last executing test programs: 4m16.862987997s ago: executing program 1 (id=1166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000180), 0x1004) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005140)=@newtfilter={0x30, 0x2c, 0xd27, 0x11, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) keyctl$set_reqkey_keyring(0xe, 0x3) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) 4m15.458263701s ago: executing program 1 (id=1171): r0 = syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x120, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x56, 0x93}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) unshare(0x28000600) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000100)=0xeffffffe, 0x4) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x10, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) syz_clone3(0x0, 0x0) sendto$inet(r5, &(0x7f0000000600)="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", 0x13f, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0xffffff0c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) shutdown(r5, 0x0) recvfrom(r5, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) mount$fuseblk(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r6, 0x40000000) 4m13.380524327s ago: executing program 1 (id=1183): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x0, 0x4, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x2, 0x3, 0xd96, 0x0, r0}) socket$inet6(0xa, 0x80002, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4004c0d0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) listen(r8, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) 4m12.423102238s ago: executing program 1 (id=1185): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x751, &(0x7f0000001040)="$eJzs3M9rHGUfAPDvTJP+zPtuXngP4kmoWKF2k6ZqT0LEc6HQP6AuySSETLIhu6ndNWDrwYMgqAhae9H/wIsieCn9HxTBm4IHQWsaDwUPkdnspu12E9c26Zb4+cDsfJ9nZvb7fNvJww7sswH8az1TvCQRIxFxPiJK7f40Ig62osMRVzbPu722OrW+tjqVxMbGhVtJcVmrr/NeSXt/LFqXxFMRcXM44uTbD+atNZrzlTzPltvtsfrC0lit0Tw1t1CZzWazxYnx8TNnXp546cXxXav1vTe/+O3dr1/79tOzC3++cuuF6SQmW3VHVx27afPfZDgmu/oX9yLZACWDHgAAAH0pPucfiIih1qfUUhxoRQAAAMB+snFoAwAAANj3khj0CAAAAIC91fkewO211anO9ji/f/DrqxExendt8fpW/qHWGuKIwzEcEUfXk/tWJiSbl8EjuXI1Im5M9rj/k/b99/C6V65bI/3kuVHMP5O95r90a/6JHvPPUOe3Ex5RZ/5bf2D+u5v/wDbz3/k+cxxaPvHdtvmvRjw91Ct/spU/6eSv3Lkv/+t95v9y5Icftzu28XnEieid/95cO/w+xNjMXJ61X3vmOP7VWyd3qv/odvmTrvrvua7oW+qz/p+uT8xuN5cU+Z8/vvP/f6/8xT3xfnscaUR80N4X7Q+7cjx3c/zaTvVPb1P/TvmLvs/6rP+bd5o/93kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtKQRMRJJWt6K07RcjjgWEf+Po2lerdVPzlRXFqeLYxGjMZzOzOXZeESUNttJ0T7diu+2J7raZyLifxHxUelIq12equbTgy4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALcciYiSStBwRaUT8UUrTcnnQowIAAAB23eigBwAAAADsOc//AAAAsP91Pf9fqwxqIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB+dv7cuWLbWF9bnSra05caK/PVS6ems7R9RnV5qTxbrc7mWXmquvB375dXq0tnY3Hl8lg9q9XHao3mxYXqymL94txCZTa7mA3veUUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jJHWlqTliEhbcZqWyxH/iYjRGE5m5vJsPCL+GxHfl4YPFe3Tgx40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu67WaM5X8jxbFggEuxwcbv+VPSnj+SfBjtPGkccyOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8NjVGs35Sp5ny7VBjwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDBSn9JIqLYTpSeHek+ejC5U2rtI+KN6xc+vlyp15dPF/2/b/XXP2n3Twxi/AAAAEC3znN65zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgX7VGc76S59nyHgaDrhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg4fwUAAP//zWnHag==") r0 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r0, 0x7) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'xfrm0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x40081271, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x1, r5, 0x333, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, r6, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x2010800, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x200) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) setfsuid(0xee00) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008801) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) socketpair$unix(0x1, 0x92033a346114a88e, 0x0, 0x0) 4m11.746293839s ago: executing program 1 (id=1189): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000380)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@flush}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000035c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0xa9f5, 0x85}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) write(r2, &(0x7f0000000900)="b0", 0x1) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) (async) keyctl$session_to_parent(0x12) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) (async) r7 = inotify_init1(0x80800) inotify_add_watch(r7, &(0x7f00000003c0)='./file0\x00', 0x2000840) dup(r0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500223803003c0012800b000100697036746e6c00002c0002801400020000000000000000000000ffff7f00000114000300000000000000000000f2"], 0x5c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) 4m11.378138031s ago: executing program 1 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000d60602000f02000067060000200000007a0a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611e6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x9c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x47, 0xbe, "b89c381a956137e0f81df949f47d23b34c492de2ef78d58a066b8805c3a85bafb0cbdc9dfc787e51c1b1bf2570c3ef3cd69b478b6ad792367db8ad2a59c138ca2a7930"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x40}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x710}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x11) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 4m11.340659712s ago: executing program 32 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f00000000000000b604000001ede0ff2500000017ffff17cc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x9c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x47, 0xbe, "b89c381a956137e0f81df949f47d23b34c492de2ef78d58a066b8805c3a85bafb0cbdc9dfc787e51c1b1bf2570c3ef3cd69b478b6ad792367db8ad2a59c138ca2a7930"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x40}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x710}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x11) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 3m25.173557021s ago: executing program 5 (id=1440): getrusage(0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) close(r0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x3f, 0x30, 0x3, 0x0, 0x2, 0x5, 0x0, @dev, @private=0xa010100, {[@noop, @generic={0x7, 0x7, "08b1070000"}]}}, {{0x4e29, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000940)={0x14, 0x1, 0x2, 0xd93a5a4bce636df, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x2404000d}, 0x240200d0) pipe2$9p(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r2], 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 3m23.811478395s ago: executing program 5 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x0, 0x0, @default, @val, @void, [{0xdd, 0x6, "20f955852e04"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3aeb359a35da3ab0}, 0x0) 3m23.750870847s ago: executing program 5 (id=1463): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf253d00000008", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setfsgid(0x0) syz_open_dev$usbfs(0x0, 0x101, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001"], 0x7c}}, 0x0) 3m23.674549869s ago: executing program 5 (id=1464): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x1f, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737eb4b78c660e677df931905b9aafab4cfaaf755a3f68424978700", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x1000, 0xffffffffffffffff]}) truncate(&(0x7f0000000040)='./file2\x00', 0x4) 3m23.446288637s ago: executing program 5 (id=1466): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, 0x0) 3m22.750849409s ago: executing program 5 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="bc01330080000000ffffffffffff080211000000"], 0x1d8}}, 0x0) 3m22.650079882s ago: executing program 33 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="bc01330080000000ffffffffffff080211000000"], 0x1d8}}, 0x0) 9.585931604s ago: executing program 4 (id=2461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) getdents64(r5, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) 9.544801716s ago: executing program 4 (id=2462): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbd2, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x2, 0x5, 0x578, 0x0, 0x208, 0xffffffff, 0xf0, 0xf0, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, 0x0, {[{{@ipv6={@empty, @remote, [0xff000000, 0xff, 0xff, 0xffffff00], [0xffffff00, 0xff, 0x0, 0xffffffff], 'veth1_to_team\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0xc8, 0xb, 0x2, 0xe}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e1e, @port=0x4e24}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv6=@local, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @port=0x4e22, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@srh1={{0x90}, {0x32, 0x81, 0xe4, 0x1, 0x2, @empty, @local, @local, [0xffffffff, 0xff000000, 0xff000000], [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0xff, 0xff, 0xff], 0x2200, 0x185}}, @common=@frag={{0x30}, {[0x2c, 0x4], 0x3, 0x1, 0x2}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@remote, @ipv4=@private=0xa010100, @icmp_id=0x64, @icmp_id=0x64}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffff00, 0x0, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xffffff00], 'syzkaller0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x80, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6=@empty, @ipv4=@broadcast, @icmp_id=0x64, @gre_key=0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x90180, 0x100) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r6, 0x0, 0x80, 0x6) write$bt_hci(r6, &(0x7f0000000e80)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"8d2c6f"}}}, 0x7) mount_setattr(r2, &(0x7f00000000c0)='./file1\x00', 0x8c359d4809d5e75d, &(0x7f0000000140)={0x0, 0x84, 0x160000, {r1}}, 0x20) 6.512747503s ago: executing program 4 (id=2480): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7) close(0x3) syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000001500)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',errors=continue,dmask=00000000000000000100001,iocharset=cp857,discard,umask=00000000000037777777777,errors=continue,umask=00000000000000000000002,allow_utime=00000000000000000000001,errors=remount-ro,discard,sys_tz,gid=', @ANYRESHEX, @ANYBLOB="69653d303030383030303030303030307030303030304d6e616d3b2d99d6551d6de459901c9c76c79e000000"], 0x1, 0x152d, &(0x7f0000001f80)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4000004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0xfffffffd}, {0x3d, 0x0, 0x0, 0xfffffffc}, {0x6, 0x4}]}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) 5.556576853s ago: executing program 0 (id=2485): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = accept4(r1, &(0x7f0000000340)=@qipcrtr, &(0x7f00000003c0)=0x80, 0x80000) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r5, 0x0, 0x6, 0xc) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 4.133792298s ago: executing program 0 (id=2490): r0 = syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x5, 0x84, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000540)={0x44, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, 0x0, &(0x7f0000000380)={0x20, 0x82, 0x1, '\b'}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 3.697179192s ago: executing program 6 (id=2492): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.696595752s ago: executing program 6 (id=2493): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000174000003000d000000000000000000000009000000000000"], 0x0, 0x3e, 0x0, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbd2, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x2, 0x5, 0x578, 0x0, 0x208, 0xffffffff, 0xf0, 0xf0, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, 0x0, {[{{@ipv6={@empty, @remote, [0xff000000, 0xff, 0xff, 0xffffff00], [0xffffff00, 0xff, 0x0, 0xffffffff], 'veth1_to_team\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0xc8, 0xb, 0x2, 0xe}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e1e, @port=0x4e24}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv6=@local, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @port=0x4e22, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@srh1={{0x90}, {0x32, 0x81, 0xe4, 0x1, 0x2, @empty, @local, @local, [0xffffffff, 0xff000000, 0xff000000], [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0xff, 0xff, 0xff], 0x2200, 0x185}}, @common=@frag={{0x30}, {[0x2c, 0x4], 0x3, 0x1, 0x2}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@remote, @ipv4=@private=0xa010100, @icmp_id=0x64, @icmp_id=0x64}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffff00, 0x0, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xffffff00], 