last executing test programs: 5m3.103517034s ago: executing program 32 (id=39): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = open(0x0, 0x20000, 0x1) getdents64(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000280), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) 5m1.80741491s ago: executing program 2 (id=43): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000240)) 5m1.736625986s ago: executing program 2 (id=44): socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x5, 0x4, @tid=r0}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(r1, 0x0) timer_gettime(r1, &(0x7f0000000200)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}}}}]}}]}}, 0x0) r2 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r2, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) syz_usb_connect(0x3, 0x35, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003d55fc8089904a489cd4f010203010902230001020030050904e88001ffa57350082402af1a0201000905055a"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setregid(0xee00, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x40000000, 0x0) prlimit64(r3, 0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84042, 0x9e) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) close(r4) syz_emit_ethernet(0x42, &(0x7f0000002340)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @rand_addr=0x64010100}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x8, 0xaade0dc}]}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) 4m58.49210242s ago: executing program 33 (id=49): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000030000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m58.420038116s ago: executing program 2 (id=53): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000700000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000f0000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m58.241518275s ago: executing program 2 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000081000400"/28], 0x50) r1 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES64=0x0], 0x128}, 0x4004001) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) dup3(r3, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="01000000040000000400fdffff8b000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000ae36cb200def54939dc18f208d3f913cda5f53a7d538933763a1fbdbcb1be53f46eee47e07bd3904b215da4f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x4044910, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffe}]}}]}, 0x40}}, 0x64048880) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000024c0)='bpf_lsm_fs_context_parse_param\x00') bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x11, 0x8, &(0x7f00000023c0)=ANY=[@ANYBLOB="1801000020786cec1e000000002020207b1af8ff00000000bfb400000000000007010000f8ffffffb702000008000000b70300000600"/64], &(0x7f0000002400)='GPL\x00', 0x6, 0x26, &(0x7f0000002440)=""/38, 0x41000, 0x74, '\x00', r6, @fallback=0x4, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002480)={0x1, 0x2, 0x1, 0x4}, 0x10, r7, 0xffffffffffffffff, 0x3, &(0x7f0000002500)=[r0, r0, r4], &(0x7f0000002540)=[{0x1, 0x1, 0x1, 0xc}, {0x4, 0x2, 0xa, 0xa}, {0x2, 0x5, 0xd, 0x9}], 0x10, 0x3}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @remote}, 0x14) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}, {@grpquota}]}, 0x4, 0x4e9, &(0x7f0000001140)="$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") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000002380)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r9, 0x2f, 0xff, 0x9, 0xa2, 0x4c, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x80, 0x8, 0xd, 0x7fffffff}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000140)={&(0x7f00003e9000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000000080)=0x8f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) read$FUSE(r11, &(0x7f0000000340)={0x2020}, 0x2020) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=@newtaction={0x68, 0x30, 0x871a15abc695fa35, 0xfffffffe, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffffffff, 0x20000fff, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xe5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20090000}, 0x0) 4m57.062746924s ago: executing program 2 (id=64): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_all\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0xf}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b40)={{0xffffffffffffffff, 0x0, 0x40, 0x0, 0xc9, 0x0, 0x0}, 0x1, &(0x7f0000000ac0)=[{0x1, 0x9, 0x0, &(0x7f0000000a40)="a04487b5cfffcfe2a939428dc453db7363b1790f57f31a0e877d403f5363cf2017cc782e02dacc7598663e28d0c9f16701b5e7dbf8c9cddf01a62296591b757943", 0x41, 0x10}]}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) getgid() bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000240), &(0x7f0000000000)=""/1, 0x2}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) (async) r3 = dup(r2) openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000080) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r1, &(0x7f0000000a80), 0x0}, 0x20) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0xe, 0x140230}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000002440)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r5, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f00000001c0)="7171f841d3c3b94f6d25d409a02ec360f93149a3db1830fc28db502d3ea2f26190d81a0697129f6e08ea653821a504f4cd6658bcc6993a1d48a04c7def3f7f74cc9f36c9ed16ea7a5e2075f422a14dadf6803c82e52bc925d6ed42126e648b238be7bd39f9a2b10b9b1c218159dba47105c0ad5b6b50fcfd6192cbfd3041383099a2ded4fc88bb3eee5bb38f227b9b9826bb14705a1a6391b917b1486778c261fbc1a919896fb4c65243d7b9532dcf58979e8c1f9a9e0861e3284c9ecb85aa029fd8ea4eb718ffe5bdf1e7c892badfc079af71b4f641a2d83718ca94f20360309c90544f50d1ed566f4c", &(0x7f00000002c0)=""/33}, 0x20) (async) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x79, [@rand_addr, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) 4m56.827917856s ago: executing program 2 (id=65): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003040)={&(0x7f0000000140), 0x6e, 0x0}, 0x2120) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa81004000884845200d2f0066000006329078ac1e0001e0000001000004d4000000e401000003000000090000000000000007000003ff000000076cb34a710cd13200fc000000000000000000000000000001fe880000000000000000000000000101000004d600000007000000006086cb610c963c01fe80000000000000000000000000002800000000000000000000000000000000ba07a81658841928f113be8f2bff89b7d906c2dbb620cb381c78ca66bfad4c555469f0705d2b789f51247ae16558cbab25b440c0a617b8fcfd888ea44d55b4ad45b604cd475fbd9fbf0f26921caf687b9721ab95cb020c504fdc114c2bbb79d7bde89a2a0b805553bc0e5432fd89ada56aa43e62b7cb5c96ba612e629966c385bd8c25be78c13e5e61ea3437b9bf525c78f50a88837e75b1733287f5779bfbe1b0b780f9cae6678765f877fb34d941a4ef735c0d17aac3b1b3dd0b038f9d1ad57a1ec426f47f7e9b5416e7f408c87ef56759e937ddb0e4913540d29581d52be3531b13b99efb51902b94734bc58720da8df9e235c363e6f515ea6df6f83e5aae75d03b12fc585f27168db49743a25d902054c1c04082cf43fc7ebcd2d7c6ebc773bb0703328c4f8614e505763a570957690230f479b937b475e6d9a88309e44fcee8f954cbc32e43508dc73194ac5399c5e966b052f7db8cd0ac5967dc33f8040163832dbd03bf98f71165758f2f0248458a3fa103a44d2e3aac601ab460b1333271835e01189f4d18e1a2c0a4b221b217a53372f7d80acdfb4a93977631d8bef6e3b24e188d6d12c4fd9a685443e3a3c0621b3bfd03abc6f8f21c4ace88d85c2595f806dfbb10d72346f0eb252f12785dd3f3a4c9459a10465982ae549b32fa74935edf3ae31afa4e07514e9cb013e333079c8b581e7f21dd9e83a42e64d4a98379290385ede5e76bcc7948cfefa6c2213f9218cd38ef80eeb5b698db1b8e17710c0bbd5a600132275c5b01bdf3a4b5b0ee6de1a1021cf16573ef0ca5cf1fccaa13faaa6e3299d4533751a509d11139d011f1519af93bb49cd4bd23ea31c80ea06dffbf346c20cd9f8f3c856765ead10ac33f3a4d893cdc11c2782523dc8457b136fb9dcc7c449f52b48ec5727f0cd7e773322976b9149cd6a786ef16596067681b737ad2b577cadd21ddb046dfad70e0a2797d5025debdeed54ac523ce1aa18b5b8c26bc525768d44c251ad37c2e430064f7afd23b52cb3951a98a51e8b5cf0483916b6507a3fcfa7a903c6ea6f8aaf07e1be15eaf948d2cd5fcc8e99891c39ab3006772c0a5e41a5599b87e6f08c31ddf8741ad489e99c577cf09e5eac420e1e56686974bd34396d5a9be615a11f5715b43e96e3ff23772faf2dcd6e9d7f8d1c3a80bdcf2924786d8bfb493c6aaadc58c49be0e5528afbfc02d4ae4647f870a0b24eeaaf9215242516c01c648c2e962622e3f4104af1c4b5c62134b532d5d8d3fc771c79d0f50c11639b27d2d33ee59e22a74560431ba852b5d11cf57cfdbc0e0c7fdeda4fd652a9dd91a9c69f22550cecbc571ad4248763789b9e33fe3aed363cf368010bdd5ce544bd9f42616602ccbfc90cb098191153467d97a85af61b483c2f8c871896aaddb124d3c729acc7537f5894470d59e468e11076e4764ef8ea2cc336fcbc1598bc73d510bcd3b5226b6eefe6a1e869ed7369f674157cc2e5815e666fdbe20c1dfb562f538f86222f4d48a2fcb325b1a9d1884fd5a93558688cf3a7ecc8839403ec3488e8ceacc0aff6d4f002a5c1470e50a7dee1967702d27ef90ceacf33c947b3809fd398b26a1c69c24f127997a0f07f8ea471c546034f56e1f89a04236d779a75d1f06f009dd4cfa216874e38e74c4b022df829df9de02548d98a7efd884f1d6d166e2e1909fedb23262f728599a39e8c1c44b65779393508eff31927be2d7b2bcf01ecd11ed72129d1dbfbcecce98467a6eb5797dc8962868c90d10a9d446a3fad959875d96d4e6ad39b2dc0e601233cb28a79dd903e8e8b1c73ebb3ab3c0233f58e61bb74492071f1d584d88b02ed58c611f266fc7aeb2ddaa51c1865aeafd5073e36f9acd924fc5b8a24f895a13893fb3ddedc766a58540ef376f2e56942e55f2a4523e4504a4b1982d611666163a8c32271eae67bd00d4c1c0d0402fc67ec2fc5d212b8d0dae303e174a8d010b4b41eee7feab08872c22bc3dfadd10e5b0b74ba22e4ad18f39578dc89279a9d16b833408dde9daa1f406fd5b072a154d8465b6a62d4abf6b4b129bedd09e98451f21b5cb62689bab11a0dc5c197a9beca6e9880d0e4edaf5c18fcf04e1aec73e3ac608434b2b9e2d3a8465bacf0dade5d1f9f79be967d6aac09dbfcd3ecb2e00a4b4c93028631d779ce49addb04239fdec4d679299c32ad2b3ad23758104b0ea49dd2298c9c98ba8613ea02e1623570579af818836869c93ab42a8b4d2539c8f52d6cbf993d04f5155488d2a2cba363525d77c2678ba3d9d9b0f845f0d0e74e4a635c33a0942cce8d1d72164efbaa22d548c98006270d41dacfe3fe0476e186665e60353295083a3f3152dfc370c6cb76e407ae64920a0dc115bedee98157a2869ae11dff8b4d2a1c9b7241602d3b76d19fa0f1ed4e8e848f0f530596f78101fcb727e1e165a71affc19bf8f2a641ad04e1c5a40f2032e37cf03c876d6288293d6ee06dd6d424348154b30113ab8286e9c59cdf94d2978994ea2f9484944d25e08b07c9495c7692b385944afa6c3bc05d10b97abc1c750cfa9fedcc3364a7c21beb199cc092c567a60b3dfb5f063dc63a73afbf0a9b73c9e467ffe5d1ae4bb9e80e864fb05fe1cc4fc7550b95ea79a3f8a2b30535629a535fe8efb6a388ccc69004e7e19007ba2254f634e409ac0ce9823ff1bdef14ed4d307ef306eeda0e978bab5abbf702a1f87fa57500067a15915b6d9ca73eef7e2d368abb77c869220f6f7221d67aeafc6261d00935d1cefaaa87e5c52641d3db9765362e5852d69e9f2f94c212ecc3ba5e81db2b6009a9e3e8fe2c7cfa049a46720df3a310a1c2c7065123d0359ecfa8b5b598b40c253e60e334a229035273fd17d9fa214c28be38993f1d162abe227ca6c9f4cfd00735e9156c4be56aadf5533b43ed347154e3e08db2687d6f9135c736270855af53ed137220a47bea71ae422180a2fb7c064b7a2162aaf7e471c47e57622ab39cd6bc8ca8d9878844d62dca9dd61bb438e848ca73ef4545c59b774a0411a996cabac7289b9b668e018dc2a4e56d372d8cf454bab17754697e5a87df63611a81d469245a662273c3ee2450cbdcbc9a30c22540331abec82d25d433d48381cf5d6e436bcc745cd73489622eb4d6135a260a06b91d351dd41965ca7e9268b4e74c7d53fcf973d7e924c849fa15952e75c92fd6eb304a475e61af9f1cd475b350d37681689e3dea68c234d7a8dd69cb64779d9d8ce0f77e15c0188e9fae09a35c4b916964250a38d01ef3693cb70bb62cfa66d78837e5cc943dd6d0450042fcefd63717a690f57f881c8c8fd4294426638fb311ec0650e1011242ce95e2c37633a41f2788c253e70f7a9cb7094e033191bf482113d27d23e150d1a15cc07e136a66be951409179498bff1e210843493ff65da3f62893486a5034ea4533a5ae0ab327c93321ae52527137419ce51b3db50f05382b4ee4264b8c3744e162d1b9401a5c6acaee43bbd61dd62987e97347c617600e700326c8934c8c4812c4119dc483e3fb61392af751f92088aa7bbc2e7a7fe3b475294751f32a51bcafbe2853a9375df99fc8c9bb7d405908f0d3a1af07ed89bdfa3680da00c4f4d2fd40b3f49d4aa596c882768dd434c11ec6a37134fd1b49e6807f354aefaf2fbc7238b38d6e18d0410cb613612399e327116c71e469ff077f9eeace2294fbdab5c2889deecea7fb4f172cf4b030a0464b6bbadcccda77fdccd5021f170fd2a28bf33b017f80161c67e1a294eb9094bfec6f488146b57dbcb9285a1cb8002085137b946ab4cf9aec9b752d4a9e9029f74fce674bafdec2738b81d638d802d0b85488815b3de8eedd7001f5db7c9ecfda9a208a3f337583a8e0f6712d370f33768d9d272a8ee033c30c81fabddc3074646973601be50f9d5328460c519f3ee9dec805a0b1ced698c575fa1c8b6f8d310c97c96d89f2f6b55ab2fdd073b53e509e9d46390cbda5ddd1c07ac27c4d4e495a17bd4aa2e996feeb10289cd354ce6b906808ec2ebfa8c4f089b617bdb3dd3c34ce5ecb8a9bea01153ff4115a88473e93d5f458c8a7f1a1681d0981c975afb8495442992454354780d31d27a4d50c322930454c551190948e930f25a5ad18ff09355663f6634f268494eb5fff5d2e6d02c43d74784f4318ef362238b11539c9e882550fd6d1edcacb0a5cda3c5aafb456e1aefa9eafea20b4ec18a714a8d0ab9b29e869b57459dd71eeae28c71992abeaef66286c76dae06df92188ea77c20f519796e1716a843dd6b9351443282d655ea99c190f25983767874af55ea310762a7bad20de67dedbd1f1c4de42d7fbc575edfa9a27c90c521f24a0408c4ad215792586ba80d2d505ec42c4a08a109adb916cdbcee7666d79f94c4a5294244deef33ae3c51aa93f8c7966b2fe68b1de2ff9e38d861e34d348fbb407bdcdd8c9a14784a99507cf947a5e6354895cca39a48a4694f68dc29edade495693b4780acd51f0d3b781532cda7a0e134570955d48bc7b6e0af1647b2068914bfec023f612951331ae58e24f4a988d21014261767e05900090"], 0x0) 4m56.701538954s ago: executing program 34 (id=65): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003040)={&(0x7f0000000140), 0x6e, 0x0}, 0x2120) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 2m36.666596016s ago: executing program 6 (id=616): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000e8000"/88, 0x58) 2m36.382363078s ago: executing program 6 (id=618): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000a80)=0x0) io_submit(r1, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) 2m34.689521931s ago: executing program 6 (id=629): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000001000000000000000000000071182d000000006095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m34.612727508s ago: executing program 6 (id=630): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000054}, 0x80) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m32.940863216s ago: executing program 6 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001f0ffffff0008000200ac1e00010c0002"], 0x64}}, 0x0) 2m32.828366461s ago: executing program 6 (id=639): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x18004, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x3, 0x5547, &(0x7f0000007a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x18b341, 0x84) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x18b341, 0x84) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r3, 0x0, 0x1, 0x2000402) (async) fallocate(r3, 0x0, 0x1, 0x2000402) bind$inet(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="a2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='^', 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0x68}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='t', 0x1}], 0x1}}], 0x3, 0x2401c4c5) (async) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="a2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='^', 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0x68}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='t', 0x1}], 0x1}}], 0x3, 0x2401c4c5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f00000001c0)={0x8, 0x48, 0x7f, 0x3, 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() (async) r4 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = gettid() process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) io_uring_setup(0x9c, &(0x7f0000000080)={0x0, 0xb9d8, 0x40, 0x800000, 0x184}) 2m17.568604691s ago: executing program 35 (id=639): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x18004, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x3, 0x5547, &(0x7f0000007a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x18b341, 0x84) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x18b341, 0x84) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r3, 0x0, 0x1, 0x2000402) (async) fallocate(r3, 0x0, 0x1, 0x2000402) bind$inet(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="a2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='^', 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0x68}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='t', 0x1}], 0x1}}], 0x3, 0x2401c4c5) (async) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="a2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='^', 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0x68}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='t', 0x1}], 0x1}}], 0x3, 0x2401c4c5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f00000001c0)={0x8, 0x48, 0x7f, 0x3, 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() (async) r4 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = gettid() process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) io_uring_setup(0x9c, &(0x7f0000000080)={0x0, 0xb9d8, 0x40, 0x800000, 0x184}) 59.885306465s ago: executing program 4 (id=1153): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200000, 0x80) open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x8801) dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x1, 0x0, 0x151}, &(0x7f00000000c0), &(0x7f0000011000), &(0x7f0000000000)) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x808, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000002000)={0xe, 0x0, &(0x7f0000001f40)=[{0x0}, {0x0}], &(0x7f0000001fc0), 0x2}, 0x20) syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0) 59.131077581s ago: executing program 4 (id=1159): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c03000000943c"], 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xc313a000) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r2, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x201, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd80000", 0x4b, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2881) 58.189178238s ago: executing program 4 (id=1166): setresuid(0xee01, 0xee00, 0x0) (async) setuid(0xee01) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r1) (async) exit(0x9) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) (async, rerun: 64) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) (rerun: 64) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f0000000000)="9ac58e06000000", 0x7}], 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x1001, 0x4) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc6000000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008a000000b70000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000003d40)) 56.859758901s ago: executing program 4 (id=1170): clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x81000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9b) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @remote}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ef) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x40040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8008804}, 0x20008840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)) ioctl(r4, 0xc138fd0c, &(0x7f0000000000)) syz_clone(0x40842300, 0x0, 0x0, 0x0, 0x0, 0x0) 55.415306929s ago: executing program 4 (id=1174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setrlimit(0x7, &(0x7f0000000100)={0x9, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000fffffffffffffffe00000000000000000000000000000000006364") ioctl(r4, 0xc138fd0a, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40e02, 0x36) write$P9_RREADLINK(r5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@stripe={'stripe', 0x3d, 0x1}}, {@nodelalloc}, {@orlov}]}, 0x1, 0x481, &(0x7f0000000600)="$eJzs3M2PU1UbAPDntjPDy9c7o+IHiIKikWicYQZUlmA0caGJiS5wOXYGghTGMKMRQrS6wKUhcW9cmvAXuNKNUVcmbnVvSIhhA7q65rb3Dm2nrczQWsf+fknpOT23Pefh3NOec8+0AYys/dk/ScSOiPglIiYb2dYD9jfubt24VPnjxqVKEmn6xu9J/bibNy5VikOL520vMrXWx5stX7h4Zr5aXTyf52dWzr47s3zh4rOnz86fWjy1eG7u6NEjh2dfeH7uub7EmbXp5p4Pl/bufuWtK69VTlx5+4erSRF/Sxzv96W+ppduVi4ST/arln+JnU3pZGyIDWFdshMy667x+vifjHLc7rzJePmToTYOGKg0TdMt3YtrKfAflsSwWwAMR/45n0TUKtkauHk9PwquH28sgLK4b+W3RslYlPJjxtvWt/2UrbZO1P78IrtF2/UUAIBB+OZ4476Y+92ef5RaruIfy/eGpiLinoi4NyLui4hdEXF/RDwQEQ9GxENNz+m079OufZNk7fyndG1Dgd2h6xN5Ys38r5j9xVQ5z+2sxz+enDxdXTwUEf+PiIMxviXLz/ao49uXfv6sW9n+pvlfdsvqL+aCeTuujbVdoFuYX5nfaLztrn8csWessbfXGn+yuhOQ9ePuiNizb2N1nH76q73dyv4+/h76sM+UfhnxVGNvsxZt8Uc+909670/O/C+qi4dmirNirR9/uvx6U7Yy2ZS5q/j7IOv/bdG5/3NTSfN+7fL667j866dd1zR3eP5PND8nO/8nkjfr6aLgg/mVlfOzERPJq/njx/LHW+urHzd3+/gs/oMHOsVfqr/HFf8TD0dEdhI/EhGPRsS+vO2PRcTjEXGgR/zfv/jEOxuPf7Cy+BfW1f9dE8Xe9pqi8pnvvq6XFJ011SP+JDr0/5F66mD+SKf3v8nWUyR6tvT83ZzNAAAAsPmUImJHJKXp1XSpND3d+Hv5XbGtVF1aXnnm5NJ75xYa3xGYivFScaVrcvV6aNRm82X91XJEVj6X54vrpYfz68afl7fW89OVperCsIOHEbe9y/jP/FYeduuAgfN9LRhdGx3/aZp+1OemAP8wn/8wuox/GF0dxv/WtnyP3wgANrNOn/8W9jAazP9hdBn/MLqMfxhdxj+MpPyb8GN38gX/gSWy95/h1b7+RJoOqfaJ4ce+mojS0GqPYce+vkSS/5ZGOvC6il+W6ccL1l/ILgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDp/RUAAP//S+LZpQ==") 55.352517813s ago: executing program 4 (id=1175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='2', 0x1) 55.287303757s ago: executing program 36 (id=1175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='2', 0x1) 38.057496021s ago: executing program 5 (id=1316): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x138, 0x1a, 0x633, 0x70bd28, 0x25dfdbfd, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x4e23, 0x8001, 0x0, 0x0, 0x0, 0x3c}, {@in=@rand_addr=0x64010101, 0x2000, 0x3c}, @in=@broadcast, {0x323, 0x1, 0x7, 0xfffffffffffffffd, 0xc, 0x92be, 0x6}, {0x3, 0x40000, 0x0, 0xffffffffffffffff}, {0xfffffff7, 0x3, 0xca09}, 0x70bd24, 0x3502, 0x2, 0x1, 0x0, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x44000840}, 0x0) 38.001964803s ago: executing program 5 (id=1318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) setresuid(0xee01, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x50011, &(0x7f0000000280)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '-\\'}}]}, 0x1, 0x7b6, &(0x7f000001ca40)="$eJzs3c9rG1ceAPDvyFbsdbxrLyxssifDwq4hRN5kvcku7CGlh1JoINCemwhZMallK1hyiI0hDaXQS6ENPRTaS879kd567Y9r+y+0l1JKQto6oSk5FJXRj0hOZFsJsp3Enw9M8t7Mm7z5zsx786J5SAHsWRPpH5mIgxHxVhIx1lyfRES2nhqMONEod2dttZAuSdRqL/6U1MvcXlstRMc+qf3NzIGI+OL1iEOZB+utLK/M5Uul4mIzP1WdPz9VWV45fG4+P1ucLS4cOzI9ffT4f44P9S/WX75eGb3x9nP//PjE3df+eu3NL5M4EaPNbZ1x9MtETDTPSTY9hes82+/Kdlmy2wfAI0mb5kCjlcfBGIuBeqo3vZcEAB4nlyKiBgDsMYnnPwDsMa3PAW6vrRbSpXZpdz+P2Gk3n4mI4Ub8rfebjS2DzXd2w/X3oCO3k3XvO5KIGO9D/RMR8f6nL3+YLrFN7yEBunn1ckScGZ9o9f/t/id5YM5CQ+8TMv7VQ5mJ+/L6P9g5n6Xjn/+2x3/t9pe5N/6JLuOfoS5t91FMROxrJvPRtf1nrvehmg2l47//Z9tz2+50xN80PtDM/bE+UyabnD1XKqZ9258iYjKyQ2n+yCZ1TN767da6FQPtZOf47+crr3yQ1p/+3S6RuT7Y7HKzzTUz+Wq+H7Gnbl6O+Ntgt/iTe9c/2WD8e6rHOp7/3xvvbbQtjT+Nt7Wsj3/7Z5XVrkb8I7rH35JsNj/x2FT9dphq3RRdfPLduyMb1d95/dMlrb/1f4GdkF7/kc3jH08652tWHr6Or66Ofb7Rtq3jb9//Len9vy95qZ5udR4X89Xq4pGIfckLD64/2t63lW+VT+Of/Hv39r/Z/Z+2xTM9xj9448ePHj3+7ZXGP/NQ1//hE9fuzA3cV23SQ/zN7i69/tP11GRzn176v14PsB/nEAAAAAAAAAAAAAAAAAAAAAAAAAC2komI0UgyuXvpTCaXa/yG919iJFMqV6qHzpaXFmai/lvZ45HNtL7qcqyRT1rffzrekT96X/7fEfHniHhn6A/1fK5QLs3sdvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LR/g9//T/2Q2e2jAwC2zfCWJW4Vd+RAAIAds/XzHwB42nj+A8De4/kPAHuP5z8A7D09P//v1mq17T0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnk6nTp5Ml9qva6uFND9zYXlprnzh8EyxMpebXyrkCuXF87nZcnm2NJwrlOc7dv2m279XKpfPT8fC0sWparFSnaosr5yeLy8tVE+fm8/PFk8XszsWGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0rrK8MpcvlYqLEk9KojbWuHSPy/Fsf+L7w98e2KzMlX7dxkPNVrF94Yzu+snsNbGbvRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAk+P3AAAA//8+Mijp") io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/48, 0x30) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x8002) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18020, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRESDEC=r2, @ANYRES8, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRESDEC=r4], 0x0, 0x304, &(0x7f0000000bc0)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev\x00') read$FUSE(r6, &(0x7f000001a240)={0x2020}, 0x2020) pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x100000000) ftruncate(0xffffffffffffffff, 0x2007ffb) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89ff, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 36.601017821s ago: executing program 5 (id=1321): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = open(0x0, 0x20000, 0x1) getdents64(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000001e80)={0x2020}, 0x2020) 35.726715064s ago: executing program 5 (id=1334): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRES8=0x0], 0xfd, 0x1be, &(0x7f0000000280)="$eJzs2zFrE38YB/Dn+k/zT+uQDE7icKNTaPoKGqSCGBCUDAqCYhuQnhQsBHSw3Rx8E74YB1d9JY4dhJPm0qQJKcTQ5KD5fJY83OWb+z0/uCRPIK/vvz86OD7pver9iFqSxMZepHGeRCM24tJZAAC3yXmex+88z/P/z2LrW+R5XvaKAIBl8/kPAOvn+YuXT9qdzv6zNK1FZF/63X63eCzOt3vxLrI4jJ2ox5+4+IIwVNSPHnf2d9KBRnzNTof50373v8l8K+rRmJ1vFfl0Mr8Z21fzu1GPu7PzuzPz1XhQHeU3I6Iev97GcWRxEBfZcf5zK00fPu1M5e8MngcAAAC3QTMdGczv1Zic35vNyfPj+bjIt5O5fx+Ymq8rca9Sbu8AsK5OPn46epNlhx8WKGrD11gwPl/xc7u4yBIvcUPF5ZaOjuytYn/+taheXeFUsbXkpVamj1SW3XISEQvHk2s3aq7ie0TcVDu1xbtY4KYeFCW8GQErNb77y14JAAAAAAAAAAAAAABwnVX856zsHgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYP38DAAD//0bJgFY=") mkdir(&(0x7f0000000300)='./bus\x00', 0x63) r1 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x101) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount$incfs(&(0x7f0000000480)='./file0\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0xc002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./file1\x00', 0x34e141, 0x9) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r5, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r6}}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0c000000a922367f", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB, @ANYRES64=r6], 0x20) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) 34.953800094s ago: executing program 5 (id=1342): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0xa00410, &(0x7f0000000100), 0x1, 