ 88.791970][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.804151][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.824853][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.833179][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.840240][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.913205][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.921528][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.928560][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.949796][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.986154][ T2156] device veth0_vlan entered promiscuous mode [ 89.021012][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.043563][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.075655][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.097283][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.120309][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.145534][ T2156] device veth1_macvtap entered promiscuous mode [ 89.160631][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.184155][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.200088][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.625427][ T2216] loop6: detected capacity change from 0 to 128 [ 89.656804][ T2218] FAULT_INJECTION: forcing a failure. [ 89.656804][ T2218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.671583][ T2218] CPU: 0 PID: 2218 Comm: syz.6.640 Not tainted syzkaller #0 [ 89.678879][ T2218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 89.688940][ T2218] Call Trace: [ 89.692223][ T2218] [ 89.695157][ T2218] __dump_stack+0x21/0x24 [ 89.699500][ T2218] dump_stack_lvl+0x110/0x170 [ 89.704180][ T2218] ? __cfi_dump_stack_lvl+0x8/0x8 [ 89.709213][ T2218] dump_stack+0x15/0x24 [ 89.713373][ T2218] should_fail_ex+0x3bf/0x510 [ 89.718089][ T2218] should_fail+0xb/0x10 [ 89.722255][ T2218] should_fail_usercopy+0x1a/0x20 [ 89.727285][ T2218] _copy_from_user+0x1e/0xc0 [ 89.731879][ T2218] do_fcntl+0x225/0x1110 [ 89.736125][ T2218] ? kill_fasync+0x210/0x210 [ 89.740718][ T2218] ? __fget_files+0x2d1/0x330 [ 89.745399][ T2218] ? security_file_fcntl+0x95/0xc0 [ 89.750510][ T2218] __se_sys_fcntl+0xdf/0x1b0 [ 89.755103][ T2218] __x64_sys_fcntl+0x7b/0x90 [ 89.759700][ T2218] x64_sys_call+0x1a9/0x9a0 [ 89.764208][ T2218] do_syscall_64+0x4c/0xa0 [ 89.768626][ T2218] ? clear_bhb_loop+0x30/0x80 [ 89.773311][ T2218] ? clear_bhb_loop+0x30/0x80 [ 89.778004][ T2218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.783905][ T2218] RIP: 0033:0x7f99b319f559 [ 89.788321][ T2218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.807936][ T2218] RSP: 002b:00007f99b1bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 89.816361][ T2218] RAX: ffffffffffffffda RBX: 00007f99b3425fa0 RCX: 00007f99b319f559 [ 89.824340][ T2218] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000005 [ 89.832308][ T2218] RBP: 00007f99b3236b20 R08: 0000000000000000 R09: 0000000000000000 [ 89.840267][ T2218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.848221][ T2218] R13: 00007f99b3426038 R14: 00007f99b3425fa0 R15: 00007ffec860aec8 [ 89.856181][ T2218] [ 89.859817][ T308] device bridge_slave_1 left promiscuous mode [ 89.866079][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.901229][ T308] device bridge_slave_0 left promiscuous mode [ 89.908801][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.914156][ T2222] FAULT_INJECTION: forcing a failure. [ 89.914156][ T2222] name failslab, interval 1, probability 0, space 0, times 0 [ 89.929226][ T308] device veth1_macvtap left promiscuous mode [ 89.935335][ T2222] CPU: 0 PID: 2222 Comm: syz.3.641 Not tainted syzkaller #0 [ 89.937511][ T308] device veth0_vlan left promiscuous mode [ 89.942628][ T2222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 89.942641][ T2222] Call Trace: [ 89.942646][ T2222] [ 89.942652][ T2222] __dump_stack+0x21/0x24 [ 89.968904][ T2222] dump_stack_lvl+0x110/0x170 [ 89.973571][ T2222] ? __cfi_dump_stack_lvl+0x8/0x8 [ 89.978606][ T2222] ? stack_trace_save+0xa6/0xf0 [ 89.983447][ T2222] dump_stack+0x15/0x24 [ 89.987586][ T2222] should_fail_ex+0x3bf/0x510 [ 89.992247][ T2222] __should_failslab+0xac/0xf0 [ 89.996997][ T2222] should_failslab+0x9/0x20 [ 90.001488][ T2222] slab_pre_alloc_hook+0x30/0x1d0 [ 90.006519][ T2222] ? avc_has_perm_noaudit+0x390/0x490 [ 90.011891][ T2222] kmem_cache_alloc_lru+0x49/0x280 [ 90.017002][ T2222] ? __d_alloc+0x34/0x6d0 [ 90.021322][ T2222] __d_alloc+0x34/0x6d0 [ 90.025462][ T2222] d_alloc_parallel+0xe2/0x1280 [ 90.030294][ T2222] ? selinux_inode_permission+0x404/0x5d0 [ 90.036033][ T2222] ? __cfi_d_alloc_parallel+0x10/0x10 [ 90.041386][ T2222] ? __kasan_check_write+0x14/0x20 [ 90.046477][ T2222] ? rwsem_read_trylock+0x2af/0x640 [ 90.051675][ T2222] ? downgrade_write+0x370/0x370 [ 90.056633][ T2222] __lookup_slow+0x14f/0x410 [ 90.061212][ T2222] ? lookup_one_len+0x2e0/0x2e0 [ 90.066047][ T2222] ? down_read+0xa6/0xf0 [ 90.070300][ T2222] ? lookup_one_common+0x31d/0x460 [ 90.075394][ T2222] lookup_one_unlocked+0x184/0x2b0 [ 90.080510][ T2222] ? __cfi_lookup_one_unlocked+0x10/0x10 [ 90.086155][ T2222] ovl_lookup_single+0x129/0x970 [ 90.091109][ T2222] ? ovl_lower_positive+0x340/0x340 [ 90.096323][ T2222] ovl_lookup_layer+0x355/0x420 [ 90.101187][ T2222] ? __kasan_kmalloc+0x95/0xb0 [ 90.101463][ T28] audit: type=1400 audit(1793196398.799:439): avc: denied { connect } for pid=2230 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.105958][ T2222] ? __kmalloc+0xb4/0x1e0 [ 90.105980][ T2222] ovl_lookup+0x71a/0x18d0 [ 90.125541][ T28] audit: type=1400 audit(1793196398.799:440): avc: denied { setopt } for pid=2230 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.129714][ T2222] ? __cfi_ovl_lookup+0x10/0x10 [ 90.158260][ T2222] ? __kasan_check_write+0x14/0x20 [ 90.163363][ T2222] ? _raw_spin_lock+0x94/0xf0 [ 90.168032][ T2222] ? __cfi__raw_spin_lock+0x10/0x10 [ 90.173210][ T2222] ? __d_alloc+0x4d5/0x6d0 [ 90.177626][ T2222] ? d_alloc+0x1f4/0x260 [ 90.181855][ T2222] lookup_one_qstr_excl+0x125/0x270 [ 90.187037][ T2222] filename_create+0x23d/0x440 [ 90.191783][ T2222] ? kern_path_create+0x1b0/0x1b0 [ 90.196789][ T2222] do_mkdirat+0x5c/0x4d0 [ 90.201013][ T2222] ? getname_flags+0x205/0x510 [ 90.205755][ T2222] __x64_sys_mkdirat+0x89/0xa0 [ 90.210506][ T2222] x64_sys_call+0x73d/0x9a0 [ 90.215000][ T2222] do_syscall_64+0x4c/0xa0 [ 90.219423][ T2222] ? clear_bhb_loop+0x30/0x80 [ 90.224084][ T2222] ? clear_bhb_loop+0x30/0x80 [ 90.228750][ T2222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.234628][ T2222] RIP: 0033:0x7ff80519f559 [ 90.239034][ T2222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.258627][ T2222] RSP: 002b:00007ff806144028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 90.267050][ T2222] RAX: ffffffffffffffda RBX: 00007ff805425fa0 RCX: 00007ff80519f559 [ 90.275023][ T2222] RDX: 00000000000001ff RSI: 0000200000000400 RDI: ffffffffffffff9c [ 90.282976][ T2222] RBP: 00007ff805236b20 R08: 0000000000000000 R09: 0000000000000000 [ 90.290948][ T2222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.298908][ T2222] R13: 00007ff805426038 R14: 00007ff805425fa0 R15: 00007ffc49d3e758 [ 90.306875][ T2222] [ 90.456377][ T2243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.650'. [ 90.539323][ T2248] loop6: detected capacity change from 0 to 128 [ 90.703331][ T2254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2254 comm=syz.4.657 [ 90.721457][ T308] tipc: Disabling bearer [ 90.727058][ T308] tipc: Left network mode [ 90.742002][ T2260] FAULT_INJECTION: forcing a failure. [ 90.742002][ T2260] name failslab, interval 1, probability 0, space 0, times 0 [ 90.764134][ T28] audit: type=1400 audit(1793196399.479:441): avc: denied { watch } for pid=2261 comm="syz.4.661" path="/86/file0" dev="tmpfs" ino=485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.790812][ T2260] CPU: 0 PID: 2260 Comm: syz.1.660 Not tainted syzkaller #0 [ 90.798144][ T2260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.808210][ T2260] Call Trace: [ 90.811501][ T2260] [ 90.814441][ T2260] __dump_stack+0x21/0x24 [ 90.818780][ T2260] dump_stack_lvl+0x110/0x170 [ 90.823463][ T2260] ? __cfi_dump_stack_lvl+0x8/0x8 [ 90.828510][ T2260] ? stack_trace_save+0xa6/0xf0 [ 90.833380][ T2260] dump_stack+0x15/0x24 [ 90.837542][ T2260] should_fail_ex+0x3bf/0x510 [ 90.842239][ T2260] __should_failslab+0xac/0xf0 [ 90.847020][ T2260] should_failslab+0x9/0x20 [ 90.851539][ T2260] slab_pre_alloc_hook+0x30/0x1d0 [ 90.856588][ T2260] ? avc_has_perm_noaudit+0x390/0x490 [ 90.861978][ T2260] kmem_cache_alloc_lru+0x49/0x280 [ 90.867107][ T2260] ? __d_alloc+0x34/0x6d0 [ 90.871462][ T2260] __d_alloc+0x34/0x6d0 [ 90.875641][ T2260] d_alloc_parallel+0xe2/0x1280 [ 90.880507][ T2260] ? selinux_inode_permission+0x404/0x5d0 [ 90.886254][ T2260] ? __cfi_d_alloc_parallel+0x10/0x10 [ 90.891634][ T2260] ? __kasan_check_write+0x14/0x20 [ 90.896760][ T2260] ? rwsem_read_trylock+0x2af/0x640 [ 90.901981][ T2260] ? downgrade_write+0x370/0x370 [ 90.906938][ T2260] __lookup_slow+0x14f/0x410 [ 90.911541][ T2260] ? lookup_one_len+0x2e0/0x2e0 [ 90.916391][ T2260] ? down_read+0xa6/0xf0 [ 90.920623][ T2260] ? lookup_one_common+0x31d/0x460 [ 90.925719][ T2260] lookup_one_unlocked+0x184/0x2b0 [ 90.930817][ T2260] ? __cfi_lookup_one_unlocked+0x10/0x10 [ 90.936443][ T2260] ovl_lookup_single+0x129/0x970 [ 90.941368][ T2260] ? ovl_lower_positive+0x340/0x340 [ 90.946555][ T2260] ovl_lookup_layer+0x355/0x420 [ 90.951391][ T2260] ? __kasan_kmalloc+0x95/0xb0 [ 90.956172][ T2260] ? __kmalloc+0xb4/0x1e0 [ 90.960484][ T2260] ovl_lookup+0x71a/0x18d0 [ 90.964891][ T2260] ? __cfi_ovl_lookup+0x10/0x10 [ 90.969727][ T2260] ? __kasan_check_write+0x14/0x20 [ 90.974821][ T2260] ? _raw_spin_lock+0x94/0xf0 [ 90.979486][ T2260] ? __cfi__raw_spin_lock+0x10/0x10 [ 90.984662][ T2260] ? __d_alloc+0x4d5/0x6d0 [ 90.989065][ T2260] ? d_alloc+0x1f4/0x260 [ 90.993298][ T2260] lookup_one_qstr_excl+0x125/0x270 [ 90.998483][ T2260] filename_create+0x23d/0x440 [ 91.003236][ T2260] ? kern_path_create+0x1b0/0x1b0 [ 91.008246][ T2260] do_mkdirat+0x5c/0x4d0 [ 91.012475][ T2260] ? getname_flags+0x205/0x510 [ 91.017308][ T2260] __x64_sys_mkdirat+0x89/0xa0 [ 91.022059][ T2260] x64_sys_call+0x73d/0x9a0 [ 91.026550][ T2260] do_syscall_64+0x4c/0xa0 [ 91.030954][ T2260] ? clear_bhb_loop+0x30/0x80 [ 91.035642][ T2260] ? clear_bhb_loop+0x30/0x80 [ 91.040305][ T2260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.046181][ T2260] RIP: 0033:0x7fb37859f559 [ 91.050578][ T2260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.070166][ T2260] RSP: 002b:00007fb379494028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 91.078568][ T2260] RAX: ffffffffffffffda RBX: 00007fb378825fa0 RCX: 00007fb37859f559 [ 91.086524][ T2260] RDX: 00000000000001ff RSI: 0000200000000400 RDI: ffffffffffffff9c [ 91.094479][ T2260] RBP: 00007fb378636b20 R08: 0000000000000000 R09: 0000000000000000 [ 91.102433][ T2260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.110385][ T2260] R13: 00007fb378826038 R14: 00007fb378825fa0 R15: 00007ffe392624f8 [ 91.118344][ T2260] [ 91.279855][ T2263] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.288502][ T2263] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.297253][ T2263] device bridge_slave_0 entered promiscuous mode [ 91.319875][ T2263] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.327142][ T2263] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.370873][ T2263] device bridge_slave_1 entered promiscuous mode [ 91.463348][ T2280] loop2: detected capacity change from 0 to 40427 [ 91.499987][ T2280] F2FS-fs (loop2): invalid crc value [ 91.541193][ T2280] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.641060][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.649662][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.657841][ T2280] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 91.676525][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.684944][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.699853][ T28] audit: type=1400 audit(1793196400.409:442): avc: denied { create } for pid=2279 comm="syz.2.668" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.743078][ T2288] loop6: detected capacity change from 0 to 16 [ 91.748073][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.756302][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.765110][ T2156] syz-executor: attempt to access beyond end of device [ 91.765110][ T2156] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 91.779638][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.781742][ T2288] erofs: (device loop6): mounted with root inode @ nid 36. [ 91.810951][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.828450][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.835544][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.876534][ T2263] device veth0_vlan entered promiscuous mode [ 91.893264][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.906485][ T28] audit: type=1400 audit(1793196400.619:443): avc: denied { nlmsg_read } for pid=2300 comm="syz.6.