'syzkaller0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x80, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6=@empty, @ipv4=@broadcast, @icmp_id=0x64, @gre_key=0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x90180, 0x100) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r7, 0x0, 0x80, 0x6) write$bt_hci(r7, &(0x7f0000000e80)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"8d2c6f"}}}, 0x7) write(r5, 0x0, 0x0) mount_setattr(r2, &(0x7f00000000c0)='./file1\x00', 0x8c359d4809d5e75d, &(0x7f0000000140)={0x0, 0x84, 0x160000, {r1}}, 0x20) 3.46577258s ago: executing program 4 (id=2494): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@uni_xlateno}, {@fat=@debug}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@shortname_lower}, {@shortname_mixed}, {@fat=@flush}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x2ae, &(0x7f0000000b40)="$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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_submit(0x0, 0x5, &(0x7f0000000e80)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x3, r2, &(0x7f00000005c0)="15ac8d326c0345153030538c72188666f7de5e502d4c19701a01e88c4503ea00d03d0500a054f42ea7183ce36aacd917ed35b1c28c8b63ad524d9e218b7e6901207d9322b7cd26076040002174c7a6764df31d0f78bd69f450913c19898ebebc77b00127", 0x64, 0x80000001}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000740)="92eef1ebac3d90be066d5cda916a42603e7c06ca4cb7dbb829ba545038b52b9e2e5c17d165247954591b59916fbdf5", 0x2f, 0x4, 0x0, 0x2, r1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f00000007c0)="11900bf572cb7acccef239570bf70f23b39ddbfdbfe0a7c910e75ec20fd05f34b9d8f16917b02c09a3551c8f263d0d668350da1e236700e29371ece36c3bc6481471e6c80d4cf28ba3fe0b2097f11c2b5d272632548009fe66937108d4c8493e2311387c5acf33c2e2b7280a63bfbea3a329f2aea2196b20f066e8c9d0bf7ae159b85a6c65a40a01c4330bd6fc1ee1b63333541554c86d04a9e5f93943167a3a11f8add838d2364f3f41dee8fc4faee1c845676229a9fb40cbe31b0f1dca68e7ea2872a04e91db404c9cd70b226b5004ff54068059235a835c99dda7221179e57ca301ca6b06af462c7eafc0a33bfed7cb26", 0xf2, 0x3b, 0x0, 0x1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0xea, r1, &(0x7f0000000900)="75128238035aa17ee7eeeef17e", 0xd, 0x4, 0x0, 0x1, r2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000980)="17c74411a7975f0e9c92228ea4dd92e8b8fa1518", 0x14, 0x100000001}]) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000b500001800000000000000026b112a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0x3000, 0x80a0000, 0x9, 0xe, 0x5, 0x4, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x16, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0x4, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x52, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x4, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0x2, 0x3, 0x9, 0x4a, 0x7, 0x7, 0x43, 0x6}, {0x4, 0x5}, {0xffff1000}, 0x40020012, 0x0, 0xdddd0000, 0x152690, 0xf, 0x4000, 0x10000, [0x1, 0x1004, 0x6, 0x1000]}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x2}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x32, 0x23, 0xb, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x2, 0x1, 0x0, '\x00', 0xff}, {0x0, 0x28, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0x9, 0x5, '\x00', 0xb}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3f}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0xa, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x6, 0x8}, {0xff, 0x5, 0x6, '\x00', 0xda}, {0x5, 0xfd, 0x2, '\x00', 0x8}, {0x45, 0x4, 0xfe, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x80, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x12, '\x00', 0x6}, {0x4, 0xa9, 0x1c, '\x00', 0xa}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x19a4a4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/63, 0x3f}], 0x2) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x19800, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) clock_getres(0xfffffffffffffffb, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+'], 0xc) close_range(r7, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000002c00)={0x2020}, 0x2020) 3.45826171s ago: executing program 6 (id=2495): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001e40)=@mangle={'mangle\x00', 0x2, 0x6, 0x570, 0x140, 0x210, 0x0, 0x0, 0x210, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0x108, 0x140, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xffffffff, 0x5, 0x1}}, @common=@frag={{0x30}, {[0xfffffffe, 0x6], 0x8001, 0x6, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x81, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffffff, 0xfffffff6}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x570}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105300000000001d400500000000004704000001ed00000f030000000000009f440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffbbbbbbbbbbbb08000c00002c03004000002f"], 0x3e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0xfffffffffffffffe, 0x0, 0x8, 0x4, 0xfffffffffffffffd}, {0xfffffffffffffff3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052506000105240000000d240f01000000000000ffff0006241a0000000905810300020400000904010000020d00000904f90102020d"], 0x0) 3.191281328s ago: executing program 3 (id=2496): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001e40)=@mangle={'mangle\x00', 0x2, 0x6, 0x570, 0x140, 0x210, 0x0, 0x0, 0x210, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0x108, 0x140, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xffffffff, 0x5, 0x1}}, @common=@frag={{0x30}, {[0xfffffffe, 0x6], 0x8001, 0x6, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x81, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffffff, 0xfffffff6}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x570}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffbbbbbbbbbbbb08000c00002c03004000002f"], 0x3e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0xfffffffffffffffe, 0x0, 0x8, 0x4, 0xfffffffffffffffd}, {0xfffffffffffffff3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052506000105240000000d240f01000000000000ffff0006241a0000000905810300020400000904010000020d00000904f90102020d"], 0x0) 3.14415661s ago: executing program 4 (id=2498): r0 = epoll_create1(0x0) mlock(&(0x7f000021c000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) munlockall() mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f000021c000/0x2000)=nil) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x4010, r0, 0xb86fb000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000002}) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) r3 = socket(0x1, 0x5, 0x0) close(r3) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x68}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000500)={0xe000200c}) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x0, 0x31, 0x0) 3.1384934s ago: executing program 2 (id=2499): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x22}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="a88d"]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000200000000000000ff0000000000000000000000000000000000ffffff7f58000000030000000080000009000000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f60000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0800000000000000"], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f00000024c0)={0x90, 0xffffffffffffffda, r3, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r4, r5, 0x3, 0x5}}}, 0x90) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.026243833s ago: executing program 4 (id=2500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 3.026100163s ago: executing program 34 (id=2500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 2.258517368s ago: executing program 2 (id=2501): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.17255616s ago: executing program 0 (id=2502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, 0x0) 2.062265124s ago: executing program 2 (id=2504): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000002f80)=0xffff, 0x4) 2.010352616s ago: executing program 0 (id=2506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2.010232776s ago: executing program 2 (id=2507): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendfile(r1, r0, 0x0, 0x7ffff000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40842, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfea7) copy_file_range(r4, 0x0, r3, 0x0, 0xffffffffa003e45c, 0x700000000000000) 1.762806694s ago: executing program 2 (id=2511): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x22}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="a88d"]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000200000000000000ff0000000000000000000000000000000000ffffff7f58000000030000000080000009000000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f60000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0800000000000000"], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f00000024c0)={0x90, 0xffffffffffffffda, r3, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r4, r5, 0x3, 0x5}}}, 0x90) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.630082638s ago: executing program 3 (id=2513): listxattr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x10000000) fchmod(r1, 0x14c) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.616343729s ago: executing program 6 (id=2514): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) mmap(&(0x7f00005f9000/0x4000)=nil, 0x4000, 0x0, 0x8010, r0, 0xc1b3a000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listxattr(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="680100001000010000000000fadbdf2508000000", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0d002b8008000300", @ANYBLOB="1d"], 0x168}], 0x1, 0x0, 0x0, 0xc1a6ec5e92f4d87e}, 0x20000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8918, &(0x7f0000000480)={'veth1_to_hsr\x00', {0x2, 0x80, @empty=0xcf050000}}) timer_create(0x5, &(0x7f0000000200)={0x0, 0x3, 0x2, @thr={&(0x7f0000000040)="d2f5e2e87b2e314621ce83b89aff36d549dc2a06d0071169a05d09c1c82ac0ccbf36cfbaba4a13e6a82e11f1d4fb87cb6ba0215828d104060fdf537cb34de4353909b9042ece92bb632d532ab091261db14539f00617d4c3deb3bb76f4c8de2f6ea74fd2896eb5dd02b8b3eaaf3717f8bb51a420f322c60c76961eff75a5f4e9482c0e", &(0x7f0000000100)="759f7ad6365e04a98524c94a1a1db2f044bd6e131568a49cedb9945cedd11063f5867ce7c1c5bf6fbf05df435dc9ed68a9d9241e97c38cdda701e1e34930fb088d6889892b743b389722ed19e68259359d79d9489e070d21f88cc0f405381453bb9b9193d4b7e0ba108a396658a221bc80ea9762b6d966451ba9b44127701041f62167c3aea17fabd241a11bf5a24743c8fb6900fdd40e7fa80918e6798a323b8e71446e4cfc819f4e6dd62cab49338757846240e3fd66299bbdb97c96a34ea7f2732803f77a88165e0dcdf25588ece9b254ced416b390a575120cd8081e666a0685b5ad55ca709fb032a0ba9c26"}}, &(0x7f0000000240)) 1.600250749s ago: executing program 3 (id=2515): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) (async, rerun: 32) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (rerun: 32) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x0, 0x2, 0x2ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e43, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac63, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x0, 0x48a, 0x0, 0x0}}, 0x0) 1.581075259s ago: executing program 7 (id=2516): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000003000000000000006016df0005000c0029000000"], 0x44}}, 0xc008040) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0xaaf, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x9, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401c, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff9, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x4], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x88000) ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f0000000040)) 1.503894002s ago: executing program 3 (id=2517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x5, 0x8001, 0x0}) 1.503641132s ago: executing program 7 (id=2518): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.476309523s ago: executing program 7 (id=2519): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0x2f}], 0x20000000000000d6) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x80801) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "eb21500d4b055924c10c0322404686a8"}, 0x20) 1.346295057s ago: executing program 3 (id=2520): close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) 1.291583619s ago: executing program 6 (id=2521): socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp6=r0, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000a00)={@local, @local, @void, {@mpls_mc={0x8848, {[], @ipv6=@dccp_packet={0xf, 0x6, "1bfae7", 0x10, 0x21, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, {[], {{0x4e22, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x4, 0x7, "ff8db3", 0x64, "9c404c"}}}}}}}}, 0x0) (fail_nth: 1) 1.030833707s ago: executing program 0 (id=2522): madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = syz_io_uring_complete(0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/120, 0x78, 0x9) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x7fff0000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071181b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@errors_remount}]}, 