0x4bc, &(0x7f0000000a40)="$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") quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x50011, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r1, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r4 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x9, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010100, 0x2, 0x6c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) ftruncate(r4, 0x2007ffb) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, 0x0) 33.910170254s ago: executing program 5 (id=1345): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000a80)=0x0) io_submit(r1, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) userfaultfd(0x1) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) 33.821364574s ago: executing program 37 (id=1345): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000a80)=0x0) io_submit(r1, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) userfaultfd(0x1) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) 18.034258739s ago: executing program 8 (id=1437): socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpgrp(0x0) write$P9_RGETLOCK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="230000003701eeff080000000000000007d7c16e7a813a1d", @ANYRES32=r2, @ANYBLOB="05007266646e6f"], 0x23) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x143) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 17.698800093s ago: executing program 8 (id=1441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r6, 0x5501) socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 16.035231059s ago: executing program 8 (id=1444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000010000)={0x0, 0x0, &(0x7f0000010040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400e00002400010500000000000000000000000001f0ff0000000100ffffffff00000000090001007072696f000000001800020003"], 0xe40}}, 0x0) 15.957108907s ago: executing program 8 (id=1446): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x16481, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r1, 0x851, 0x0) r2 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x1a6, &(0x7f00000003c0)="$eJzsmD9P21AUxc+zHVupKqVru7RSIyUd6thOWzVDh8wd2qFq1Y2ImCjgEJR4SLIA4kMwMzIxRyz5HjAAE0vYmBiMnvMsP+cPASn8E/c3XJ93383z9bVyBoMgiBfL2enlyUEum+b6NbIwRP5cjWsUqb6fufp0VP91uGtdHPcHP0vj5zEAQXD7+2sABmUVvlgHQfLXWXH9AyXSKXn/HxhMoZeg4K/QLhj+C70q6SavN82Vuueay02vyoXFg82Dw0NxvL/hNkNV6m9T2m93e2sVz3NbixIaJrbmzW9YVvBD6k9+X9FsrHh+sKHAxtiLBfAdRjSb0Uik53+nxeerieePVosexEOJLdzvLd5m5tSknu3oSEwRDPviH/E0+nksEftTsMeQk/xJk/yj4Dc2Cu1u73O9Uam5NXfdcYrfrC+W9dUphEY0ijf4Xzr0p1fS+akZtboeGWCn4vstW2c6QuV0DPgtZ5rj6qH/Kch/HHXNRE6G5/CGfeCXvArszOyWIAiCIAiCIAiCIAiCIAjiThjJ5Xuw8CtogtJEyvkdVl8HAAD//xdmaNU=") syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x2000084c, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESOCT, @ANYRES32=0x0], 0xc1, 0x14f6, &(0x7f0000004080)="$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") r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e80)={0x0, 0x0}, &(0x7f0000000ec0)=0xc) lstat(&(0x7f0000000f00)='./file2\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010100, 0x2, 0x6c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002240)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000002340)=0xe8) getgroups(0x1, &(0x7f0000002380)=[0xee01]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000023c0)=0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000002400)=0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002440)='./binderfs/custom1\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002480)={0x0}, &(0x7f00000024c0)=0xc) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r14, &(0x7f0000005b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000080)='./file1\x00', r15, r16) read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000045c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000004540), &(0x7f0000004580)='%+9llu \x00'}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004600)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000004700)=0xe8) r20 = getegid() sendmmsg$unix(r1, &(0x7f0000004880)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000000c0)='$F:', 0x3}, {&(0x7f0000000200)="5733d0e7d7dd1fbf585fb79dcbae1e4fb970c59f120e65a0855efbc262d4d5455b6d4a6bfb301b5b518f282af19fd187a4072840e0c035721b647b0813629cd3899b09381f95223c5e7d97a5bd60a1e5b0c75f1c06512ae91e2631ba73a4c898a107933b87c71ef5340ed8c1f49c4b9fd3c9759609c4021258f93524a7afdfb9c1e48289354950efdcf9268b7fcde87740014d7b46ead24c05a9f24c3b4e2c3fd4188a41fc21c7fb5af874be4aa88f1ad03693bc553981f4b3a1cc686c1a98702a25bdc38832fbad929d7e23238effde4a74", 0xd2}, {&(0x7f0000000300)="99d4dd1b0bb3c75c6f3d4a600a2d4fef6c92b7f8fff61d099bca23d17545e9a286b87acb3a690a9b45644379f7010858d8f18fd47180640af7dbda99c5268bf17c6b1b2853a4fb23c268d0e19882a63ff7c252380524b6655bd44e05a3be74a2269a6bcd6ac7ce6f8a9066756b1b00d06d154ef1fa842811101880d7b17a2d5bc586ee1b193d7f66d57c35cea51b1f34d47f8e8ecf9aeea70d876bfc0d", 0x9d}, {&(0x7f0000000580)="8aa1c0ba1d70f261ed85eafe5207b136ff9f0cedb5d5a9b368cd12a5863767280cc37050e46c338a2255883f36eb8d1e97e26327508fe0040d0ed3a11ebbe46d6efd4ba9902eb0ba4d794ec29f29", 0x4e}, {&(0x7f0000000600)="2535dfa71a9ebd2ea162afb20b0b012a923d5a46318f0e5c7c596dba5adc93ee66fd639082c3417405033053e2172d3037532533f03542d6fc5b00edb75edbf715bd1fe614f0aebccd26446df8770676c4874a8d57f8078f40b6bb09", 0x5c}, {&(0x7f0000000680)="d263f37bb4727aefc5a651f86c6924168ca4324cf6e4bf307027692a951620f2ad7aea18868f84ec40c4a14c70ea8ea64ab9a4521541bfd5f6e270b4a899520b7a85df4ed3b6092e842435a594452e2e9a7505ec8992fdc27c53e3d94778b9de6ae6f34fe347619133752af22693e7716c71bb7168bee80c503b56aeaebf56fc4a4821eee88929932c0706509f52f1df4881018a590b0285cda5b0db345943ac8c6432598151224d05ec4c1837363364596e7e2e14ccc24d9ce76346313c405552196e3780d2b05cf7d3bc5abb36a0c6663b", 0xd2}, {&(0x7f0000000780)="ddbd126db3d91cba95df38f52b924c99f23addd1f0cd9293a90c985decc85fec4f810a462df84b023181aa01245625c8b17a87076e8a2bad57e6cba7b07ffe2f7bcfe92c10075b26bc5990a8449d314313ed5afb93f8", 0x56}], 0x7, 0x0, 0x0, 0x4004}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)="994d79436797da8e16d27a4bb6b1d17c36da338ace7796ae32f3ced9cc965506ce273b8425f0ecae0b1140f75997cb598697bb1adf79d5b35d17b1b6eb", 0x3d}, {&(0x7f00000008c0)="950d27635586ba62b6f591cff924d0130828dc1a1c8339633a2c67f0ff1061d6ab6cbf87c65fd60fd12447b2100d38a2bd99e2a7cd4d4c1f4fc973b310d3efeb9f1fe96c3204665c3304be802a1aae8ce97d99644c18c26a53a3b45dd2b28012f246495438a9c963bc3537e2ca204155f7d89f024e3640d4227b49ac885720b36dbc340069bd92cb707a8a0cafaca8dcaa570d32ab3c3f7e9d5657c0d60460dc45858aebd532a4141081f3bd43ef30405a3e3de989c8fc69d0227855c3565794e597ce59b0bb68472d39733fe89677c9ab92c57fba2c1f241b6dcb81dbf7678d857f0d055d316a1163a46d", 0xeb}, {&(0x7f00000009c0)="e74d72374c5110c92239a4efd071678001f5ee9db8aec85a63ee3aed9b9ef6afc3e65c809ccdae0f2b0c78f7b466c6db9585bba17be794a1628736f13595752345076bf09aed213c64c39963220a2f63f011e93552c111b4409c02962a04e686fde11132075bd8a3c0d7c5f1edcad066715d", 0x72}, {&(0x7f0000000a40)="95af953ab152ddcd4889dab8d0b24538289cb9ab53bcc737bcaf70d01d89511b4b8eb2689a56739d97b275a438eba3ef985ad83cc1e03d3cd8a9970fee0ee7976384c5ab76ff6f07b3b7a9c0bb977b265152109e4a6aed3e052bf7c94dfbef1d76deb55a4903c35d5627b423e9288ea367b79c84c7347cba7d86158fc3cbdd146f81de8244eccce752884a81923adc65d9ac0eb16941df7357ebaf7943732f91dcfa5566547cb8dd2a6cfb78e0656c555e59f1a08871cb1965ef7aed5d34d5c40365889d41dff2436b189857cc5fef2c495e2a", 0xd3}], 0x4, &(0x7f0000000fc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x80, 0x48880}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001040)="aeb5080ae9380ac01c0abd48efabd6b63d08d07fcb40bda3f86533bf51febf4b2bf0c4ce50cb5505eaf915852f5c52ae239d7be7f3355e2f9a80b6868cf300c85555", 0x42}, {&(0x7f00000010c0)="bfdef940f3b15cbb3a1683b68cdbcad8b617ede089aa2ac84deb15cea18e272c9df97504a5bfe9e2471a34bc1b0539b5b788b2c2e42046b53255fe7d53f7f2321a5d2572c3a54479014f2400cff5d46a87076b43ad6b82068309cbc896dfe0e96f27acea873809be06a4fbd595ca600df482546beebc48d49e573b8675331b4821c100470f93e87b618986e9e574ec91474443f5497ed7ce8768eaba7af1b5385ee72be428e2ecff47796fbe472a2783a434f5cc513b90968f3b9c90dfc888cdc596d44db84d6affe5c396f85059b0f6a2a7a4c3e79b752e2c31ea6a03e0224d7a651962710f05dfcc3dfb3b4b65169791a4eedef2cd59b8b05b8c5a135fef535b624bf2a2713dde2ddb0635b7d2a1c6071b11dc6efea254424a0084e937839df1e1ade23203cff8aa24c20c4acfefc7ea16ab9fa9c56e3e7864e9ec87e24fdbe027b13eb5807c634016db400baef5b8ffa452242ed17873bc2178d970122b947b8dd2f6511650416df62277dd58ced2d3883acc3cf4ff9648ac56f92e2191229abd9e3cb8f1c7cbfb5e81a365688af4c03f16ffa6a02ac1787a36decb0240fbeda8a492d6ce65ce28cf0ef56debcde9e88a3743603a637241243970cb16b38d84ad67ea519cf071bc917914bfa3a98acdcabb067fffb3e7cbbd00ec203f7f7d0b6147e0ec5236db8350bd6d6975134af63f6a451e1cee7ffe7c95983e4eb268d6e4196aeb648117a9a9ae61f26382bc45bab445e6439c8e6b6f89bc3ec2bbd9d0c8371c99b6ee4e2af98808556902c45a94da1216f255ceb7f650b3d0191fba1def01a4b42ff5cb90268886676ed6843a0fc232f43b0c6f63096c31e782cbb597f8e446d68a8db38940d804b43beae1ac696d5ca17bdf9d2d83c4c30605846bcc498ce08b25d647b07d6971fe68d749aa4c7f825dfea6fa20f9dbd59b589aa451e6b1daa5ea1a2c109c7b06d4a06dc70358ec51fd58d4e9d8f398a4d44dd43c109475be7b69f86a173cf9cf3a2c23a710d81956a69a708fc8f718ee47daebca4bcd12ca99687b157151a7e6600dd1c7c14e57905ec421be446d0b375e1eae7131222393280a1c36f86e3adcc365d1579ccbb16aa57cfa115346398e2a7b3148531a076d92504382510267d915eeb95e80758b1fb80fe51b8015648be978b77d2974f64b211cd1220bb3329b18e6b0b05f0bcef3710ee7a5261c819ce657c131e6850164a3311a394b6a3f23038848d3d0a9d4534478dfcffd89c4c23c38d8dbc3594ca060717489c2f08f0f93f5cc6e8277e936a6fa644fac9969f1544d44b7715c8a3403d961e611fc3ae68491109949a40bdfab1d5ed74d8875eb180035e854d54f3d684d9942dffb6a75fda320a8c44b61b2b37b0041166d3628f1cb4ebd64ae15d1476e666ced499b7e56d1cfab0962cdb96bc429f38fa73073e9a108be7066e02d5ec393498d526278222b0896fc696684cd8c7d5e5b32de06f276f3550504b6030696edb7a3cc5af931d306fe130e20876c46380e4052ef8819956cc4bfc8557771eeeb696c3d82cd01fcc2adbc94ba1468109bd09ea04c70eacb4f87957876ba57f326914fd47e73ff681407ec9bcae8a840bf85a9d5267de5bf61199b08c56e0932c60ac88592192b3efd32709e6b6293b6402c8013a36028b3afea5e841b9e659bc5f5763420d15f2ad27ec7338e7e700f48c4f07d2d21695046a8922deae16a38d0e717268d2a2602e1e152c132f1b948ebc7c6a3be707a810fecf2512cedd78ac2b0be80df3491c815f90ae43172cfed688666c91f37d6f1762192bb3d72a485f03a900aad051356680b175cb8de8533ac6c3c25f737c5f767192b7228e1edc5f6949b55011932151e042e1e5a5c9d7725b5aebbbba2d31d9e51cc25d9baefe85ba960e8394f95ea5c2e131758b43c93ac2fd67774e0ecaf6ef3d0e027e21e8547943ed87d0fd6bb22ec5346e31b36520479d78963a8ee30b16721f4085c39ecc3118810af3c6c9f1de28e26277e7eef4d461f2c117b91e2bc27a766e98d7e64d84bdfb2aebc47d9640ff62d778dac4d41ec12f7d00628215cb903c89832b08a49942f2fa031a9b123175167812e5a4908ce71dce8c963fedea53b9e6292632dd2adb755b2526647f09163db88d2e73cd96e4a27713382d57f86559419344b31d47983a0afa3c8e78bbfc59d9be890025d3ec306f6c605493fbce1679a202b1f768b67a79bf5dae6a02c658c24db5ded070d02d17df2e581d383b244efa1cb03e413ff4a3a1273a3c8a8b499df447e19dbeb51905b22f19ea9cc94f445b778cfdc3a8239f0970bf5466a5d3664f56e9ce3a2c61dde6f86ca1127f00949eab12409a8463282947cf42fc475427b75a271fa03637799c8d1d863ddaae49e996c6958b984a1fa1378549079bb617b529e1a3577ec2b2299879660f9876ce8cf80d2de90c1906bd06f3d294854cdb140727010f26a55ac86f00bcabe1f17d68b612053d15404f6140860314f43a701f549a35a52c05bb6db0516314f157f79ed6ead3150a36bf9d15e545346b9e313894394f6c4f6b0c119f30f8f1eedaf7f052161ea746450311cc9e72a917e1459546917e73c2f26181577e9d2927e9279fb66209ec58de2050ebbfa7add67e4b6bf8e338a4bdc1f821004eac45b63f10b83ca6f536cf5fe966f7859aac0294cd2cbeb253b19607a71b68f730e72dc851852ba65307ef7c8361185a5ce3f454a66e761d7dab86301d456b11a46fbea4efc6b5dfe1b5beb9cc72fb32d0677f40399da2c19982f31f981e6c2e6476059e3449ad7e5ae7450693bf954aa83b3406b881f21854cb51a2439590021a44b3d5c2aeb2c36819903199218250dee59e54695547aaf6773fe667f87f6c488d8b52d34805a22ee39046f18fdb46925277d8d0c263ab0994348737222f3ba0d560f5115c3148c2925f497e16bca1726e0856eded94f292f5c504d1a941ba88c6630e1a7bc823bc49f92e2787e5c687b366e06656137408fe9edfe1587e43a80d072811802f062ad0deb8cc34bf88fa98af8ffda9c8627ad1772ecc59bb8b7168c28c36dfeeb61b1a2c1fb6f4c9c2fa074fe00617540c272334f75bb1b925929818435ec31eb46eada029e1448f97ac3fb94c9937b8439e96cec47bfb8cd5cfa9a6c3abb11aa09541b6821918ddb0950a597bed8b336bb8775912ed9c2c466d173bd8a553a432b2d92e89cb8b54e2fe51a8db8d1cd5c2739e5119ce263f189eb993e83e001bdd269ec14f879f7dc873d443a317fd29a8f99db6527089f941563ad94655d8df918415ad4b344e15f1c026124c1928834257f937ba01dd27695d646f85bf940faa3fb8460466123f54df7cf0d32d6f05fdc8d85fb48be7d948eb791b5e7f4d40e69903254e6cf73dc37813ab4860a5c97e627a3beada5b65a87ad97397704fbfd719b1268a3098e82e34995a08118d715d29ee0c8d911e6366ec21f0778fcc796df87ff15558376160d3691663af57a647591c6f984ae1832bed527eda04c5dead8a5df6b82b73712781d23e73e05a637e523b495dad72000ea7b2d2aaf10931867397e3ec8405e6892a617be2371b7111ee39194bcf26acf942bcf6889232ecc77832582d8cb9591f700e09cd75e0c1b56029ae596de3cdd23e897277ecb57b74903e945a1205d4917c9a3181c847f1345ce5b7e0d0d4402036740be4facbfbeb5bf82ac0db943e064efbb8d8daf74ef6216f9eae0ce58e77d26adfd42b230124e1592f4134672e7b9b6351ec20e2e84a8add9a6c609c22ee98e918bca4a1fe9c10c1b3ba01870ce81683206185054252dcdec5f823725370e497a76473d9a12da7131c341586d4eb1a430266cd9340725c875fd2bdd68b196dea9127f3de5dd12837d53bccfa7a8dc48ce26c73cd38497ef17cb301d70ef280546e7553df007e888e4b004267450a15f7a2e8b2551558a9a89f3f9e4d3b791142a4caa545cfdfcf8e62fa904ebe59290bf98fb05a868b5e46f6d419199f28b926d1a57e908166f716bbc7623ba452ec97f55003102123fbf95181e63e5c31b8b862e6d56c8aa41d8b6f737c25c74e81df5f8901d09e7f89bd01e8e71abcccbfd2d3f6d8f6c47584e2bf164d8aadf25c260de7c144dbfab2a7bb9fdb3da884a674a9b7b500847c502818ceaa868df304bb3531e527e45685487bc59728f06a4c7608eff584bf721b22e33c1a52d722ede56ac4c379d769f5f6d7a81beecfc06425a181a40e79d98581d5ccd9eb99f33d0922f1ddbd5cc05b6412af8732a2e557382452bc33a4420a957bad4bf9f5338bea5c7ff2c53c3a6c950bec1eb5ce213c066f22b53bc30dd8aafdf7770fae1ee227a644125b9d28fc3f16bdec137a9bab97d5fe559ef800d954ff12479a41210af7aac20fd20ee39240645949724a4c15cf32f669449694bbdfd5d587ccb77693249a99f2568e68ed26d73e9a192f19fb7867f1cbfe9816a1e1da9ea2403a2cdab9a059e79aac349f333c1d0a0b6cec8bce9deaad4cc97c3956f1cda5afcf151ee7f671ffa634d1620818e9a2fab6c46700a03ffde113305eb0195769c53f4f56054ee3d7448ad0e1a9c0e02198dab98dbdb985f7d4aeb8c325480c0f4a6a6b23c611c2649c48f4a71fee36590cca32ec55c5c793dc596d920f1e2436941ab9788799a967fe967120d09daf2faf6ae9db334ed05993e2d35d78c91162f3a0d8743e7d2cb5f5ae1f95288dabcdf2191bf9835f9a22702cb550c16ad3b856913f188e0449cb8de876f24607f0f9468cc175696cfe9110508761ed40b6b08e8c6043b8b7f55b7ead403d5b1f7412c335d8c937ff4fefc2364de74021677d58725815f508284c5279f65da8b5e3b84168f353ac6f1eea6901934b4afaae48ae6e5974812ea10ace60c5658ae8d80bf1e187cd71cedbde8a5a426cc18b851f6a493893c699a2009c50acfd509900721691ef1239fc17daabba0fb390b00e6acf9b36df9b958adad3cf61508eb51339b7cf10dfdd7dc6c2e908a92ccfee98cce6ffdefe1187baff8822eea60dc4a55d36fe673f81679f2e1770a194040ca7f206c248cf45f8125a210de8da2510d50032b4050e15b0113b3fdf23a16af5579767f556252c752d577f4078197370f2166b4bf8773ce0b08d6fdff30c6df353fafe8a18abd1d95fc3dd4abd1c7dc96f7c8ebfb866a2eb6d211e8c75eb3b428673b0d227f06f8c119b7cfb227d0e0e0d8af7e41dffebf36db73453434b4cbb0d7df96263eafe6e6ef0f94c93e3bf94442092fa7418b77787e591532ca54b607094c37874ac680bc1226cf33779440015ae3e8434b10bb865a0a8a3028ec7ff4b40ac437ca8c293d3b276d04942ffbdca19d7bc27057d8632c7a44008c8425c6ac308ccddf8d64f7d7d07ca7ab135b9818373ab66efae41859c02c8819ecf653e7a8c76546c8e654ed3a8e8624b64f42e40dcb0500688dbffe6f8d9c11e1221202f7a9de7cb1fe824ad743486338fa14e5461aad1abfae418f9a0ecd2873797a7863124b47000e658af13e0f0c3aa1d12f355d8654bfaa222e3b6b0a835d59f2c631d5723f6e3df9162cf3e21ae68e710889cdccbab5009be81c8325be3e7e1c6642c270cabf435beebafab5599534db4540acad7cd47ed0f7f5170ae71346654c2bcf33e3cc0acd30692e19077b4bf7333da9c31bcaba7eb9358aada879abb8d6e10869a39b923f4b81a9ef0ab44bbb78cb99f972907e17e4cb41a2b944d9e0668782130a8241e80f12869b593a11a585ca4809a4fc7a", 0x1000}, {&(0x7f00000020c0)="75a374c3ccac8fbccbc4f2d89505211fcafb5e237cfd7451c7b988e68963fea9db8abf30b736efdec138feb9c03b6c3b66a3a5fc3356ad7ee8b7db548e6bb1db62d514612287e354440a8f323a5e3a12c9f92e05bdcf4ee74985435e7a014602fc574f4d0521f19c5aea7ab440cfc43e1af8acd46ba9f5f27226549b", 0x7c}, {&(0x7f0000002140)="131f2df9ca3c08e787df2f1f8207d513dc2404bdf64d9f821a0149e499ca4b32ecb92b7b38cb738a2ee1376a9a697b0ecca1e9d2c4a93d2d3726569d1183dcdf19308ccdbca4b333405f29ca148bd43688e8b27d885a83675523e76862d16eb391b6dda4d665229a0ef2d8a859776d2679957fddb2881ce9962fc39e82fbc041254450f00f411bf2bc5193d025b88d48aeafec37b4c5268f780016d4ad5fef0fab4ff3e7dd17310838889145b1", 0xad}], 0x4, &(0x7f0000004740)=[@rights={{0x28, 0x1, 0x1, [r0, r2, r2, r2, r6, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r12, r0, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, r17}}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r2, r2, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r2, r0, r1, r1, r18, r1, r1, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r19, r20}}}], 0x130, 0x4000}}], 0x3, 0x24000014) r21 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) read$FUSE(r21, &(0x7f0000006d00)={0x2020}, 0xffc8) 15.405095498s ago: executing program 8 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)="b5e15a8736f9baf2d75c94ab02c213afa7429136941e2d80120b5ebcfd01351dd25de5f1cfa9b48c83616a35beb3723f67f10d88617a1b8c3b3ab82ddc8560c4c45c24328b18ced4ad265c46d3a8603353433a0db281e9aac922b618bf0eed7b915cd04eab6a06312da6998194d086d2011b9fa84caae3be1a25a85a1f37318661f5cfaf69dc7df1dcff6941c760f6e7c720606b", 0x94) syz_usb_connect(0x1, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201100103135408e8e3010000000000000109021200010f072007090439060008010107"], &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) setresuid(0xee00, 0xee00, 0xee01) r3 = syz_clone3(&(0x7f0000001880)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/48}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x24) getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r5, &(0x7f0000000fc0)=""/211, 0xd3) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) setfsuid(r6) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) 15.268191748s ago: executing program 8 (id=1453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_clone(0xa1209200, 0x0, 0x44, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26}) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000400)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@utf8}, {@namecase}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r4 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r4, 0x2007ffb) lseek(r4, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c3"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xffffffffffffff9a, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 15.184119967s ago: executing program 38 (id=1453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_clone(0xa1209200, 0x0, 0x44, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26}) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000400)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@utf8}, {@namecase}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r4 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r4, 0x2007ffb) lseek(r4, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c3"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xffffffffffffff9a, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 10.434748003s ago: executing program 9 (id=1493): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x82, 0x3, 0x9, 0xffff3ce4, 0x12, "5bee6eaaf917686843bec3b8c8979736bf91f9"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x2d9, {[@timestamp={0x8, 0xa, 0x29, 0xfffffaa4}]}}}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x4) write(r1, &(0x7f00000018c0)="ee8da58237f750ee681ad7e2c40a9c7519e539f6d07af684300f815a03e827a19a32c299d1d398eac1dfc748751472e18cabbabcfdd74ac0f00f1e423da295bee9f514324c6bf91246f716a49dc8c652233482f0b3336106884f4e9b819182179a4c125b207c3efe010e484df1c82d657f4ac5fa669d42e704fee56381413b84bcfd51ab5c7f0099dcae2fb2366b19e377763a5fca02fbcc0dae", 0x9a) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 10.267304159s ago: executing program 9 (id=1495): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb31e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x6, 0x0, &(0x7f0000000500)) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0xf, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000e00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c08b00", 0x0, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local}}}}, 0x0) 10.208961342s ago: executing program 9 (id=1496): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x3c, 0x0, 0xe, @in={0x2, 0x0, @multicast2}}]}, 0x28}}, 0x0) (fail_nth: 5) 9.684152538s ago: executing program 9 (id=1499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 8.832783555s ago: executing program 9 (id=1507): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.889348893s ago: executing program 9 (id=1519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5793, &(0x7f0000000340)={0x0, 0xca23, 0x10000, 0xfffffff7, 0x212}, &(0x7f0000000100), &(0x7f0000ff4000), 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x20000001) keyctl$KEYCTL_MOVE(0x11, r6, 0x0, r6, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000f80)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "fdca797c16a778cbd5c03a444dc319838d51c2af0e7bf8cd4540f41d4413b3fb", "9d523c694c7d69e3106d5c285fc4bf7a662d1634b60e9358bf291754a1f73514d857a0193b0011bee967aaa43d3a793c", "991bc6549f5254dc03edd75fb6e5ff2c489f7bf538d681bf8344b829", {"099446c31273fd7ec60f852bdbf775ec", "59036644ec92021d72dd3dc6cd23008a"}}}}}}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c000000000000", @ANYBLOB="00000000ecffffffffffffffc018"], 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x138, 0x1a, 0x633, 0x70bd28, 0x25dfdbfd, {{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e23, 0x8001, 0x0, 0x0, 0x0, 0x3c}, {@in=@rand_addr=0x64010101, 0x0, 0x3c}, @in=@broadcast, {0x323, 0x1, 0x7, 0xfffffffffffffffd, 0xc, 0x92be, 0x6}, {0x3, 0x40000, 0x0, 0xffffffffffffffff}, {0xfffffff7, 0x3, 0xca09}, 0x70bd24, 0x3502, 0x2, 0x1, 0x0, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x44000840}, 0x0) r9 = request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='\x00', 0xfffffffffffffff8) keyctl$set_timeout(0xf, r9, 0x3) 2.805478152s ago: executing program 0 (id=1547): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) unshare(0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f00000001c0)=@caif=@dgm, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/113, 0x71}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/95, 0x5f}], 0x5, &(0x7f0000000580)=""/245, 0xf5}}, {{&(0x7f0000000680)=@hci, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/109, 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/246, 0xf6}, {&(0x7f0000000a40)}], 0x4, &(0x7f0000000ac0)=""/246, 0xf6}, 0x400}, {{&(0x7f0000000bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000c40)=""/49, 0x31}, {&(0x7f0000000c80)=""/222, 0xde}, {&(0x7f0000000d80)=""/173, 0xad}, {&(0x7f0000000e40)=""/162, 0xa2}, {&(0x7f0000000f00)=""/77, 0x4d}, {&(0x7f0000000f80)=""/255, 0xff}, {&(0x7f0000001080)=""/149, 0x95}], 0x7, &(0x7f00000011c0)=""/96, 0x60}, 0x3}], 0x4, 0x102, &(0x7f0000001400)={0x0, 0x989680}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, r2, {0xc, 0xffff}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00'}) (async) unshare(0x4000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f00000001c0)=@caif=@dgm, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/113, 0x71}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/95, 0x5f}], 0x5, &(0x7f0000000580)=""/245, 0xf5}}, {{&(0x7f0000000680)=@hci, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/109, 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/246, 0xf6}, {&(0x7f0000000a40)}], 0x4, &(0x7f0000000ac0)=""/246, 0xf6}, 0x400}, {{&(0x7f0000000bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000c40)=""/49, 0x31}, {&(0x7f0000000c80)=""/222, 0xde}, {&(0x7f0000000d80)=""/173, 0xad}, {&(0x7f0000000e40)=""/162, 0xa2}, {&(0x7f0000000f00)=""/77, 0x4d}, {&(0x7f0000000f80)=""/255, 0xff}, {&(0x7f0000001080)=""/149, 0x95}], 0x7, &(0x7f00000011c0)=""/96, 0x60}, 0x3}], 0x4, 0x102, &(0x7f0000001400)={0x0, 0x989680}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, r2, {0xc, 0xffff}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) (async) 2.68075792s ago: executing program 0 (id=1548): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000fe00"/88, 0x58) 2.622944832s ago: executing program 0 (id=1550): r0 = io_uring_setup(0x81, &(0x7f00000051c0)={0x0, 0x321d, 0x1, 0x800001, 0x178}) mmap$IORING_OFF_CQ_RING(0xffffc000, 0x10002, 0x0, 0x13, r0, 0x8000000) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x29a, &(0x7f0000000380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1) syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0xfa, 0x10617, &(0x7f0000010a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fadvise64(r2, 0x0, 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @multicast1}, 0x10) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pwrite64(r1, &(0x7f0000000080), 0xfdcf, 0x404043000) 1.400710632s ago: executing program 7 (id=1557): r0 = socket$inet_udp(0x2, 0x2, 0x0) io_pgetevents(0x0, 0x6d8, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)={&(0x7f00000000c0)={[0x9]}, 0x8}) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000180)='#{:,{,@\x00', 0x200, &(0x7f00000001c0)={@align=0x8000800, {0x7, 0x70fc, 0x5, 0x101}}, 0x6e5, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@remote, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0xc80b, 0x0, 0x100, 0x28d, 