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 91.914047][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.938302][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.939768][ T2303] loop2: detected capacity change from 0 to 512 [ 91.946185][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.952764][ T28] audit: type=1400 audit(1793196400.619:444): avc: denied { accept } for pid=2300 comm="syz.6.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 91.959829][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.980083][ T2303] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.994311][ T2303] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 92.001333][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.012213][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.013513][ T2303] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 92.031618][ T2303] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.040122][ T2303] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.673: Invalid block bitmap block 0 in block_group 0 [ 92.043863][ T2263] device veth1_macvtap entered promiscuous mode [ 92.067154][ T2303] Quota error (device loop2): write_blk: dquota write failed [ 92.070584][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.078884][ T2303] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 92.092874][ T2303] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.673: Failed to acquire dquot type 1 [ 92.107230][ T308] device bridge_slave_1 left promiscuous mode [ 92.113650][ T2303] EXT4-fs (loop2): 1 orphan inode deleted [ 92.117895][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.126639][ T419] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 92.136423][ T597] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.136702][ T419] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1 [ 92.155972][ T308] device bridge_slave_0 left promiscuous mode [ 92.156059][ T2303] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.162528][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.179326][ T308] device veth1_macvtap left promiscuous mode [ 92.185515][ T308] device veth0_vlan left promiscuous mode [ 92.254038][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.276530][ T2156] EXT4-fs (loop2): unmounting filesystem. [ 92.283480][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.328615][ T2287] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.335765][ T28] audit: type=1400 audit(1793196401.039:445): avc: denied { ioctl } for pid=2324 comm="syz.2.686" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.335847][ T2287] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.368072][ T2287] device bridge_slave_0 entered promiscuous mode [ 92.375439][ T2287] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.382352][ T597] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 92.382805][ T2287] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.398914][ T2287] device bridge_slave_1 entered promiscuous mode [ 92.403535][ T597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.417291][ T597] usb 5-1: Product: syz [ 92.430509][ T39] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 92.446939][ T597] usb 5-1: Manufacturer: syz [ 92.459724][ T597] usb 5-1: SerialNumber: syz [ 92.499654][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.507462][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.526460][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.535585][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.544148][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.551216][ T542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.559772][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.568385][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.570733][ T2345] loop7: detected capacity change from 0 to 7 [ 92.576808][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.589495][ T542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.597561][ T542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.615759][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.621879][ T39] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.628130][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.637301][ T39] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.660521][ T39] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.666611][ T2287] device veth0_vlan entered promiscuous mode [ 92.675967][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.677450][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.697468][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.706468][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.715480][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.732795][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.742649][ T2287] device veth1_macvtap entered promiscuous mode [ 92.765787][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.773467][ T597] rtl8150 5-1:1.0: couldn't reset the device [ 92.775481][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.779908][ T597] rtl8150: probe of 5-1:1.0 failed with error -5 [ 92.789007][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.798417][ T597] usb 5-1: USB disconnect, device number 6 [ 92.803954][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.999186][ T2383] loop5: detected capacity change from 0 to 256 [ 95.151668][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 95.151682][ T28] audit: type=1400 audit(1793196403.869:450): avc: denied { mounton } for pid=2394 comm="syz.4.715" path="" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 95.233127][ T308] device bridge_slave_1 left promiscuous mode [ 95.239493][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.247578][ T308] device bridge_slave_0 left promiscuous mode [ 95.253968][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.262517][ T308] device veth1_macvtap left promiscuous mode [ 95.268713][ T308] device veth0_vlan left promiscuous mode [ 95.288794][ T2401] loop4: detected capacity change from 0 to 40427 [ 95.297890][ T2401] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 95.310721][ T2401] F2FS-fs (loop4): invalid crc value [ 95.319697][ T2401] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.357935][ T2401] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 96.234634][ T407] usb 7-1: USB disconnect, device number 3 [ 96.243813][ T28] audit: type=1400 audit(1793196404.959:451): avc: denied { bind } for pid=2436 comm="syz.6.