0x1, 0x5a5, &(0x7f0000000480)="$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") clock_settime(0x0, &(0x7f0000009ac0)={r1, r2+10000000}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'veth1_to_batadv\x00', 0x100}) 1.030389537s ago: executing program 0 (id=2523): r0 = syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x120, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x56, 0x93}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) unshare(0x28000600) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000100)=0xeffffffe, 0x4) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x10, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) syz_clone3(0x0, 0x0) sendto$inet(r5, &(0x7f0000000600)="15d98904f9237f90009626d4834e07496b0d26a60800000000000000fc24f027339486fe0b4ed71ee739a6c4e30a0677d9c831215d9e3f698b499845a440203460896c7d387363f37c221d775ac8e151e9f381bb927cbe83ba4d468e014b1e051d83f3283babdab25380f55cc1682640321e2c1232290dff64760fb76c741e8bb855e119e4b183a312381f78237f65c02e0b941d3934037d79856c64f6b73f4cc2c389d7d06f4745739d61042b6a020f03c0514d39cd487bd57648e8869179c06ddb6b291194427c26cf90a47ae2d2801d284cc407531d820ef5cdb01fd3b610f3a05f3407763da6643954da5e490e80aaee23a1c35817017365174c0fe799b8b66243db191c33a31f702d7c170b093b48bac9c8b94ff4595bd3db605c8356ad7ef8024a035fea1148efbd9a4275cf2df3568b404638688dbbc73e40557e55", 0x13f, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0xffffff0c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) shutdown(r5, 0x0) recvfrom(r5, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_TIOCINQ(r5, 0x541b, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r6, 0x40000000) 1.003250778s ago: executing program 6 (id=2524): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001e40)=@mangle={'mangle\x00', 0x2, 0x6, 0x570, 0x140, 0x210, 0x0, 0x0, 0x210, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0x108, 0x140, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xffffffff, 0x5, 0x1}}, @common=@frag={{0x30}, {[0xfffffffe, 0x6], 0x8001, 0x6, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x81, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffffff, 0xfffffff6}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x570}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105300000000001d400500000000004704000001ed00000f030000000000009f440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffbbbbbbbbbbbb08000c00002c03004000002f"], 0x3e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800"/15, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0xfffffffffffffffe, 0x0, 0x8, 0x4, 0xfffffffffffffffd}, {0xfffffffffffffff3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052506000105240000000d240f01000000000000ffff0006241a0000000905810300020400000904010000020d00000904f90102020d"], 0x0) 854.254763ms ago: executing program 2 (id=2525): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x800000000000125}) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) 591.705991ms ago: executing program 7 (id=2526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e005b"], 0x74}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$packet_int(r2, 0x107, 0x11, 0x0, &(0x7f0000001600)) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000140)={0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0x0, &(0x7f00000000c0)=[{0xf, 0xfe, 0xff}, {0x3, 0xfe, 0x9}, {0x12, 0x0, 0xfffffff4}, {0x7, 0xfe}, {0x21, 0xfe, 0x6}, {0x11, 0x1ff, 0x1}, {0xa, 0x101, 0x2}]}) 560.426502ms ago: executing program 7 (id=2527): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r1 = dup2(r0, r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000340)="afdf21b22c11572f57b17f169dd5664bf3de7960014987f9512068dda6ce4c7b202bcb234f52b71bff7825a698a2e8c11ff64e7ba0eadf04565a7a58de34af89c96cc1672aa1b97fb8e1b945efa3f187b5fba4980e7eec4bb3241432efe37f8b491fc184ce950c69d74d6d38e7b6f16688bbf484c530d4365b4cedc49c50d021f927c7e4e015b2552c1a6340f1aaa018b36a9be9c5ba5b7c9fb9529a9271a830ca1b982a751b6564565221eebd70c6952edb6b89a9ea1764091ef61faedc016c9afad7b1e7204ed07396a454302111dc4a1b9c11968a13b2712251fe7e5ff7a9826d1d1694ba51547cd4cd1e37bef858631861a7118c7c8779256885ee8014780f0f01a8ea8a8331c7e0822492da333fef5c1c0dfd0659ba1a3c7c582f1efd06d6c7db2c24f03b35691b926cf5cbd1de1dbeddddf0947aaea74cd71990", 0x13d, r2) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', r3}) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r5, 0xfffffffffffffffc, 0x2) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4fe, &(0x7f0000000180)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086610, &(0x7f0000000680)={@desc={0x1, 0x0, @desc1}}) sendto(0xffffffffffffffff, &(0x7f0000000080)="29cbf33ea80cd00e642c931ca864b6d38fa832de4c62479d76fe12ad2e2845f7319954", 0x23, 0x20004000, &(0x7f0000000180)=@llc={0x1a, 0x30e, 0x2, 0x7, 0x8, 0xfe, @random="2bf45a04af38"}, 0x80) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r6, 0x0, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r8, r10, 0x16, 0x0, @void}, 0x10) r11 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r11, 0x11, 0x67, &(0x7f0000000080)=0x1a, 0x3d) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x1fb, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 300.21053ms ago: executing program 7 (id=2528): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) (fail_nth: 4) 0s ago: executing program 3 (id=2529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x4c35b4d56abc566b, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x54000, 0x2000, &(0x7f0000007000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$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") prlimit64(0x0, 0x4, &(0x7f0000000140)={0xdd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f05ebbee7, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES64=r5, @ANYRES8=r2, @ANYBLOB="f53a580fc0deb544f238b89d33b94fe1a5f990321ff23a9fb91873069e66cb6f9748b15826e402542e50eb6df92c892ee076a3a9488e4107bafcd639a8ebc3ceaf5aca8a39794b8ba13650e7563335119f8955614df562023c0080fc222c9e1048315952e5c9ca52b9f571a0d4727786807600f879a7f2432614f8a142cf509ca1b7dde9a7bbe91ef521e406da52eea840db"], 0x50) close(0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000001c0)="fdbf81c2f62b9c087c000000000000b37834244e733a90", 0x0}, 0x20) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xa47b) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0, 0x55}], 0x1, 0x60, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): evice loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.538674][ T7618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.550050][ T7618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.561719][ T7618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.576920][ T3215] usb 4-1: Product: syz [ 499.581143][ T3215] usb 4-1: Manufacturer: syz [ 499.585806][ T3215] usb 4-1: SerialNumber: syz [ 499.585801][ T7618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.587722][ T7618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.613085][ T7618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.624870][ T7618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.636235][ T7618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.647553][ T7618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.650298][ T7624] set_capacity_and_notify: 3 callbacks suppressed [ 499.650347][ T7624] loop4: detected capacity change from 0 to 4096 [ 499.659666][ T7618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.682648][ T7618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 499.695820][ T7624] EXT4-fs (loop4): Test dummy encryption mode enabled [ 499.714763][ T7624] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 499.724157][ T7624] System zones: 0-5 [ 499.729127][ T7624] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 499.771045][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2221'. [ 499.943909][ T5434] EXT4-fs (loop4): unmounting filesystem. [ 500.076337][ T313] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 500.277706][ T313] usb 7-1: config 1 has an invalid interface number: 249 but max is 1 [ 500.286038][ T313] usb 7-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 500.296529][ T313] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 500.305544][ T313] usb 7-1: config 1 has no interface number 2 [ 500.311739][ T313] usb 7-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 500.324885][ T313] usb 7-1: config 1 interface 249 has no altsetting 0 [ 500.333114][ T313] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.342239][ T313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.350322][ T313] usb 7-1: Product: syz [ 500.354550][ T313] usb 7-1: Manufacturer: syz [ 500.359208][ T313] usb 7-1: SerialNumber: syz [ 500.365557][ T313] cdc_ncm 7-1:1.0: skipping garbage [ 500.370873][ T313] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 500.377740][ T313] cdc_ncm 7-1:1.0: bind() failure [ 500.383857][ T313] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 500.390775][ T313] cdc_ncm 7-1:1.1: bind() failure [ 500.399516][ T3175] usb 3-1: USB disconnect, device number 88 [ 500.569729][ T313] usb 7-1: USB disconnect, device number 37 [ 500.897189][ T7643] serio: Serial port ptm0 [ 501.117176][ T1837] usb 1-1: USB disconnect, device number 85 [ 501.167248][ T7647] loop6: detected capacity change from 0 to 4096 [ 501.183338][ T7647] EXT4-fs (loop6): Test dummy encryption mode enabled [ 501.192461][ T7647] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 501.215755][ T7647] System zones: 0-5 [ 501.222074][ T7647] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 501.418523][ T5479] EXT4-fs (loop6): unmounting filesystem. [ 501.662712][ T1837] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 501.722329][ T379] Bluetooth: hci0: Frame reassembly failed (-84) [ 501.757207][ T7660] 9pnet_fd: p9_fd_create_unix (7660): problem connecting socket: ./file0: -111 [ 501.793721][ T7663] loop4: detected capacity change from 0 to 512 [ 501.800565][ T7663] EXT4-fs: Ignoring removed orlov option [ 501.809027][ T7663] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 501.819000][ T7663] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.2231: bad orphan inode 4 [ 501.830269][ T7663] EXT4-fs (loop4): Remounting filesystem read-only [ 501.837135][ T7663] EXT4-fs (loop4): 1 orphan inode deleted [ 501.843095][ T7663] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 501.848957][ T1837] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.872504][ T5434] EXT4-fs (loop4): unmounting filesystem. [ 501.878462][ T1837] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.887829][ T1837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.895903][ T1837] usb 1-1: Product: syz [ 501.901166][ T1837] usb 1-1: Manufacturer: syz [ 501.905815][ T1837] usb 1-1: SerialNumber: syz [ 502.009204][ T3215] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 502.024858][ T3215] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 502.036751][ T3215] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 502.045028][ T3215] usb 4-1: USB disconnect, device number 82 [ 502.406111][ T3215] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 502.429846][ T7676] Driver unsupported XDP return value 0 on prog (id 538) dev N/A, expect packet loss! [ 502.518286][ T1837] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 502.524511][ T1837] cdc_ncm 1-1:1.0: bind() failure [ 502.530656][ T1837] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 502.537592][ T1837] cdc_ncm 1-1:1.1: bind() failure [ 502.543742][ T1837] usb 1-1: USB disconnect, device number 86 [ 502.587169][ T3215] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 502.595402][ T3215] usb 4-1: config 0 has no interface number 0 [ 502.601549][ T3215] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 502.611453][ T3215] usb 4-1: config 0 interface 41 has no altsetting 0 [ 502.619877][ T3215] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 502.629109][ T3215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.637204][ T3215] usb 4-1: Product: syz [ 502.641459][ T3215] usb 4-1: Manufacturer: syz [ 502.646098][ T3215] usb 4-1: SerialNumber: syz [ 502.651663][ T3215] usb 4-1: config 0 descriptor?? [ 502.657575][ T3215] CoreChips: probe of 4-1:0.41 failed with error -22 [ 502.665663][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 502.764469][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2237'. [ 503.046136][ T3215] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 503.259531][ T7690] loop3: detected capacity change from 0 to 256 [ 503.266403][ T3215] usb 5-1: config 1 has an invalid interface number: 249 but max is 1 [ 503.277720][ T3215] usb 5-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 503.300598][ T3215] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 503.320044][ T3215] usb 5-1: config 1 has no interface number 2 [ 503.332480][ T3215] usb 5-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 503.393122][ T7690] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 503.408256][ T3215] usb 5-1: config 1 interface 249 has no altsetting 0 [ 503.417926][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 503.417942][ T28] audit: type=1326 audit(1781297095.730:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.3.2234" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84bc59ce59 code=0x0 [ 503.457658][ T3215] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.476080][ T3215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.484168][ T3215] usb 5-1: Product: syz [ 503.494262][ T3215] usb 5-1: Manufacturer: syz [ 503.499080][ T3215] usb 5-1: SerialNumber: syz [ 503.519652][ T3215] cdc_ncm 5-1:1.0: skipping garbage [ 503.527137][ T3215] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 503.539479][ T3215] cdc_ncm 5-1:1.0: bind() failure [ 503.552355][ T3215] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 503.565800][ T3215] cdc_ncm 5-1:1.1: bind() failure [ 503.716484][ T3215] usb 5-1: USB disconnect, device number 88 [ 503.766100][ T1270] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 503.766114][ T7661] Bluetooth: hci0: command 0x1003 tx timeout [ 503.802709][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2247'. [ 504.626110][ T313] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 504.818063][ T28] audit: type=1400 audit(1781297097.130:756): avc: denied { ioctl } for pid=7717 comm="syz.4.2251" path="socket:[38655]" dev="sockfs" ino=38655 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 504.844274][ T313] usb 7-1: config 1 has an invalid interface number: 249 but max is 1 [ 504.852981][ T313] usb 7-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 504.863443][ T313] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 504.872889][ T313] usb 7-1: config 1 has no interface number 2 [ 504.879324][ T313] usb 7-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 504.907586][ T313] usb 7-1: config 1 interface 249 has no altsetting 0 [ 504.926964][ T313] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.936212][ T313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.944422][ T313] usb 7-1: Product: syz [ 504.955597][ T313] usb 7-1: Manufacturer: syz [ 504.962249][ T313] usb 7-1: SerialNumber: syz [ 504.969958][ T28] audit: type=1400 audit(1781297097.280:757): avc: denied { bind } for pid=7715 comm="syz.0.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 505.000867][ T313] cdc_ncm 7-1:1.0: skipping garbage [ 505.011050][ T1837] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 505.012892][ T313] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 505.021313][ T28] audit: type=1400 audit(1781297097.280:758): avc: denied { node_bind } for pid=7715 comm="syz.0.2250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 505.048362][ T313] cdc_ncm 7-1:1.0: bind() failure [ 505.056330][ T313] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 505.063207][ T313] cdc_ncm 7-1:1.1: bind() failure [ 505.069977][ T3215] usb 4-1: USB disconnect, device number 83 [ 505.104638][ T28] audit: type=1326 audit(1781297097.410:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.4.2252" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7379ce59 code=0x7ffc0000 [ 505.173377][ T7726] loop3: detected capacity change from 0 to 2048 [ 505.182195][ T28] audit: type=1326 audit(1781297097.410:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.4.2252" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7379ce59 code=0x7ffc0000 [ 505.213448][ T313] usb 7-1: USB disconnect, device number 38 [ 505.239378][ T28] audit: type=1326 audit(1781297097.410:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.4.2252" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f1b7379ce59 code=0x7ffc0000 [ 505.268301][ T7726] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 505.277269][ T7726] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.310367][ T28] audit: type=1326 audit(1781297097.410:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.4.2252" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7379ce59 code=0x7ffc0000 [ 505.347024][ T28] audit: type=1326 audit(1781297097.410:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.4.2252" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7379ce59 code=0x7ffc0000 [ 505.372646][ T28] audit: type=1326 audit(1781297097.410:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.4.2252" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b7379ce59 code=0x7ffc0000 [ 505.435289][ T1837] usb 3-1: Using ep0 maxpacket: 8 [ 505.446230][ T3175] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 505.498269][ T1837] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 505.506374][ T1837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.516535][ T1837] usb 3-1: config 0 has no interface number 0 [ 505.522698][ T1837] usb 3-1: config 0 interface 1 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.532880][ T1837] usb 3-1: config 0 interface 1 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 505.546057][ T1837] usb 3-1: config 0 interface 1 has no altsetting 0 [ 505.553044][ T1837] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 505.562289][ T1837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.582533][ T1837] usb 3-1: config 0 descriptor?? [ 505.595123][ T1837] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 505.607449][ T7735] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 505.637360][ T3175] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.654673][ T3175] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 505.674128][ T3175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.682430][ T3175] usb 1-1: Product: syz [ 505.696093][ T3175] usb 1-1: Manufacturer: syz [ 505.700909][ T3175] usb 1-1: SerialNumber: syz [ 506.032880][ T7741] loop6: detected capacity change from 0 to 4096 [ 506.082381][ T7741] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 506.168248][ T287] EXT4-fs (loop3): unmounting filesystem. [ 506.234355][ T7746] random: crng reseeded on system resumption [ 506.318694][ T3175] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 506.324775][ T3175] cdc_ncm 1-1:1.0: bind() failure [ 506.346239][ T3175] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 506.353111][ T3175] cdc_ncm 1-1:1.1: bind() failure [ 506.372095][ T3175] usb 1-1: USB disconnect, device number 87 [ 506.656082][ T1837] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 506.797815][ T7741] EXT4-fs (loop6): unmounting filesystem. [ 506.846730][ T1837] usb 4-1: Using ep0 maxpacket: 32 [ 506.856799][ T1837] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 506.868798][ T7756] loop6: detected capacity change from 0 to 512 [ 506.875202][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2261'. [ 506.884456][ T1837] usb 4-1: config 0 has no interface number 0 [ 506.891724][ T7756] FAT-fs (loop6): Unrecognized mount option "dot" or missing value [ 506.901622][ T1837] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 506.911791][ T1837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.920134][ T1837] usb 4-1: Product: syz [ 506.924703][ T1837] usb 4-1: Manufacturer: syz [ 506.929633][ T1837] usb 4-1: SerialNumber: syz [ 506.997445][ T1837] usb 4-1: config 0 descriptor?? [ 507.016776][ T1837] smsc95xx v2.0.0 [ 507.080392][ T7759] loop4: detected capacity change from 0 to 256 [ 507.160480][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2262'. [ 507.194482][ T7759] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x3855f621, utbl_chksum : 0xe619d30d) [ 507.207145][ T40] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 507.402511][ T40] usb 1-1: config 1 has an invalid interface number: 249 but max is 1 [ 507.410940][ T40] usb 1-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 507.421593][ T40] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 507.434346][ T40] usb 1-1: config 1 has no interface number 2 [ 507.440742][ T40] usb 1-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 507.454073][ T40] usb 1-1: config 1 interface 249 has no altsetting 0 [ 507.461707][ T1837] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 507.472539][ T1837] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 507.483472][ T40] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.492821][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.501096][ T40] usb 1-1: Product: syz [ 507.505347][ T40] usb 1-1: Manufacturer: syz [ 507.508492][ T7765] exFAT-fs (loop4): hint_cluster is invalid (17) [ 507.510987][ T40] usb 1-1: SerialNumber: syz [ 507.528702][ T40] cdc_ncm 1-1:1.0: skipping garbage [ 507.535596][ T40] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 507.542553][ T40] cdc_ncm 1-1:1.0: bind() failure [ 507.549146][ T40] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 507.556144][ T40] cdc_ncm 1-1:1.1: bind() failure [ 507.576710][ T7767] exFAT-fs (loop4): hint_cluster is invalid (17) [ 507.639885][ T7771] exFAT-fs (loop4): hint_cluster is invalid (17) [ 507.666511][ T405] usb 3-1: USB disconnect, device number 89 [ 507.700534][ T7773] exFAT-fs (loop4): hint_cluster is invalid (17) [ 507.783634][ T7777] exFAT-fs (loop4): hint_cluster is invalid (17) [ 507.822361][ T7780] exFAT-fs (loop4): hint_cluster is invalid (17) [ 507.843122][ T40] usb 1-1: USB disconnect, device number 88 [ 507.939727][ T7786] exFAT-fs (loop4): hint_cluster is invalid (17) [ 508.044821][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2267'. [ 508.058007][ T7790] loop4: detected capacity change from 0 to 512 [ 508.103718][ T1837] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 508.117683][ T7790] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.2266: iget: bad i_size value: 38620345925642 [ 508.130753][ T7790] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2266: couldn't read orphan inode 15 (err -117) [ 508.146358][ T7790] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 508.157289][ T7794] loop6: detected capacity change from 0 to 2048 [ 508.165695][ T1837] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 508.187639][ T7798] FAULT_INJECTION: forcing a failure. [ 508.187639][ T7798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.201001][ T7798] CPU: 0 PID: 7798 Comm: syz.2.2270 Not tainted syzkaller #0 [ 508.208506][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 508.218678][ T7798] Call Trace: [ 508.221981][ T7798] [ 508.224942][ T7798] __dump_stack+0x21/0x24 [ 508.229307][ T7798] dump_stack_lvl+0x110/0x170 [ 508.234048][ T7798] ? __cfi_dump_stack_lvl+0x8/0x8 [ 508.239111][ T7798] dump_stack+0x15/0x24 [ 508.243384][ T7798] should_fail_ex+0x3bf/0x510 [ 508.248086][ T7798] should_fail+0xb/0x10 [ 508.252266][ T7798] should_fail_usercopy+0x1a/0x20 [ 508.257310][ T7798] _copy_to_user+0x1e/0x90 [ 508.261766][ T7798] simple_read_from_buffer+0xe9/0x160 [ 508.267165][ T7798] proc_fail_nth_read+0x1a6/0x220 [ 508.272220][ T7798] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 508.277794][ T7798] ? security_file_permission+0x94/0xb0 [ 508.283379][ T7798] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 508.288947][ T7798] vfs_read+0x286/0x930 [ 508.293124][ T7798] ? __cfi_vfs_read+0x10/0x10 [ 508.297822][ T7798] ? __kasan_check_write+0x14/0x20 [ 508.302955][ T7798] ? mutex_lock+0x93/0x1b0 [ 508.307402][ T7798] ? __cfi_mutex_lock+0x10/0x10 [ 508.312283][ T7798] ? __fdget_pos+0x2cd/0x380 [ 508.316924][ T7798] ? ksys_read+0x70/0x260 [ 508.321282][ T7798] ksys_read+0x14a/0x260 [ 508.325551][ T7798] ? __cfi_ksys_read+0x10/0x10 [ 508.330345][ T7798] ? debug_smp_processor_id+0x17/0x20 [ 508.335743][ T7798] __x64_sys_read+0x7b/0x90 [ 508.340277][ T7798] x64_sys_call+0x2f/0x9a0 [ 508.344728][ T7798] do_syscall_64+0x4c/0xa0 [ 508.349186][ T7798] ? clear_bhb_loop+0x30/0x80 [ 508.353903][ T7798] ? clear_bhb_loop+0x30/0x80 [ 508.358604][ T7798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.364520][ T7798] RIP: 0033:0x7f896155d68e [ 508.368952][ T7798] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 508.388574][ T7798] RSP: 002b:00007f8962412fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 508.397007][ T7798] RAX: ffffffffffffffda RBX: 00007f89624136c0 RCX: 00007f896155d68e [ 508.404998][ T7798] RDX: 000000000000000f RSI: 00007f89624130a0 RDI: 0000000000000004 [ 508.412979][ T7798] RBP: 00007f8962413090 R08: 0000000000000000 R09: 0000000000000000 [ 508.420962][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.428952][ T7798] R13: 00007f8961816038 R14: 00007f8961815fa0 R15: 00007ffec3f5b998 [ 508.436943][ T7798] [ 508.443702][ T1837] usb 4-1: USB disconnect, device number 84 [ 508.476366][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2266'. [ 508.498347][ T7794] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 508.507061][ T7794] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.592583][ T5434] EXT4-fs (loop4): unmounting filesystem. [ 508.643865][ T7808] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 508.763583][ T5479] EXT4-fs (loop6): unmounting filesystem. [ 508.851864][ T7815] loop3: detected capacity change from 0 to 256 [ 508.874373][ T7815] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66cef9, utbl_chksum : 0xe619d30d) [ 508.922439][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 508.922463][ T28] audit: type=1400 audit(1781297101.230:814): avc: denied { append } for pid=7814 comm="syz.3.2275" path="/431/file0/memory.events.local" dev="loop3" ino=1048849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 508.967950][ T28] audit: type=1400 audit(1781297101.260:815): avc: denied { map } for pid=7814 comm="syz.3.2275" path="/431/file0/memory.events.local" dev="loop3" ino=1048849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 508.999903][ T28] audit: type=1400 audit(1781297101.260:816): avc: denied { ioctl } for pid=7814 comm="syz.3.2275" path="/431/file0/memory.events.local" dev="loop3" ino=1048849 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 509.092174][ T7822] loop3: detected capacity change from 0 to 4096 [ 509.098943][ T3175] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 509.117789][ T7822] EXT4-fs (loop3): Test dummy encryption mode enabled [ 509.862612][ T7826] loop4: detected capacity change from 0 to 128 [ 509.889657][ T7822] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 510.041622][ T313] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 510.051875][ T7822] System zones: 0-5 [ 510.056828][ T7822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 510.088586][ T28] audit: type=1400 audit(1781297102.400:817): avc: denied { write open } for pid=7821 comm="syz.3.2277" path=2F202864656C6574656429 dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 510.112385][ T28] audit: type=1400 audit(1781297102.400:818): avc: denied { rename } for pid=7821 comm="syz.3.2277" name="#5e" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 510.135217][ T28] audit: type=1400 audit(1781297102.400:819): avc: denied { unlink } for pid=7821 comm="syz.3.2277" name="#5f" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 510.167178][ T3175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.182282][ T3175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.199605][ T3175] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 510.205651][ T28] audit: type=1400 audit(1781297102.450:820): avc: denied { read } for pid=7821 comm="syz.3.2277" path="/432/bus/bus/file1" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 510.219646][ T3175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.240943][ T313] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 510.260490][ T313] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.276490][ T313] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 510.286224][ T313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.296696][ T3175] usb 1-1: config 0 descriptor?? [ 510.314053][ T313] usb 7-1: config 0 descriptor?? [ 510.350787][ T7830] syz.4.2278: attempt to access beyond end of device [ 510.350787][ T7830] loop4: rw=2049, sector=233, nr_sectors = 120 limit=128 [ 510.373250][ T287] EXT4-fs (loop3): unmounting filesystem. [ 510.379733][ T7826] syz.4.2278: attempt to access beyond end of device [ 510.379733][ T7826] loop4: rw=2049, sector=233, nr_sectors = 120 limit=128 [ 510.381060][ T28] audit: type=1326 audit(1781297102.690:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.2.2279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 510.419429][ T28] audit: type=1326 audit(1781297102.690:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.2.2279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 510.419466][ T28] audit: type=1326 audit(1781297102.690:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.2.2279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 510.508226][ T7828] syz.4.2278: attempt to access beyond end of device [ 510.508226][ T7828] loop4: rw=2049, sector=233, nr_sectors = 120 limit=128 [ 510.562949][ T7843] loop2: detected capacity change from 0 to 256 [ 510.588376][ T7843] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 510.647911][ T7843] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2283'. [ 510.672495][ T7846] loop4: detected capacity change from 0 to 2048 [ 510.700768][ T7846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 510.709422][ T7846] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.731595][ T313] hid-generic 0003:0C70:F0B6.0029: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 510.913789][ T7856] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 510.993476][ T3175] usbhid 1-1:0.0: can't add hid device: -32 [ 510.999584][ T3175] usbhid: probe of 1-1:0.0 failed with error -32 [ 511.060096][ T1837] usb 7-1: USB disconnect, device number 39 [ 511.529753][ T5434] EXT4-fs (loop4): unmounting filesystem. [ 511.595711][ T7868] loop6: detected capacity change from 0 to 4096 [ 511.610568][ T7868] EXT4-fs (loop6): Test dummy encryption mode enabled [ 511.627339][ T7868] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 511.635656][ T7868] System zones: 0-5 [ 511.640382][ T7868] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 511.850359][ T5479] EXT4-fs (loop6): unmounting filesystem. [ 511.927311][ T7875] /dev/loop0: Can't open blockdev [ 511.946113][ T7865] loop4: detected capacity change from 0 to 131072 [ 511.955581][ T7865] F2FS-fs (loop4): invalid crc value [ 511.962759][ T7865] F2FS-fs (loop4): Found nat_bits in checkpoint [ 511.996766][ T7865] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 512.011076][ T7865] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 512.052857][ T1837] usb 1-1: USB disconnect, device number 89 [ 512.930296][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2298'. [ 513.276080][ T3175] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 513.483076][ T3175] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 513.494595][ T3175] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.542852][ T3175] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 513.553808][ T3175] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.565933][ T3175] usb 7-1: config 0 descriptor?? [ 513.599340][ T7922] loop4: detected capacity change from 0 to 256 [ 513.615489][ T7922] exfat: Deprecated parameter 'utf8' [ 513.622170][ T7922] exfat: Deprecated parameter 'namecase' [ 513.628854][ T7922] exfat: Deprecated parameter 'namecase' [ 513.634781][ T7922] exfat: Deprecated parameter 'utf8' [ 513.643018][ T7922] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 513.699238][ T7925] FAULT_INJECTION: forcing a failure. [ 513.699238][ T7925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.713090][ T7925] CPU: 0 PID: 7925 Comm: syz.4.2307 Not tainted syzkaller #0 [ 513.720518][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.730603][ T7925] Call Trace: [ 513.733909][ T7925] [ 513.736859][ T7925] __dump_stack+0x21/0x24 [ 513.741224][ T7925] dump_stack_lvl+0x110/0x170 [ 513.745938][ T7925] ? __cfi_dump_stack_lvl+0x8/0x8 [ 513.751002][ T7925] ? format_decode+0x1bb/0x1520 [ 513.755973][ T7925] dump_stack+0x15/0x24 [ 513.760172][ T7925] should_fail_ex+0x3bf/0x510 [ 513.764880][ T7925] should_fail+0xb/0x10 [ 513.769057][ T7925] should_fail_usercopy+0x1a/0x20 [ 513.774090][ T7925] _copy_from_user+0x1e/0xc0 [ 513.778712][ T7925] kstrtouint_from_user+0xda/0x170 [ 513.783825][ T7925] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 513.789546][ T7925] ? __kasan_check_read+0x11/0x20 [ 513.794573][ T7925] ? _copy_to_user+0x72/0x90 [ 513.799168][ T7925] ? simple_read_from_buffer+0x10f/0x160 [ 513.804810][ T7925] proc_fail_nth_write+0x8b/0x200 [ 513.809842][ T7925] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 513.815501][ T7925] ? security_file_permission+0x8a/0xb0 [ 513.821078][ T7925] ? security_file_permission+0x94/0xb0 [ 513.826649][ T7925] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 513.832307][ T7925] vfs_write+0x3fb/0xd00 [ 513.836560][ T7925] ? __kasan_check_read+0x11/0x20 [ 513.841587][ T7925] ? __cfi_vfs_write+0x10/0x10 [ 513.846354][ T7925] ? __kasan_check_write+0x14/0x20 [ 513.851465][ T7925] ? mutex_lock+0x93/0x1b0 [ 513.855889][ T7925] ? __cfi_mutex_lock+0x10/0x10 [ 513.860763][ T7925] ? __fdget_pos+0x2cd/0x380 [ 513.865355][ T7925] ? ksys_write+0x70/0x260 [ 513.869770][ T7925] ksys_write+0x14a/0x260 [ 513.874098][ T7925] ? __cfi_ksys_write+0x10/0x10 [ 513.878951][ T7925] ? debug_smp_processor_id+0x17/0x20 [ 513.884335][ T7925] __x64_sys_write+0x7b/0x90 [ 513.888942][ T7925] x64_sys_call+0x27b/0x9a0 [ 513.893459][ T7925] do_syscall_64+0x4c/0xa0 [ 513.897889][ T7925] ? clear_bhb_loop+0x30/0x80 [ 513.902599][ T7925] ? clear_bhb_loop+0x30/0x80 [ 513.907300][ T7925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.913228][ T7925] RIP: 0033:0x7f1b7375d68e [ 513.917644][ T7925] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 513.937251][ T7925] RSP: 002b:00007f1b745b8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 513.945675][ T7925] RAX: ffffffffffffffda RBX: 00007f1b745b96c0 RCX: 00007f1b7375d68e [ 513.953657][ T7925] RDX: 0000000000000001 RSI: 00007f1b745b90a0 RDI: 0000000000000003 [ 513.961646][ T7925] RBP: 00007f1b745b9090 R08: 0000000000000000 R09: 0000000000000000 [ 513.969628][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.977614][ T7925] R13: 00007f1b73a16038 R14: 00007f1b73a15fa0 R15: 00007ffe8f843448 [ 513.987504][ T7925] [ 514.652829][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'. [ 514.940773][ T3175] hid-generic 0003:0C70:F0B6.002A: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 515.018484][ T3175] usb 7-1: USB disconnect, device number 40 [ 515.097071][ T7945] fido_id[7945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 515.175833][ T7957] netlink: 'syz.6.2318': attribute type 5 has an invalid length. [ 515.388573][ T7940] loop2: detected capacity change from 0 to 40427 [ 515.408425][ T7940] F2FS-fs (loop2): invalid crc value [ 515.415443][ T7940] F2FS-fs (loop2): Found nat_bits in checkpoint [ 515.447279][ T7940] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 515.476881][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 515.476898][ T28] audit: type=1400 audit(1781297107.790:918): avc: denied { append } for pid=7938 comm="syz.2.2312" path="/163/bus/cgroup.controllers" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 515.516076][ T313] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 515.537686][ T5008] syz-executor: attempt to access beyond end of device [ 515.537686][ T5008] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 515.639938][ T7980] loop2: detected capacity change from 0 to 128 [ 515.716091][ T313] usb 4-1: Using ep0 maxpacket: 8 [ 515.722439][ T313] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.730741][ T313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.741049][ T313] usb 4-1: config 0 has no interface number 0 [ 515.747232][ T313] usb 4-1: config 0 interface 1 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.758288][ T313] usb 4-1: config 0 interface 1 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.768230][ T313] usb 4-1: config 0 interface 1 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 515.781199][ T313] usb 4-1: config 0 interface 1 has no altsetting 0 [ 515.787885][ T313] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 515.796968][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.805559][ T313] usb 4-1: config 0 descriptor?? [ 516.197975][ T7991] FAULT_INJECTION: forcing a failure. [ 516.197975][ T7991] name failslab, interval 1, probability 0, space 0, times 1 [ 516.212008][ T7991] CPU: 0 PID: 7991 Comm: syz.4.2328 Not tainted syzkaller #0 [ 516.219430][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.229531][ T7991] Call Trace: [ 516.232866][ T7991] [ 516.235817][ T7991] __dump_stack+0x21/0x24 [ 516.240188][ T7991] dump_stack_lvl+0x110/0x170 [ 516.244904][ T7991] ? __cfi_dump_stack_lvl+0x8/0x8 [ 516.249976][ T7991] ? __stack_depot_save+0x36/0x490 [ 516.255201][ T7991] ? stack_trace_save+0xa6/0xf0 [ 516.260164][ T7991] dump_stack+0x15/0x24 [ 516.264350][ T7991] should_fail_ex+0x3bf/0x510 [ 516.269064][ T7991] __should_failslab+0xac/0xf0 [ 516.273875][ T7991] should_failslab+0x9/0x20 [ 516.278489][ T7991] __kmem_cache_alloc_node+0x3d/0x2d0 [ 516.284010][ T7991] ? kvmalloc_node+0x28a/0x460 [ 516.288881][ T7991] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.294990][ T7991] ? kvmalloc_node+0x28a/0x460 [ 516.299788][ T7991] __kmalloc_node+0xa2/0x1e0 [ 516.304413][ T7991] kvmalloc_node+0x28a/0x460 [ 516.309027][ T7991] ? __cfi_kvmalloc_node+0x10/0x10 [ 516.314165][ T7991] ? kvm_arch_vcpu_load+0x56f/0x760 [ 516.319399][ T7991] vmemdup_user+0x26/0xe0 [ 516.323760][ T7991] kvm_vcpu_ioctl_set_cpuid+0x86/0x620 [ 516.329260][ T7991] kvm_arch_vcpu_ioctl+0x1375/0x2390 [ 516.334629][ T7991] ? __cfi_avc_has_perm+0x10/0x10 [ 516.339680][ T7991] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 516.345358][ T7991] ? 