0x84010100, r2}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={@empty, 0x1, 0x0, 0x60, 0x0, [{@local}, {}, {}, {@empty}, {@loopback}, {@multicast2}]}}) io_setup(0x42e61f44, &(0x7f0000000480)=0x0) io_destroy(r3) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x30000, 0x0) io_setup(0xffff, &(0x7f0000000680)) 1.275096019s ago: executing program 7 (id=1559): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2000000, 0x4000010, r1, 0xc7858000) 1.198341306s ago: executing program 7 (id=1560): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000380)="2a73ed3561", 0x5}], 0x1}}], 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = geteuid() r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x105040, 0x0) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) getresuid(&(0x7f00000002c0), &(0x7f00000003c0)=0x0, &(0x7f0000000480)) sendmsg$nl_xfrm(r3, &(0x7f0000003ec0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x7000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000002c80)=@polexpire={0x11c8, 0x1b, 0x800, 0x70bd28, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x4e22, 0x4, 0x2, 0x80, 0xa0, 0x3f4d194998039421, 0x0, r4}, {0x3, 0x400000000000, 0x7, 0x7fff, 0x8, 0x8, 0x5, 0x4a4}, {0x6c5, 0x4, 0x4, 0xc}, 0x8, 0x6e6bb4, 0x0, 0x0, 0x3, 0x1}, 0xc}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @algo_aead={0x104c, 0x12, {{'rfc4106(morus1280-avx2)\x00'}, 0x8000, 0x60, "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"}}, @policy={0xac, 0x7, {{@in=@remote, @in6=@mcast2, 0x4e23, 0xff7f, 0x4e21, 0x0, 0xa, 0x10, 0x0, 0x73, 0x0, r6}, {0x0, 0x4, 0x4, 0x9, 0x81, 0x8, 0xffffffffffffffff, 0xfb35}, {0x7fffffffffffffff, 0x2, 0x3dcd, 0x9}, 0xf4e, 0x6e6bb9, 0x0, 0x1, 0x1}}]}, 0x11c8}}, 0x8000) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x1e0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000020000", @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="010000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r10, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000006000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.031809953s ago: executing program 7 (id=1561): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000001000000000000000000000071182d00000000f195"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.002853569s ago: executing program 7 (id=1562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000f0008000200ac1e00010c0002"], 0x64}}, 0x0) 838.702455ms ago: executing program 7 (id=1563): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async, rerun: 32) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) (async, rerun: 32) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x40, 0x26, 0x18, {0x18, 0x23, "17fff4dba181030775ea036b47579806dfec977ed00c"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x0, 0xc, 0x79, "d7ea16837f8bc5d16a49de2b4c0234bf0e0ca3c4425502fafb6df14405308c41d7fdc95d53cf06f73a748afa62215250fa1a9dcd398cc85d861f6dd2806146a3dff6953cbe2b83db5f4c7646da5863ffa82024be17cd75b0589c708a74d1ba529eca96cd3fbe5c74e65068bd4a5e2a68f8bee7776fd24f3023"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x4}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x10, 0xe}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000580)={0x40, 0xb, 0x2, "8b7e"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @random="3059a7a81516"}, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x6}}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'veth0_macvtap\x00', 0x4}) 496.527471ms ago: executing program 1 (id=1568): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x80009, @mcast2}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000033afffe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001200)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x9}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) socket$nl_route(0x10, 0x3, 0x0) 460.590198ms ago: executing program 3 (id=1569): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f0065722c756e695f786c6174653d302c756e0800786c6174653d312c757466383d302c636865636b3d6e6f726d616c2c757466383d302c726f6469722c856f19349caa7365743d63703835352c757466383d302c73686f72746e616d653d6d697865642c00"], 0x7, 0x2a6, &(0x7f0000000740)="$eJzs3c2KI1UUAOBT+ekkukgWrkSYAl24GqZ9gm5kBLVBULJQF9o4GZBUGOhAIK0YZ+UT+AQ+jxtx6cYHUNw5C7GkUpWYzFR6TDvTPTTft+nDuffU/amia1U3n782Gd97ML3/8Otfo9tNonEUR/EoiUE0YuXbqPXz7/V5AOAF9yjP44+81ClT8+0e7R2VrcZznxwA8Fxsvv+3GrzdAeDG+ujjT94/Pjm5+2GadiMm382GSZR/y/bj+/FlZDGKO9GPvyLytTJ+592Tu9FKC4N4Y7KYDYvKyWc/Vtc//i1iWX8Y/RjU1x+mpY36xWzYjpeq8Y+yGH3wQ/TjlaLml/dWc1/Vv1VTH8ODePP1jfnfjn789EU8iCzuPVb/zWGavp1//+dXnxbZoj5ZzIaddb+qd/Oq7gkAAAAAAAAAAAAAAAAAAAAAADff7XRtsH3+zurg/wvanzwfqLc64Gexcb7PnTRN86Ts/299K15tRes61w4AAAAAAAAAAAAAAAAAAAAviun8fHya9SJiGWSjszKTzSNiO7NHsPqsv6Yp/t7OdCLiMkOUwa19q6JZTS1LiiW347+Xt6OzrHx65+aeqyi2PxudJa247IY/GSTrTK8MohFxNr0V5VhFplcGG5n/PXo3yrEq49PkaTe3W/eQPIMgr3n8mjurDh7P9KoV1HTuXTD6wcuXmnPe39GURER7vZkXX6f9bPfw6v4HAQAAAAAAAAAAAAAAAAAApen8fNxYfvRb0/jwGiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANdgOj8fny5//3+PYFEV7+qTN4ugFVWmZtiDK14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9w/AQAA//8XQlpx") sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='force', 0x5) 441.195483ms ago: executing program 1 (id=1570): r0 = socket$inet_udp(0x2, 0x2, 0x0) io_pgetevents(0x0, 0x6d8, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)={&(0x7f00000000c0)={[0x9]}, 0x8}) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000180)='#{:,{,@\x00', 0x200, &(0x7f00000001c0)={@align=0x8000800, {0x7, 0x70fc, 0x5, 0x101}}, 0x6e5, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@remote, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0xc80b, 0x0, 0x100, 0x28d, 0x84010100, r2}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={@empty, 0x1, 0x0, 0x60, 0x0, [{@local}, {}, {}, {@empty}, {@loopback}, {@multicast2}]}}) io_setup(0x42e61f44, &(0x7f0000000480)=0x0) io_destroy(r3) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x30000, 0x0) io_setup(0xffff, &(0x7f0000000680)) 372.674178ms ago: executing program 3 (id=1571): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c3100004e1000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) pipe2(&(0x7f0000000000), 0x80000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000580)='./file1\x00', 0x1000c01, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESHEX=0x0], 0x2, 0x231, &(0x7f0000000240)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) add_key(0x0, 0x0, 0x0, 0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x4800) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000034f0e61000000000000000007000000bb7f1a007600feff000020009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 352.517723ms ago: executing program 3 (id=1572): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000800e00"/88, 0x58) 313.730601ms ago: executing program 3 (id=1573): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x3c, 0x0, 0xe, @in={0x2, 0x0, @multicast2}}]}, 0x28}}, 0x0) (fail_nth: 9) 272.54098ms ago: executing program 1 (id=1574): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x799f4f8729a3733e) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000002c0)) close(0x3) mkdirat(0xffffffffffffff9c, 0x0, 0xc) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r2, &(0x7f00000009c0)="737562d751f911e16c3a65f406a35b36743a6d6f643ab6b7d996e659c1f68f8eb892797a5f6d6fdd831aeb23efe29cc6b68749780e60f63b5ec07b8def4a1cdf2cddb34f3852c04f35fccbd69b488f6a6c440e4469ddf96ece04a18c72bd6f84923e6375d2fdf1569175d7a834591fa2c2e3b6f3df92cac830649c839cf4ecfb555e9d5a6d2238d11d4de44989c3f629567e052d065ad7f211fb1e2dde7f813da0fc94", 0xa3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a00006af0d1d905c723fa", &(0x7f0000000100)=""/24, 0x6414}, 0x50) 272.44588ms ago: executing program 3 (id=1575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000700000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 197.882556ms ago: executing program 3 (id=1576): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0xa00410, &(0x7f0000000100), 0x1, 0x4bc, &(0x7f0000000a40)="$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") quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000aac000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0xdda30000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x50011, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r1, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r4 = open(&(0x7f0000000040)='./bus\x00', 0x600, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) ftruncate(r4, 0x2007ffb) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x5, 0x4) 197.605616ms ago: executing program 1 (id=1577): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000202000085000000a9000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 196.544926ms ago: executing program 1 (id=1578): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x4140) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000080)={0x281, 0x1}) 196.181037ms ago: executing program 0 (id=1579): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async, rerun: 32) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) (rerun: 32) ioctl$BLKCLOSEZONE(r0, 0x40101287, 0x0) (async) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x180) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 8.344948ms ago: executing program 1 (id=1580): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = open(0x0, 0x20000, 0x1) getdents64(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000001e80)={0x2020}, 0x2020) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000280), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r7}, 0x38) 8.229848ms ago: executing program 0 (id=1581): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000001000000000000000000000071182d000000000018"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=1582): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x1000007}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000001c0)={0xe, r0, 0x5, {0xa, 0x1}, 0xfa}, 0x1) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000001c0)={0xe, r0, 0x5, {0xa, 0x1}, 0xfa}, 0x1) write(r1, &(0x7f0000000080)='4', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0xffc00001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0xffc00001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) kernel console output (not intermixed with test programs): ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(3) [ 287.541129][ T2620] attempt to access beyond end of device [ 287.541129][ T2620] loop6: rw=524288, want=89776, limit=40427 [ 287.564259][ T2620] attempt to access beyond end of device [ 287.564259][ T2620] loop6: rw=524288, want=89784, limit=40427 [ 287.565725][ T429] usb 8-1: config 0 descriptor?? [ 287.576711][ T2620] attempt to access beyond end of device [ 287.576711][ T2620] loop6: rw=524288, want=89792, limit=40427 [ 287.593947][ T2620] attempt to access beyond end of device [ 287.593947][ T2620] loop6: rw=524288, want=89800, limit=40427 [ 287.611915][ T2620] attempt to access beyond end of device [ 287.611915][ T2620] loop6: rw=524288, want=89808, limit=40427 [ 287.984158][ T4330] loop8: detected capacity change from 0 to 512 [ 288.037407][ T4330] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.068372][ T4330] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.137084][ T429] hid (null): unknown global tag 0xfd [ 288.143468][ T429] hid (null): unknown global tag 0xc4 [ 288.249807][ T429] hid (null): global environment stack underflow [ 288.256354][ T429] hid (null): unknown global tag 0x8a [ 288.262006][ T429] hid (null): nested delimiters [ 288.284897][ T429] waltop 0003:172F:0034.0009: unexpected long global item [ 288.292409][ T429] waltop: probe of 0003:172F:0034.0009 failed with error -22 [ 289.145153][ T58] usb 8-1: USB disconnect, device number 24 [ 289.191865][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.226666][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.244426][ T4334] device bridge_slave_0 entered promiscuous mode [ 289.275985][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.296798][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.315124][ T4334] device bridge_slave_1 entered promiscuous mode [ 289.503775][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.511916][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.534388][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.553283][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.573407][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.580522][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.607793][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.626547][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.636513][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.643608][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.708805][ T4354] loop5: detected capacity change from 0 to 512 [ 289.769104][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.777758][ T4354] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 290.028153][ T4362] loop8: detected capacity change from 0 to 16 [ 290.042997][ T4363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 290.109984][ T4362] erofs: (device loop8): mounted with root inode @ nid 36. [ 290.126404][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.138926][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.171797][ T4354] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #17: comm syz.5.1182: iget: immutable or append flags not allowed on symlinks [ 290.187472][ T4354] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1182: couldn't read orphan inode 17 (err -117) [ 290.202001][ T4354] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000002,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none. [ 290.222302][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.246096][ T4334] device veth0_vlan entered promiscuous mode [ 290.270877][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.294568][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.313574][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.348175][ T4334] device veth1_macvtap entered promiscuous mode [ 290.362435][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.381899][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.399645][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.435694][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.461705][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.610390][ T4377] tipc: Started in network mode [ 290.615386][ T4377] tipc: Node identity 4, cluster identity 4711 [ 290.621737][ T4377] tipc: Node number set to 4 [ 290.944675][ T4369] loop7: detected capacity change from 0 to 40427 [ 290.987979][ T328] device bridge_slave_0 left promiscuous mode [ 290.994780][ T4369] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 291.004372][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.037344][ T4369] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 291.045890][ T328] device veth1_macvtap left promiscuous mode [ 291.073576][ T328] device veth0_vlan left promiscuous mode [ 291.087688][ T4369] F2FS-fs (loop7): invalid crc value [ 291.119088][ T4369] F2FS-fs (loop7): Found nat_bits in checkpoint [ 291.120495][ T4371] loop5: detected capacity change from 0 to 40427 [ 291.200220][ T4371] F2FS-fs (loop5): invalid crc value [ 291.221978][ T4371] F2FS-fs (loop5): Found nat_bits in checkpoint [ 291.235246][ T4369] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 291.242501][ T4369] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 291.317145][ T4371] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 291.366842][ T6] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 291.424455][ T30] audit: type=1400 audit(1790628695.735:431): avc: denied { quotaon } for pid=4370 comm="syz.5.1185" name="file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 291.554322][ T4398] loop9: detected capacity change from 0 to 256 [ 291.597181][ T4398] exfat: Deprecated parameter 'utf8' [ 291.602636][ T4398] exfat: Deprecated parameter 'utf8' [ 291.608045][ T4398] exfat: Deprecated parameter 'utf8' [ 291.613378][ T4398] exfat: Deprecated parameter 'namecase' [ 291.616874][ T6] usb 9-1: Using ep0 maxpacket: 8 [ 291.624967][ T4398] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 291.666279][ T4398] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1192'. [ 291.776681][ T6] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 291.790267][ T6] usb 9-1: config 179 has no interface number 0 [ 291.811176][ T6] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 291.838864][ T4406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1197'. [ 291.851993][ T6] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 291.863822][ T6] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 291.875324][ T6] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 291.892858][ T6] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 291.906646][ T6] usb 9-1: config 179 interface 65 has no altsetting 0 [ 291.906723][ T2620] handle_bad_sector: 42184 callbacks suppressed [ 291.906775][ T2620] attempt to access beyond end of device [ 291.906775][ T2620] loop6: rw=524288, want=86720, limit=40427 [ 291.914219][ T6] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 291.933900][ T2620] attempt to access beyond end of device [ 291.933900][ T2620] loop6: rw=524288, want=86728, limit=40427 [ 291.941598][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.970230][ T2620] attempt to access beyond end of device [ 291.970230][ T2620] loop6: rw=524288, want=86736, limit=40427 [ 291.982025][ T2620] attempt to access beyond end of device [ 291.982025][ T2620] loop6: rw=524288, want=86744, limit=40427 [ 291.993811][ T2620] attempt to access beyond end of device [ 291.993811][ T2620] loop6: rw=524288, want=86752, limit=40427 [ 292.005644][ T2620] attempt to access beyond end of device [ 292.005644][ T2620] loop6: rw=524288, want=86760, limit=40427 [ 292.021265][ T6] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input29 [ 292.038282][ T2620] attempt to access beyond end of device [ 292.038282][ T2620] loop6: rw=524288, want=86768, limit=40427 [ 292.050138][ T2620] attempt to access beyond end of device [ 292.050138][ T2620] loop6: rw=524288, want=86776, limit=40427 [ 292.063078][ T2620] attempt to access beyond end of device [ 292.063078][ T2620] loop6: rw=524288, want=86784, limit=40427 [ 292.075094][ T2620] attempt to access beyond end of device [ 292.075094][ T2620] loop6: rw=524288, want=86792, limit=40427 [ 292.126806][ T3898] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 292.326535][ T351] usb 9-1: USB disconnect, device number 8 [ 292.336640][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 292.345031][ T351] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 292.396697][ T3898] usb 6-1: Using ep0 maxpacket: 8 [ 292.482550][ T4414] loop9: detected capacity change from 0 to 16 [ 292.534397][ T4414] erofs: (device loop9): mounted with root inode @ nid 36. [ 292.546715][ T3898] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 292.562268][ T3898] usb 6-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 292.573092][ T4414] netem: change failed [ 292.580017][ T3898] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 292.590453][ T4414] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 292.604571][ T3898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.626703][ T4414] erofs: (device loop9): z_erofs_readpage: failed to read, err [-117] [ 292.638134][ T4414] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 292.652585][ T4414] erofs: (device loop9): z_erofs_readpage: failed to read, err [-117] [ 292.871243][ T351] usb 6-1: USB disconnect, device number 26 [ 293.291922][ T4050] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 293.498935][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 293.508520][ T4437] loop8: detected capacity change from 0 to 16 [ 293.527553][ T4437] erofs: (device loop8): mounted with root inode @ nid 36. [ 293.548224][ T4437] FAULT_INJECTION: forcing a failure. [ 293.548224][ T4437] name failslab, interval 1, probability 0, space 0, times 0 [ 293.562484][ T4437] CPU: 1 PID: 4437 Comm: syz.8.1206 Not tainted syzkaller #0 [ 293.569903][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 293.580073][ T4437] Call Trace: [ 293.583376][ T4437] [ 293.586351][ T4437] __dump_stack+0x21/0x30 [ 293.590716][ T4437] dump_stack_lvl+0x110/0x170 [ 293.595424][ T4437] ? show_regs_print_info+0x20/0x20 [ 293.600651][ T4437] ? __kasan_check_write+0x14/0x20 [ 293.605792][ T4437] ? proc_fail_nth_write+0x180/0x200 [ 293.611110][ T4437] dump_stack+0x15/0x20 [ 293.615291][ T4437] should_fail+0x3ab/0x500 [ 293.618219][ T4050] usb 10-1: Using ep0 maxpacket: 8 [ 293.619739][ T4437] __should_failslab+0xa4/0xe0 [ 293.629644][ T4437] should_failslab+0x9/0x20 [ 293.634200][ T4437] slab_pre_alloc_hook+0x39/0xd0 [ 293.639204][ T4437] ? getname_flags+0xba/0x510 [ 293.643908][ T4437] kmem_cache_alloc+0x44/0x260 [ 293.648698][ T4437] getname_flags+0xba/0x510 [ 293.653232][ T4437] user_path_at_empty+0x2f/0x1c0 [ 293.658197][ T4437] __se_sys_mount+0x2eb/0x390 [ 293.662896][ T4437] ? __x64_sys_mount+0xd0/0xd0 [ 293.667686][ T4437] ? __ia32_sys_read+0x90/0x90 [ 293.672477][ T4437] __x64_sys_mount+0xbf/0xd0 [ 293.677089][ T4437] x64_sys_call+0x6bf/0x9a0 [ 293.681619][ T4437] do_syscall_64+0x4c/0xa0 [ 293.686052][ T4437] ? clear_bhb_loop+0x50/0xa0 [ 293.690748][ T4437] ? clear_bhb_loop+0x50/0xa0 [ 293.695452][ T4437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.701401][ T4437] RIP: 0033:0x7f2b0bceb159 [ 293.705847][ T4437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.725474][ T4437] RSP: 002b:00007f2b0a744028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 293.733920][ T4437] RAX: ffffffffffffffda RBX: 00007f2b0bf72fa0 RCX: 00007f2b0bceb159 [ 293.741920][ T4437] RDX: 0000000000000000 RSI: 00002000000020c0 RDI: 0000000000000000 [ 293.749923][ T4437] RBP: 00007f2b0a744090 R08: 0000000000000000 R09: 0000000000000000 [ 293.757921][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.765912][ T4437] R13: 00007f2b0bf73038 R14: 00007f2b0bf72fa0 R15: 00007ffd3c11dad8 [ 293.773917][ T4437] [ 293.846764][ T351] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 293.868269][ T4050] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 293.879973][ T4445] loop8: detected capacity change from 0 to 256 [ 293.888979][ T4050] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 293.901737][ T4050] usb 10-1: config 179 has no interface number 0 [ 293.908445][ T4050] usb 10-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 293.922145][ T4050] usb 10-1: config 179 interface 65 has no altsetting 0 [ 293.934787][ T4050] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 293.944901][ T4445] FAT-fs (loop8): Unrecognized mount option "shortname=lo" or missing value [ 293.959266][ T4050] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.027658][ T4451] loop7: detected capacity change from 0 to 512 [ 294.092970][ T4452] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1209'. [ 294.115944][ T4451] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 294.127160][ T4451] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.275523][ T4050] usb 10-1: USB disconnect, device number 2 [ 294.277568][ T351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.289319][ T351] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 294.298592][ T351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.315053][ T351] usb 6-1: config 0 descriptor?? [ 294.796421][ T4461] loop8: detected capacity change from 0 to 256 [ 294.803036][ T351] hid (null): unknown global tag 0xfd [ 294.809439][ T351] hid (null): unknown global tag 0xc4 [ 294.814858][ T351] hid (null): global environment stack underflow [ 294.833824][ T4461] FAT-fs (loop8): Unrecognized mount option "shortname=lo" or missing value [ 294.853163][ T351] hid (null): unknown global tag 0x8a [ 294.868257][ T351] waltop 0003:172F:0034.000A: unexpected long global item [ 294.886865][ T351] waltop: probe of 0003:172F:0034.000A failed with error -22 [ 294.936168][ T4464] capability: warning: `syz.9.1215' uses deprecated v2 capabilities in a way that may be insecure [ 295.012755][ T306] usb 6-1: USB disconnect, device number 27 [ 295.086274][ T4478] netlink: 3576 bytes leftover after parsing attributes in process `syz.7.1219'. [ 295.150712][ T4479] loop9: detected capacity change from 0 to 16 [ 295.239013][ T4479] erofs: (device loop9): mounted with root inode @ nid 36. [ 295.476684][ T351] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 295.548065][ T4493] loop5: detected capacity change from 0 to 256 [ 295.585848][ T4493] FAT-fs (loop5): Unrecognized mount option "shortname=lo" or missing value [ 295.743443][ T4503] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1228'. [ 295.756647][ T351] usb 8-1: device descriptor read/64, error -71 [ 295.906679][ T3898] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 295.936912][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1230'. [ 295.945979][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1230'. [ 296.146642][ T3898] usb 9-1: Using ep0 maxpacket: 8 [ 296.152170][ T351] usb 8-1: device descriptor read/64, error -71 [ 296.266687][ T3898] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 296.285229][ T3898] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 296.302787][ T3898] usb 9-1: config 179 has no interface number 0 [ 296.316670][ T3898] usb 9-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 296.346641][ T3898] usb 9-1: config 179 interface 65 has no altsetting 0 [ 296.355026][ T3898] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 296.366858][ T3898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.430970][ T30] audit: type=1400 audit(1790628700.745:432): avc: denied { bind } for pid=4514 comm="syz.5.