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.243831][ T2437] netlink: 28 bytes leftover after parsing attributes in process `syz.6.730'. [ 96.273290][ T28] audit: type=1400 audit(1793196404.959:452): avc: denied { setopt } for pid=2436 comm="syz.6.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.373898][ T28] audit: type=1400 audit(1793196405.089:453): avc: denied { mounton } for pid=2451 comm="syz.5.734" path="/20/file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 96.521440][ T28] audit: type=1400 audit(1793196405.239:454): avc: denied { create } for pid=2458 comm="syz.5.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 96.575137][ T28] audit: type=1400 audit(1793196405.289:455): avc: denied { getopt } for pid=2464 comm="syz.6.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.832880][ T2507] overlayfs: refusing to follow metacopy origin for (/file1) [ 96.910728][ T2516] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.911991][ T2517] FAULT_INJECTION: forcing a failure. [ 96.911991][ T2517] name fail_futex, interval 1, probability 0, space 0, times 0 [ 96.936056][ T2517] CPU: 0 PID: 2517 Comm: syz.5.761 Not tainted syzkaller #0 [ 96.943373][ T2517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.953431][ T2517] Call Trace: [ 96.956717][ T2517] [ 96.959651][ T2517] __dump_stack+0x21/0x24 [ 96.963987][ T2517] dump_stack_lvl+0x110/0x170 [ 96.968673][ T2517] ? __cfi_dump_stack_lvl+0x8/0x8 [ 96.973707][ T2517] ? kasan_set_track+0x60/0x70 [ 96.978482][ T2517] ? __kasan_slab_free+0x11/0x20 [ 96.983421][ T2517] ? kmem_cache_free+0x12d/0x300 [ 96.988364][ T2517] ? do_renameat2+0xecb/0xfc0 [ 96.993054][ T2517] ? __x64_sys_renameat2+0xd8/0xf0 [ 96.998175][ T2517] ? do_syscall_64+0x4c/0xa0 [ 97.002775][ T2517] dump_stack+0x15/0x24 [ 97.006929][ T2517] should_fail_ex+0x3bf/0x510 [ 97.011607][ T2517] should_fail+0xb/0x10 [ 97.015762][ T2517] get_futex_key+0x143/0xb10 [ 97.020364][ T2517] ? __cfi_get_futex_key+0x10/0x10 [ 97.025486][ T2517] futex_wake+0x150/0x8e0 [ 97.029822][ T2517] ? debug_smp_processor_id+0x17/0x20 [ 97.035199][ T2517] ? kasan_quarantine_put+0x34/0x190 [ 97.040497][ T2517] ? kmem_cache_free+0x12d/0x300 [ 97.045449][ T2517] ? ____kasan_slab_free+0x13d/0x180 [ 97.050745][ T2517] ? __cfi_futex_wake+0x10/0x10 [ 97.055606][ T2517] ? slab_free_freelist_hook+0xc2/0x190 [ 97.061156][ T2517] ? kmem_cache_free+0x12d/0x300 [ 97.066106][ T2517] do_futex+0x2bf/0x430 [ 97.070267][ T2517] ? __cfi_do_futex+0x10/0x10 [ 97.074945][ T2517] __se_sys_futex+0x136/0x310 [ 97.079620][ T2517] ? __x64_sys_futex+0x100/0x100 [ 97.084559][ T2517] ? strncpy_from_user+0x172/0x2c0 [ 97.089674][ T2517] __x64_sys_futex+0xe5/0x100 [ 97.094337][ T2517] x64_sys_call+0x7ec/0x9a0 [ 97.098823][ T2517] do_syscall_64+0x4c/0xa0 [ 97.103224][ T2517] ? clear_bhb_loop+0x30/0x80 [ 97.107886][ T2517] ? clear_bhb_loop+0x30/0x80 [ 97.112542][ T2517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.118441][ T2517] RIP: 0033:0x7f1aba79f559 [ 97.122837][ T2517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.142428][ T2517] RSP: 002b:00007f1abb65b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.150830][ T2517] RAX: ffffffffffffffda RBX: 00007f1abaa25fa8 RCX: 00007f1aba79f559 [ 97.158798][ T2517] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1abaa25fac [ 97.166927][ T2517] RBP: 00007f1abaa25fa0 R08: 0034a35758591a4c R09: 0000000000000000 [ 97.174880][ T2517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.182830][ T2517] R13: 00007f1abaa26038 R14: 00007ffc155ba160 R15: 00007ffc155ba248 [ 97.190786][ T2517] syz1  7   J k $ U p ,  y Hli S  yS   ʯ& (H a b#' l   @  [ 97.350549][ T19] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 97.397609][ T28] audit: type=1400 audit(1793196406.109:456): avc: denied { create } for pid=2549 comm="syz.5.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 97.541605][ T19] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.560515][ T19] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.582906][ T19] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.596455][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.606169][ T19] usb 9-1: SerialNumber: syz [ 97.611358][ T6] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 97.645157][ T28] audit: type=1400 audit(1793196406.359:457): avc: denied { accept } for pid=2565 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 97.790506][ T6] usb 7-1: Using ep0 maxpacket: 32 [ 97.796797][ T6] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 97.829155][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.842729][ T19] usb 9-1: 0:2 : does not exist [ 97.855411][ T19] usb 9-1: USB disconnect, device number 2 [ 97.861389][ T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 97.875144][ T6] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 97.886427][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.900548][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.908653][ T6] usb 7-1: config 0 descriptor?? [ 98.028998][ T2576] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.325442][ T28] audit: type=1326 audit(1793196407.039:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2584 comm="syz.4.792" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15cb9f559 code=0x7ffc0000 [ 98.350301][ T28] audit: type=1326 audit(1793196407.039:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2584 comm="syz.4.792" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15cb9f559 