0xffffffffa00041c0 [ 516.349540][ T7991] ? is_bpf_text_address+0x177/0x190 [ 516.354878][ T7991] ? kernel_text_address+0xa0/0xd0 [ 516.360026][ T7991] ? __kernel_text_address+0xd/0x30 [ 516.365266][ T7991] ? unwind_get_return_address+0x4d/0x90 [ 516.370930][ T7991] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 516.377142][ T7991] ? arch_stack_walk+0xfc/0x150 [ 516.382036][ T7991] ? stack_trace_save+0xa6/0xf0 [ 516.386933][ T7991] ? __stack_depot_save+0x36/0x490 [ 516.392090][ T7991] ? _parse_integer_limit+0x18e/0x1d0 [ 516.396150][ T1837] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 516.397503][ T7991] ? __asan_set_shadow_00+0xe/0x10 [ 516.410095][ T7991] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 516.415055][ T7991] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 516.420720][ T7991] ? kstrtouint+0x74/0xe0 [ 516.425085][ T7991] ? kstrtouint_from_user+0x113/0x170 [ 516.430488][ T7991] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 516.436257][ T7991] ? ioctl_has_perm+0x1b8/0x4f0 [ 516.441242][ T7991] ? memcpy+0x56/0x70 [ 516.445255][ T7991] ? __kasan_check_write+0x14/0x20 [ 516.450396][ T7991] ? mutex_lock_killable+0x93/0x1b0 [ 516.455637][ T7991] ? __cfi_mutex_lock_killable+0x10/0x10 [ 516.461314][ T7991] kvm_vcpu_ioctl+0x6fb/0xc00 [ 516.466028][ T7991] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 516.471256][ T7991] ? selinux_file_ioctl+0x3ad/0x4c0 [ 516.476487][ T7991] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 516.482095][ T7991] ? mutex_unlock+0x8f/0x230 [ 516.486720][ T7991] ? __cfi_mutex_unlock+0x10/0x10 [ 516.491781][ T7991] ? __fget_files+0x2d1/0x330 [ 516.496489][ T7991] ? security_file_ioctl+0x95/0xc0 [ 516.501638][ T7991] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 516.506878][ T7991] __se_sys_ioctl+0x12f/0x1b0 [ 516.511590][ T7991] __x64_sys_ioctl+0x7b/0x90 [ 516.516216][ T7991] x64_sys_call+0x58b/0x9a0 [ 516.520769][ T7991] do_syscall_64+0x4c/0xa0 [ 516.525223][ T7991] ? clear_bhb_loop+0x30/0x80 [ 516.529931][ T7991] ? clear_bhb_loop+0x30/0x80 [ 516.534640][ T7991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.540590][ T7991] RIP: 0033:0x7f1b7379ce59 [ 516.545037][ T7991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.564673][ T7991] RSP: 002b:00007f1b745b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.573128][ T7991] RAX: ffffffffffffffda RBX: 00007f1b73a15fa0 RCX: 00007f1b7379ce59 [ 516.581131][ T7991] RDX: 0000200000000000 RSI: 000000004008ae8a RDI: 0000000000000005 [ 516.587849][ T1837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 516.589127][ T7991] RBP: 00007f1b745b9090 R08: 0000000000000000 R09: 0000000000000000 [ 516.600372][ T405] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 516.608047][ T7991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.608064][ T7991] R13: 00007f1b73a16038 R14: 00007f1b73a15fa0 R15: 00007ffe8f843448 [ 516.608086][ T7991] [ 516.638523][ T313] usbhid 4-1:0.1: can't add hid device: -71 [ 516.638709][ T1837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.649282][ T313] usbhid: probe of 4-1:0.1 failed with error -71 [ 516.655202][ T1837] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 516.663917][ T313] usb 4-1: USB disconnect, device number 85 [ 516.679607][ T1837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.688968][ T1837] usb 7-1: config 0 descriptor?? [ 516.916212][ T405] usb 1-1: Using ep0 maxpacket: 32 [ 516.924045][ T405] usb 1-1: unable to get BOS descriptor or descriptor too short [ 516.953330][ T405] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.964214][ T405] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 70, changing to 7 [ 516.979389][ T405] usb 1-1: New USB device found, idVendor=17cc, idProduct=0808, bcdDevice= 0.40 [ 516.990021][ T405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.999111][ T405] usb 1-1: Product: syz [ 517.003869][ T405] usb 1-1: Manufacturer: syz [ 517.009748][ T405] usb 1-1: SerialNumber: syz [ 517.114519][ T1837] hid-generic 0003:0C70:F0B6.002B: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 517.700815][ T405] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 517.718670][ T405] usb 1-1: unit 159 not found! [ 517.772594][ T405] usb 1-1: USB disconnect, device number 90 [ 517.814686][ T1837] usb 7-1: USB disconnect, device number 41 [ 518.369001][ T8014] loop6: detected capacity change from 0 to 8192 [ 518.389913][ T8014] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.420873][ T8014] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 518.428888][ T8014] FAT-fs (loop6): Filesystem has been set read-only [ 518.552616][ T3175] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 518.620768][ T28] audit: type=1326 audit(1781297110.930:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.2.2336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 518.654550][ T28] audit: type=1326 audit(1781297110.960:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.2.2336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 518.679522][ T28] audit: type=1326 audit(1781297110.960:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.2.2336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 518.707683][ T28] audit: type=1326 audit(1781297110.960:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.2.2336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 518.734938][ T28] audit: type=1326 audit(1781297110.960:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.2.2336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 518.767527][ T28] audit: type=1326 audit(1781297110.960:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.2.2336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 518.792430][ T28] audit: type=1326 audit(1781297110.960:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.2.2336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 518.830872][ T28] audit: type=1326 audit(1781297110.960:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.2.2336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 518.863689][ T3175] usb 5-1: Using ep0 maxpacket: 32 [ 518.874020][ T28] audit: type=1326 audit(1781297110.960:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.2.2336" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896159ce59 code=0x7ffc0000 [ 518.887418][ T3175] usb 5-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice= 0.40 [ 518.926674][ T8038] loop2: detected capacity change from 0 to 256 [ 518.936448][ T8038] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.947907][ T8038] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 518.949493][ T3175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.966824][ T8038] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x0001abd0, checksum : 0x1119abd0) [ 518.977301][ T8038] exFAT-fs (loop2): invalid boot region [ 518.983690][ T3175] usb 5-1: Product: syz [ 518.988254][ T3175] usb 5-1: Manufacturer: syz [ 518.995276][ T3175] usb 5-1: SerialNumber: syz [ 519.004440][ T8038] exFAT-fs (loop2): failed to recognize exfat type [ 519.226153][ T1837] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 519.407977][ T1837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 519.440995][ T1837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.524848][ T1837] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 519.535198][ T1837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.587200][ T1837] usb 7-1: config 0 descriptor?? [ 520.109722][ T1837] hid-generic 0003:0C70:F0B6.002C: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 520.428825][ T3215] usb 7-1: USB disconnect, device number 42 [ 520.486195][ T1837] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 520.657683][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 520.657708][ T28] audit: type=1400 audit(1781297112.970:946): avc: denied { read write } for pid=8073 comm="syz.0.2353" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 520.704842][ T405] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 520.717716][ T1837] usb 4-1: config 7 has an invalid interface number: 236 but max is 1 [ 520.734877][ T1837] usb 4-1: config 7 has an invalid interface number: 215 but max is 1 [ 520.749673][ T405] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 520.788141][ T1837] usb 4-1: config 7 has no interface number 0 [ 520.852126][ T28] audit: type=1400 audit(1781297113.000:947): avc: denied { open } for pid=8073 comm="syz.0.2353" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 520.869901][ T1837] usb 4-1: config 7 has no interface number 1 [ 520.876752][ T3175] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 520.898331][ T1837] usb 4-1: config 7 interface 236 has no altsetting 0 [ 520.899777][ T3175] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 520.913977][ T1837] usb 4-1: config 7 interface 215 has no altsetting 0 [ 520.929339][ T3175] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 520.941062][ T3175] usb 5-1: USB disconnect, device number 89 [ 520.947160][ T1837] usb 4-1: New USB device found, idVendor=0856, idProduct=ac27, bcdDevice=a0.b8 [ 520.954954][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 520.967170][ T1837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.981453][ T1837] usb 4-1: Product: syz [ 520.985968][ T1837] usb 4-1: Manufacturer: syz [ 520.991021][ T1837] usb 4-1: SerialNumber: syz [ 521.213075][ T1837] ftdi_sio 4-1:7.236: FTDI USB Serial Device converter detected [ 521.222235][ T1837] ftdi_sio ttyUSB0: unknown device type: 0xa0b8 [ 521.232992][ T1837] ftdi_sio 4-1:7.215: FTDI USB Serial Device converter detected [ 521.243268][ T1837] ftdi_sio ttyUSB1: unknown device type: 0xa0b8 [ 521.253907][ T1837] usb 4-1: USB disconnect, device number 86 [ 521.261559][ T1837] ftdi_sio 4-1:7.236: device disconnected [ 521.272177][ T1837] ftdi_sio 4-1:7.215: device disconnected [ 521.326121][ T3175] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 521.346428][ T8091] loop6: detected capacity change from 0 to 128 [ 521.404516][ T8091] syz.6.2358: attempt to access beyond end of device [ 521.404516][ T8091] loop6: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 521.491054][ T8093] loop6: detected capacity change from 0 to 128 [ 521.546592][ T351] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 521.549128][ T3175] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 521.564571][ T3175] usb 5-1: config 0 has no interface number 0 [ 521.571063][ T3175] usb 5-1: config 0 interface 41 has no altsetting 0 [ 521.579811][ T3175] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 521.589074][ T3175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.597292][ T3175] usb 5-1: Product: syz [ 521.601620][ T3175] usb 5-1: Manufacturer: syz [ 521.606305][ T3175] usb 5-1: SerialNumber: syz [ 521.611529][ T3175] usb 5-1: config 0 descriptor?? [ 521.648815][ T8096] FAULT_INJECTION: forcing a failure. [ 521.648815][ T8096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.661984][ T8096] CPU: 1 PID: 8096 Comm: syz.6.2360 Not tainted syzkaller #0 [ 521.669399][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 521.679481][ T8096] Call Trace: [ 521.682777][ T8096] [ 521.685723][ T8096] __dump_stack+0x21/0x24 [ 521.690128][ T8096] dump_stack_lvl+0x110/0x170 [ 521.694840][ T8096] ? __cfi_dump_stack_lvl+0x8/0x8 [ 521.699903][ T8096] dump_stack+0x15/0x24 [ 521.704090][ T8096] should_fail_ex+0x3bf/0x510 [ 521.708796][ T8096] should_fail+0xb/0x10 [ 521.712980][ T8096] should_fail_usercopy+0x1a/0x20 [ 521.718046][ T8096] _copy_to_user+0x1e/0x90 [ 521.722492][ T8096] simple_read_from_buffer+0xe9/0x160 [ 521.727905][ T8096] proc_fail_nth_read+0x1a6/0x220 [ 521.732966][ T8096] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 521.738550][ T8096] ? security_file_permission+0x94/0xb0 [ 521.744141][ T8096] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 521.749732][ T8096] vfs_read+0x286/0x930 [ 521.753928][ T8096] ? __cfi_vfs_read+0x10/0x10 [ 521.758646][ T8096] ? __kasan_check_write+0x14/0x20 [ 521.763801][ T8096] ? mutex_lock+0x93/0x1b0 [ 521.768266][ T8096] ? __cfi_mutex_lock+0x10/0x10 [ 521.773182][ T8096] ? __fdget_pos+0x2cd/0x380 [ 521.777807][ T8096] ? ksys_read+0x70/0x260 [ 521.782181][ T8096] ksys_read+0x14a/0x260 [ 521.786458][ T8096] ? __cfi_ksys_read+0x10/0x10 [ 521.791260][ T8096] ? fput+0x154/0x1a0 [ 521.795265][ T8096] ? debug_smp_processor_id+0x17/0x20 [ 521.800662][ T8096] __x64_sys_read+0x7b/0x90 [ 521.805202][ T8096] x64_sys_call+0x2f/0x9a0 [ 521.809647][ T8096] do_syscall_64+0x4c/0xa0 [ 521.814096][ T8096] ? clear_bhb_loop+0x30/0x80 [ 521.818796][ T8096] ? clear_bhb_loop+0x30/0x80 [ 521.823511][ T8096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.829445][ T8096] RIP: 0033:0x7ff7c195d68e [ 521.833893][ T8096] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 521.853534][ T8096] RSP: 002b:00007ff7c2854fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 521.861988][ T8096] RAX: ffffffffffffffda RBX: 00007ff7c28556c0 RCX: 00007ff7c195d68e [ 521.869996][ T8096] RDX: 000000000000000f RSI: 00007ff7c28550a0 RDI: 0000000000000006 [ 521.878005][ T8096] RBP: 00007ff7c2855090 R08: 0000000000000000 R09: 0000000000000000 [ 521.886013][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.894018][ T8096] R13: 00007ff7c1c16038 R14: 00007ff7c1c15fa0 R15: 00007fffc50f5608 [ 521.902027][ T8096] [ 522.447233][ T3175] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 522.840509][ T28] audit: type=1400 audit(1781297115.150:948): avc: denied { accept } for pid=8105 comm="syz.0.