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.446745][ T351] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 296.630270][ T3898] usb 9-1: USB disconnect, device number 9 [ 296.727713][ T30] audit: type=1400 audit(1790628701.045:433): avc: denied { read } for pid=4525 comm="syz.5.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 296.747315][ T351] usb 8-1: device descriptor read/64, error -71 [ 296.760442][ T4526] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1238'. [ 296.904566][ T4509] loop9: detected capacity change from 0 to 131072 [ 296.921397][ T2620] handle_bad_sector: 88970 callbacks suppressed [ 296.921420][ T2620] attempt to access beyond end of device [ 296.921420][ T2620] loop6: rw=0, want=89720, limit=40427 [ 296.974482][ T4509] F2FS-fs (loop9): Wrong secs_per_zone / total_sections (512, 24) [ 297.011821][ T30] audit: type=1400 audit(1790628701.325:434): avc: denied { connect } for pid=4527 comm="syz.5.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 297.033554][ T4509] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 297.044664][ T2620] attempt to access beyond end of device [ 297.044664][ T2620] loop6: rw=0, want=89728, limit=40427 [ 297.076457][ T4509] F2FS-fs (loop9): Test dummy encryption mode enabled [ 297.083961][ T2620] attempt to access beyond end of device [ 297.083961][ T2620] loop6: rw=0, want=89736, limit=40427 [ 297.095065][ T2620] attempt to access beyond end of device [ 297.095065][ T2620] loop6: rw=0, want=89744, limit=40427 [ 297.103293][ T4509] F2FS-fs (loop9): invalid crc value [ 297.106812][ T2620] attempt to access beyond end of device [ 297.106812][ T2620] loop6: rw=0, want=89752, limit=40427 [ 297.122705][ T2620] attempt to access beyond end of device [ 297.122705][ T2620] loop6: rw=0, want=89760, limit=40427 [ 297.134974][ T2620] attempt to access beyond end of device [ 297.134974][ T2620] loop6: rw=0, want=89768, limit=40427 [ 297.137021][ T351] usb 8-1: device descriptor read/64, error -71 [ 297.146142][ T2620] attempt to access beyond end of device [ 297.146142][ T2620] loop6: rw=0, want=89776, limit=40427 [ 297.155155][ T4509] F2FS-fs (loop9): Found nat_bits in checkpoint [ 297.183568][ T2620] attempt to access beyond end of device [ 297.183568][ T2620] loop6: rw=0, want=89784, limit=40427 [ 297.206996][ T2620] attempt to access beyond end of device [ 297.206996][ T2620] loop6: rw=0, want=89792, limit=40427 [ 297.282880][ T4509] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 297.358053][ T351] usb usb8-port1: attempt power cycle [ 297.365213][ T4509] F2FS-fs (loop9): Cannot turn on quotas: -2 on 0 [ 297.371955][ T4509] F2FS-fs (loop9): Start checkpoint disabled! [ 297.379280][ T30] audit: type=1400 audit(1790628701.695:435): avc: denied { append } for pid=4539 comm="syz.8.1242" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 297.413175][ T4509] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 297.426655][ T4509] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 297.498726][ T4509] overlayfs: workdir and upperdir must be separate subtrees [ 297.534531][ T4544] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1243'. [ 297.545150][ T4546] loop8: detected capacity change from 0 to 256 [ 297.576572][ T328] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 297.637025][ T4546] FAT-fs (loop8): Unrecognized mount option "shortname=lo" or missing value [ 297.672619][ T4550] loop5: detected capacity change from 0 to 256 [ 297.766678][ T351] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 297.783056][ T4550] loop5: detected capacity change from 0 to 512 [ 297.819761][ T4550] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 297.857747][ T4550] EXT4-fs (loop5): 1 truncate cleaned up [ 297.863514][ T4550] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,sysvgroups,nombcache,quota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 297.996821][ T351] usb 8-1: device descriptor read/8, error -71 [ 298.359878][ T30] audit: type=1400 audit(1790628702.675:436): avc: denied { setattr } for pid=4561 comm="syz.9.1249" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 298.386685][ T351] usb 8-1: device descriptor read/8, error -71 [ 298.934546][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1253'. [ 298.956663][ T351] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 298.984256][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1253'. [ 299.046748][ T351] usb 8-1: Using ep0 maxpacket: 8 [ 299.113929][ T30] audit: type=1400 audit(1790628703.425:437): avc: denied { read } for pid=4561 comm="syz.9.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 299.165270][ T4571] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1249'. [ 299.174455][ T351] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 299.185961][ T351] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 299.208281][ T351] usb 8-1: config 179 has no interface number 0 [ 299.221426][ T351] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 299.296941][ T351] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 299.303658][ T30] audit: type=1400 audit(1790628703.615:438): avc: denied { ioctl } for pid=4585 comm="syz.8.1258" path="socket:[34424]" dev="sockfs" ino=34424 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.336638][ T351] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 299.376675][ T351] usb 8-1: config 179 interface 65 has no altsetting 0 [ 299.383612][ T351] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 299.410969][ T351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.428703][ T4593] loop5: detected capacity change from 0 to 256 [ 299.487105][ T4593] FAT-fs (loop5): Unrecognized mount option "shortname=lo" or missing value [ 299.496804][ T4594] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(3) [ 299.656248][ T4599] loop8: detected capacity change from 0 to 16 [ 299.681133][ T351] usb 8-1: USB disconnect, device number 28 [ 299.687887][ T4599] erofs: (device loop8): mounted with root inode @ nid 36. [ 299.713933][ T4599] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 299.756683][ T4599] erofs: (device loop8): z_erofs_readpage: failed to read, err [-117] [ 299.771339][ T30] audit: type=1400 audit(1790628704.085:439): avc: denied { search } for pid=4603 comm="syz.9.1265" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 299.793216][ T4608] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 299.807571][ T4608] erofs: (device loop8): z_erofs_readpage: failed to read, err [-117] [ 299.836429][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1265'. [ 299.850575][ T4599] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 299.908133][ T4599] erofs: (device loop8): z_erofs_readpage: failed to read, err [-117] [ 300.011994][ T30] audit: type=1400 audit(1790628704.325:440): avc: denied { mounton } for pid=4611 comm="syz.9.1268" path="/16/file0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 300.061386][ T30] audit: type=1400 audit(1790628704.375:441): avc: denied { append } for pid=4619 comm="syz.8.1270" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.143483][ T4621] loop8: detected capacity change from 0 to 512 [ 300.203685][ T4621] EXT4-fs (loop8): Ignoring removed oldalloc option [ 300.230670][ T4621] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 300.243979][ T4621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 300.253540][ T4621] EXT4-fs (loop8): orphan cleanup on readonly fs [ 300.259983][ T4621] EXT4-fs error (device loop8): ext4_orphan_get:1432: comm syz.8.1270: bad orphan inode 267 [ 300.270727][ T4621] EXT4-fs (loop8): Remounting filesystem read-only [ 300.277342][ T4621] EXT4-fs (loop8): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 300.334250][ T4625] loop7: detected capacity change from 0 to 16 [ 300.341273][ T4627] loop5: detected capacity change from 0 to 16 [ 300.377396][ T4627] erofs: (device loop5): mounted with root inode @ nid 36. [ 300.386194][ T4627] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 300.409190][ T4627] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 300.475274][ T4633] loop8: detected capacity change from 0 to 16 [ 300.482898][ T4625] erofs: (device loop7): mounted with root inode @ nid 36. [ 300.490812][ T4625] FAULT_INJECTION: forcing a failure. [ 300.490812][ T4625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.503936][ T4625] CPU: 1 PID: 4625 Comm: syz.7.1271 Not tainted syzkaller #0 [ 300.511369][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 300.521457][ T4625] Call Trace: [ 300.524787][ T4625] [ 300.527745][ T4625] __dump_stack+0x21/0x30 [ 300.532196][ T4625] dump_stack_lvl+0x110/0x170 [ 300.536915][ T4625] ? show_regs_print_info+0x20/0x20 [ 300.542148][ T4625] dump_stack+0x15/0x20 [ 300.546341][ T4625] should_fail+0x3ab/0x500 [ 300.550788][ T4625] should_fail_usercopy+0x1a/0x20 [ 300.555845][ T4625] _copy_to_user+0x20/0x90 [ 300.560293][ T4625] simple_read_from_buffer+0xe9/0x160 [ 300.565700][ T4625] proc_fail_nth_read+0x1a6/0x220 [ 300.570758][ T4625] ? proc_fault_inject_write+0x310/0x310 [ 300.576423][ T4625] ? security_file_permission+0x83/0xa0 [ 300.582015][ T4625] ? proc_fault_inject_write+0x310/0x310 [ 300.587684][ T4625] vfs_read+0x28c/0xc20 [ 300.591898][ T4625] ? kernel_read+0x1f0/0x1f0 [ 300.596526][ T4625] ? __kasan_check_write+0x14/0x20 [ 300.601667][ T4625] ? mutex_lock+0x9b/0x1c0 [ 300.606213][ T4625] ? wait_for_completion_killable_timeout+0x10/0x10 [ 300.612834][ T4625] ? __fget_files+0x2e1/0x340 [ 300.617575][ T4625] ? __fdget_pos+0x2d2/0x380 [ 300.622194][ T4625] ? ksys_read+0x70/0x260 [ 300.626556][ T4625] ksys_read+0x14a/0x260 [ 300.630830][ T4625] ? vfs_write+0xfd0/0xfd0 [ 300.635286][ T4625] ? debug_smp_processor_id+0x17/0x20 [ 300.640693][ T4625] __x64_sys_read+0x7b/0x90 [ 300.645229][ T4625] x64_sys_call+0x96d/0x9a0 [ 300.649765][ T4625] do_syscall_64+0x4c/0xa0 [ 300.654210][ T4625] ? clear_bhb_loop+0x50/0xa0 [ 300.658914][ T4625] ? clear_bhb_loop+0x50/0xa0 [ 300.663625][ T4625] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.669546][ T4625] RIP: 0033:0x7f75e9d6598e [ 300.673988][ T4625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.693621][ T4625] RSP: 002b:00007f75e87dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.702172][ T4625] RAX: ffffffffffffffda RBX: 00007f75e87dd6c0 RCX: 00007f75e9d6598e [ 300.710176][ T4625] RDX: 000000000000000f RSI: 00007f75e87dd0a0 RDI: 0000000000000009 [ 300.718175][ T4625] RBP: 00007f75e87dd090 R08: 0000000000000000 R09: 0000000000000000 [ 300.726178][ T4625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.734201][ T4625] R13: 00007f75ea02d128 R14: 00007f75ea02d090 R15: 00007fff21ca59d8 [ 300.742217][ T4625] [ 300.751870][ T4633] erofs: (device loop8): mounted with root inode @ nid 36. [ 300.814562][ T4643] fuse: Bad value for 'fd' [ 301.087310][ T4653] EXT4-fs (loop9): Ignoring removed orlov option [ 301.120438][ T4653] EXT4-fs error (device loop9): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 301.135169][ T4653] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #11: comm syz.9.1279: corrupted inode contents [ 301.147653][ T4653] EXT4-fs error (device loop9): ext4_dirty_inode:6108: inode #11: comm syz.9.1279: mark_inode_dirty error [ 301.160259][ T4653] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1279: invalid indirect mapped block 1 (level 1) [ 301.173840][ T4653] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #11: comm syz.9.1279: corrupted inode contents [ 301.186100][ T4653] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 301.194940][ T351] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 301.203497][ T4653] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #11: comm syz.9.1279: corrupted inode contents [ 301.217972][ T4653] EXT4-fs error (device loop9): ext4_truncate:4317: inode #11: comm syz.9.1279: mark_inode_dirty error [ 301.229349][ T4653] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 301.238584][ T4653] EXT4-fs (loop9): 1 truncate cleaned up [ 301.244292][ T4653] EXT4-fs (loop9): mounted filesystem without journal. Opts: stripe=0x0000000000000001,nodelalloc,orlov,,errors=continue. Quota mode: none. [ 301.477097][ T4656] exfat: Deprecated parameter 'utf8' [ 301.482489][ T4656] exfat: Deprecated parameter 'utf8' [ 301.488042][ T4656] exfat: Deprecated parameter 'utf8' [ 301.493507][ T4656] exfat: Deprecated parameter 'namecase' [ 301.506072][ T4656] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 301.550735][ T4656] __nla_validate_parse: 1 callbacks suppressed [ 301.550754][ T4656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1276'. [ 301.576632][ T351] usb 8-1: Using ep0 maxpacket: 8 [ 301.600009][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 301.600026][ T30] audit: type=1400 audit(1790628705.915:444): avc: denied { read } for pid=4660 comm="syz.8.1283" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 301.706741][ T351] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 301.735406][ T351] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 301.756335][ T351] usb 8-1: config 179 has no interface number 0 [ 301.766435][ T351] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 301.796637][ T351] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 301.816663][ T351] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 301.850482][ T351] usb 8-1: config 179 interface 65 has no altsetting 0 [ 301.870709][ T351] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 301.901016][ T351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.916676][ T4050] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 301.934351][ T2620] handle_bad_sector: 46728 callbacks suppressed [ 301.934372][ T2620] attempt to access beyond end of device [ 301.934372][ T2620] loop6: rw=524288, want=87424, limit=40427 [ 301.956834][ T2620] attempt to access beyond end of device [ 301.956834][ T2620] loop6: rw=524288, want=87432, limit=40427 [ 301.982043][ T2620] attempt to access beyond end of device [ 301.982043][ T2620] loop6: rw=524288, want=87440, limit=40427 [ 302.004228][ T2620] attempt to access beyond end of device [ 302.004228][ T2620] loop6: rw=524288, want=87448, limit=40427 [ 302.036730][ T2620] attempt to access beyond end of device [ 302.036730][ T2620] loop6: rw=524288, want=87456, limit=40427 [ 302.056740][ T2620] attempt to access beyond end of device [ 302.056740][ T2620] loop6: rw=524288, want=87464, limit=40427 [ 302.076730][ T2620] attempt to access beyond end of device [ 302.076730][ T2620] loop6: rw=524288, want=87472, limit=40427 [ 302.116812][ T2620] attempt to access beyond end of device [ 302.116812][ T2620] loop6: rw=524288, want=87480, limit=40427 [ 302.129047][ T2620] attempt to access beyond end of device [ 302.129047][ T2620] loop6: rw=524288, want=87488, limit=40427 [ 302.141465][ T2620] attempt to access beyond end of device [ 302.141465][ T2620] loop6: rw=524288, want=87496, limit=40427 [ 302.186669][ T4050] usb 9-1: Invalid ep0 maxpacket: 16 [ 302.186805][ T306] usb 8-1: USB disconnect, device number 29 [ 302.346721][ T4050] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 302.586636][ T4050] usb 9-1: Invalid ep0 maxpacket: 16 [ 302.592155][ T4050] usb usb9-port1: attempt power cycle [ 302.744488][ T4690] FAULT_INJECTION: forcing a failure. [ 302.744488][ T4690] name failslab, interval 1, probability 0, space 0, times 0 [ 302.757730][ T4690] CPU: 1 PID: 4690 Comm: syz.7.1295 Not tainted syzkaller #0 [ 302.765149][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 302.775238][ T4690] Call Trace: [ 302.778550][ T4690] [ 302.781534][ T4690] __dump_stack+0x21/0x30 [ 302.785909][ T4690] dump_stack_lvl+0x110/0x170 [ 302.790640][ T4690] ? show_regs_print_info+0x20/0x20 [ 302.795876][ T4690] ? __local_bh_enable_ip+0x58/0x80 [ 302.801112][ T4690] dump_stack+0x15/0x20 [ 302.805300][ T4690] should_fail+0x3ab/0x500 [ 302.809762][ T4690] __should_failslab+0xa4/0xe0 [ 302.814570][ T4690] should_failslab+0x9/0x20 [ 302.819118][ T4690] slab_pre_alloc_hook+0x39/0xd0 [ 302.824097][ T4690] ? __alloc_skb+0xe4/0x730 [ 302.828636][ T4690] kmem_cache_alloc+0x44/0x260 [ 302.833449][ T4690] __alloc_skb+0xe4/0x730 [ 302.837844][ T4690] netlink_sendmsg+0x611/0xb80 [ 302.842781][ T4690] ? avc_has_perm_noaudit+0x490/0x490 [ 302.848283][ T4690] ? netlink_getsockopt+0x530/0x530 [ 302.853527][ T4690] ? security_socket_sendmsg+0x82/0xa0 [ 302.859032][ T4690] sock_write_iter+0x2a6/0x3a0 [ 302.863833][ T4690] ? sock_read_iter+0x380/0x380 [ 302.868723][ T4690] ? memset+0x35/0x40 [ 302.872754][ T4690] ? iov_iter_init+0xbc/0x180 [ 302.877592][ T4690] vfs_write+0x831/0xfd0 [ 302.881875][ T4690] ? file_end_write+0x1b0/0x1b0 [ 302.886867][ T4690] ? __fget_files+0x2e1/0x340 [ 302.891584][ T4690] ? __fdget_pos+0x1f7/0x380 [ 302.896200][ T4690] ? ksys_write+0x70/0x260 [ 302.900651][ T4690] ksys_write+0x14a/0x260 [ 302.905056][ T4690] ? __ia32_sys_read+0x90/0x90 [ 302.909855][ T4690] ? debug_smp_processor_id+0x17/0x20 [ 302.915258][ T4690] __x64_sys_write+0x7b/0x90 [ 302.919878][ T4690] x64_sys_call+0x8ef/0x9a0 [ 302.924411][ T4690] do_syscall_64+0x4c/0xa0 [ 302.928860][ T4690] ? clear_bhb_loop+0x50/0xa0 [ 302.933647][ T4690] ? clear_bhb_loop+0x50/0xa0 [ 302.938392][ T4690] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.944323][ T4690] RIP: 0033:0x7f75e9da5159 [ 302.948764][ T4690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.968436][ T4690] RSP: 002b:00007f75e87fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 302.976883][ T4690] RAX: ffffffffffffffda RBX: 00007f75ea02cfa0 RCX: 00007f75e9da5159 [ 302.984889][ T4690] RDX: 0000000000000058 RSI: 0000200000000200 RDI: 0000000000000004 [ 302.992971][ T4690] RBP: 00007f75e87fe090 R08: 0000000000000000 R09: 0000000000000000 [ 303.001107][ T4690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.006878][ T4050] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 303.009107][ T4690] R13: 00007f75ea02d038 R14: 00007f75ea02cfa0 R15: 00007fff21ca59d8 [ 303.009132][ T4690] [ 303.067963][ T4691] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(12) [ 303.100219][ T4695] ip_tables: iptables: counters copy to user failed while replacing table [ 303.116332][ T30] audit: type=1400 audit(1790628707.425:445): avc: denied { write } for pid=4696 comm="syz.5.1298" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 303.117037][ T4050] usb 9-1: Invalid ep0 maxpacket: 16 [ 303.140994][ T4697] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 303.171253][ T4697] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1298'. [ 303.260572][ T4707] netlink: 3576 bytes leftover after parsing attributes in process `syz.3.1302'. [ 303.316723][ T4050] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 303.389408][ T4713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4713 comm=syz.3.1305 [ 303.410669][ T4714] set_capacity_and_notify: 2 callbacks suppressed [ 303.410688][ T4714] loop7: detected capacity change from 0 to 256 [ 303.423855][ T4050] usb 9-1: Invalid ep0 maxpacket: 16 [ 303.429286][ T4050] usb usb9-port1: unable to enumerate USB device [ 303.456077][ T4714] exfat: Deprecated parameter 'utf8' [ 303.472861][ T4714] exfat: Deprecated parameter 'utf8' [ 303.490269][ T4714] exfat: Deprecated parameter 'utf8' [ 303.512596][ T4714] exfat: Deprecated parameter 'namecase' [ 303.536045][ T4714] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 303.548366][ T351] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 303.667013][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1296'. [ 303.786630][ T351] usb 10-1: Using ep0 maxpacket: 8 [ 303.873720][ T4725] loop5: detected capacity change from 0 to 16 [ 303.936686][ T351] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 303.951020][ T351] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 303.971022][ T351] usb 10-1: config 179 has no interface number 0 [ 303.979880][ T4725] erofs: (device loop5): mounted with root inode @ nid 36. [ 303.991041][ T351] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 304.021031][ T351] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 304.041048][ T351] usb 10-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 304.071032][ T351] usb 10-1: config 179 interface 65 has no altsetting 0 [ 304.078140][ T351] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 304.101034][ T351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.360245][ T4050] usb 10-1: USB disconnect, device number 3 [ 304.723797][ T4738] FAULT_INJECTION: forcing a failure. [ 304.723797][ T4738] name failslab, interval 1, probability 0, space 0, times 0 [ 304.846810][ T4738] CPU: 0 PID: 4738 Comm: syz.5.1314 Not tainted syzkaller #0 [ 304.854252][ T4738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 304.864331][ T4738] Call Trace: [ 304.867630][ T4738] [ 304.870580][ T4738] __dump_stack+0x21/0x30 [ 304.874934][ T4738] dump_stack_lvl+0x110/0x170 [ 304.879650][ T4738] ? show_regs_print_info+0x20/0x20 [ 304.884869][ T4738] dump_stack+0x15/0x20 [ 304.889045][ T4738] should_fail+0x3ab/0x500 [ 304.893490][ T4738] ? netlink_sendmsg+0x611/0xb80 [ 304.898450][ T4738] __should_failslab+0xa4/0xe0 [ 304.903238][ T4738] should_failslab+0x9/0x20 [ 304.907939][ T4738] slab_pre_alloc_hook+0x39/0xd0 [ 304.912904][ T4738] ? netlink_sendmsg+0x611/0xb80 [ 304.917968][ T4738] ? netlink_sendmsg+0x611/0xb80 [ 304.923033][ T4738] __kmalloc_track_caller+0x6c/0x2c0 [ 304.928353][ T4738] ? netlink_sendmsg+0x611/0xb80 [ 304.933317][ T4738] ? netlink_sendmsg+0x611/0xb80 [ 304.938290][ T4738] __alloc_skb+0x210/0x730 [ 304.942739][ T4738] netlink_sendmsg+0x611/0xb80 [ 304.947537][ T4738] ? avc_has_perm_noaudit+0x490/0x490 [ 304.952940][ T4738] ? netlink_getsockopt+0x530/0x530 [ 304.958167][ T4738] ? security_socket_sendmsg+0x82/0xa0 [ 304.963778][ T4738] sock_write_iter+0x2a6/0x3a0 [ 304.968583][ T4738] ? sock_read_iter+0x380/0x380 [ 304.973484][ T4738] ? memset+0x35/0x40 [ 304.977497][ T4738] ? iov_iter_init+0xbc/0x180 [ 304.982222][ T4738] vfs_write+0x831/0xfd0 [ 304.986487][ T4738] ? file_end_write+0x1b0/0x1b0 [ 304.991374][ T4738] ? __fget_files+0x2e1/0x340 [ 304.996073][ T4738] ? __fdget_pos+0x1f7/0x380 [ 305.000686][ T4738] ? ksys_write+0x70/0x260 [ 305.005127][ T4738] ksys_write+0x14a/0x260 [ 305.009605][ T4738] ? __ia32_sys_read+0x90/0x90 [ 305.014389][ T4738] ? debug_smp_processor_id+0x17/0x20 [ 305.019798][ T4738] __x64_sys_write+0x7b/0x90 [ 305.024404][ T4738] x64_sys_call+0x8ef/0x9a0 [ 305.028924][ T4738] do_syscall_64+0x4c/0xa0 [ 305.033363][ T4738] ? clear_bhb_loop+0x50/0xa0 [ 305.038128][ T4738] ? clear_bhb_loop+0x50/0xa0 [ 305.042824][ T4738] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.048937][ T4738] RIP: 0033:0x7f7d1b58c159 [ 305.053491][ T4738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.073320][ T4738] RSP: 002b:00007f7d19fe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.081891][ T4738] RAX: ffffffffffffffda RBX: 00007f7d1b813fa0 RCX: 00007f7d1b58c159 [ 305.089898][ T4738] RDX: 0000000000000058 RSI: 0000200000000200 RDI: 0000000000000004 [ 305.097896][ T4738] RBP: 00007f7d19fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 305.105892][ T4738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.113897][ T4738] R13: 00007f7d1b814038 R14: 00007f7d1b813fa0 R15: 00007ffd43c504b8 [ 305.122033][ T4738] [ 305.154300][ T4741] loop7: detected capacity change from 0 to 128 [ 305.175947][ T4727] loop8: detected capacity change from 0 to 40427 [ 305.230811][ T4747] fuse: Bad value for 'fd' [ 305.242438][ T4747] loop5: detected capacity change from 0 to 2048 [ 305.247939][ T4727] F2FS-fs (loop8): invalid crc value [ 305.260327][ T4748] loop9: detected capacity change from 0 to 512 [ 305.277218][ T4727] F2FS-fs (loop8): Found nat_bits in checkpoint [ 305.436265][ T4753] loop5: detected capacity change from 0 to 128 [ 305.480356][ T4727] F2FS-fs (loop8): Cannot turn on quotas: -2 on 0 [ 305.503300][ T4748] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.507416][ T4727] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 305.522412][ T4748] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.696671][ T30] audit: type=1400 audit(1790628710.985:446): avc: denied { setopt } for pid=4726 comm="syz.8.