code=0x7ffc0000 [ 98.351354][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.387061][ T2587] loop4: detected capacity change from 0 to 8192 [ 98.392060][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 98.404497][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 98.411709][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 98.418822][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 98.425890][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 98.433042][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 98.597368][ T6] hid-led: probe of 0003:0FC5:B080.0003 failed with error -71 [ 98.609714][ T6] usb 7-1: USB disconnect, device number 4 [ 98.683543][ T2602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.741688][ T2608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.751967][ T2608] device bridge_slave_0 left promiscuous mode [ 98.758176][ T2608] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.773318][ T2608] device bridge_slave_1 left promiscuous mode [ 98.779513][ T2608] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.688328][ T2639] loop6: detected capacity change from 0 to 40427 [ 99.732145][ T2648] FAULT_INJECTION: forcing a failure. [ 99.732145][ T2648] name failslab, interval 1, probability 0, space 0, times 0 [ 99.754518][ T2648] CPU: 1 PID: 2648 Comm: syz.4.815 Not tainted syzkaller #0 [ 99.761844][ T2648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.771910][ T2648] Call Trace: [ 99.775193][ T2648] [ 99.778119][ T2648] __dump_stack+0x21/0x24 [ 99.782455][ T2648] dump_stack_lvl+0x110/0x170 [ 99.787137][ T2648] ? __cfi_dump_stack_lvl+0x8/0x8 [ 99.792169][ T2648] dump_stack+0x15/0x24 [ 99.796326][ T2648] should_fail_ex+0x3bf/0x510 [ 99.801013][ T2648] __should_failslab+0xac/0xf0 [ 99.805789][ T2648] should_failslab+0x9/0x20 [ 99.810302][ T2648] __kmem_cache_alloc_node+0x3d/0x2d0 [ 99.815689][ T2648] ? tcf_block_get_ext+0x2d1/0x12e0 [ 99.820944][ T2648] ? kasan_save_alloc_info+0x1f/0x30 [ 99.826244][ T2648] ? tcf_block_get_ext+0x2d1/0x12e0 [ 99.831469][ T2648] kmalloc_trace+0x29/0xb0 [ 99.835890][ T2648] tcf_block_get_ext+0x2d1/0x12e0 [ 99.840934][ T2648] ? mini_qdisc_pair_init+0xef/0x160 [ 99.846233][ T2648] clsact_init+0x234/0x2a0 [ 99.850668][ T2648] ? __cfi_clsact_init+0x10/0x10 [ 99.855611][ T2648] qdisc_create+0x89b/0x1180 [ 99.860212][ T2648] ? qdisc_notify+0x360/0x360 [ 99.864903][ T2648] ? dql_init+0xc5/0x1e0 [ 99.869169][ T2648] tc_modify_qdisc+0x924/0x19c0 [ 99.874036][ T2648] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 99.879335][ T2648] ? __kasan_check_write+0x14/0x20 [ 99.884456][ T2648] ? mutex_lock+0x93/0x1b0 [ 99.888882][ T2648] ? __cfi_mutex_lock+0x10/0x10 [ 99.893747][ T2648] ? ns_capable+0x8c/0xf0 [ 99.898086][ T2648] ? netlink_net_capable+0x125/0x160 [ 99.903379][ T2648] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 99.908671][ T2648] rtnetlink_rcv_msg+0xb28/0xde0 [ 99.913617][ T2648] ? 0xffffffffa00041c0 [ 99.917841][ T2648] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 99.923311][ T2648] ? __kernel_text_address+0xd/0x30 [ 99.928523][ T2648] ? avc_has_perm_noaudit+0x390/0x490 [ 99.933912][ T2648] ? memcpy+0x56/0x70 [ 99.937906][ T2648] ? avc_has_perm_noaudit+0x30a/0x490 [ 99.943296][ T2648] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 99.949025][ T2648] ? kasan_save_alloc_info+0x1f/0x30 [ 99.954320][ T2648] ? avc_has_perm+0x163/0x250 [ 99.959002][ T2648] ? __alloc_skb+0x226/0x4a0 [ 99.960992][ T2639] F2FS-fs (loop6): invalid crc value [ 99.963601][ T2648] ? netlink_sendmsg+0x635/0xbd0 [ 99.963631][ T2648] ? ____sys_sendmsg+0x5fb/0x9c0 [ 99.978745][ T2648] ? __cfi_avc_has_perm+0x10/0x10 [ 99.983782][ T2648] ? selinux_nlmsg_lookup+0x38f/0x440 [ 99.989174][ T2648] netlink_rcv_skb+0x200/0x450 [ 99.993947][ T2648] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 99.999427][ T2648] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 100.004723][ T2648] ? __netlink_lookup+0x387/0x3b0 [ 100.009762][ T2648] rtnetlink_rcv+0x1c/0x20 [ 100.014190][ T2648] netlink_unicast+0x8c1/0xa60 [ 100.015069][ T2639] F2FS-fs (loop6): Found nat_bits in checkpoint [ 100.018964][ T2648] netlink_sendmsg+0x8b9/0xbd0 [ 100.029954][ T2648] ? __cfi_netlink_sendmsg+0x10/0x10 [ 100.035250][ T2648] ? security_socket_sendmsg+0x93/0xb0 [ 100.040720][ T2648] ? __cfi_netlink_sendmsg+0x10/0x10 [ 100.046011][ T2648] ____sys_sendmsg+0x5fb/0x9c0 [ 100.050788][ T2648] ? __sys_sendmsg_sock+0x40/0x40 [ 100.055826][ T2648] ? import_iovec+0x7c/0xb0 [ 100.060338][ T2648] ___sys_sendmsg+0x2a2/0x360 [ 100.065024][ T2648] ? __sys_sendmsg+0x290/0x290 [ 100.069797][ T2648] ? security_file_alloc+0x33/0x130 [ 100.075008][ T2648] ? percpu_counter_add_batch+0x13c/0x160 [ 100.080748][ T2648] ? __fdget+0x19c/0x220 [ 100.084999][ T2648] __x64_sys_sendmsg+0x20d/0x2e0 [ 100.087379][ T2639] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 100.089941][ T2648] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 100.089964][ T2648] ? __kasan_check_write+0x14/0x20 [ 100.107957][ T2648] ? fpregs_restore_userregs+0x128/0x260 [ 100.113607][ T2648] ? switch_fpu_return+0xe/0x10 [ 100.118471][ T2648] x64_sys_call+0x171/0x9a0 [ 100.122990][ T2648] do_syscall_64+0x4c/0xa0 [ 100.127419][ T2648] ? clear_bhb_loop+0x30/0x80 [ 100.132107][ T2648] ? clear_bhb_loop+0x30/0x80 [ 100.136800][ T2648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.142703][ T2648] RIP: 0033:0x7ff15cb9f559 [ 100.147122][ T2648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.166733][ T2648] RSP: 002b:00007ff15da93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.175158][ T2648] RAX: ffffffffffffffda RBX: 00007ff15ce25fa0 RCX: 00007ff15cb9f559 [ 100.183141][ T2648] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000004 [ 100.191122][ T2648] RBP: 00007ff15cc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 100.199109][ T2648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.207089][ T2648] R13: 00007ff15ce26038 R14: 00007ff15ce25fa0 R15: 00007ffc472790f8 [ 100.215074][ T2648] [ 100.220053][ T932] syz-executor: attempt to access beyond end of device [ 100.220053][ T932] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.301478][ T2663] loop8: detected capacity change from 0 to 256 [ 100.331649][ T2663] exfat: Deprecated parameter 'utf8' [ 100.394281][ T2663] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 100.409795][ T2665] overlayfs: missing 'workdir' [ 100.484478][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 100.484502][ T28] audit: type=1400 audit(1793196409.199:467): avc: denied { setattr } for pid=2662 comm="syz.8.820" name="file0" dev="loop8" ino=1048852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.585576][ T2671] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.628060][ T2677] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.691468][ T2680] ip_tables: iptables: counters copy to user failed while replacing table [ 100.897464][ T2691] tipc: Enabling of bearer rejected, failed to enable media [ 101.563420][ T28] audit: type=1400 audit(1793196410.279:468): avc: denied { read write } for pid=2706 comm="syz.2.835" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 101.565218][ T2135] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.606060][ T28] audit: type=1400 audit(1793196410.279:469): avc: denied { open } for pid=2706 comm="syz.2.835" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 101.621376][ T2135] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.655354][ T28] audit: type=1400 audit(1793196410.319:470): avc: denied { execmem } for pid=2706 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 101.890564][ T28] audit: type=1400 audit(1793196410.599:471): avc: denied { mounton } for pid=2724 comm="syz.6.844" path="/143/proc/335/task/336/fail-nth" dev="proc" ino=43412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 102.239641][ T2731] loop6: detected capacity change from 0 to 40427 [ 102.246971][ T2135] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.254565][ T2731] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 102.262360][ T2731] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 102.293183][ T2731] F2FS-fs (loop6): Found nat_bits in checkpoint [ 102.351786][ T2731] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 102.358887][ T2731] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 102.383400][ T28] audit: type=1400 audit(1793196411.099:472): avc: denied { rename } for pid=2728 comm="syz.6.846" name="file0" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 102.431893][ T28] audit: type=1400 audit(1793196411.099:473): avc: denied { reparent } for pid=2728 comm="syz.6.846" name="file0" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 102.453834][ T2135] usb 3-1: Using ep0 maxpacket: 32 [ 102.460297][ T2135] usb 3-1: config 0 has no interfaces? [ 102.470514][ T2135] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 102.479606][ T2135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.500956][ T2135] usb 3-1: config 0 descriptor?? [ 102.579036][ T2757] trusted_key: device-mapper: crypt: Selected cipher does not support IVs [ 102.592702][ T2757] device-mapper: table: 252:3: crypt: Invalid iv_offset sector (-EINVAL) [ 102.602466][ T2757] device-mapper: ioctl: error adding target to table [ 102.710655][ T2135] usb 3-1: USB disconnect, device number 4 [ 103.198558][ T2793] loop8: detected capacity change from 0 to 4096 [ 103.256624][ T2793] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 103.297737][ T28] audit: type=1400 audit(1793196412.009:474): avc: denied { unmount } for pid=2792 comm="syz.8.867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.319483][ T2793] EXT4-fs (loop8): unmounting filesystem. [ 104.821628][ T2863] loop2: detected capacity change from 0 to 128 [ 104.880953][ T2865] netlink: 4 bytes leftover after parsing attributes in process `syz.8.890'. [ 104.900264][ T2863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.908953][ T2863] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.921556][ T2863] syz.2.889 (pid 2863) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 104.964011][ T2156] EXT4-fs (loop2): unmounting filesystem. [ 104.977245][ T2870] loop4: detected capacity change from 0 to 128 [ 105.224214][ T2882] ./dev/sda1: Can't open blockdev [ 105.281475][ T2882] overlayfs: failed to resolve './bus': -2 [ 105.488654][ T28] audit: type=1400 audit(1793196414.199:475): avc: denied { create } for pid=2894 comm="syz.6.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.513433][ T2895] loop6: detected capacity change from 0 to 512 [ 105.571381][ T2895] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 105.595204][ T2895] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.901: invalid indirect mapped block 256 (level 1) [ 105.621069][ T2895] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.901: invalid indirect mapped block 2683928664 (level 1) [ 105.671928][ T2895] EXT4-fs (loop6): 1 truncate cleaned up [ 105.677653][ T2895] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 106.307448][ T2913] loop4: detected capacity change from 0 to 512 [ 106.344717][ T932] EXT4-fs (loop6): unmounting filesystem. [ 106.388675][ T2913] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.403583][ T2913] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.434724][ T28] audit: type=1400 audit(1793196415.149:476): avc: denied { create } for pid=2912 comm="syz.4.902" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.465663][ T28] audit: type=1400 audit(1793196415.179:477): avc: denied { write open } for pid=2912 comm="syz.4.902" path="/141/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.500583][ T1064] EXT4-fs (loop4): unmounting filesystem. [ 106.545556][ T28] audit: type=1400 audit(1793196415.179:478): avc: denied { append } for pid=2912 comm="syz.4.902" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.603615][ T28] audit: type=1400 audit(1793196415.309:479): avc: denied { create } for pid=2923 comm="syz.4.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.653279][ T28] audit: type=1400 audit(1793196415.309:480): avc: denied { bind } for pid=2923 comm="syz.4.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.736724][ T28] audit: type=1400 audit(1793196415.399:481): avc: denied { write } for pid=2931 comm="syz.8.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.756968][ T28] audit: type=1400 audit(1793196415.399:482): avc: denied { nlmsg_write } for pid=2931 comm="syz.8.