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 523.053474][ T8114] syz.0.2363 (8114) used greatest stack depth: 20576 bytes left [ 523.132488][ T8122] loop2: detected capacity change from 0 to 4096 [ 523.167282][ T8122] EXT4-fs (loop2): Test dummy encryption mode enabled [ 523.194751][ T8122] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 523.204468][ T8122] System zones: 0-5 [ 523.245128][ T8122] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 523.322195][ T8110] loop6: detected capacity change from 0 to 131072 [ 523.329652][ T8110] F2FS-fs (loop6): invalid crc value [ 523.356844][ T8110] F2FS-fs (loop6): Found nat_bits in checkpoint [ 523.410454][ T8110] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 523.423379][ T8110] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 523.467537][ T8110] FAULT_INJECTION: forcing a failure. [ 523.467537][ T8110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.499419][ T8110] CPU: 0 PID: 8110 Comm: syz.6.2364 Not tainted syzkaller #0 [ 523.506862][ T8110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.516943][ T8110] Call Trace: [ 523.520244][ T8110] [ 523.523194][ T8110] __dump_stack+0x21/0x24 [ 523.527559][ T8110] dump_stack_lvl+0x110/0x170 [ 523.532269][ T8110] ? __cfi_dump_stack_lvl+0x8/0x8 [ 523.537322][ T8110] ? __kasan_check_read+0x11/0x20 [ 523.542377][ T8110] ? vmx_read_guest_seg_ar+0x164/0x380 [ 523.547874][ T8110] dump_stack+0x15/0x24 [ 523.552062][ T8110] should_fail_ex+0x3bf/0x510 [ 523.556767][ T8110] should_fail+0xb/0x10 [ 523.560947][ T8110] should_fail_usercopy+0x1a/0x20 [ 523.565999][ T8110] __kvm_read_guest_page+0x14c/0x1d0 [ 523.571305][ T8110] kvm_vcpu_read_guest_page+0x31a/0x3f0 [ 523.576881][ T8110] kvm_fetch_guest_virt+0x13f/0x180 [ 523.582113][ T8110] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 523.587864][ T8110] __do_insn_fetch_bytes+0x2c2/0x6a0 [ 523.593189][ T8110] ? x86_decode_insn+0x4c10/0x4c10 [ 523.598332][ T8110] ? is_bpf_text_address+0x177/0x190 [ 523.603656][ T8110] ? kernel_text_address+0xa0/0xd0 [ 523.608817][ T8110] ? __kernel_text_address+0xd/0x30 [ 523.614044][ T8110] x86_decode_insn+0x2f8/0x4c10 [ 523.618929][ T8110] ? __kasan_check_write+0x14/0x20 [ 523.624067][ T8110] ? __cfi_x86_decode_insn+0x10/0x10 [ 523.629391][ T8110] x86_decode_emulated_instruction+0x62/0x180 [ 523.635502][ T8110] x86_emulate_instruction+0x204/0x1cd0 [ 523.641093][ T8110] ? __kernel_text_address+0xd/0x30 [ 523.646328][ T8110] ? unwind_get_return_address+0x4d/0x90 [ 523.651992][ T8110] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 523.658181][ T8110] handle_ud+0x4c8/0x540 [ 523.662460][ T8110] ? __stack_depot_save+0x36/0x490 [ 523.667600][ T8110] ? stack_trace_save+0xa6/0xf0 [ 523.672485][ T8110] ? __cfi_handle_ud+0x10/0x10 [ 523.677283][ T8110] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 523.683386][ T8110] ? kasan_set_track+0x60/0x70 [ 523.688191][ T8110] ? slab_post_alloc_hook+0x4f/0x2d0 [ 523.693537][ T8110] ? __kasan_check_read+0x11/0x20 [ 523.698587][ T8110] handle_exception_nmi+0x124/0xdf0 [ 523.703830][ T8110] ? __cfi_handle_exception_nmi+0x10/0x10 [ 523.709583][ T8110] vmx_handle_exit+0xc61/0x1b10 [ 523.714467][ T8110] ? __kasan_check_write+0x14/0x20 [ 523.719600][ T8110] ? vmx_get_intr_info+0x8b/0x190 [ 523.724657][ T8110] ? vmx_handle_exit_irqoff+0x421/0x6a0 [ 523.730233][ T8110] vcpu_enter_guest+0x30d6/0x7050 [ 523.735286][ T8110] ? pvclock_gtod_update_fn+0x270/0x270 [ 523.740869][ T8110] ? emulator_get_segment+0x2c5/0x5d0 [ 523.746271][ T8110] ? __kasan_check_read+0x11/0x20 [ 523.751320][ T8110] ? __cfi_emulator_get_segment+0x10/0x10 [ 523.757066][ T8110] ? vmx_get_segment_base+0x8e/0xd0 [ 523.762288][ T8110] ? 0xffffffffa00041c0 [ 523.766464][ T8110] ? linearize+0x475/0x8f0 [ 523.770913][ T8110] ? read_prepare+0x89/0x200 [ 523.775538][ T8110] ? emulator_read_write+0xa9/0x570 [ 523.780770][ T8110] ? push+0x6c0/0x6c0 [ 523.784786][ T8110] ? segmented_read+0x2d9/0x400 [ 523.789661][ T8110] ? memcpy+0x56/0x70 [ 523.793665][ T8110] ? segmented_read+0x2d9/0x400 [ 523.798540][ T8110] ? __kasan_check_write+0x14/0x20 [ 523.803676][ T8110] ? emulator_write_gpr+0xa8/0xd0 [ 523.808727][ T8110] ? __cfi_emulator_write_gpr+0x10/0x10 [ 523.814305][ T8110] ? x86_emulate_insn+0x43c/0x3760 [ 523.819452][ T8110] ? __kasan_check_write+0x14/0x20 [ 523.824590][ T8110] ? vmx_set_rflags+0x2a5/0x470 [ 523.829469][ T8110] ? x86_emulate_instruction+0x1639/0x1cd0 [ 523.835312][ T8110] ? complete_emulated_mmio+0x511/0x7a0 [ 523.840896][ T8110] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 523.846473][ T8110] kvm_vcpu_ioctl+0x8ed/0xc00 [ 523.851185][ T8110] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 523.856422][ T8110] ? selinux_file_ioctl+0x3ad/0x4c0 [ 523.861655][ T8110] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 523.867232][ T8110] ? mutex_unlock+0x8f/0x230 [ 523.871868][ T8110] ? __cfi_mutex_unlock+0x10/0x10 [ 523.876943][ T8110] ? __fget_files+0x2d1/0x330 [ 523.881644][ T8110] ? security_file_ioctl+0x95/0xc0 [ 523.886812][ T8110] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 523.892071][ T8110] __se_sys_ioctl+0x12f/0x1b0 [ 523.896781][ T8110] __x64_sys_ioctl+0x7b/0x90 [ 523.901396][ T8110] x64_sys_call+0x58b/0x9a0 [ 523.905927][ T8110] do_syscall_64+0x4c/0xa0 [ 523.910396][ T8110] ? clear_bhb_loop+0x30/0x80 [ 523.915119][ T8110] ? clear_bhb_loop+0x30/0x80 [ 523.919824][ T8110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.925746][ T8110] RIP: 0033:0x7ff7c199ce59 [ 523.930201][ T8110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.949922][ T8110] RSP: 002b:00007ff7c2855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.958720][ T8110] RAX: ffffffffffffffda RBX: 00007ff7c1c15fa0 RCX: 00007ff7c199ce59 [ 523.966731][ T8110] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 523.974743][ T8110] RBP: 00007ff7c2855090 R08: 0000000000000000 R09: 0000000000000000 [ 523.982749][ T8110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.990756][ T8110] R13: 00007ff7c1c16038 R14: 00007ff7c1c15fa0 R15: 00007fffc50f5608 [ 523.998766][ T8110] [ 524.053688][ T5008] EXT4-fs (loop2): unmounting filesystem. [ 524.061543][ T28] audit: type=1400 audit(1781297116.370:949): avc: denied { map } for pid=8137 comm="syz.3.2366" path="socket:[41633]" dev="sockfs" ino=41633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 524.116993][ T8140] /dev/loop0: Can't open blockdev [ 524.125653][ T28] audit: type=1400 audit(1781297116.410:950): avc: denied { read } for pid=8137 comm="syz.3.2366" path="socket:[41633]" dev="sockfs" ino=41633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 524.159672][ T8138] netlink: 'syz.3.2366': attribute type 8 has an invalid length. [ 524.167581][ T8138] sch_fq: defrate 0 ignored. [ 524.250270][ T3175] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 524.271838][ T3175] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 524.334375][ T3175] CoreChips: probe of 5-1:0.41 failed with error -71 [ 524.656484][ T3175] usb 5-1: USB disconnect, device number 90 [ 525.445391][ T8156] loop2: detected capacity change from 0 to 40427 [ 525.464522][ T8156] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64) [ 525.489117][ T8156] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 525.505459][ T8156] F2FS-fs (loop2): invalid crc value [ 525.536951][ T8156] F2FS-fs (loop2): Found nat_bits in checkpoint [ 525.597646][ T8156] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 525.606857][ T8156] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 525.666143][ T8171] loop6: detected capacity change from 0 to 256 [ 525.700002][ T28] audit: type=1400 audit(1781297118.010:951): avc: denied { ioctl } for pid=8153 comm="syz.2.2371" path="/179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=10 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 525.768426][ T8171] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 525.788678][ T5008] syz-executor: attempt to access beyond end of device [ 525.788678][ T5008] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 525.823897][ T8171] exFAT-fs (loop6): hint_cluster is invalid (17) [ 525.857950][ T28] audit: type=1400 audit(1781297118.150:952): avc: denied { getattr } for pid=8170 comm="syz.6.2375" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 526.005788][ T28] audit: type=1400 audit(1781297118.150:953): avc: denied { setattr } for pid=8170 comm="syz.6.2375" name="" dev="pipefs" ino=33091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 526.134908][ T28] audit: type=1400 audit(1781297118.160:954): avc: denied { execute } for pid=8170 comm="syz.6.2375" name="file2" dev="loop6" ino=1048865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 526.626933][ T28] audit: type=1400 audit(1781297118.160:955): avc: denied { execute_no_trans } for pid=8170 comm="syz.6.2375" path="/143/file2/file2" dev="loop6" ino=1048865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 526.965113][ T8177] overlayfs: failed to resolve './file0': -2 [ 527.108902][ T28] audit: type=1400 audit(1781297119.420:956): avc: denied { connect } for pid=8185 comm="syz.6.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 527.195981][ T8189] loop6: detected capacity change from 0 to 4096 [ 527.227107][ T8189] EXT4-fs (loop6): Test dummy encryption mode enabled [ 527.271709][ T8189] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 527.300754][ T8189] System zones: 0-5 [ 527.525195][ T8189] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 528.113781][ T5479] EXT4-fs (loop6): unmounting filesystem. [ 528.127963][ T8212] loop4: detected capacity change from 0 to 256 [ 528.175779][ T8212] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 528.192398][ T8212] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 528.203944][ T8212] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 528.216322][ T3175] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 528.241157][ T8212] exFAT-fs (loop4): hint_cluster is invalid (17) [ 528.688628][ T3175] usb 1-1: Using ep0 maxpacket: 16 [ 528.695377][ T3175] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 528.710213][ T8223] fuseblk: Bad value for 'fd' [ 528.716478][ T3175] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 528.725676][ T3175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.734160][ T3175] usb 1-1: Product: syz [ 528.738629][ T3175] usb 1-1: Manufacturer: syz [ 528.743273][ T3175] usb 1-1: SerialNumber: syz [ 528.970726][ T3175] usb 1-1: config 0 descriptor?? [ 529.032627][ T3175] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 529.040830][ T3175] usb 1-1: Detected FT232R [ 529.109235][ T1837] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 529.265801][ T3175] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 529.296074][ T1837] usb 4-1: Using ep0 maxpacket: 32 [ 529.302506][ T1837] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.313550][ T1837] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.324719][ T1837] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 529.333977][ T1837] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 529.348046][ T1837] usb 4-1: Product: syz [ 529.352290][ T1837] usb 4-1: Manufacturer: syz [ 529.359626][ T1837] hub 4-1:4.0: USB hub found [ 529.436178][ T3215] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 529.570440][ T1837] hub 4-1:4.0: 2 ports detected [ 529.584264][ T8236] loop2: detected capacity change from 0 to 256 [ 529.606755][ T350] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 529.620576][ T8236] loop2: detected capacity change from 0 to 1024 [ 529.620963][ T350] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 529.627091][ T3215] usb 7-1: Using ep0 maxpacket: 32 [ 529.628889][ T3215] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.646205][ T405] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 529.656461][ T3215] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.673536][ T8236] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.2394: lblock 1 mapped to illegal pblock 1 (length 1) [ 529.688149][ T3215] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 529.697316][ T3215] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 529.706359][ T8236] Quota error (device loop2): write_blk: dquota write failed [ 529.713854][ T8236] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 529.724227][ T3215] usb 7-1: Product: syz [ 529.728675][ T3215] usb 7-1: Manufacturer: syz [ 529.733885][ T8236] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.2394: Failed to acquire dquot type 0 [ 529.746459][ T8236] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.2394: Freeing blocks not in datazone - block = 0, count = 4096 [ 529.760814][ T3215] hub 7-1:4.0: USB hub found [ 529.766716][ T8236] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2394: Invalid inode bitmap blk 0 in block_group 0 [ 529.780267][ T8236] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 529.789480][ T1522] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 529.790597][ T8236] EXT4-fs (loop2): 1 orphan inode deleted [ 529.807003][ T1522] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 529.809528][ T8236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 529.824775][ T1522] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:5: Failed to release dquot type 0 [ 529.854984][ T28] audit: type=1400 audit(1781297122.160:957): avc: denied { remount } for pid=8235 comm="syz.2.2394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 529.858231][ T405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 529.880398][ T8236] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 529.885793][ T405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.903164][ T405] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 529.912042][ T8236] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (18333!