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.936705][ T4050] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 306.947285][ T2620] handle_bad_sector: 61706 callbacks suppressed [ 306.947307][ T2620] attempt to access beyond end of device [ 306.947307][ T2620] loop6: rw=0, want=86144, limit=40427 [ 306.998119][ T2620] attempt to access beyond end of device [ 306.998119][ T2620] loop6: rw=0, want=86152, limit=40427 [ 307.032951][ T2620] attempt to access beyond end of device [ 307.032951][ T2620] loop6: rw=0, want=86160, limit=40427 [ 307.073706][ T2620] attempt to access beyond end of device [ 307.073706][ T2620] loop6: rw=0, want=86168, limit=40427 [ 307.090400][ T4790] loop7: detected capacity change from 0 to 512 [ 307.108322][ T2620] attempt to access beyond end of device [ 307.108322][ T2620] loop6: rw=0, want=86176, limit=40427 [ 307.119840][ T2620] attempt to access beyond end of device [ 307.119840][ T2620] loop6: rw=0, want=86184, limit=40427 [ 307.131291][ T2620] attempt to access beyond end of device [ 307.131291][ T2620] loop6: rw=0, want=86192, limit=40427 [ 307.142761][ T2620] attempt to access beyond end of device [ 307.142761][ T2620] loop6: rw=0, want=86200, limit=40427 [ 307.154174][ T2620] attempt to access beyond end of device [ 307.154174][ T2620] loop6: rw=0, want=86208, limit=40427 [ 307.165477][ T2620] attempt to access beyond end of device [ 307.165477][ T2620] loop6: rw=0, want=86216, limit=40427 [ 307.178822][ T4790] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 307.194063][ T4790] EXT4-fs (loop7): orphan cleanup on readonly fs [ 307.205026][ T4790] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:510: comm syz.7.1331: Block bitmap for bg 0 marked uninitialized [ 307.232693][ T4790] EXT4-fs (loop7): Remounting filesystem read-only [ 307.246986][ T4790] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 307.261145][ T4790] EXT4-fs (loop7): Remounting filesystem read-only [ 307.267807][ T4790] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:510: comm syz.7.1331: Block bitmap for bg 0 marked uninitialized [ 307.281274][ T4790] EXT4-fs (loop7): Remounting filesystem read-only [ 307.288343][ T4790] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 307.306852][ T4790] EXT4-fs (loop7): Remounting filesystem read-only [ 307.318880][ T4790] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:510: comm syz.7.1331: Block bitmap for bg 0 marked uninitialized [ 307.336847][ T4050] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.354317][ T4790] EXT4-fs (loop7): Remounting filesystem read-only [ 307.358223][ T4050] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 307.369192][ T4790] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 307.386649][ T4050] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 307.392248][ T4790] EXT4-fs (loop7): Remounting filesystem read-only [ 307.409568][ T4050] usb 9-1: config 0 interface 0 has no altsetting 0 [ 307.416302][ T4050] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 307.416473][ T4790] EXT4-fs (loop7): 1 orphan inode deleted [ 307.446275][ T4050] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.447651][ T4790] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,. Quota mode: none. [ 307.469785][ T4050] usb 9-1: config 0 descriptor?? [ 307.496716][ T4727] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 307.520364][ T4727] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 307.535924][ T4798] loop5: detected capacity change from 0 to 512 [ 307.597341][ T4798] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 307.643706][ T30] audit: type=1400 audit(1790628711.955:447): avc: denied { map } for pid=4804 comm="syz.3.1337" path="socket:[36137]" dev="sockfs" ino=36137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 307.693601][ T4808] loop7: detected capacity change from 0 to 1024 [ 307.700971][ T4798] EXT4-fs (loop5): 1 truncate cleaned up [ 307.708941][ T4798] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 307.776671][ T30] audit: type=1400 audit(1790628711.955:448): avc: denied { read accept } for pid=4804 comm="syz.3.1337" path="socket:[36137]" dev="sockfs" ino=36137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 307.806732][ T4050] usbhid 9-1:0.0: can't add hid device: -71 [ 307.812820][ T4050] usbhid: probe of 9-1:0.0 failed with error -71 [ 307.839544][ T4050] usb 9-1: USB disconnect, device number 14 [ 307.871970][ T4808] EXT4-fs error (device loop7): ext4_map_blocks:742: inode #3: block 1: comm syz.7.1338: lblock 1 mapped to illegal pblock 1 (length 1) [ 307.935685][ T30] audit: type=1400 audit(1790628712.145:449): avc: denied { rename } for pid=4797 comm="syz.5.1334" name="#a" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 307.967561][ T4808] Quota error (device loop7): write_blk: dquota write failed [ 307.979313][ T4813] incfs_lookup_dentry err:-40 [ 307.984063][ T4813] overlayfs: failed to resolve './file0': -40 [ 308.006780][ T4808] Quota error (device loop7): find_free_dqentry: Can't write quota data block 1 [ 308.015930][ T4808] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 308.047336][ T30] audit: type=1400 audit(1790628712.145:450): avc: denied { unlink } for pid=4797 comm="syz.5.1334" name="#b" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 308.047505][ T4814] incfs_lookup_dentry err:-40 [ 308.074111][ T4808] EXT4-fs error (device loop7): ext4_acquire_dquot:6227: comm syz.7.1338: Failed to acquire dquot type 0 [ 308.116278][ T4808] EXT4-fs error (device loop7): ext4_map_blocks:632: inode #3: block 1: comm syz.7.1338: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.146755][ T4808] Quota error (device loop7): do_insert_tree: Can't read tree quota block 1 [ 308.168587][ T30] audit: type=1400 audit(1790628712.165:451): avc: denied { read write } for pid=4797 comm="syz.5.1334" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 308.186954][ T4808] EXT4-fs error (device loop7): ext4_acquire_dquot:6227: comm syz.7.1338: Failed to acquire dquot type 0 [ 308.200902][ T4818] FAT-fs (loop8): Unrecognized mount option "shortname=lo" or missing value [ 308.227018][ T4808] EXT4-fs error (device loop7): ext4_free_blocks:6231: comm syz.7.1338: Freeing blocks not in datazone - block = 0, count = 4096 [ 308.271366][ T4808] EXT4-fs error (device loop7): ext4_map_blocks:632: inode #3: block 1: comm syz.7.1338: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.304207][ T2474] ------------[ cut here ]------------ [ 308.309766][ T2474] WARNING: CPU: 1 PID: 2474 at fs/overlayfs/util.c:475 ovl_dir_modified+0x189/0x1c0 [ 308.319459][ T2474] Modules linked in: [ 308.323380][ T2474] CPU: 1 PID: 2474 Comm: syz.5.601 Not tainted syzkaller #0 [ 308.330720][ T2474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.340854][ T2474] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 308.346528][ T2474] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ae 79 a7 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 01 68 ff <0f> 0b e9 17 ff ff ff e8 5b 01 68 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 308.366220][ T2474] RSP: 0018:ffffc90001067760 EFLAGS: 00010293 [ 308.372339][ T2474] RAX: ffffffff8201cf59 RBX: 1ffff110252337c0 RCX: ffff8881191d93c0 [ 308.377135][ T4808] EXT4-fs error (device loop7): ext4_acquire_dquot:6227: comm syz.7.1338: Failed to acquire dquot type 0 [ 308.380358][ T2474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.399578][ T2474] RBP: ffffc90001067790 R08: ffff88812901eee7 R09: 1ffff11025203ddc [ 308.407628][ T2474] R10: dffffc0000000000 R11: ffffed1025203ddd R12: ffff88812919bdd0 [ 308.415636][ T2474] R13: 0000000000000000 R14: ffff88812901ee40 R15: ffff88812919be00 [ 308.423581][ T4808] EXT4-fs (loop7): 1 orphan inode deleted [ 308.423633][ T4808] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 308.429414][ T2474] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 308.429436][ T2474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.429452][ T2474] CR2: 00007f0b1c99d924 CR3: 0000000112240000 CR4: 00000000003506a0 [ 308.463945][ T2474] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.471993][ T2474] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.480508][ T2474] Call Trace: [ 308.483815][ T2474] [ 308.486786][ T2474] ovl_do_remove+0x688/0x960 [ 308.491420][ T2474] ? ovl_set_redirect+0x670/0x670 [ 308.496506][ T2474] ? selinux_inode_rmdir+0x22/0x30 [ 308.501684][ T2474] ovl_rmdir+0x1a/0x20 [ 308.505945][ T2474] vfs_rmdir+0x1ae/0x450 [ 308.510273][ T2474] incfs_kill_sb+0xfe/0x210 [ 308.514849][ T2474] deactivate_locked_super+0xa0/0x100 [ 308.520289][ T2474] deactivate_super+0xaf/0xe0 [ 308.524994][ T2474] cleanup_mnt+0x44f/0x500 [ 308.529479][ T2474] __cleanup_mnt+0x19/0x20 [ 308.533922][ T2474] task_work_run+0x127/0x190 [ 308.538594][ T2474] do_exit+0xb70/0x29a0 [ 308.542781][ T2474] ? put_task_struct+0x90/0x90 [ 308.547597][ T2474] ? __kasan_check_write+0x14/0x20 [ 308.552746][ T2474] ? _raw_spin_lock_irq+0x95/0xf0 [ 308.557826][ T2474] ? __kasan_check_read+0x11/0x20 [ 308.562883][ T2474] do_group_exit+0x149/0x310 [ 308.567564][ T2474] ? cgroup_leave_frozen+0x165/0x2a0 [ 308.572918][ T2474] get_signal+0x64f/0x1430 [ 308.577623][ T2474] ? usleep_range_state+0x130/0x130 [ 308.582858][ T2474] arch_do_signal_or_restart+0xe2/0x1100 [ 308.588651][ T2474] ? nanosleep_copyout+0x120/0x120 [ 308.593796][ T2474] ? __remove_hrtimer+0x3d0/0x3d0 [ 308.598865][ T2474] ? get_timespec64+0x116/0x1b0 [ 308.603738][ T2474] ? get_sigframe_size+0x10/0x10 [ 308.608715][ T2474] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 308.614384][ T2474] exit_to_user_mode_loop+0xa7/0xe0 [ 308.619711][ T2474] exit_to_user_mode_prepare+0x87/0xd0 [ 308.625204][ T2474] syscall_exit_to_user_mode+0x1a/0x30 [ 308.630739][ T2474] do_syscall_64+0x58/0xa0 [ 308.635176][ T2474] ? clear_bhb_loop+0x50/0xa0 [ 308.639920][ T2474] ? clear_bhb_loop+0x50/0xa0 [ 308.644624][ T2474] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.650611][ T2474] RIP: 0033:0x7f7d1b54c98e [ 308.655055][ T2474] Code: Unable to access opcode bytes at RIP 0x7f7d1b54c964. [ 308.662475][ T2474] RSP: 002b:00007f7d19fc3f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 308.670952][ T2474] RAX: fffffffffffffdfc RBX: 00007f7d19fc46c0 RCX: 00007f7d1b54c98e [ 308.678973][ T2474] RDX: 00007f7d19fc3fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.686993][ T2474] RBP: 00007f7d1b62306b R08: 0000000000000000 R09: 0000000000000000 [ 308.694992][ T2474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.703049][ T2474] R13: 00007f7d1b814128 R14: 00007f7d1b814090 R15: 00007ffd43c504b8 [ 308.707524][ T4808] EXT4-fs error (device loop7): ext4_map_blocks:632: inode #3: block 1: comm syz.7.1338: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.711128][ T2474] [ 308.728076][ T2474] ---[ end trace 63cb35b710bbb0eb ]--- [ 308.733936][ T2474] ------------[ cut here ]------------ [ 308.739455][ T2474] WARNING: CPU: 0 PID: 2474 at fs/overlayfs/util.c:475 ovl_dir_modified+0x189/0x1c0 [ 308.749858][ T2474] Modules linked in: [ 308.753791][ T2474] CPU: 0 PID: 2474 Comm: syz.5.601 Tainted: G W syzkaller #0 [ 308.762542][ T2474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.772650][ T2474] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 308.778340][ T2474] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ae 79 a7 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 01 68 ff <0f> 0b e9 17 ff ff ff e8 5b 01 68 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 308.782647][ T4823] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1340'. [ 308.798000][ T2474] RSP: 0018:ffffc90001067760 EFLAGS: 00010293 [ 308.798025][ T2474] RAX: ffffffff8201cf59 RBX: 1ffff110252337c0 RCX: ffff8881191d93c0 [ 308.798042][ T2474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.829457][ T2474] RBP: ffffc90001067790 R08: ffff88812901eee7 R09: 1ffff11025203ddc [ 308.837673][ T2474] R10: dffffc0000000000 R11: ffffed1025203ddd R12: ffff88812919bdd0 [ 308.845816][ T2474] R13: 0000000000000000 R14: ffff88812901ee40 R15: ffff88812919be00 [ 308.853958][ T2474] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 308.855204][ T4808] EXT4-fs error (device loop7): ext4_acquire_dquot:6227: comm syz.7.1338: Failed to acquire dquot type 0 [ 308.862986][ T2474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.863008][ T2474] CR2: 00007f2b0a722ff8 CR3: 000000010ddde000 CR4: 00000000003526b0 [ 308.863028][ T2474] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.896941][ T2474] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.905045][ T2474] Call Trace: [ 308.908400][ T2474] [ 308.911675][ T2474] ovl_do_remove+0x688/0x960 [ 308.916299][ T2474] ? ovl_set_redirect+0x670/0x670 [ 308.921447][ T2474] ? selinux_inode_rmdir+0x22/0x30 [ 308.926627][ T2474] ovl_rmdir+0x1a/0x20 [ 308.930730][ T2474] vfs_rmdir+0x1ae/0x450 [ 308.934999][ T2474] incfs_kill_sb+0x18f/0x210 [ 308.939707][ T2474] deactivate_locked_super+0xa0/0x100 [ 308.945111][ T2474] deactivate_super+0xaf/0xe0 [ 308.949856][ T2474] cleanup_mnt+0x44f/0x500 [ 308.954307][ T2474] __cleanup_mnt+0x19/0x20 [ 308.958780][ T2474] task_work_run+0x127/0x190 [ 308.963406][ T2474] do_exit+0xb70/0x29a0 [ 308.967678][ T2474] ? put_task_struct+0x90/0x90 [ 308.972494][ T2474] ? __kasan_check_write+0x14/0x20 [ 308.977681][ T2474] ? _raw_spin_lock_irq+0x95/0xf0 [ 308.982735][ T2474] ? __kasan_check_read+0x11/0x20 [ 308.987943][ T2474] do_group_exit+0x149/0x310 [ 308.992571][ T2474] ? cgroup_leave_frozen+0x165/0x2a0 [ 308.997951][ T2474] get_signal+0x64f/0x1430 [ 309.002400][ T2474] ? usleep_range_state+0x130/0x130 [ 309.007723][ T2474] arch_do_signal_or_restart+0xe2/0x1100 [ 309.013398][ T2474] ? nanosleep_copyout+0x120/0x120 [ 309.018686][ T2474] ? __remove_hrtimer+0x3d0/0x3d0 [ 309.023759][ T2474] ? get_timespec64+0x116/0x1b0 [ 309.028671][ T2474] ? get_sigframe_size+0x10/0x10 [ 309.033645][ T2474] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 309.039347][ T2474] exit_to_user_mode_loop+0xa7/0xe0 [ 309.044588][ T2474] exit_to_user_mode_prepare+0x87/0xd0 [ 309.050120][ T2474] syscall_exit_to_user_mode+0x1a/0x30 [ 309.055611][ T2474] do_syscall_64+0x58/0xa0 [ 309.060488][ T2474] ? clear_bhb_loop+0x50/0xa0 [ 309.065579][ T2474] ? clear_bhb_loop+0x50/0xa0 [ 309.070651][ T2474] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.076669][ T2474] RIP: 0033:0x7f7d1b54c98e [ 309.081124][ T2474] Code: Unable to access opcode bytes at RIP 0x7f7d1b54c964. [ 309.088864][ T2474] RSP: 002b:00007f7d19fc3f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 309.097383][ T2474] RAX: fffffffffffffdfc RBX: 00007f7d19fc46c0 RCX: 00007f7d1b54c98e [ 309.105401][ T2474] RDX: 00007f7d19fc3fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.113477][ T2474] RBP: 00007f7d1b62306b R08: 0000000000000000 R09: 0000000000000000 [ 309.121544][ T2474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.129594][ T2474] R13: 00007f7d1b814128 R14: 00007f7d1b814090 R15: 00007ffd43c504b8 [ 309.137751][ T2474] [ 309.140837][ T2474] ---[ end trace 63cb35b710bbb0ec ]--- [ 309.259777][ T345] tipc: Left network mode [ 309.753874][ T4796] set_capacity_and_notify: 1 callbacks suppressed [ 309.753893][ T4796] loop9: detected capacity change from 0 to 131072 [ 309.853183][ T4796] F2FS-fs (loop9): invalid crc value [ 309.875869][ T345] device bridge_slave_1 left promiscuous mode [ 309.886061][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.925378][ T345] device bridge_slave_0 left promiscuous mode [ 309.951282][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.979009][ T4796] F2FS-fs (loop9): Found nat_bits in checkpoint [ 309.996883][ T345] device veth0_vlan left promiscuous mode [ 310.081955][ T4842] loop8: detected capacity change from 0 to 16 [ 310.099572][ T4796] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 310.124321][ T4796] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 310.156783][ T4842] erofs: (device loop8): mounted with root inode @ nid 36. [ 310.202887][ T4796] F2FS-fs (loop9): sanity_check_inode: corrupted inode footer i_ino=4, ino,nid: [7, 4] run fsck to fix. [ 310.269033][ T4837] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.276186][ T4837] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.283966][ T4837] device bridge_slave_0 entered promiscuous mode [ 310.292436][ T4837] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.299689][ T4837] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.307434][ T4837] device bridge_slave_1 entered promiscuous mode [ 310.338523][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 310.347896][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 310.357086][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 310.366024][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 310.376647][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 310.386160][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 310.401909][ T4862] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1349'. [ 310.457271][ T4837] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.464472][ T4837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.471797][ T4837] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.478859][ T4837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.489355][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 310.514557][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 310.546631][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 310.561162][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.577471][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.905237][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 310.934394][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.948248][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 310.976841][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 311.001118][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 311.051428][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 311.061007][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.084339][ T4334] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 311.125988][ T4886] loop7: detected capacity change from 0 to 256 [ 311.157977][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.193385][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.200530][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.218470][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.234989][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.238070][ T4886] FAT-fs (loop7): Unrecognized mount option "shortname=lo" or missing value [ 311.242182][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.322837][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 311.348181][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.411224][ T4899] loop8: detected capacity change from 0 to 256 [ 311.425408][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 311.439630][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.449408][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1356'. [ 311.464244][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.475472][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.493258][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.509963][ T4899] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 311.535804][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.557847][ T4837] device veth0_vlan entered promiscuous mode [ 311.576337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 311.607238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 311.636361][ T4837] device veth1_macvtap entered promiscuous mode [ 311.658923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.677237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.694900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.721163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.747150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.808393][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 311.837173][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 311.849023][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 311.861891][ T4919] loop0: detected capacity change from 0 to 256 [ 311.879870][ T4919] exfat: Bad value for 'gid' [ 311.983348][ T4932] loop7: detected capacity change from 0 to 512 [ 311.994063][ T4919] : renamed from bond_slave_1 [ 311.999126][ T2620] handle_bad_sector: 34383 callbacks suppressed [ 311.999145][ T2620] attempt to access beyond end of device [ 311.999145][ T2620] loop6: rw=524288, want=88048, limit=40427 [ 312.028296][ T4937] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.041585][ T4938] UDC core: couldn't find an available UDC or it's busy: -16 [ 312.049733][ T2620] attempt to access beyond end of device [ 312.049733][ T2620] loop6: rw=524288, want=88056, limit=40427 [ 312.061523][ T4932] EXT4-fs (loop7): Test dummy encryption mode enabled [ 312.069644][ T4938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 312.077596][ T2620] attempt to access beyond end of device [ 312.077596][ T2620] loop6: rw=524288, want=88064, limit=40427 [ 312.090896][ T2620] attempt to access beyond end of device [ 312.090896][ T2620] loop6: rw=524288, want=88072, limit=40427 [ 312.099682][ T4932] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.1360: missing EA_INODE flag [ 312.105496][ T2620] attempt to access beyond end of device [ 312.105496][ T2620] loop6: rw=524288, want=88080, limit=40427 [ 312.125689][ T2620] attempt to access beyond end of device [ 312.125689][ T2620] loop6: rw=524288, want=88088, limit=40427 [ 312.137625][ T2620] attempt to access beyond end of device [ 312.137625][ T2620] loop6: rw=524288, want=88096, limit=40427 [ 312.149543][ T2620] attempt to access beyond end of device [ 312.149543][ T2620] loop6: rw=524288, want=88104, limit=40427 [ 312.159092][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 312.159148][ T30] audit: type=1400 audit(1790628716.475:462): avc: denied { lock } for pid=4898 comm="syz.8.1358" path="/101/file0/file0" dev="loop8" ino=1048847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 312.162969][ T2620] attempt to access beyond end of device [ 312.162969][ T2620] loop6: rw=524288, want=88112, limit=40427 [ 312.202560][ T2620] attempt to access beyond end of device [ 312.202560][ T2620] loop6: rw=524288, want=88120, limit=40427 [ 312.204511][ T4937] device bridge_slave_1 left promiscuous mode [ 312.237529][ T4932] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1360: error while reading EA inode 2 err=-117 [ 312.259690][ T4937] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.278175][ T4932] EXT4-fs (loop7): 1 orphan inode deleted [ 312.294381][ T4932] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: writeback. [ 312.306753][ T4050] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 312.324341][ T4945] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 312.346821][ T4945] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 312.434176][ T4956] netlink: 3576 bytes leftover after parsing attributes in process `syz.0.1365'. [ 312.460539][ T4958] loop9: detected capacity change from 0 to 256 [ 312.481645][ T4958] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.515053][ T4958] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 312.544682][ T4958] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xda9de4d5, utbl_chksum : 0xe619d30d) [ 312.676751][ T4050] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 312.692419][ T4050] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 312.715449][ T4050] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.746870][ T4968] netlink: 124 bytes leftover after parsing attributes in process `syz.9.1369'. [ 313.933777][ T4979] netlink: 3612 bytes leftover after parsing attributes in process `syz.0.1374'. [ 314.067155][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 314.086388][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 314.167982][ T4991] netlink: 3576 bytes leftover after parsing attributes in process `syz.0.1378'. [ 314.199616][ T4992] loop9: detected capacity change from 0 to 256 [ 314.292789][ T4992] exfat: Deprecated parameter 'utf8' [ 314.300024][ T4992] exfat: Deprecated parameter 'utf8' [ 314.334398][ T4992] exfat: Deprecated parameter 'utf8' [ 314.345242][ T4962] loop7: detected capacity change from 0 to 131072 [ 314.362246][ T4992] exfat: Deprecated parameter 'namecase' [ 314.373540][ T4962] F2FS-fs (loop7): Wrong secs_per_zone / total_sections (512, 24) [ 314.386876][ T4962] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 314.409584][ T4962] F2FS-fs (loop7): Test dummy encryption mode enabled [ 314.432452][ T4962] F2FS-fs (loop7): Unrecognized mount option ":“U)t=vfsold" or missing value [ 314.458551][ T4992] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 314.656559][ T5001] loop0: detected capacity change from 0 to 256 [ 314.778518][ T5001] exfat: Deprecated parameter 'utf8' [ 314.783939][ T5001] exfat: Deprecated parameter 'utf8' [ 314.801588][ T4992] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1372'. [ 314.818783][ T5001] exfat: Deprecated parameter 'utf8' [ 314.847931][ T5001] exfat: Deprecated parameter 'namecase' [ 314.924183][ T5001] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 315.006678][ T4050] usbhid 9-1:1.0: can't add hid device: -71 [ 315.012723][ T4050] usbhid: probe of 9-1:1.0 failed with error -71 [ 315.043037][ T4050] usb 9-1: USB disconnect, device number 15 [ 315.301222][ T5007] loop8: detected capacity change from 0 to 512 [ 315.630714][ T5007] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 316.298504][ T5011] loop7: detected capacity change from 0 to 16 [ 316.357012][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1379'. [ 316.447292][ T5011] erofs: Unknown parameter 'ÿÿÿÿÿ0x0000000000000000' [ 316.578353][ T5015] loop8: detected capacity change from 0 to 512 [ 316.719314][ T5015] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 316.726406][ T5021] loop7: detected capacity change from 0 to 256 [ 316.758551][ T5015] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.106676][ T2620] handle_bad_sector: 26498 callbacks suppressed [ 317.106699][ T2620] attempt to access beyond end of device [ 317.106699][ T2620] loop6: rw=524288, want=86272, limit=40427 [ 317.167115][ T2620] attempt to access beyond end of device [ 317.167115][ T2620] loop6: rw=524288, want=86280, limit=40427 [ 317.194786][ T30] audit: type=1400 audit(1790628721.505:463): avc: denied { append } for pid=5020 comm="syz.7.1385" name="p_chmask" dev="configfs" ino=36688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 317.264542][ T2620] attempt to access beyond end of device [ 317.264542][ T2620] loop6: rw=524288, want=86288, limit=40427 [ 317.333441][ T2620] attempt to access beyond end of device [ 317.333441][ T2620] loop6: rw=524288, want=86296, limit=40427 [ 317.403402][ T2620] attempt to access beyond end of device [ 317.403402][ T2620] loop6: rw=524288, want=86304, limit=40427 [ 317.475984][ T2620] attempt to access beyond end of device [ 317.475984][ T2620] loop6: rw=524288, want=86312, limit=40427 [ 317.546466][ T2620] attempt to access beyond end of device [ 317.546466][ T2620] loop6: rw=524288, want=86320, limit=40427 [ 317.626681][ T2620] attempt to access beyond end of device [ 317.626681][ T2620] loop6: rw=524288, want=86328, limit=40427 [ 317.688784][ T2620] attempt to access beyond end of device [ 317.688784][ T2620] loop6: rw=524288, want=86336, limit=40427 [ 317.740149][ T2620] attempt to access beyond end of device [ 317.740149][ T2620] loop6: rw=524288, want=86344, limit=40427 [ 317.928631][ T30] audit: type=1400 audit(1790628722.245:464): avc: denied { setattr } for pid=5035 comm="syz.8.1389" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 318.017025][ T30] audit: type=1400 audit(1790628722.245:465): avc: denied { ioctl } for pid=5035 comm="syz.8.1389" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 318.153095][ T5046] overlayfs: failed to clone upperpath [ 318.168213][ T5046] overlayfs: './file0' not a directory [ 318.246711][ T4050] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 318.270767][ T5052] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1395'. [ 318.503119][ T5060] loop7: detected capacity change from 0 to 128 [ 319.480056][ T5061] tipc: Started in network mode [ 319.485144][ T5061] tipc: Node identity 4, cluster identity 4711 [ 319.491415][ T5061] tipc: Node number set to 4 [ 319.577739][ T5060] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 319.602921][ T5056] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 319.611540][ T5056] FAT-fs (loop7): Filesystem has been set read-only [ 319.756507][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 319.791157][ T554] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 319.806709][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 319.857971][ T4050] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.911389][ T4050] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.927768][ T30] audit: type=1400 audit(1790628724.245:466): avc: denied { getopt } for pid=5070 comm="syz.9.