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.781694][ T28] audit: type=1400 audit(1793196415.399:483): avc: denied { read } for pid=2931 comm="syz.8.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.816898][ T28] audit: type=1400 audit(1793196415.529:484): avc: denied { bind } for pid=2938 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.843426][ T28] audit: type=1400 audit(1793196415.529:485): avc: denied { listen } for pid=2938 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.949994][ T2945] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 106.995509][ T2949] loop4: detected capacity change from 0 to 1024 [ 107.025734][ T2949] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802e019, mo2=0000] [ 107.035372][ T2949] System zones: 0-1, 3-12 [ 107.044300][ T2949] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #3: block 5: comm syz.4.922: lblock 5 mapped to illegal pblock 5 (length 1) [ 107.058522][ T2949] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.922: Failed to acquire dquot type 0 [ 107.070625][ T2949] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 5: comm syz.4.922: lblock 5 mapped to illegal pblock 5 (length 1) [ 107.084935][ T2949] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.922: Failed to acquire dquot type 0 [ 107.096602][ T2949] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.922: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.110358][ T2949] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 5: comm syz.4.922: lblock 5 mapped to illegal pblock 5 (length 1) [ 107.131799][ T2949] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.922: Failed to acquire dquot type 0 [ 107.147043][ T2949] EXT4-fs (loop4): 1 orphan inode deleted [ 107.160012][ T2949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.181418][ T2949] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 5: comm syz.4.922: lblock 5 mapped to illegal pblock 5 (length 1) [ 107.202165][ T2949] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.922: Failed to acquire dquot type 0 [ 107.265051][ T1064] EXT4-fs (loop4): unmounting filesystem. [ 107.277242][ T2963] loop6: detected capacity change from 0 to 256 [ 107.294347][ T2965] x_tables: unsorted underflow at hook 3 [ 107.309046][ T2963] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.065716][ T3018] FAULT_INJECTION: forcing a failure. [ 108.065716][ T3018] name failslab, interval 1, probability 0, space 0, times 0 [ 108.108694][ T3018] CPU: 1 PID: 3018 Comm: syz.4.948 Not tainted syzkaller #0 [ 108.116036][ T3018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.126103][ T3018] Call Trace: [ 108.129391][ T3018] [ 108.132330][ T3018] __dump_stack+0x21/0x24 [ 108.136672][ T3018] dump_stack_lvl+0x110/0x170 [ 108.141353][ T3018] ? __cfi_dump_stack_lvl+0x8/0x8 [ 108.146386][ T3018] dump_stack+0x15/0x24 [ 108.150548][ T3018] should_fail_ex+0x3bf/0x510 [ 108.155232][ T3018] __should_failslab+0xac/0xf0 [ 108.160008][ T3018] should_failslab+0x9/0x20 [ 108.164523][ T3018] __kmem_cache_alloc_node+0x3d/0x2d0 [ 108.169907][ T3018] ? ip6addrlbl_add+0x136/0xb80 [ 108.174769][ T3018] ? kasan_save_alloc_info+0x1f/0x30 [ 108.180067][ T3018] ? ip6addrlbl_add+0x136/0xb80 [ 108.184925][ T3018] kmalloc_trace+0x29/0xb0 [ 108.189344][ T3018] ip6addrlbl_add+0x136/0xb80 [ 108.194028][ T3018] ip6addrlbl_net_init+0xfb/0x410 [ 108.199059][ T3018] ? __cfi_ip6addrlbl_net_init+0x10/0x10 [ 108.204700][ T3018] ops_init+0x2ce/0x470 [ 108.208873][ T3018] setup_net+0x4b4/0xcd0 [ 108.213125][ T3018] ? copy_net_ns+0x5c0/0x5c0 [ 108.217723][ T3018] ? __kasan_kmalloc+0x95/0xb0 [ 108.222496][ T3018] ? copy_net_ns+0x185/0x5c0 [ 108.227106][ T3018] copy_net_ns+0x355/0x5c0 [ 108.231535][ T3018] create_new_namespaces+0x3a8/0x660 [ 108.236837][ T3018] unshare_nsproxy_namespaces+0x120/0x170 [ 108.242582][ T3018] ksys_unshare+0x4d5/0x850 [ 108.247102][ T3018] ? __cfi_ksys_unshare+0x10/0x10 [ 108.252144][ T3018] ? fpregs_restore_userregs+0x128/0x260 [ 108.257797][ T3018] __x64_sys_unshare+0x38/0x40 [ 108.262575][ T3018] x64_sys_call+0x767/0x9a0 [ 108.267090][ T3018] do_syscall_64+0x4c/0xa0 [ 108.271518][ T3018] ? clear_bhb_loop+0x30/0x80 [ 108.276209][ T3018] ? clear_bhb_loop+0x30/0x80 [ 108.280895][ T3018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.286798][ T3018] RIP: 0033:0x7ff15cb9f559 [ 108.291215][ T3018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.310824][ T3018] RSP: 002b:00007ff15da93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 108.319251][ T3018] RAX: ffffffffffffffda RBX: 00007ff15ce25fa0 RCX: 00007ff15cb9f559 [ 108.327237][ T3018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 108.335218][ T3018] RBP: 00007ff15cc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 108.343193][ T3018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.351169][ T3018] R13: 00007ff15ce26038 R14: 00007ff15ce25fa0 R15: 00007ffc472790f8 [ 108.359152][ T3018] [ 108.615319][ T3051] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 108.757894][ T3077] loop2: detected capacity change from 0 to 512 [ 108.791048][ C1] ================================================================== [ 108.799155][ C1] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 108.806544][ C1] Read of size 8 at addr ffff8881198ffd90 by task ksoftirqd/1/23 [ 108.814267][ C1] [ 108.816589][ C1] CPU: 1 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 108.823876][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.833935][ C1] Call Trace: [ 108.837220][ C1] [ 108.840152][ C1] __dump_stack+0x21/0x24 [ 108.844485][ C1] dump_stack_lvl+0x110/0x170 [ 108.849160][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 108.854192][ C1] ? debug_smp_processor_id+0x17/0x20 [ 108.859584][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 108.864618][ C1] print_address_description+0x71/0x200 [ 108.870187][ C1] print_report+0x4a/0x60 [ 108.874531][ C1] kasan_report+0x122/0x150 [ 108.879046][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 108.884084][ C1] __asan_report_load8_noabort+0x14/0x20 [ 108.889722][ C1] rcu_cblist_dequeue+0x6c/0xb0 [ 108.894587][ C1] rcu_do_batch+0x4bc/0xc30 [ 108.899107][ C1] ? rcu_core+0xf00/0xf00 [ 108.903445][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 108.909261][ C1] ? rcu_report_qs_rnp+0x2b9/0x390 [ 108.914400][ C1] rcu_core+0x486/0xf00 [ 108.915067][ T3085] netlink: 172 bytes leftover after parsing attributes in process `syz.8.980'. [ 108.918560][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 108.918586][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 108.938209][ C1] ? rcu_softirq_qs+0xd5/0x340 [ 108.942990][ C1] ? __cfi_rcu_softirq_qs+0x10/0x10 [ 108.948204][ C1] ? __schedule+0xcbb/0x1700 [ 108.952802][ C1] rcu_core_si+0x9/0x10 [ 108.956969][ C1] handle_softirqs+0x1dd/0x5f0 [ 108.961743][ C1] ? __cfi_run_ksoftirqd+0x10/0x10 [ 108.966860][ C1] run_ksoftirqd+0x28/0x30 [ 108.971297][ C1] smpboot_thread_fn+0x48c/0x8e0 [ 108.976274][ C1] kthread+0x281/0x320 [ 108.980360][ C1] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 108.985837][ C1] ? __cfi_kthread+0x10/0x10 [ 108.990438][ C1] ret_from_fork+0x1f/0x30 [ 108.994867][ C1] [ 108.997891][ C1] [ 109.000206][ C1] Allocated by task 3081: [ 109.004526][ C1] kasan_set_track+0x4b/0x70 [ 109.009111][ C1] kasan_save_alloc_info+0x1f/0x30 [ 109.014204][ C1] __kasan_kmalloc+0x95/0xb0 [ 109.018781][ C1] __kmalloc+0xb4/0x1e0 [ 109.022920][ C1] l2tp_session_create+0x38/0xbd0 [ 109.027932][ C1] pppol2tp_connect+0xbf5/0x1640 [ 109.032858][ C1] __sys_connect+0x3da/0x460 [ 109.037439][ C1] __x64_sys_connect+0x7a/0x90 [ 109.042190][ C1] x64_sys_call+0x88d/0x9a0 [ 109.046681][ C1] do_syscall_64+0x4c/0xa0 [ 109.051079][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.056959][ C1] [ 109.059266][ C1] Freed by task 343: [ 109.063144][ C1] kasan_set_track+0x4b/0x70 [ 109.067721][ C1] kasan_save_free_info+0x2b/0x40 [ 109.072725][ C1] ____kasan_slab_free+0x132/0x180 [ 109.077821][ C1] __kasan_slab_free+0x11/0x20 [ 109.082568][ C1] slab_free_freelist_hook+0xc2/0x190 [ 109.087921][ C1] __kmem_cache_free+0xb7/0x1b0 [ 109.092756][ C1] kfree+0x6f/0xf0 [ 109.096459][ C1] l2tp_session_put+0xaf/0x1a0 [ 109.101205][ C1] l2tp_session_delete+0x3df/0x4d0 [ 109.106303][ C1] l2tp_tunnel_del_work+0x199/0x410 [ 109.111485][ C1] process_one_work+0x717/0xc30 [ 109.116316][ C1] worker_thread+0xa4d/0x11d0 [ 109.120976][ C1] kthread+0x281/0x320 [ 109.125027][ C1] ret_from_fork+0x1f/0x30 [ 109.129424][ C1] [ 109.131731][ C1] Last potentially related work creation: [ 109.137424][ C1] kasan_save_stack+0x3a/0x60 [ 109.142088][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 109.147439][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 109.153224][ C1] call_rcu+0xcf/0xf50 [ 109.157277][ C1] pppol2tp_release+0x1e3/0x2b0 [ 109.162123][ C1] sock_close+0xc9/0x220 [ 109.166346][ C1] __fput+0x1fd/0x8f0 [ 109.170312][ C1] ____fput+0x15/0x20 [ 109.174283][ C1] task_work_run+0x1e1/0x250 [ 109.178859][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 109.184040][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 109.189482][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 109.194929][ C1] do_syscall_64+0x58/0xa0 [ 109.199326][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.205204][ C1] [ 109.207510][ C1] The buggy address belongs to the object at ffff8881198ffc00 [ 109.207510][ C1] which belongs to the cache kmalloc-512 of size 512 [ 109.221543][ C1] The buggy address is located 400 bytes inside of [ 109.221543][ C1] 512-byte region [ffff8881198ffc00, ffff8881198ffe00) [ 109.234799][ C1] [ 109.237105][ C1] The buggy address belongs to the physical page: [ 109.243494][ C1] page:ffffea0004663f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1198fc [ 109.253733][ C1] head:ffffea0004663f00 order:2 compound_mapcount:0 compound_pincount:0 [ 109.262036][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 109.268109][ C1] raw: 4000000000010200 ffffea0004665800 dead000000000002 ffff888100042f00 [ 109.276673][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 109.285229][ C1] page dumped because: kasan: bad access detected [ 109.291631][ C1] page_owner tracks the page as allocated [ 109.297324][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 476, tgid 476 (syz-executor), ts 33063328955, free_ts 31189424283 [ 109.319880][ C1] post_alloc_hook+0x1f5/0x210 [ 109.324636][ C1] prep_new_page+0x1c/0x110 [ 109.329125][ C1] get_page_from_freelist+0x2ca9/0x2d20 [ 109.334656][ C1] __alloc_pages+0x1fa/0x610 [ 109.339232][ C1] alloc_slab_page+0x6e/0xf0 [ 109.343804][ C1] new_slab+0x98/0x3e0 [ 109.347854][ C1] ___slab_alloc+0x70f/0xb70 [ 109.352429][ C1] __slab_alloc+0x5e/0xa0 [ 109.356747][ C1] __kmem_cache_alloc_node+0x204/0x2d0 [ 109.362189][ C1] __kmalloc_node_track_caller+0xa1/0x1e0 [ 109.367887][ C1] __alloc_skb+0x226/0x4a0 [ 109.372287][ C1] alloc_uevent_skb+0x85/0x240 [ 109.377033][ C1] kobject_uevent_net_broadcast+0x1b4/0x5b0 [ 109.382908][ C1] kobject_uevent_env+0x541/0x720 [ 109.387915][ C1] kobject_uevent+0x1d/0x30 [ 109.392407][ C1] net_rx_queue_update_kobjects+0x223/0x470 [ 109.398281][ C1] page last free stack trace: [ 109.402932][ C1] free_unref_page_prepare+0x81b/0x820 [ 109.408376][ C1] free_unref_page+0x93/0x530 [ 109.413037][ C1] __free_pages+0x67/0x100 [ 109.417441][ C1] __free_slab+0xc7/0x1a0 [ 109.421753][ C1] __unfreeze_partials+0x15a/0x190 [ 109.426846][ C1] put_cpu_partial+0xa9/0x100 [ 109.431503][ C1] __slab_free+0x1c4/0x280 [ 109.435907][ C1] ___cache_free+0xbf/0xd0 [ 109.440309][ C1] qlist_free_all+0xc6/0x140 [ 109.444882][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 109.450322][ C1] __kasan_slab_alloc+0x24/0x80 [ 109.455160][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 109.460263][ C1] kmem_cache_alloc+0x166/0x320 [ 109.465101][ C1] getname_flags+0xba/0x510 [ 109.469587][ C1] getname+0x19/0x20 [ 109.473465][ C1] do_sys_openat2+0xeb/0x820 [ 109.478044][ C1] [ 109.480349][ C1] Memory state around the buggy address: [ 109.485957][ C1] ffff8881198ffc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.493996][ C1] ffff8881198ffd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.502036][ C1] >ffff8881198ffd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.510079][ C1] ^ [ 109.514650][ C1] ffff8881198ffe00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.522688][ C1] ffff8881198ffe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.530724][ C1] ================================================================== [ 109.538849][ C1] Disabling lock debugging due to kernel taint