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 319.973456][ T4050] usb 9-1: config 0 interface 0 has no altsetting 0 [ 319.991769][ T4050] usb 9-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 319.991806][ T4050] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.004202][ T30] audit: type=1400 audit(1790628724.315:467): avc: denied { ioctl } for pid=5079 comm="syz.3.1407" path="socket:[37485]" dev="sockfs" ino=37485 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 320.007881][ T5078] loop9: detected capacity change from 0 to 16 [ 320.027933][ T4050] usb 9-1: config 0 descriptor?? [ 320.121499][ T5078] erofs: (device loop9): mounted with root inode @ nid 36. [ 320.123724][ T5078] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 320.144002][ T5078] erofs: (device loop9): z_erofs_readpage: failed to read, err [-117] [ 320.242093][ T5086] loop7: detected capacity change from 0 to 256 [ 320.243902][ T5086] FAT-fs (loop7): Unrecognized mount option "shortname=lo" or missing value [ 320.347064][ T30] audit: type=1326 audit(1790628724.655:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.9.1409" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13bedba159 code=0x0 [ 320.432504][ T5093] loop9: detected capacity change from 0 to 512 [ 320.458232][ T5093] EXT4-fs (loop9): Ignoring removed orlov option [ 320.470917][ T5093] EXT4-fs error (device loop9): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 320.470992][ T5093] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #11: comm syz.9.1409: corrupted inode contents [ 320.471167][ T5093] EXT4-fs error (device loop9): ext4_dirty_inode:6108: inode #11: comm syz.9.1409: mark_inode_dirty error [ 320.471381][ T5093] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1409: invalid indirect mapped block 1 (level 1) [ 320.471558][ T5093] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #11: comm syz.9.1409: corrupted inode contents [ 320.471704][ T5093] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 320.471842][ T5093] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #11: comm syz.9.1409: corrupted inode contents [ 320.471986][ T5093] EXT4-fs error (device loop9): ext4_truncate:4317: inode #11: comm syz.9.1409: mark_inode_dirty error [ 320.472128][ T5093] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 320.472314][ T5093] EXT4-fs (loop9): 1 truncate cleaned up [ 320.472332][ T5093] EXT4-fs (loop9): mounted filesystem without journal. Opts: stripe=0x0000000000000001,nodelalloc,orlov,,errors=continue. Quota mode: none. [ 320.822309][ T4050] sony 0003:054C:0268.000B: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.8-1/input0 [ 320.822345][ T4050] sony 0003:054C:0268.000B: failed to claim input [ 320.971961][ T5098] netlink: 3612 bytes leftover after parsing attributes in process `syz.0.1411'. [ 321.033909][ T39] usb 9-1: USB disconnect, device number 16 [ 321.112848][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1415'. [ 321.146651][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1415'. [ 321.199773][ T5106] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 321.259243][ T30] audit: type=1400 audit(1790628725.575:469): avc: denied { ioctl } for pid=5105 comm="syz.7.1416" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 321.335213][ T30] audit: type=1326 audit(1790628725.645:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.7.1416" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75e9da5159 code=0x0 [ 321.767481][ T30] audit: type=1400 audit(1790628726.085:471): avc: denied { map } for pid=5110 comm="syz.9.1414" path="socket:[37911]" dev="sockfs" ino=37911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.887693][ T5120] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1420'. [ 322.096853][ T5130] loop7: detected capacity change from 0 to 16 [ 322.122241][ T2620] handle_bad_sector: 31639 callbacks suppressed [ 322.122262][ T2620] attempt to access beyond end of device [ 322.122262][ T2620] loop6: rw=524288, want=86024, limit=40427 [ 322.158569][ T5102] loop0: detected capacity change from 0 to 131072 [ 322.170468][ T2620] attempt to access beyond end of device [ 322.170468][ T2620] loop6: rw=524288, want=86032, limit=40427 [ 322.184988][ T5130] erofs: (device loop7): mounted with root inode @ nid 36. [ 322.200164][ T5134] loop8: detected capacity change from 0 to 256 [ 322.206902][ T5130] FAULT_INJECTION: forcing a failure. [ 322.206902][ T5130] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.212833][ T2620] attempt to access beyond end of device [ 322.212833][ T2620] loop6: rw=524288, want=86040, limit=40427 [ 322.231753][ T5102] F2FS-fs (loop0): Test dummy encryption mode enabled [ 322.237611][ T5102] F2FS-fs (loop0): invalid crc value [ 322.255084][ T5134] FAT-fs (loop8): Unrecognized mount option "shortname=lo" or missing value [ 322.266504][ T5130] CPU: 0 PID: 5130 Comm: syz.7.1423 Tainted: G W syzkaller #0 [ 322.275328][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 322.285419][ T5130] Call Trace: [ 322.288727][ T5130] [ 322.291685][ T5130] __dump_stack+0x21/0x30 [ 322.296076][ T5130] dump_stack_lvl+0x110/0x170 [ 322.300808][ T5130] ? show_regs_print_info+0x20/0x20 [ 322.306037][ T5130] ? __x64_sys_newfstatat+0x9b/0xb0 [ 322.307723][ T2620] attempt to access beyond end of device [ 322.307723][ T2620] loop6: rw=524288, want=86048, limit=40427 [ 322.311263][ T5130] ? do_syscall_64+0x4c/0xa0 [ 322.311287][ T5130] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.333328][ T5130] dump_stack+0x15/0x20 [ 322.337534][ T5130] should_fail+0x3ab/0x500 [ 322.341987][ T5130] should_fail_alloc_page+0x55/0x80 [ 322.347217][ T5130] prepare_alloc_pages+0x13f/0x590 [ 322.352386][ T5130] ? __alloc_pages_bulk+0xab0/0xab0 [ 322.357624][ T5130] __alloc_pages+0x11d/0x460 [ 322.362253][ T5130] ? prep_new_page+0x110/0x110 [ 322.363741][ T2620] attempt to access beyond end of device [ 322.363741][ T2620] loop6: rw=524288, want=86056, limit=40427 [ 322.367046][ T5130] ? _raw_spin_lock+0x94/0xf0 [ 322.367070][ T5130] ? __d_alloc+0x4a4/0x690 [ 322.367092][ T5130] do_read_cache_page+0x89/0xb10 [ 322.392514][ T5130] read_cache_page+0x50/0x70 [ 322.396876][ T2620] attempt to access beyond end of device [ 322.396876][ T2620] loop6: rw=524288, want=86064, limit=40427 [ 322.397146][ T5130] erofs_namei+0x12a/0xf80 [ 322.412955][ T5130] ? __kasan_check_write+0x14/0x20 [ 322.418104][ T5130] erofs_lookup+0xa5/0x260 [ 322.422544][ T5130] __lookup_slow+0x2b8/0x410 [ 322.427170][ T5130] ? lookup_one_len+0x2d0/0x2d0 [ 322.432065][ T5130] ? down_read+0xab/0x100 [ 322.436507][ T5130] ? handle_dots+0xe10/0xe10 [ 322.441112][ T5130] lookup_slow+0x57/0x70 [ 322.445381][ T5130] walk_component+0x326/0x460 [ 322.450103][ T5130] path_lookupat+0x155/0x430 [ 322.454712][ T5130] filename_lookup+0x21e/0x550 [ 322.459494][ T5130] ? hashlen_string+0x120/0x120 [ 322.464398][ T5130] ? getname_flags+0x205/0x510 [ 322.469178][ T5130] user_path_at_empty+0x46/0x1c0 [ 322.474140][ T5130] vfs_statx+0x109/0xa20 [ 322.478425][ T5130] ? __kasan_check_write+0x14/0x20 [ 322.483555][ T5130] ? proc_fail_nth_write+0x180/0x200 [ 322.488855][ T5130] ? proc_fail_nth_read+0x220/0x220 [ 322.494082][ T5130] ? vfs_fstatat+0x40/0x40 [ 322.498513][ T5130] __se_sys_newfstatat+0x10e/0x3d0 [ 322.503642][ T5130] ? __x64_sys_newfstatat+0xb0/0xb0 [ 322.508869][ T5130] ? file_end_write+0x1b0/0x1b0 [ 322.513729][ T5130] ? __kasan_check_write+0x14/0x20 [ 322.518855][ T5130] ? mutex_unlock+0x8f/0x230 [ 322.523460][ T5130] ? __mutex_lock_slowpath+0x10/0x10 [ 322.528765][ T5130] ? __ia32_sys_read+0x90/0x90 [ 322.533546][ T5130] __x64_sys_newfstatat+0x9b/0xb0 [ 322.538592][ T5130] x64_sys_call+0x2c1/0x9a0 [ 322.543111][ T5130] do_syscall_64+0x4c/0xa0 [ 322.547546][ T5130] ? clear_bhb_loop+0x50/0xa0 [ 322.552327][ T5130] ? clear_bhb_loop+0x50/0xa0 [ 322.557038][ T5130] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.562944][ T5130] RIP: 0033:0x7f75e9da5159 [ 322.567370][ T5130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.586994][ T5130] RSP: 002b:00007f75e87fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 322.595421][ T5130] RAX: ffffffffffffffda RBX: 00007f75ea02cfa0 RCX: 00007f75e9da5159 [ 322.603583][ T5130] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 322.611579][ T5130] RBP: 00007f75e87fe090 R08: 0000000000000000 R09: 0000000000000000 [ 322.619581][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.627567][ T5130] R13: 00007f75ea02d038 R14: 00007f75ea02cfa0 R15: 00007fff21ca59d8 [ 322.635560][ T5130] [ 322.638961][ T2620] attempt to access beyond end of device [ 322.638961][ T2620] loop6: rw=524288, want=86072, limit=40427 [ 322.661084][ T5102] F2FS-fs (loop0): Found nat_bits in checkpoint [ 322.678257][ T2620] attempt to access beyond end of device [ 322.678257][ T2620] loop6: rw=524288, want=86080, limit=40427 [ 322.700033][ T2620] attempt to access beyond end of device [ 322.700033][ T2620] loop6: rw=524288, want=86088, limit=40427 [ 322.724104][ T2620] attempt to access beyond end of device [ 322.724104][ T2620] loop6: rw=524288, want=86096, limit=40427 [ 322.816725][ T5102] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 322.904347][ T30] audit: type=1400 audit(1790628727.215:472): avc: denied { ioctl } for pid=5101 comm="syz.0.1413" path="/17/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=10 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 324.061980][ T5151] tipc: Started in network mode [ 324.066921][ T5151] tipc: Node identity 4, cluster identity 4711 [ 324.073208][ T5151] tipc: Node number set to 4 [ 324.927604][ T5166] loop9: detected capacity change from 0 to 512 [ 324.961890][ T5166] EXT4-fs (loop9): Unrecognized mount option "obj_user=§-.#-pP-ÔCæoòø³n.\Øе7#ÖâJ¡@‚ÉåC¯" or missing value [ 325.017782][ T5168] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1434'. [ 325.083808][ T5166] loop9: detected capacity change from 0 to 2048 [ 325.895071][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 327.146692][ T2620] handle_bad_sector: 12025 callbacks suppressed [ 327.146716][ T2620] attempt to access beyond end of device [ 327.146716][ T2620] loop6: rw=524288, want=87264, limit=40427 [ 327.183579][ T5195] loop9: detected capacity change from 0 to 16 [ 327.191684][ T5195] erofs: Unknown parameter 'ÿÿÿÿÿ0x0000000000000000' [ 327.221315][ T5197] netlink: 3576 bytes leftover after parsing attributes in process `syz.8.1444'. [ 327.226916][ T2620] attempt to access beyond end of device [ 327.226916][ T2620] loop6: rw=524288, want=87272, limit=40427 [ 327.253508][ T5199] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1445'. [ 327.257790][ T2620] attempt to access beyond end of device [ 327.257790][ T2620] loop6: rw=524288, want=87280, limit=40427 [ 327.306764][ T2620] attempt to access beyond end of device [ 327.306764][ T2620] loop6: rw=524288, want=87288, limit=40427 [ 327.331137][ T2620] attempt to access beyond end of device [ 327.331137][ T2620] loop6: rw=524288, want=87296, limit=40427 [ 327.337494][ T5203] loop8: detected capacity change from 0 to 16 [ 327.375536][ T2620] attempt to access beyond end of device [ 327.375536][ T2620] loop6: rw=524288, want=87304, limit=40427 [ 327.449256][ T5203] erofs: (device loop8): mounted with root inode @ nid 36. [ 327.457127][ T2620] attempt to access beyond end of device [ 327.457127][ T2620] loop6: rw=524288, want=87312, limit=40427 [ 327.667049][ T2620] attempt to access beyond end of device [ 327.667049][ T2620] loop6: rw=524288, want=87320, limit=40427 [ 327.714860][ T2620] attempt to access beyond end of device [ 327.714860][ T2620] loop6: rw=524288, want=87328, limit=40427 [ 327.732467][ T5203] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=86 [ 327.746699][ T2620] attempt to access beyond end of device [ 327.746699][ T2620] loop6: rw=524288, want=87336, limit=40427 [ 327.768482][ T5203] erofs: (device loop8): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 327.836111][ T2934] erofs: (device loop8): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.929346][ T45] tipc: Left network mode [ 328.155697][ T5222] cgroup: Need name or subsystem set [ 328.359102][ T5230] loop9: detected capacity change from 0 to 512 [ 328.669703][ T30] audit: type=1400 audit(1790628732.985:473): avc: denied { append } for pid=5232 comm="syz.0.1459" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.693226][ T45] device bridge_slave_1 left promiscuous mode [ 328.702833][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.740201][ T45] device bridge_slave_0 left promiscuous mode [ 328.759724][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.797504][ T45] device veth1_macvtap left promiscuous mode [ 328.803595][ T45] device veth0_vlan left promiscuous mode [ 329.043912][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.056813][ T31] INFO: task syz.6.639:2613 blocked for more than 122 seconds. [ 329.071993][ T30] audit: type=1400 audit(1790628733.385:474): avc: denied { getopt } for pid=5236 comm="syz.7.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 329.076696][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.098901][ T5226] device bridge_slave_0 entered promiscuous mode [ 329.106047][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.113235][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.120816][ T5226] device bridge_slave_1 entered promiscuous mode [ 329.123926][ T31] Tainted: G W syzkaller #0 [ 329.149117][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.157982][ T31] task:syz.6.639 state:D stack:23912 pid: 2613 ppid: 522 flags:0x00004004 [ 329.167456][ T31] Call Trace: [ 329.170764][ T31] [ 329.173717][ T31] __schedule+0xbcf/0x14a0 [ 329.178191][ T31] ? release_firmware_map_entry+0x190/0x190 [ 329.184133][ T31] ? __kasan_check_write+0x14/0x20 [ 329.189297][ T31] ? _raw_spin_lock_irq+0x95/0xf0 [ 329.194349][ T31] ? _raw_spin_lock_irqsave+0x130/0x130 [ 329.199948][ T31] schedule+0x11e/0x1e0 [ 329.204153][ T31] rwsem_down_write_slowpath+0x901/0x19d0 [ 329.209921][ T31] ? rwsem_down_read_slowpath+0x12f0/0x12f0 [ 329.215841][ T31] ? memset+0x35/0x40 [ 329.219874][ T31] ? __dquot_initialize+0x225/0xc40 [ 329.225097][ T31] ? rwsem_write_trylock+0x136/0x300 [ 329.230461][ T31] ? clear_nonspinnable+0x60/0x60 [ 329.235504][ T31] down_write+0x29/0x30 [ 329.239717][ T31] f2fs_file_open+0xec/0x460 [ 329.244342][ T31] ? f2fs_file_mmap+0x210/0x210 [ 329.249219][ T31] do_dentry_open+0x82a/0x1010 [ 329.254097][ T31] vfs_open+0x73/0x80 [ 329.258129][ T31] path_openat+0x26e6/0x2f80 [ 329.262752][ T31] ? __kasan_slab_alloc+0xc9/0xe0 [ 329.267820][ T31] ? __x64_sys_creat+0x8e/0xb0 [ 329.272755][ T31] ? x64_sys_call+0x94a/0x9a0 [ 329.277500][ T31] ? do_filp_open+0x400/0x400 [ 329.282203][ T31] do_filp_open+0x1df/0x400 [ 329.286776][ T31] ? vfs_tmpfile+0x2d0/0x2d0 [ 329.291391][ T31] do_sys_openat2+0x15e/0x7f0 [ 329.296081][ T31] ? __se_sys_futex+0x135/0x330 [ 329.300963][ T31] ? __fget_files+0x2e1/0x340 [ 329.305658][ T31] ? do_sys_open+0xe0/0xe0 [ 329.310103][ T31] ? __x64_sys_futex+0x100/0x100 [ 329.315061][ T31] ? __kasan_check_write+0x14/0x20 [ 329.320200][ T31] __x64_sys_creat+0x8e/0xb0 [ 329.324807][ T31] x64_sys_call+0x94a/0x9a0 [ 329.329338][ T31] do_syscall_64+0x4c/0xa0 [ 329.333770][ T31] ? clear_bhb_loop+0x50/0xa0 [ 329.338474][ T31] ? clear_bhb_loop+0x50/0xa0 [ 329.343160][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.349090][ T31] RIP: 0033:0x7f210da2d159 [ 329.353515][ T31] RSP: 002b:00007f210c486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 329.361962][ T31] RAX: ffffffffffffffda RBX: 00007f210dcb4fa0 RCX: 00007f210da2d159 [ 329.369961][ T31] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0 [ 329.377958][ T31] RBP: 00007f210dac406b R08: 0000000000000000 R09: 0000000000000000 [ 329.385963][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.394048][ T31] R13: 00007f210dcb5038 R14: 00007f210dcb4fa0 R15: 00007ffd646ee7c8 [ 329.402069][ T31] [ 329.479192][ T31] INFO: task syz.6.639:2623 blocked for more than 123 seconds. [ 329.490941][ T5246] loop9: detected capacity change from 0 to 512 [ 329.509166][ T31] Tainted: G W syzkaller #0 [ 329.515564][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.557342][ T5246] EXT4-fs (loop9): Unrecognized mount option "barrier=0x0000000000000000erspan0" or missing value [ 329.581024][ T31] task:syz.6.639 state:D stack:28968 pid: 2623 ppid: 522 flags:0x00004004 [ 329.595673][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.602798][ T5226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.610134][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.617203][ T5226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.629656][ T31] Call Trace: [ 329.633094][ T31] [ 329.636101][ T31] __schedule+0xbcf/0x14a0 [ 329.640657][ T31] ? release_firmware_map_entry+0x190/0x190 [ 329.646805][ T31] ? __kasan_check_write+0x14/0x20 [ 329.652291][ T31] ? _raw_spin_lock_irq+0x95/0xf0 [ 329.658333][ T5253] netlink: 3576 bytes leftover after parsing attributes in process `syz.3.1466'. [ 329.667870][ T31] ? _raw_spin_lock_irqsave+0x130/0x130 [ 329.673543][ T31] schedule+0x11e/0x1e0 [ 329.686938][ T31] rwsem_down_write_slowpath+0x901/0x19d0 [ 329.705802][ T31] ? rwsem_down_read_slowpath+0x12f0/0x12f0 [ 329.735714][ T31] ? memset+0x35/0x40 [ 329.741748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.769315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.778375][ T31] ? __dquot_initialize+0x225/0xc40 [ 329.783753][ T31] ? rwsem_write_trylock+0x136/0x300 [ 329.791645][ T31] ? clear_nonspinnable+0x60/0x60 [ 329.796837][ T31] down_write+0x29/0x30 [ 329.801087][ T31] f2fs_file_open+0xec/0x460 [ 329.805749][ T31] ? f2fs_file_mmap+0x210/0x210 [ 329.810680][ T31] do_dentry_open+0x82a/0x1010 [ 329.815553][ T31] vfs_open+0x73/0x80 [ 329.819735][ T31] path_openat+0x26e6/0x2f80 [ 329.824625][ T31] ? __kasan_slab_alloc+0xc9/0xe0 [ 329.829708][ T31] ? __x64_sys_creat+0x8e/0xb0 [ 329.834502][ T31] ? x64_sys_call+0x94a/0x9a0 [ 329.839243][ T31] ? do_filp_open+0x400/0x400 [ 329.843960][ T31] do_filp_open+0x1df/0x400 [ 329.848634][ T31] ? vfs_tmpfile+0x2d0/0x2d0 [ 329.853412][ T31] do_sys_openat2+0x15e/0x7f0 [ 329.859237][ T31] ? __se_sys_futex+0x135/0x330 [ 329.864222][ T31] ? do_sys_open+0xe0/0xe0 [ 329.868691][ T31] ? __x64_sys_futex+0x100/0x100 [ 329.873660][ T31] ? __kasan_check_write+0x14/0x20 [ 329.878816][ T31] __x64_sys_creat+0x8e/0xb0 [ 329.883432][ T31] x64_sys_call+0x94a/0x9a0 [ 329.887987][ T31] do_syscall_64+0x4c/0xa0 [ 329.892425][ T31] ? clear_bhb_loop+0x50/0xa0 [ 329.897161][ T31] ? clear_bhb_loop+0x50/0xa0 [ 329.901866][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.907811][ T31] RIP: 0033:0x7f210da2d159 [ 329.912261][ T31] RSP: 002b:00007f210c423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 329.920756][ T31] RAX: ffffffffffffffda RBX: 00007f210dcb5270 RCX: 00007f210da2d159 [ 329.928801][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 329.936826][ T31] RBP: 00007f210dac406b R08: 0000000000000000 R09: 0000000000000000 [ 329.944825][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.952840][ T31] R13: 00007f210dcb5308 R14: 00007f210dcb5270 R15: 00007ffd646ee7c8 [ 329.960874][ T31] [ 329.965879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.973902][ T31] NMI backtrace for cpu 1 [ 329.978262][ T31] CPU: 1 PID: 31 Comm: khungtaskd Tainted: G W syzkaller #0 [ 329.986870][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 329.996948][ T31] Call Trace: [ 330.000254][ T31] [ 330.003199][ T31] __dump_stack+0x21/0x30 [ 330.007560][ T31] dump_stack_lvl+0x110/0x170 [ 330.012257][ T31] ? show_regs_print_info+0x20/0x20 [ 330.017481][ T31] ? rcu_preempt_deferred_qs_irqrestore+0x679/0x960 [ 330.024095][ T31] dump_stack+0x15/0x20 [ 330.028271][ T31] nmi_cpu_backtrace+0x2af/0x2c0 [ 330.033256][ T31] ? rcu_read_unlock_special+0xb2/0x440 [ 330.038847][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 330.045028][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 330.050001][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 330.056098][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 330.062326][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 330.068345][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 330.074272][ T31] watchdog+0xd58/0xea0 [ 330.078467][ T31] ? hungtask_pm_notify+0x50/0x50 [ 330.083533][ T31] ? __kasan_check_read+0x11/0x20 [ 330.088586][ T31] ? __kthread_parkme+0xab/0x1f0 [ 330.093564][ T31] kthread+0x3f5/0x4f0 [ 330.097658][ T31] ? hungtask_pm_notify+0x50/0x50 [ 330.102714][ T31] ? kthread_blkcg+0xd0/0xd0 [ 330.107327][ T31] ret_from_fork+0x1f/0x30 [ 330.111807][ T31] [ 330.115118][ T31] Sending NMI from CPU 1 to CPUs 0: [ 330.120427][ C0] NMI backtrace for cpu 0 [ 330.120439][ C0] CPU: 0 PID: 5256 Comm: syz.7.1467 Tainted: G W syzkaller #0 [ 330.120456][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 330.120466][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x10/0x90 [ 330.120490][ C0] Code: 18 4a 89 44 02 20 48 ff c1 48 89 0a 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 48 8b 45 08 65 48 8b 0d 00 99 98 7e <65> 8b 15 01 99 98 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 330.120505][ C0] RSP: 0018:ffffc90000b875d0 EFLAGS: 00000097 [ 330.120521][ C0] RAX: ffffffff83bdfdd2 RBX: 00000000ffffffff RCX: ffff88811b68a780 [ 330.120535][ C0] RDX: 0000000000000002 RSI: 00000000ffffffff RDI: 00000000ffffffff [ 330.120547][ C0] RBP: ffffc90000b875d0 R08: ffffc90000b876dc R09: ffffc90000b877e0 [ 330.120560][ C0] R10: dffffc0000000000 R11: fffff52000170eb4 R12: ffff888127b53a90 [ 330.120573][ C0] R13: dffffc0000000000 R14: ffffc90000b877e0 R15: 1ffff92000170f04 [ 330.120586][ C0] FS: 00007f75e87dd6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 330.120602][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.120614][ C0] CR2: 00002000003dd030 CR3: 000000014dbaf000 CR4: 00000000003506b0 [ 330.120629][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.120639][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.120650][ C0] Call Trace: [ 330.120655][ C0] [ 330.120661][ C0] __skb_try_recv_from_queue+0x82/0x6f0 [ 330.120683][ C0] __skb_try_recv_datagram+0x16c/0x4d0 [ 330.120702][ C0] ? sock_load_diag_module+0x140/0x140 [ 330.120724][ C0] __unix_dgram_recvmsg+0x2f2/0xd50 [ 330.120744][ C0] ? unix_unhash+0x10/0x10 [ 330.120761][ C0] ? exc_page_fault+0x5e/0xb0 [ 330.120781][ C0] unix_dgram_recvmsg+0xc2/0xe0 [ 330.120799][ C0] ? unix_dgram_sendmsg+0x19b0/0x19b0 [ 330.120817][ C0] ____sys_recvmsg+0x2ca/0x5b0 [ 330.120835][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 330.120854][ C0] ? import_iovec+0x7c/0xb0 [ 330.120873][ C0] ___sys_recvmsg+0x213/0x5c0 [ 330.120888][ C0] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 330.120914][ C0] ? __sys_recvmsg+0x280/0x280 [ 330.120932][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 330.120953][ C0] ? do_recvmmsg+0x329/0x7d0 [ 330.120969][ C0] do_recvmmsg+0x360/0x7d0 [ 330.120986][ C0] ? __sys_recvmmsg+0x290/0x290 [ 330.121007][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 330.121023][ C0] ? fput_many+0x15a/0x1a0 [ 330.121040][ C0] ? do_recvmmsg+0x7d0/0x7d0 [ 330.121056][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 330.121076][ C0] x64_sys_call+0x297/0x9a0 [ 330.121091][ C0] do_syscall_64+0x4c/0xa0 [ 330.121106][ C0] ? clear_bhb_loop+0x50/0xa0 [ 330.121122][ C0] ? clear_bhb_loop+0x50/0xa0 [ 330.121138][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 330.121155][ C0] RIP: 0033:0x7f75e9da5159 [ 330.121196][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.121210][ C0] RSP: 002b:00007f75e87dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 330.121226][ C0] RAX: ffffffffffffffda RBX: 00007f75ea02d090 RCX: 00007f75e9da5159 [ 330.121239][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 330.121250][ C0] RBP: 00007f75e9e3c06b R08: 0000000000000000 R09: 0000000000000000 [ 330.121261][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 330.121271][ C0] R13: 00007f75ea02d128 R14: 00007f75ea02d090 R15: 00007fff21ca59d8 [ 330.121287][ C0] [ 330.133262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.178247][ T5260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 330.493722][ T5260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 330.515171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.551235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.577128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.593484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.644948][ T5226] device veth0_vlan entered promiscuous mode [ 330.652327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.661864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.673327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.682642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.703741][ T5226] device veth1_macvtap entered promiscuous mode [ 330.718162][ T5275] loop7: detected capacity change from 0 to 256 [ 330.732196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.747338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.761448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.770002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.777749][ T5275] FAT-fs (loop7): Unrecognized mount option "shortname=lo" or missing value [ 330.795709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.842333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.856973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.887902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.906532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.172867][ T5293] tipc: Started in network mode [ 331.177878][ T5293] tipc: Node identity 4, cluster identity 4711 [ 331.184085][ T5293] tipc: Node number set to 4 [ 331.524525][ T5235] loop0: detected capacity change from 0 to 131072 [ 331.585611][ T5235] F2FS-fs (loop0): invalid crc value [ 331.616105][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1482'. [ 331.635168][ T5235] F2FS-fs (loop0): Found nat_bits in checkpoint [ 331.666823][ T30] audit: type=1400 audit(1790628735.985:475): avc: denied { relabelfrom } for pid=5305 comm="syz.9.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 331.688276][ T5306] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1483'. [ 331.691415][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1482'. [ 331.727204][ T30] audit: type=1400 audit(1790628735.985:476): avc: denied { relabelto } for pid=5305 comm="syz.9.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 331.767698][ T5235] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 331.790805][ T30] audit: type=1400 audit(1790628736.005:477): avc: denied { attach_queue } for pid=5305 comm="syz.9.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 332.157353][ T2620] handle_bad_sector: 27916 callbacks suppressed [ 332.157457][ T2620] attempt to access beyond end of device [ 332.157457][ T2620] loop6: rw=524288, want=88880, limit=40427 [ 332.328565][ T2620] attempt to access beyond end of device [ 332.328565][ T2620] loop6: rw=524288, want=88888, limit=40427 [ 332.368041][ T2620] attempt to access beyond end of device [ 332.368041][ T2620] loop6: rw=524288, want=88896, limit=40427 [ 332.385225][ T2620] attempt to access beyond end of device [ 332.385225][ T2620] loop6: rw=524288, want=88904, limit=40427 [ 332.397092][ T2620] attempt to access beyond end of device [ 332.397092][ T2620] loop6: rw=524288, want=88912, limit=40427 [ 332.408790][ T2620] attempt to access beyond end of device [ 332.408790][ T2620] loop6: rw=524288, want=88920, limit=40427 [ 332.420648][ T2620] attempt to access beyond end of device [ 332.420648][ T2620] loop6: rw=524288, want=88928, limit=40427 [ 332.447747][ T2620] attempt to access beyond end of device [ 332.447747][ T2620] loop6: rw=524288, want=88936, limit=40427 [ 332.483038][ T2620] attempt to access beyond end of device [ 332.483038][ T2620] loop6: rw=524288, want=88944, limit=40427 [ 332.509049][ T2620] attempt to access beyond end of device [ 332.509049][ T2620] loop6: rw=524288, want=88952, limit=40427 [ 332.828825][ T5334] loop1: detected capacity change from 0 to 256 [ 332.950733][ T30] audit: type=1400 audit(1790628737.265:478): avc: denied { sys_admin } for pid=5335 comm="syz.9.1495" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 332.978331][ T378] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 333.062666][ T5339] FAULT_INJECTION: forcing a failure. [ 333.062666][ T5339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.096087][ T5339] CPU: 1 PID: 5339 Comm: syz.9.1496 Tainted: G W syzkaller #0 [ 333.105022][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 333.115110][ T5339] Call Trace: [ 333.118422][ T5339] [ 333.121409][ T5339] __dump_stack+0x21/0x30 [ 333.125800][ T5339] dump_stack_lvl+0x110/0x170 [ 333.130510][ T5339] ? show_regs_print_info+0x20/0x20 [ 333.135750][ T5339] dump_stack+0x15/0x20 [ 333.139936][ T5339] should_fail+0x3ab/0x500 [ 333.144387][ T5339] should_fail_usercopy+0x1a/0x20 [ 333.149443][ T5339] _copy_from_iter+0x220/0x10a0 [ 333.154322][ T5339] ? copy_mc_pipe_to_iter+0x7e0/0x7e0 [ 333.159719][ T5339] ? __kmalloc_track_caller+0x13c/0x2c0 [ 333.165297][ T5339] ? __check_object_size+0x2dd/0x3b0 [ 333.170618][ T5339] pfkey_sendmsg+0x1f7/0x1120 [ 333.175335][ T5339] ? unwind_get_return_address+0x4d/0x90 [ 333.181007][ T5339] ? pfkey_release+0x330/0x330 [ 333.185797][ T5339] ? selinux_socket_sendmsg+0x22f/0x340 [ 333.191400][ T5339] ? selinux_socket_accept+0x570/0x570 [ 333.196918][ T5339] ? kasan_set_track+0x5b/0x70 [ 333.201709][ T5339] ? kasan_set_track+0x4a/0x70 [ 333.206522][ T5339] ? security_socket_sendmsg+0x82/0xa0 [ 333.212005][ T5339] ? pfkey_release+0x330/0x330 [ 333.216802][ T5339] ____sys_sendmsg+0x5be/0x8f0 [ 333.221599][ T5339] ? __sys_sendmsg_sock+0x40/0x40 [ 333.226676][ T5339] ? import_iovec+0x7c/0xb0 [ 333.231210][ T5339] ___sys_sendmsg+0x236/0x2e0 [ 333.235918][ T5339] ? __sys_sendmsg+0x280/0x280 [ 333.240712][ T5339] ? __fdget+0x1a1/0x230 [ 333.244980][ T5339] __x64_sys_sendmsg+0x201/0x2d0 [ 333.249944][ T5339] ? ___sys_sendmsg+0x2e0/0x2e0 [ 333.254850][ T5339] ? ksys_write+0x1fa/0x260 [ 333.259413][ T5339] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 333.265515][ T5339] x64_sys_call+0x4b/0x9a0 [ 333.269957][ T5339] do_syscall_64+0x4c/0xa0 [ 333.274428][ T5339] ? clear_bhb_loop+0x50/0xa0 [ 333.279133][ T5339] ? clear_bhb_loop+0x50/0xa0 [ 333.283861][ T5339] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.289809][ T5339] RIP: 0033:0x7f13bedba159 [ 333.294258][ T5339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.313978][ T5339] RSP: 002b:00007f13bd813028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.322426][ T5339] RAX: ffffffffffffffda RBX: 00007f13bf041fa0 RCX: 00007f13bedba159 [ 333.330427][ T5339] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 333.338425][ T5339] RBP: 00007f13bd813090 R08: 0000000000000000 R09: 0000000000000000 [ 333.346421][ T5339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.354417][ T5339] R13: 00007f13bf042038 R14: 00007f13bf041fa0 R15: 00007fff1aff0ca8 [ 333.362419][ T5339] [ 333.366625][ T429] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 333.398850][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'. [ 333.439186][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'. [ 333.477053][ T5308] loop7: detected capacity change from 0 to 131072 [ 333.657067][ T378] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.746903][ T429] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.776963][ T378] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 333.932350][ T378] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x82 is Bulk; changing to Interrupt [ 333.950339][ T429] usb 2-1: config 1 interface 0 has no altsetting 0 [ 333.994036][ T5354] loop7: detected capacity change from 0 to 256 [ 334.011733][ T378] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 334.044290][ T378] usb 1-1: config 1 interface 0 has no altsetting 0 [ 334.067398][ T5354] FAT-fs (loop7): Unrecognized mount option "shortname=lo" or missing value [ 334.176725][ T429] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 334.196034][ T429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.223781][ T429] usb 2-1: Product: syz [ 334.237326][ T429] usb 2-1: Manufacturer: syz [ 334.255383][ T429] usb 2-1: SerialNumber: syz [ 334.346702][ T378] usb 1-1: string descriptor 0 read error: -22 [ 334.354992][ T378] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.376676][ T378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.410454][ T5367] loop7: detected capacity change from 0 to 16 [ 334.432261][ T5367] erofs: (device loop7): mounted with root inode @ nid 36. [ 334.452910][ T5367] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 334.467463][ T5330] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 334.474478][ T5330] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 334.482180][ T5367] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 334.527971][ T5334] UDC core: couldn't find an available UDC or it's busy: -16 [ 334.546688][ T5334] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 334.570697][ T5372] loop7: detected capacity change from 0 to 1024 [ 334.608738][ T5372] EXT4-fs (loop7): dax option not supported [ 334.686639][ T6] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 334.767391][ T30] audit: type=1400 audit(1790628739.085:479): avc: denied { accept } for pid=5329 comm="syz.0.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 334.996849][ T429] usbhid 2-1:1.0: can't add hid device: -71 [ 334.997122][ T429] usbhid: probe of 2-1:1.0 failed with error -71 [ 335.001121][ T429] usb 2-1: USB disconnect, device number 3 [ 335.066894][ T30] audit: type=1400 audit(1790628739.295:480): avc: denied { bind } for pid=5329 comm="syz.0.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 335.336679][ T6] usb 10-1: config 0 interface 0 has no altsetting 0 [ 335.336713][ T6] usb 10-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 335.336737][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.337522][ T6] usb 10-1: config 0 descriptor?? [ 335.491450][ T5384] loop7: detected capacity change from 0 to 2048 [ 335.606983][ T1483] Alternate GPT is invalid, using primary GPT. [ 335.613343][ T1483] loop7: p2 p3 p7 [ 335.623822][ T5384] Alternate GPT is invalid, using primary GPT. [ 335.631425][ T5384] loop7: p2 p3 p7 [ 335.716099][ T5388] loop1: detected capacity change from 0 to 16 [ 335.830161][ T5388] erofs: (device loop1): mounted with root inode @ nid 36. [ 336.206659][ T30] audit: type=1400 audit(1790628740.175:481): avc: denied { map } for pid=5385 comm="syz.1.1512" path="/5/file2/file1" dev="loop1" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 336.830722][ T6] hid (null): unknown global tag 0xfd [ 336.835298][ T429] usb 1-1: USB disconnect, device number 3 [ 336.847796][ T6] hid (null): unknown global tag 0xc4 [ 336.853294][ T6] hid (null): global environment stack underflow [ 336.859789][ T6] hid (null): unknown global tag 0x8a [ 336.865286][ T6] hid (null): nested delimiters [ 336.873731][ T6] waltop 0003:172F:0034.000C: unexpected long global item [ 336.875265][ T5391] overlayfs: failed to resolve './file1': -2 [ 336.897083][ T6] waltop: probe of 0003:172F:0034.000C failed with error -22 [ 336.915297][ T6] usb 10-1: USB disconnect, device number 4 [ 337.030339][ T5396] loop1: detected capacity change from 0 to 256 [ 337.106961][ T5396] FAT-fs (loop1): Unrecognized mount option "shortname=lo" or missing value [ 337.183096][ T2620] handle_bad_sector: 33988 callbacks suppressed [ 337.183116][ T2620] attempt to access beyond end of device [ 337.183116][ T2620] loop6: rw=0, want=86440, limit=40427 [ 337.226821][ T2620] attempt to access beyond end of device [ 337.226821][ T2620] loop6: rw=0, want=86448, limit=40427 [ 337.252305][ T2620] attempt to access beyond end of device [ 337.252305][ T2620] loop6: rw=0, want=86456, limit=40427 [ 337.283847][ T2620] attempt to access beyond end of device [ 337.283847][ T2620] loop6: rw=0, want=86464, limit=40427 [ 337.306751][ T2620] attempt to access beyond end of device [ 337.306751][ T2620] loop6: rw=0, want=86472, limit=40427 [ 337.331644][ T2620] attempt to access beyond end of device [ 337.331644][ T2620] loop6: rw=0, want=86480, limit=40427 [ 337.365982][ T2620] attempt to access beyond end of device [ 337.365982][ T2620] loop6: rw=0, want=86488, limit=40427 [ 337.369902][ T5403] loop1: detected capacity change from 0 to 1024 [ 337.388417][ T2620] attempt to access beyond end of device [ 337.388417][ T2620] loop6: rw=0, want=86496, limit=40427 [ 337.416821][ T5403] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 337.416821][ T5403] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 337.416821][ T5403] [ 337.432777][ T2620] attempt to access beyond end of device [ 337.432777][ T2620] loop6: rw=0, want=86504, limit=40427 [ 337.447626][ T5408] ip_tables: iptables: counters copy to user failed while replacing table [ 337.473822][ T2620] attempt to access beyond end of device [ 337.473822][ T2620] loop6: rw=0, want=86512, limit=40427 [ 337.478750][ T5403] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 2560 [ 337.631862][ T5414] loop1: detected capacity change from 0 to 1024 [ 337.667850][ T5414] EXT4-fs (loop1): Ignoring removed orlov option [ 337.736905][ T5414] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 337.824679][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 337.846060][ T30] audit: type=1400 audit(1790628742.155:482): avc: denied { rename } for pid=5413 comm="syz.1.1521" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 337.946657][ T30] audit: type=1400 audit(1790628742.205:483): avc: denied { unlink } for pid=5413 comm="syz.1.1521" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 337.992515][ T5424] loop1: detected capacity change from 0 to 256 [ 338.022253][ T5384] loop7: detected capacity change from 0 to 131072 [ 338.346712][ T429] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 338.669774][ T5433] xt_hashlimit: size too large, truncated to 1048576 [ 338.708679][ T5438] xt_hashlimit: size too large, truncated to 1048576 [ 338.746708][ T429] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.767895][ T429] usb 2-1: config 1 interface 0 has no altsetting 0 [ 338.874037][ T5442] loop0: detected capacity change from 0 to 256 [ 338.946742][ T429] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 338.957634][ T5442] FAT-fs (loop0): Unrecognized mount option "shortname=lo" or missing value [ 338.976725][ T429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.984767][ T429] usb 2-1: Product: syz [ 338.996642][ T429] usb 2-1: Manufacturer: syz [ 339.011474][ T429] usb 2-1: SerialNumber: syz [ 339.119086][ T5445] loop0: detected capacity change from 0 to 512 [ 339.225139][ T5445] overlayfs: overlapping lowerdir path [ 339.375470][ T5461] loop0: detected capacity change from 0 to 16 [ 339.408258][ T5465] loop7: detected capacity change from 0 to 16 [ 339.447279][ T5465] erofs: Unknown parameter 'ÿÿÿÿÿ0x0000000000000000' [ 339.530929][ T5470] loop7: detected capacity change from 0 to 1024 [ 339.618472][ T5470] EXT4-fs (loop7): dax option not supported [ 339.667236][ T429] usbhid 2-1:1.0: can't add hid device: -71 [ 339.673255][ T429] usbhid: probe of 2-1:1.0 failed with error -71 [ 339.685280][ T429] usb 2-1: USB disconnect, device number 4 [ 340.121528][ T5477] loop1: detected capacity change from 0 to 256 [ 340.158096][ T5477] FAT-fs (loop1): Unrecognized mount option "shortname=lo" or missing value [ 340.205372][ T5482] fuse: Unknown parameter 's@úZ€`¬¶Šfá3' [ 340.269664][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 340.269694][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 340.380180][ T5490] loop1: detected capacity change from 0 to 512 [ 340.420575][ T5492] loop7: detected capacity change from 0 to 16 [ 340.440537][ T5492] erofs: (device loop7): mounted with root inode @ nid 36. [ 340.449603][ T5492] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 340.476422][ T5490] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 340.488004][ T5490] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.500657][ T5492] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 340.626891][ T5508] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 340.640339][ T5508] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 340.651273][ T5508] ext2 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.774656][ T5510] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1545'. [ 340.934665][ T30] audit: type=1400 audit(1790628745.245:484): avc: denied { getopt } for pid=5511 comm="syz.7.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.367330][ T5512] loop7: p1 < > p3 p4 < > [ 341.372996][ T5512] loop7: p3 start 4284289 is beyond EOD, truncated [ 341.599466][ T101] loop7: p1 < > p3 p4 < > [ 341.607219][ T101] loop7: p3 start 4284289 is beyond EOD, truncated [ 341.708374][ T5532] FAT-fs (loop1): Unrecognized mount option "shortname=lo" or missing value [ 341.728154][ T1709] udevd[1709]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 342.002371][ T30] audit: type=1400 audit(1790628746.305:485): avc: denied { map } for pid=5542 comm="syz.7.1559" path="socket:[39419]" dev="sockfs" ino=39419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 342.083439][ T5545] x_tables: unsorted underflow at hook 4 [ 342.189200][ T2620] handle_bad_sector: 72627 callbacks suppressed [ 342.189220][ T2620] attempt to access beyond end of device [ 342.189220][ T2620] loop6: rw=0, want=89376, limit=40427 [ 342.260657][ T5549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1562'. [ 342.279291][ T2620] attempt to access beyond end of device [ 342.279291][ T2620] loop6: rw=0, want=89384, limit=40427 [ 342.309819][ T5549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1562'. [ 342.336875][ T2620] attempt to access beyond end of device [ 342.336875][ T2620] loop6: rw=0, want=89392, limit=40427 [ 342.446698][ T2620] attempt to access beyond end of device [ 342.446698][ T2620] loop6: rw=0, want=89400, limit=40427 [ 342.468951][ T2620] attempt to access beyond end of device [ 342.468951][ T2620] loop6: rw=0, want=89408, limit=40427 [ 342.516031][ T2620] attempt to access beyond end of device [ 342.516031][ T2620] loop6: rw=0, want=89416, limit=40427 [ 342.572308][ T2620] attempt to access beyond end of device [ 342.572308][ T2620] loop6: rw=0, want=89424, limit=40427 [ 342.630543][ T2620] attempt to access beyond end of device [ 342.630543][ T2620] loop6: rw=0, want=89432, limit=40427 [ 342.686839][ T2620] attempt to access beyond end of device [ 342.686839][ T2620] loop6: rw=0, want=89440, limit=40427 [ 342.710927][ T5561] overlayfs: failed to clone upperpath [ 342.718132][ T2620] attempt to access beyond end of device [ 342.718132][ T2620] loop6: rw=0, want=89448, limit=40427 [ 342.806679][ T6] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 343.076647][ T30] audit: type=1400 audit(1790628747.385:486): avc: denied { map } for pid=5578 comm="syz.3.1576" path="socket:[39529]" dev="sockfs" ino=39529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 343.120029][ T30] audit: type=1400 audit(1790628747.395:487): avc: denied { accept } for pid=5578 comm="syz.3.1576" path="socket:[39529]" dev="sockfs" ino=39529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 343.176697][ T6] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.216844][ T6] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.244541][ T6] usb 8-1: config 0 interface 0 has no altsetting 0 [ 343.431264][ T5596] ================================================================== [ 343.439401][ T5596] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 343.447617][ T5596] Read of size 4 at addr ffff8881174ba470 by task syz.0.1582/5596 [ 343.455445][ T5596] [ 343.457788][ T5596] CPU: 1 PID: 5596 Comm: syz.0.1582 Tainted: G W syzkaller #0 [ 343.466564][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 343.476635][ T5596] Call Trace: [ 343.479950][ T5596] [ 343.482900][ T5596] __dump_stack+0x21/0x30 [ 343.487692][ T5596] dump_stack_lvl+0x110/0x170 [ 343.492394][ T5596] ? show_regs_print_info+0x20/0x20 [ 343.497639][ T5596] ? load_image+0x3f0/0x3f0 [ 343.502182][ T5596] print_address_description+0x7f/0x2c0 [ 343.507749][ T5596] ? unaccount_page_cache_page+0x6f1/0x760 [ 343.513577][ T5596] kasan_report+0x10f/0x150 [ 343.518114][ T5596] ? unaccount_page_cache_page+0x6f1/0x760 [ 343.524033][ T5596] __asan_report_load4_noabort+0x14/0x20 [ 343.529695][ T5596] unaccount_page_cache_page+0x6f1/0x760 [ 343.535371][ T5596] __delete_from_page_cache+0xbe/0x470 [ 343.540870][ T5596] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 343.547915][ T5596] ? __kasan_check_write+0x14/0x20 [ 343.553056][ T5596] ? __kasan_check_read+0x11/0x20 [ 343.558109][ T5596] ? workingset_eviction+0x402/0x9f0 [ 343.563419][ T5596] __remove_mapping+0x601/0x990 [ 343.568289][ T5596] ? shmem_add_to_page_cache+0xc50/0xc50 [ 343.573958][ T5596] ? remove_mapping+0xa0/0xa0 [ 343.578656][ T5596] ? __kasan_check_read+0x11/0x20 [ 343.583740][ T5596] shrink_page_list+0x2a24/0x5800 [ 343.588795][ T5596] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 343.594998][ T5596] ? __this_cpu_preempt_check+0x13/0x20 [ 343.600563][ T5596] ? __mod_zone_page_state+0x8e/0xd0 [ 343.605868][ T5596] ? isolate_lru_pages+0xff1/0x11f0 [ 343.611108][ T5596] ? should_run_aging+0x410/0x410 [ 343.616281][ T5596] ? cgroup_rstat_updated+0xc0/0x360 [ 343.621626][ T5596] ? _raw_spin_lock_irq+0x95/0xf0 [ 343.626696][ T5596] ? __this_cpu_preempt_check+0x13/0x20 [ 343.632289][ T5596] ? __count_memcg_events+0xad/0x120 [ 343.637603][ T5596] shrink_lruvec+0x1297/0x3a40 [ 343.642414][ T5596] ? release_firmware_map_entry+0x190/0x190 [ 343.648331][ T5596] ? wake_up_process+0x20/0x20 [ 343.653126][ T5596] ? mem_cgroup_shrink_node+0x550/0x550 [ 343.658696][ T5596] ? preempt_schedule_common+0xbe/0xf0 [ 343.664186][ T5596] ? schedule_preempt_disabled+0x20/0x20 [ 343.669934][ T5596] ? __kasan_check_write+0x14/0x20 [ 343.675076][ T5596] ? _raw_spin_lock+0x94/0xf0 [ 343.679784][ T5596] ? _raw_spin_trylock_bh+0x150/0x150 [ 343.685177][ T5596] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 343.691010][ T5596] ? inactive_is_low+0x160/0x2f0 [ 343.695973][ T5596] ? css_next_descendant_pre+0x1e1/0x210 [ 343.701629][ T5596] ? mem_cgroup_iter+0x465/0x6c0 [ 343.706595][ T5596] shrink_node+0x11ee/0x2a40 [ 343.711224][ T5596] ? allow_direct_reclaim+0x370/0x370 [ 343.716626][ T5596] do_try_to_free_pages+0x5a7/0x1580 [ 343.721947][ T5596] ? try_to_free_pages+0xc50/0xc50 [ 343.727093][ T5596] ? propagate_protected_usage+0x84/0x250 [ 343.732851][ T5596] try_to_free_mem_cgroup_pages+0x261/0x610 [ 343.738773][ T5596] ? shrink_lruvec+0x3a40/0x3a40 [ 343.743734][ T5596] ? mutex_unlock+0x8f/0x230 [ 343.748357][ T5596] ? __kasan_check_read+0x11/0x20 [ 343.753445][ T5596] ? page_counter_set_max+0x65/0x140 [ 343.758752][ T5596] mem_cgroup_resize_max+0x309/0x3e0 [ 343.764057][ T5596] mem_cgroup_write+0x1ed/0x230 [ 343.768937][ T5596] ? mem_cgroup_reset+0x130/0x130 [ 343.773989][ T5596] ? __kasan_check_write+0x14/0x20 [ 343.779126][ T5596] ? _copy_from_iter+0x4a4/0x10a0 [ 343.784180][ T5596] ? mem_cgroup_reset+0x130/0x130 [ 343.789254][ T5596] cgroup_file_write+0x294/0x560 [ 343.794219][ T5596] ? cgroup_seqfile_stop+0xc0/0xc0 [ 343.799349][ T5596] ? mutex_lock+0x9b/0x1c0 [ 343.803878][ T5596] ? wait_for_completion_killable_timeout+0x10/0x10 [ 343.810601][ T5596] ? __kasan_check_write+0x14/0x20 [ 343.815758][ T5596] ? cgroup_seqfile_stop+0xc0/0xc0 [ 343.820980][ T5596] kernfs_fop_write_iter+0x2bd/0x400 [ 343.826294][ T5596] vfs_write+0x831/0xfd0 [ 343.830562][ T5596] ? file_end_write+0x1b0/0x1b0 [ 343.835439][ T5596] ? wait_for_completion_killable_timeout+0x10/0x10 [ 343.842070][ T5596] ? __fget_files+0x2e1/0x340 [ 343.846773][ T5596] ? __fdget_pos+0x2d2/0x380 [ 343.851385][ T5596] ? ksys_write+0x70/0x260 [ 343.855847][ T5596] ksys_write+0x14a/0x260 [ 343.860197][ T5596] ? __ia32_sys_read+0x90/0x90 [ 343.865005][ T5596] ? __kasan_check_write+0x14/0x20 [ 343.870147][ T5596] ? switch_fpu_return+0x15d/0x2c0 [ 343.875287][ T5596] __x64_sys_write+0x7b/0x90 [ 343.879899][ T5596] x64_sys_call+0x8ef/0x9a0 [ 343.884448][ T5596] do_syscall_64+0x4c/0xa0 [ 343.888885][ T5596] ? clear_bhb_loop+0x50/0xa0 [ 343.893586][ T5596] ? clear_bhb_loop+0x50/0xa0 [ 343.898283][ T5596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.904200][ T5596] RIP: 0033:0x7f206a19e159 [ 343.908634][ T5596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.928266][ T5596] RSP: 002b:00007f2068bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.936996][ T5596] RAX: ffffffffffffffda RBX: 00007f206a425fa0 RCX: 00007f206a19e159 [ 343.944991][ T5596] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 343.952981][ T5596] RBP: 00007f206a23506b R08: 0000000000000000 R09: 0000000000000000 [ 343.960976][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.969088][ T5596] R13: 00007f206a426038 R14: 00007f206a425fa0 R15: 00007ffc8cd9b2e8 [ 343.977090][ T5596] [ 343.980138][ T5596] [ 343.982480][ T5596] Allocated by task 5235: [ 343.986833][ T5596] __kasan_kmalloc+0xd4/0x100 [ 343.991538][ T5596] kmem_cache_alloc_trace+0x119/0x270 [ 343.996937][ T5596] alloc_super+0x5e/0x840 [ 344.001289][ T5596] sget+0x1e2/0x4c0 [ 344.005136][ T5596] mount_bdev+0xec/0x3c0 [ 344.009401][ T5596] f2fs_mount+0x34/0x40 [ 344.013585][ T5596] legacy_get_tree+0xed/0x190 [ 344.018302][ T5596] vfs_get_tree+0x89/0x260 [ 344.022758][ T5596] do_new_mount+0x251/0xb40 [ 344.027283][ T5596] path_mount+0x640/0xff0 [ 344.031635][ T5596] __se_sys_mount+0x320/0x390 [ 344.036361][ T5596] __x64_sys_mount+0xbf/0xd0 [ 344.040976][ T5596] x64_sys_call+0x6bf/0x9a0 [ 344.045500][ T5596] do_syscall_64+0x4c/0xa0 [ 344.049957][ T5596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.055874][ T5596] [ 344.058243][ T5596] Freed by task 6: [ 344.061988][ T5596] kasan_set_track+0x4a/0x70 [ 344.066602][ T5596] kasan_set_free_info+0x23/0x40 [ 344.071560][ T5596] ____kasan_slab_free+0x125/0x160 [ 344.076698][ T5596] __kasan_slab_free+0x11/0x20 [ 344.081504][ T5596] slab_free_freelist_hook+0xc2/0x190 [ 344.086900][ T5596] kfree+0xc4/0x270 [ 344.090755][ T5596] destroy_super_work+0x40/0x50 [ 344.095733][ T5596] process_one_work+0x6c8/0xbb0 [ 344.100619][ T5596] worker_thread+0xaa0/0x1250 [ 344.105328][ T5596] kthread+0x3f5/0x4f0 [ 344.109426][ T5596] ret_from_fork+0x1f/0x30 [ 344.113962][ T5596] [ 344.116330][ T5596] Last potentially related work creation: [ 344.122153][ T5596] kasan_save_stack+0x3a/0x60 [ 344.126858][ T5596] __kasan_record_aux_stack+0xd2/0x100 [ 344.132346][ T5596] kasan_record_aux_stack_noalloc+0xb/0x10 [ 344.138199][ T5596] insert_work+0x51/0x310 [ 344.142558][ T5596] __queue_work+0x8e1/0xc60 [ 344.147089][ T5596] queue_work_on+0xde/0x150 [ 344.151622][ T5596] destroy_super_rcu+0xd1/0xe0 [ 344.156439][ T5596] rcu_do_batch+0x4c1/0xbf0 [ 344.160972][ T5596] rcu_core+0x4a3/0xef0 [ 344.165155][ T5596] rcu_core_si+0x9/0x10 [ 344.169335][ T5596] handle_softirqs+0x250/0x560 [ 344.174127][ T5596] run_ksoftirqd+0x28/0x40 [ 344.178573][ T5596] smpboot_thread_fn+0x446/0x880 [ 344.183652][ T5596] kthread+0x3f5/0x4f0 [ 344.187749][ T5596] ret_from_fork+0x1f/0x30 [ 344.192192][ T5596] [ 344.194535][ T5596] Second to last potentially related work creation: [ 344.201240][ T5596] kasan_save_stack+0x3a/0x60 [ 344.205963][ T5596] __kasan_record_aux_stack+0xd2/0x100 [ 344.206818][ T6] usb 8-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 344.211555][ T5596] kasan_record_aux_stack_noalloc+0xb/0x10 [ 344.226538][ T5596] call_rcu+0x10b/0xf60 [ 344.230725][ T5596] __put_super+0x26b/0x2d0 [ 344.231298][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.235166][ T5596] deactivate_locked_super+0xd4/0x100 [ 344.248538][ T5596] mount_bdev+0x2ab/0x3c0 [ 344.252912][ T5596] f2fs_mount+0x34/0x40 [ 344.257098][ T5596] legacy_get_tree+0xed/0x190 [ 344.261813][ T5596] vfs_get_tree+0x89/0x260 [ 344.265917][ T6] usb 8-1: config 0 descriptor?? [ 344.266256][ T5596] do_new_mount+0x251/0xb40 [ 344.275817][ T5596] path_mount+0x640/0xff0 [ 344.280176][ T5596] __se_sys_mount+0x320/0x390 [ 344.284891][ T5596] __x64_sys_mount+0xbf/0xd0 [ 344.289492][ T5596] x64_sys_call+0x6bf/0x9a0 [ 344.294012][ T5596] do_syscall_64+0x4c/0xa0 [ 344.298445][ T5596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.304362][ T5596] [ 344.306722][ T5596] The buggy address belongs to the object at ffff8881174ba000 [ 344.306722][ T5596] which belongs to the cache kmalloc-2k of size 2048 [ 344.320794][ T5596] The buggy address is located 1136 bytes inside of [ 344.320794][ T5596] 2048-byte region [ffff8881174ba000, ffff8881174ba800) [ 344.334256][ T5596] The buggy address belongs to the page: [ 344.339909][ T5596] page:ffffea00045d2e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1174b8 [ 344.350159][ T5596] head:ffffea00045d2e00 order:3 compound_mapcount:0 compound_pincount:0 [ 344.358498][ T5596] flags: 0x4000000000010200(slab|head|zone=1) [ 344.364582][ T5596] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043200 [ 344.373180][ T5596] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 344.381769][ T5596] page dumped because: kasan: bad access detected [ 344.388185][ T5596] page_owner tracks the page as allocated [ 344.393910][ T5596] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 554, ts 47875362466, free_ts 42684188189 [ 344.414325][ T5596] post_alloc_hook+0x192/0x1b0 [ 344.419120][ T5596] prep_new_page+0x1c/0x110 [ 344.423642][ T5596] get_page_from_freelist+0x2c3a/0x2cd0 [ 344.429224][ T5596] __alloc_pages+0x1a2/0x460 [ 344.433851][ T5596] new_slab+0xa0/0x4d0 [ 344.437928][ T5596] ___slab_alloc+0x3ac/0x840 [ 344.442528][ T5596] __slab_alloc+0x49/0x90 [ 344.446955][ T5596] __kmalloc_track_caller+0x169/0x2c0 [ 344.452343][ T5596] kmemdup+0x26/0x60 [ 344.456254][ T5596] neigh_sysctl_register+0xbf/0xa90 [ 344.461463][ T5596] addrconf_sysctl_register+0xb3/0x1a0 [ 344.466959][ T5596] ipv6_add_dev+0xc09/0x1150 [ 344.471564][ T5596] addrconf_notify+0x582/0xe00 [ 344.476345][ T5596] raw_notifier_call_chain+0x90/0x100 [ 344.481737][ T5596] call_netdevice_notifiers+0x119/0x190 [ 344.487301][ T5596] register_netdevice+0x110a/0x1490 [ 344.492511][ T5596] page last free stack trace: [ 344.497191][ T5596] free_unref_page_prepare+0x5fa/0x600 [ 344.502664][ T5596] free_unref_page+0xae/0x540 [ 344.507356][ T5596] __free_pages+0x6c/0x100 [ 344.511783][ T5596] __free_slab+0xe5/0x1e0 [ 344.516124][ T5596] __unfreeze_partials+0x15a/0x190 [ 344.521248][ T5596] put_cpu_partial+0xc6/0x120 [ 344.525938][ T5596] __slab_free+0x1d4/0x290 [ 344.530456][ T5596] ___cache_free+0x104/0x120 [ 344.535066][ T5596] qlink_free+0x4d/0x90 [ 344.539238][ T5596] qlist_free_all+0x5f/0xb0 [ 344.543756][ T5596] kasan_quarantine_reduce+0x14a/0x170 [ 344.549250][ T5596] __kasan_slab_alloc+0x2f/0xe0 [ 344.554111][ T5596] slab_post_alloc_hook+0x4f/0x2b0 [ 344.559238][ T5596] kmem_cache_alloc+0xf7/0x260 [ 344.564013][ T5596] taskstats_exit+0x121/0xe60 [ 344.568707][ T5596] do_exit+0x614/0x29a0 [ 344.572879][ T5596] [ 344.575213][ T5596] Memory state around the buggy address: [ 344.580847][ T5596] ffff8881174ba300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.588929][ T5596] ffff8881174ba380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.597008][ T5596] >ffff8881174ba400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.605073][ T5596] ^ [ 344.612796][ T5596] ffff8881174ba480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.620868][ T5596] ffff8881174ba500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.628934][ T5596] ================================================================== [ 344.637001][ T5596] Disabling lock debugging due to kernel taint [ 344.772244][ T30] audit: type=1400 audit(1790628749.055:488): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.891799][ T30] audit: type=1326 audit(1790628749.205:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.1582" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206a19e159 code=0x7ffc0000 [ 344.938484][ T30] audit: type=1326 audit(1790628749.255:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.1582" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206a19e159 code=0x7ffc0000 [ 344.963527][ T30] audit: type=1326 audit(1790628749.255:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.1582" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206a19e159 code=0x7ffc0000 [ 344.988527][ T30] audit: type=1326 audit(1790628749.255:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.0.1582" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206a19e159 code=0x7ffc0000 [ 345.108548][ T6] belkin 0003:1020:0006.000D: unknown main item tag 0x2 [ 345.123277][ T6] belkin 0003:1020:0006.000D: unknown main item tag 0x0 [ 345.134670][ T6] belkin 0003:1020:0006.000D: unbalanced collection at end of report description [ 345.150296][ T6] belkin 0003:1020:0006.000D: parse failed [ 345.156378][ T6] belkin: probe of 0003:1020:0006.000D failed with error -22 [ 345.348966][ T6] usb 8-1: USB disconnect, device number 30 [ 347.196655][ T2620] handle_bad_sector: 113660 callbacks suppressed [ 347.196677][ T2620] attempt to access beyond end of device [ 347.196677][ T2620] loop6: rw=0, want=87936, limit=40427 [ 347.214097][ T2620] attempt to access beyond end of device [ 347.214097][ T2620] loop6: rw=0, want=87944, limit=40427 [ 347.225169][ T2620] attempt to access beyond end of device [ 347.225169][ T2620] loop6: rw=0, want=87952, limit=40427 [ 347.236217][ T2620] attempt to access beyond end of device [ 347.236217][ T2620] loop6: rw=0, want=87960, limit=40427 [ 347.247288][ T2620] attempt to access beyond end of device [ 347.247288][ T2620] loop6: rw=0, want=87968, limit=40427 [ 347.258333][ T2620] attempt to access beyond end of device [ 347.258333][ T2620] loop6: rw=0, want=87976, limit=40427 [ 347.269489][ T2620] attempt to access beyond end of device [ 347.269489][ T2620] loop6: rw=0, want=87984, limit=40427 [ 347.280516][ T2620] attempt to access beyond end of device [ 347.280516][ T2620] loop6: rw=0, want=87992, limit=40427 [ 347.291533][ T2620] attempt to access beyond end of device [ 347.291533][ T2620] loop6: rw=0, want=88000, limit=40427 [ 347.302634][ T2620] attempt to access beyond end of device [ 347.302634][ T2620] loop6: rw=0, want=88008, limit=40427 [ 350.806788][ T31] INFO: task kworker/u4:7:1707 blocked for more than 124 seconds. [ 350.814787][ T31] Tainted: G B W syzkaller #0 [ 350.828615][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.839695][ T31] task:kworker/u4:7 state:D stack:24576 pid: 1707 ppid: 2 flags:0x00004000 [ 350.853026][ T31] Workqueue: writeback wb_workfn (flush-7:6) [ 350.863143][ T31] Call Trace: [ 350.866496][ T31] [ 350.876474][ T31] __schedule+0xbcf/0x14a0 [ 350.881161][ T31] ? release_firmware_map_entry+0x190/0x190 [ 350.887136][ T31] ? __kasan_check_write+0x14/0x20 [ 350.892336][ T31] ? _raw_spin_lock_irq+0x95/0xf0 [ 350.897493][ T31] ? kthread_data+0x50/0xc0 [ 350.902104][ T31] ? wq_worker_sleeping+0x60/0x200 [ 350.907335][ T31] schedule+0x11e/0x1e0 [ 350.911656][ T31] rwsem_down_write_slowpath+0x901/0x19d0 [ 350.917449][ T31] ? rwsem_down_read_slowpath+0x12f0/0x12f0 [ 350.923533][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 350.929472][ T31] ? __wake_up+0x11c/0x180 [ 350.934100][ T31] ? remove_wait_queue+0x140/0x140 [ 350.939376][ T31] ? rwsem_write_trylock+0x136/0x300 [ 350.944784][ T31] ? clear_nonspinnable+0x60/0x60 [ 350.949921][ T31] ? __has_merged_page+0x440/0x490 [ 350.955153][ T31] ? __submit_merged_write_cond+0x44a/0x520 [ 350.961145][ T31] down_write+0x29/0x30 [ 350.965419][ T31] f2fs_balance_fs+0x3d7/0x540 [ 350.970307][ T31] ? memcpy+0x56/0x70 [ 350.974441][ T31] ? f2fs_commit_atomic_write+0x1670/0x1670 [ 350.980453][ T31] ? __kasan_check_write+0x14/0x20 [ 350.985695][ T31] ? f2fs_put_page+0x133/0x190 [ 350.990543][ T31] ? f2fs_update_inode_page+0x119/0x130 [ 350.996237][ T31] f2fs_write_inode+0x522/0x830 [ 351.001177][ T31] __writeback_single_inode+0x4b2/0x9e0 [ 351.007059][ T31] writeback_sb_inodes+0x9f3/0x1610 [ 351.012362][ T31] ? finish_task_switch+0x16b/0x790 [ 351.017670][ T31] ? switch_mm_irqs_off+0x32d/0x960 [ 351.023052][ T31] ? queue_io+0x4b0/0x4b0 [ 351.027467][ T31] ? down_read_trylock+0x317/0x630 [ 351.032719][ T31] __writeback_inodes_wb+0x127/0x400 [ 351.038091][ T31] wb_writeback+0x3ff/0x990 [ 351.042728][ T31] ? inode_cgwb_move_to_attached+0x3b0/0x3b0 [ 351.048793][ T31] ? irqentry_exit_cond_resched+0x29/0x30 [ 351.054642][ T31] ? irqentry_exit+0x37/0x40 [ 351.059317][ T31] ? sysvec_reschedule_ipi+0x78/0x80 [ 351.064880][ T31] ? cpumask_next+0x7c/0xa0 [ 351.069485][ T31] wb_workfn+0xa49/0xf30 [ 351.073867][ T31] ? inode_wait_for_writeback+0x220/0x220 [ 351.079694][ T31] ? preempt_schedule_irq+0xca/0x120 [ 351.085140][ T31] ? __cond_resched+0xd0/0xd0 [ 351.089903][ T31] ? __kasan_check_write+0x14/0x20 [ 351.095140][ T31] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 351.100686][ T31] ? sysvec_reschedule_ipi+0x78/0x80 [ 351.106091][ T31] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 351.111837][ T31] process_one_work+0x6c8/0xbb0 [ 351.116942][ T31] worker_thread+0xaa0/0x1250 [ 351.121699][ T31] ? __kasan_check_read+0x11/0x20 [ 351.126864][ T31] kthread+0x3f5/0x4f0 [ 351.131087][ T31] ? worker_clr_flags+0x190/0x190 [ 351.136184][ T31] ? kthread_blkcg+0xd0/0xd0 [ 351.140872][ T31] ret_from_fork+0x1f/0x30 [ 351.145435][ T31] [ 351.148548][ T31] INFO: task syz.6.639:2613 blocked for more than 144 seconds. [ 351.156227][ T31] Tainted: G B W syzkaller #0 [ 351.162647][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.171466][ T31] task:syz.6.639 state:D stack:23912 pid: 2613 ppid: 522 flags:0x00004004 [ 351.180765][ T31] Call Trace: [ 351.184159][ T31] [ 351.187167][ T31] __schedule+0xbcf/0x14a0 [ 351.191717][ T31] ? release_firmware_map_entry+0x190/0x190 [ 351.197706][ T31] ? __kasan_check_write+0x14/0x20 [ 351.202941][ T31] ? _raw_spin_lock_irq+0x95/0xf0 [ 351.208041][ T31] ? _raw_spin_lock_irqsave+0x130/0x130 [ 351.213707][ T31] schedule+0x11e/0x1e0 [ 351.217952][ T31] rwsem_down_write_slowpath+0x901/0x19d0 [ 351.223802][ T31] ? rwsem_down_read_slowpath+0x12f0/0x12f0 [ 351.229806][ T31] ? memset+0x35/0x40 [ 351.233921][ T31] ? __dquot_initialize+0x225/0xc40 [ 351.239196][ T31] ? rwsem_write_trylock+0x136/0x300 [ 351.244618][ T31] ? clear_nonspinnable+0x60/0x60 [ 351.249932][ T31] down_write+0x29/0x30 [ 351.254221][ T31] f2fs_file_open+0xec/0x460 [ 351.258912][ T31] ? f2fs_file_mmap+0x210/0x210 [ 351.263903][ T31] do_dentry_open+0x82a/0x1010 [ 351.268763][ T31] vfs_open+0x73/0x80 [ 351.272883][ T31] path_openat+0x26e6/0x2f80 [ 351.277557][ T31] ? __kasan_slab_alloc+0xc9/0xe0 [ 351.282715][ T31] ? __x64_sys_creat+0x8e/0xb0 [ 351.287556][ T31] ? x64_sys_call+0x94a/0x9a0 [ 351.292352][ T31] ? do_filp_open+0x400/0x400 [ 351.297130][ T31] do_filp_open+0x1df/0x400 [ 351.301764][ T31] ? vfs_tmpfile+0x2d0/0x2d0 [ 351.306437][ T31] do_sys_openat2+0x15e/0x7f0 [ 351.311200][ T31] ? __se_sys_futex+0x135/0x330 [ 351.316224][ T31] ? __fget_files+0x2e1/0x340 [ 351.321048][ T31] ? do_sys_open+0xe0/0xe0 [ 351.325619][ T31] ? __x64_sys_futex+0x100/0x100 [ 351.330666][ T31] ? __kasan_check_write+0x14/0x20 [ 351.335917][ T31] __x64_sys_creat+0x8e/0xb0 [ 351.340602][ T31] x64_sys_call+0x94a/0x9a0 [ 351.345257][ T31] do_syscall_64+0x4c/0xa0 [ 351.349768][ T31] ? clear_bhb_loop+0x50/0xa0 [ 351.354564][ T31] ? clear_bhb_loop+0x50/0xa0 [ 351.359327][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.365378][ T31] RIP: 0033:0x7f210da2d159 [ 351.369892][ T31] RSP: 002b:00007f210c486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 351.378470][ T31] RAX: ffffffffffffffda RBX: 00007f210dcb4fa0 RCX: 00007f210da2d159 [ 351.386521][ T31] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0 [ 351.394588][ T31] RBP: 00007f210dac406b R08: 0000000000000000 R09: 0000000000000000 [ 351.402744][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.410803][ T31] R13: 00007f210dcb5038 R14: 00007f210dcb4fa0 R15: 00007ffd646ee7c8 [ 351.418925][ T31] [ 351.422025][ T31] INFO: task syz.6.639:2623 blocked for more than 145 seconds. [ 351.429666][ T31] Tainted: G B W syzkaller #0 [ 351.436132][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.444935][ T31] task:syz.6.639 state:D stack:28968 pid: 2623 ppid: 522 flags:0x00004004 [ 351.454782][ T31] Call Trace: [ 351.458169][ T31] [ 351.461219][ T31] __schedule+0xbcf/0x14a0 [ 351.465893][ T31] ? release_firmware_map_entry+0x190/0x190 [ 351.471906][ T31] ? __kasan_check_write+0x14/0x20 [ 351.477171][ T31] ? _raw_spin_lock_irq+0x95/0xf0 [ 351.482258][ T31] ? _raw_spin_lock_irqsave+0x130/0x130 [ 351.487905][ T31] schedule+0x11e/0x1e0 [ 351.492196][ T31] rwsem_down_write_slowpath+0x901/0x19d0 [ 351.498012][ T31] ? rwsem_down_read_slowpath+0x12f0/0x12f0 [ 351.504043][ T31] ? memset+0x35/0x40 [ 351.508207][ T31] ? __dquot_initialize+0x225/0xc40 [ 351.513534][ T31] ? rwsem_write_trylock+0x136/0x300 [ 351.519158][ T31] ? clear_nonspinnable+0x60/0x60 [ 351.524268][ T31] down_write+0x29/0x30 [ 351.529874][ T31] f2fs_file_open+0xec/0x460 [ 351.534545][ T31] ? f2fs_file_mmap+0x210/0x210 [ 351.539488][ T31] do_dentry_open+0x82a/0x1010 [ 351.544394][ T31] vfs_open+0x73/0x80 [ 351.548462][ T31] path_openat+0x26e6/0x2f80 [ 351.553175][ T31] ? __kasan_slab_alloc+0xc9/0xe0 [ 351.558291][ T31] ? __x64_sys_creat+0x8e/0xb0 [ 351.563190][ T31] ? x64_sys_call+0x94a/0x9a0 [ 351.567974][ T31] ? do_filp_open+0x400/0x400 [ 351.572786][ T31] do_filp_open+0x1df/0x400 [ 351.577380][ T31] ? vfs_tmpfile+0x2d0/0x2d0 [ 351.582100][ T31] do_sys_openat2+0x15e/0x7f0 [ 351.586879][ T31] ? __se_sys_futex+0x135/0x330 [ 351.591861][ T31] ? do_sys_open+0xe0/0xe0 [ 351.596381][ T31] ? __x64_sys_futex+0x100/0x100 [ 351.601397][ T31] ? __kasan_check_write+0x14/0x20 [ 351.606682][ T31] __x64_sys_creat+0x8e/0xb0 [ 351.611352][ T31] x64_sys_call+0x94a/0x9a0 [ 351.615926][ T31] do_syscall_64+0x4c/0xa0 [ 351.620510][ T31] ? clear_bhb_loop+0x50/0xa0 [ 351.625390][ T31] ? clear_bhb_loop+0x50/0xa0 [ 351.630249][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.636412][ T31] RIP: 0033:0x7f210da2d159 [ 351.641021][ T31] RSP: 002b:00007f210c423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 351.649586][ T31] RAX: ffffffffffffffda RBX: 00007f210dcb5270 RCX: 00007f210da2d159 [ 351.657653][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 351.665762][ T31] RBP: 00007f210dac406b R08: 0000000000000000 R09: 0000000000000000 [ 351.673827][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.681954][ T31] R13: 00007f210dcb5308 R14: 00007f210dcb5270 R15: 00007ffd646ee7c8 [ 351.690026][ T31] [ 351.693198][ T31] NMI backtrace for cpu 0 [ 351.697549][ T31] CPU: 0 PID: 31 Comm: khungtaskd Tainted: G B W syzkaller #0 [ 351.706273][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 351.716365][ T31] Call Trace: [ 351.719669][ T31] [ 351.722619][ T31] __dump_stack+0x21/0x30 [ 351.726983][ T31] dump_stack_lvl+0x110/0x170 [ 351.731712][ T31] ? show_regs_print_info+0x20/0x20 [ 351.736935][ T31] ? rcu_preempt_deferred_qs_irqrestore+0x847/0x960 [ 351.743726][ T31] dump_stack+0x15/0x20 [ 351.747906][ T31] nmi_cpu_backtrace+0x2af/0x2c0 [ 351.752872][ T31] ? rcu_read_unlock_special+0xb2/0x440 [ 351.758450][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 351.764635][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 351.769673][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 351.775773][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 351.781865][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 351.787873][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 351.793792][ T31] watchdog+0xd58/0xea0 [ 351.797998][ T31] ? hungtask_pm_notify+0x50/0x50 [ 351.803070][ T31] ? __kasan_check_read+0x11/0x20 [ 351.808120][ T31] ? __kthread_parkme+0xab/0x1f0 [ 351.813084][ T31] kthread+0x3f5/0x4f0 [ 351.817179][ T31] ? hungtask_pm_notify+0x50/0x50 [ 351.822232][ T31] ? kthread_blkcg+0xd0/0xd0 [ 351.826864][ T31] ret_from_fork+0x1f/0x30 [ 351.831446][ T31] [ 351.834619][ T31] Sending NMI from CPU 0 to CPUs 1: [ 351.839886][ C1] NMI backtrace for cpu 1 [ 351.839899][ C1] CPU: 1 PID: 2620 Comm: syz.6.639 Tainted: G B W syzkaller #0 [ 351.839919][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 351.839930][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 351.839959][ C1] Code: 00 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 0c 8d 7f 05 48 89 de e8 e4 bf 3e 00 5b 5d c3 00 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d b0 9c 98 7e 65 8b 15 b1 9c 98 [ 351.839976][ C1] RSP: 0018:ffffc90001b165b8 EFLAGS: 00000246 [ 351.839993][ C1] RAX: ffffffff823a0ce0 RBX: 0000000000000000 RCX: ffff88812e512780 [ 351.840008][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.840020][ C1] RBP: ffffc90001b16610 R08: 0000000000000003 R09: 0000000000000004 [ 351.840033][ C1] R10: dffffc0000000000 R11: fffff52000362c98 R12: ffff8881092c7440 [ 351.840048][ C1] R13: ffff88810e2d6508 R14: 1ffff11021c5aca2 R15: ffff8881092c7440 [ 351.840063][ C1] FS: 00007f210c4656c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 351.840080][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.840094][ C1] CR2: 00007f206a3ef2f8 CR3: 000000010ca85000 CR4: 00000000003506a0 [ 351.840111][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 351.840123][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 351.840135][ C1] Call Trace: [ 351.840141][ C1] [ 351.840147][ C1] ? bio_endio+0x28d/0x810 [ 351.840168][ C1] submit_bio_checks+0x25c/0x11e0 [ 351.840185][ C1] ? __kasan_slab_alloc+0xc9/0xe0 [ 351.840203][ C1] ? __kasan_slab_alloc+0xb7/0xe0 [ 351.840222][ C1] ? __submit_bio+0x900/0x900 [ 351.840238][ C1] ? do_vfs_ioctl+0x19f4/0x1d80 [ 351.840260][ C1] ? blk_try_enter_queue+0x165/0x350 [ 351.840281][ C1] __submit_bio+0x59f/0x900 [ 351.840306][ C1] ? trace_raw_output_block_rq_remap+0x260/0x260 [ 351.840326][ C1] ? slab_post_alloc_hook+0x6d/0x2b0 [ 351.840349][ C1] submit_bio_noacct+0x6b7/0x800 [ 351.840370][ C1] ? mempool_free+0x330/0x330 [ 351.840388][ C1] ? mempool_alloc_slab+0x1d/0x30 [ 351.840407][ C1] ? blk_put_request+0x20/0x20 [ 351.840426][ C1] ? f2fs_update_iostat+0x172/0xcb0 [ 351.840448][ C1] ? mempool_free+0x330/0x330 [ 351.840467][ C1] ? blkcg_set_ioprio+0x1f6/0x320 [ 351.840486][ C1] submit_bio+0x367/0x620 [ 351.840505][ C1] ? bio_associate_blkg_from_css+0x971/0xb10 [ 351.840524][ C1] ? submit_bio_noacct+0x800/0x800 [ 351.840545][ C1] ? __bio_add_page+0x26e/0x430 [ 351.840564][ C1] __submit_bio+0x614/0x920 [ 351.840581][ C1] ? bio_add_page+0x2de/0x460 [ 351.840600][ C1] f2fs_submit_page_read+0x1a1/0x1c0 [ 351.840620][ C1] f2fs_get_read_data_page+0x513/0x6e0 [ 351.840639][ C1] ? f2fs_get_block+0x140/0x140 [ 351.840656][ C1] ? __kasan_check_read+0x11/0x20 [ 351.840676][ C1] ? inode_dio_wait+0x25a/0x2d0 [ 351.840696][ C1] ? inode_owner_or_capable+0x1f0/0x1f0 [ 351.840717][ C1] ? clear_nonspinnable+0x60/0x60 [ 351.840736][ C1] ? f2fs_get_node_info+0x1b1/0x1020 [ 351.840755][ C1] f2fs_get_lock_data_page+0x59/0x230 [ 351.840774][ C1] do_garbage_collect+0x2667/0x5930 [ 351.840802][ C1] ? has_not_enough_free_secs+0x910/0x910 [ 351.840821][ C1] ? get_victim_by_default+0x4d62/0x52c0 [ 351.840849][ C1] ? set_page_private_gcing+0x130/0x130 [ 351.840867][ C1] ? rwsem_write_trylock+0x136/0x300 [ 351.840890][ C1] f2fs_gc+0x97d/0x1a70 [ 351.840909][ C1] ? f2fs_start_bidx_of_node+0x380/0x380 [ 351.840929][ C1] ? __has_merged_page+0x490/0x490 [ 351.840947][ C1] ? __submit_merged_write_cond+0x44a/0x520 [ 351.840967][ C1] f2fs_balance_fs+0x3eb/0x540 [ 351.840988][ C1] ? f2fs_commit_atomic_write+0x1670/0x1670 [ 351.841012][ C1] f2fs_map_blocks+0x2cf8/0x3530 [ 351.841037][ C1] ? f2fs_do_map_lock+0x80/0x80 [ 351.841055][ C1] ? __allocate_new_segment+0x1ae/0x7a0 [ 351.841079][ C1] expand_inode_data+0x54b/0x940 [ 351.841100][ C1] ? f2fs_insert_range+0x3a0/0x3a0 [ 351.841120][ C1] f2fs_fallocate+0x41a/0x8d0 [ 351.841138][ C1] vfs_fallocate+0x4b9/0x590 [ 351.841159][ C1] do_vfs_ioctl+0x19f4/0x1d80 [ 351.841180][ C1] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 351.841203][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 351.841226][ C1] ? ioctl_has_perm+0x1b8/0x4f0 [ 351.841244][ C1] ? ioctl_has_perm+0x3ab/0x4f0 [ 351.841262][ C1] ? has_cap_mac_admin+0x370/0x370 [ 351.841280][ C1] ? __kasan_slab_free+0x11/0x20 [ 351.841305][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 351.841323][ C1] ? putname+0x111/0x160 [ 351.841339][ C1] ? kmem_cache_free+0x100/0x320 [ 351.841359][ C1] ? selinux_file_ioctl+0x3ad/0x4c0 [ 351.841380][ C1] ? selinux_file_alloc_security+0x120/0x120 [ 351.841403][ C1] ? __fget_files+0x2e1/0x340 [ 351.841421][ C1] ? security_file_ioctl+0x84/0xa0 [ 351.841442][ C1] __se_sys_ioctl+0x9f/0x1a0 [ 351.841463][ C1] __x64_sys_ioctl+0x7b/0x90 [ 351.841483][ C1] x64_sys_call+0x2f/0x9a0 [ 351.841501][ C1] do_syscall_64+0x4c/0xa0 [ 351.841518][ C1] ? clear_bhb_loop+0x50/0xa0 [ 351.841537][ C1] ? clear_bhb_loop+0x50/0xa0 [ 351.841556][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.841575][ C1] RIP: 0033:0x7f210da2d159 [ 351.841591][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.841607][ C1] RSP: 002b:00007f210c465028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.841625][ C1] RAX: ffffffffffffffda RBX: 00007f210dcb5090 RCX: 00007f210da2d159 [ 351.841639][ C1] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000006 [ 351.841652][ C1] RBP: 00007f210dac406b R08: 0000000000000000 R09: 0000000000000000 [ 351.841664][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.841675][ C1] R13: 00007f210dcb5128 R14: 00007f210dcb5090 R15: 00007ffd646ee7c8 [ 351.841692][ C1] [ 352.427519][ T2620] handle_bad_sector: 177105 callbacks suppressed [ 352.427543][ T2620] attempt to access beyond end of device [ 352.427543][ T2620] loop6: rw=0, want=87176, limit=40427 [ 352.444979][ T2620] attempt to access beyond end of device [ 352.444979][ T2620] loop6: rw=0, want=87184, limit=40427 [ 352.456066][ T2620] attempt to access beyond end of device [ 352.456066][ T2620] loop6: rw=0, want=87192, limit=40427 [ 352.467201][ T2620] attempt to access beyond end of device [ 352.467201][ T2620] loop6: rw=0, want=87200, limit=40427 [ 352.478333][ T2620] attempt to access beyond end of device [ 352.478333][ T2620] loop6: rw=0, want=87208, limit=40427 [ 352.489521][ T2620] attempt to access beyond end of device [ 352.489521][ T2620] loop6: rw=0, want=87216, limit=40427 [ 352.500571][ T2620] attempt to access beyond end of device [ 352.500571][ T2620] loop6: rw=0, want=87224, limit=40427 [ 352.511629][ T2620] attempt to access beyond end of device [ 352.511629][ T2620] loop6: rw=0, want=87232, limit=40427 [ 352.522662][ T2620] attempt to access beyond end of device [ 352.522662][ T2620] loop6: rw=0, want=87240, limit=40427 [ 352.533720][ T2620] attempt to access beyond end of device [ 352.533720][ T2620] loop6: rw=0, want=87248, limit=40427