=0) [ 529.913070][ T405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.933394][ T405] usb 5-1: config 0 descriptor?? [ 529.961682][ T3215] hub 7-1:4.0: 2 ports detected [ 530.046067][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.056184][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.067248][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2391'. [ 530.076553][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2391'. [ 530.204325][ T1837] hub 4-1:4.0: set hub depth failed [ 530.224657][ T1837] usb 4-1: USB disconnect, device number 87 [ 530.341614][ T405] hid-generic 0003:0C70:F0B6.002E: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 530.396209][ T5008] EXT4-fs (loop2): unmounting filesystem. [ 530.421752][ T8244] loop2: detected capacity change from 0 to 256 [ 530.431947][ T8244] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 530.559407][ T3215] hub 7-1:4.0: set hub depth failed [ 530.567178][ T3215] usb 7-1: USB disconnect, device number 43 [ 530.658866][ T313] usb 5-1: USB disconnect, device number 91 [ 530.686779][ T8247] loop4: detected capacity change from 0 to 512 [ 530.711367][ T3175] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 530.732004][ T3175] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 530.741501][ T3175] usb 1-1: USB disconnect, device number 91 [ 530.744265][ T8247] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 530.749825][ T3175] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 530.769970][ T8247] ext4 filesystem being mounted at /164/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.778051][ T3175] ftdi_sio 1-1:0.0: device disconnected [ 530.784372][ T8256] loop3: detected capacity change from 0 to 256 [ 530.795074][ T8256] FAULT_INJECTION: forcing a failure. [ 530.795074][ T8256] name failslab, interval 1, probability 0, space 0, times 0 [ 530.812679][ T8256] CPU: 1 PID: 8256 Comm: syz.3.2398 Not tainted syzkaller #0 [ 530.820229][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 530.830350][ T8256] Call Trace: [ 530.833662][ T8256] [ 530.836635][ T8256] __dump_stack+0x21/0x24 [ 530.841000][ T8256] dump_stack_lvl+0x110/0x170 [ 530.845711][ T8256] ? __cfi_dump_stack_lvl+0x8/0x8 [ 530.850770][ T8256] ? avc_has_perm_noaudit+0x30a/0x490 [ 530.856177][ T8256] ? slab_post_alloc_hook+0x4f/0x2d0 [ 530.861514][ T8256] dump_stack+0x15/0x24 [ 530.865707][ T8256] should_fail_ex+0x3bf/0x510 [ 530.870414][ T8256] __should_failslab+0xac/0xf0 [ 530.875225][ T8256] should_failslab+0x9/0x20 [ 530.879759][ T8256] slab_pre_alloc_hook+0x30/0x1d0 [ 530.884835][ T8256] kmem_cache_alloc_lru+0x49/0x280 [ 530.889994][ T8256] ? __d_alloc+0x34/0x6d0 [ 530.894452][ T8256] __d_alloc+0x34/0x6d0 [ 530.898652][ T8256] d_alloc_parallel+0xe2/0x1280 [ 530.903544][ T8256] ? __cfi_d_alloc_parallel+0x10/0x10 [ 530.908956][ T8256] ? clear_nonspinnable+0x60/0x60 [ 530.914166][ T8256] ? __mnt_want_write+0x1e6/0x260 [ 530.919245][ T8256] path_openat+0x95c/0x2f30 [ 530.923825][ T8256] ? getname_flags+0xba/0x510 [ 530.928549][ T8256] ? do_filp_open+0x420/0x420 [ 530.933279][ T8256] do_filp_open+0x1ee/0x420 [ 530.937821][ T8256] ? __cfi_do_filp_open+0x10/0x10 [ 530.942889][ T8256] ? alloc_fd+0x4c1/0x570 [ 530.947257][ T8256] do_sys_openat2+0x15e/0x820 [ 530.952061][ T8256] ? __kasan_check_write+0x14/0x20 [ 530.957208][ T8256] ? do_sys_open+0xe0/0xe0 [ 530.961662][ T8256] ? ksys_write+0x1fa/0x260 [ 530.966207][ T8256] ? __cfi_ksys_write+0x10/0x10 [ 530.971088][ T8256] __x64_sys_openat+0x136/0x160 [ 530.975981][ T8256] x64_sys_call+0x783/0x9a0 [ 530.980520][ T8256] do_syscall_64+0x4c/0xa0 [ 530.984968][ T8256] ? clear_bhb_loop+0x30/0x80 [ 530.989676][ T8256] ? clear_bhb_loop+0x30/0x80 [ 530.994393][ T8256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.000344][ T8256] RIP: 0033:0x7f84bc59ce59 [ 531.004764][ T8256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.024381][ T8256] RSP: 002b:00007f84baff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 531.032828][ T8256] RAX: ffffffffffffffda RBX: 00007f84bc815fa0 RCX: 00007f84bc59ce59 [ 531.040842][ T8256] RDX: 000000000000275a RSI: 0000200000002180 RDI: ffffffffffffff9c [ 531.048836][ T8256] RBP: 00007f84baff7090 R08: 0000000000000000 R09: 0000000000000000 [ 531.056839][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.064832][ T8256] R13: 00007f84bc816038 R14: 00007f84bc815fa0 R15: 00007fff35166968 [ 531.072823][ T8256] [ 531.132461][ T8260] loop6: detected capacity change from 0 to 4096 [ 531.151424][ T8260] EXT4-fs (loop6): Test dummy encryption mode enabled [ 531.493301][ T8260] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 531.502048][ T8260] System zones: 0-5 [ 531.507109][ T8260] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 531.568352][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'. [ 531.727053][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 531.727069][ T28] audit: type=1400 audit(1781297124.040:1038): avc: denied { name_bind } for pid=8275 comm="syz.2.2404" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 531.773719][ T5434] EXT4-fs (loop4): unmounting filesystem. [ 531.804893][ T5479] EXT4-fs (loop6): unmounting filesystem. [ 531.857511][ T8281] loop2: detected capacity change from 0 to 512 [ 531.917307][ T351] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 531.926430][ T1837] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 532.014650][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2410'. [ 532.086154][ T405] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 532.116063][ T1837] usb 1-1: Using ep0 maxpacket: 16 [ 532.122413][ T1837] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 532.130899][ T40] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 532.138472][ T1837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.148921][ T1837] usb 1-1: config 0 has no interface number 0 [ 532.155100][ T1837] usb 1-1: too many endpoints for config 0 interface 105 altsetting 48: 120, using maximum allowed: 30 [ 532.166728][ T1837] usb 1-1: config 0 interface 105 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 532.180323][ T1837] usb 1-1: config 0 interface 105 has no altsetting 0 [ 532.188840][ T1837] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 532.198181][ T1837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.206323][ T1837] usb 1-1: Product: syz [ 532.210635][ T1837] usb 1-1: Manufacturer: syz [ 532.215252][ T1837] usb 1-1: SerialNumber: syz [ 532.231340][ T1837] usb 1-1: config 0 descriptor?? [ 532.267196][ T405] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.277432][ T405] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 532.286379][ T405] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.300842][ T405] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.306140][ T3175] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 532.310216][ T405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.325630][ T405] usb 5-1: Product: syz [ 532.329897][ T405] usb 5-1: Manufacturer: syz [ 532.334527][ T405] usb 5-1: SerialNumber: syz [ 532.357380][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 532.369209][ T405] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 532.376070][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.385857][ T40] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 532.394984][ T405] cdc_ncm 5-1:1.0: bind() failure [ 532.401416][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.414693][ T40] usb 7-1: config 0 descriptor?? [ 532.440746][ T1837] usb 1-1: USB disconnect, device number 92 [ 532.497267][ T3175] usb 3-1: config 1 has an invalid interface number: 249 but max is 1 [ 532.505504][ T3175] usb 3-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 532.515843][ T3175] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 532.524843][ T3175] usb 3-1: config 1 has no interface number 2 [ 532.530988][ T3175] usb 3-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 532.549844][ T3175] usb 3-1: config 1 interface 249 has no altsetting 0 [ 532.560746][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2405'. [ 532.570626][ T3175] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.579854][ T8279] loop4: detected capacity change from 0 to 512 [ 532.586090][ T3175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.594325][ T3175] usb 3-1: Product: syz [ 532.598567][ T3175] usb 3-1: Manufacturer: syz [ 532.603207][ T3175] usb 3-1: SerialNumber: syz [ 532.611183][ T8279] EXT4-fs (loop4): Test dummy encryption mode enabled [ 532.623676][ T3175] cdc_ncm 3-1:1.0: skipping garbage [ 532.629005][ T3175] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 532.635808][ T3175] cdc_ncm 3-1:1.0: bind() failure [ 532.641288][ T8279] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.2405: inode has both inline data and extents flags [ 532.647013][ T3175] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 532.662889][ T8279] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2405: couldn't read orphan inode 15 (err -117) [ 532.674959][ T8279] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 532.683907][ T3175] cdc_ncm 3-1:1.1: bind() failure [ 532.691491][ T1837] usb 5-1: USB disconnect, device number 92 [ 532.756532][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2411'. [ 532.821760][ T3175] usb 3-1: USB disconnect, device number 90 [ 532.829288][ T40] hid-generic 0003:0C70:F0B6.002F: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 533.003901][ T8298] overlayfs: failed to resolve './file0': -2 [ 533.046163][ T313] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 533.098302][ T40] usb 7-1: USB disconnect, device number 44 [ 533.118519][ T8303] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 533.198715][ T5434] EXT4-fs (loop4): unmounting filesystem. [ 533.241080][ T8313] binder: 8312:8313 ioctl c0306201 0 returned -14 [ 533.248817][ T313] usb 4-1: config 1 has an invalid interface number: 249 but max is 1 [ 533.257617][ T313] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 533.267967][ T313] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 533.277167][ T313] usb 4-1: config 1 has no interface number 2 [ 533.283574][ T313] usb 4-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 533.296697][ T313] usb 4-1: config 1 interface 249 has no altsetting 0 [ 533.305049][ T313] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.314246][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.322331][ T313] usb 4-1: Product: syz [ 533.326571][ T313] usb 4-1: Manufacturer: syz [ 533.331179][ T313] usb 4-1: SerialNumber: syz [ 533.340879][ T313] cdc_ncm 4-1:1.0: skipping garbage [ 533.346162][ T313] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 533.352943][ T313] cdc_ncm 4-1:1.0: bind() failure [ 533.359111][ T313] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 533.365930][ T313] cdc_ncm 4-1:1.1: bind() failure [ 533.543415][ T313] usb 4-1: USB disconnect, device number 88 [ 533.656054][ T40] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 533.836077][ T40] usb 3-1: Using ep0 maxpacket: 32 [ 533.844011][ T40] usb 3-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice= 0.40 [ 533.853181][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.861208][ T40] usb 3-1: Product: syz [ 533.865406][ T40] usb 3-1: Manufacturer: syz [ 533.870057][ T40] usb 3-1: SerialNumber: syz [ 534.135964][ T8333] loop3: detected capacity change from 0 to 128 [ 534.150049][ T8333] FAT-fs (loop3): count of clusters too big (589822) [ 534.163516][ T8333] FAT-fs (loop3): Can't find a valid FAT filesystem [ 534.233927][ T8333] netlink: 780 bytes leftover after parsing attributes in process `syz.3.2427'. [ 534.298299][ T8339] loop3: detected capacity change from 0 to 128 [ 534.367958][ T313] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 534.403945][ T8339] syz.3.2429: attempt to access beyond end of device [ 534.403945][ T8339] loop3: rw=2049, sector=233, nr_sectors = 120 limit=128 [ 534.518482][ T40] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 534.536219][ T40] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 534.551921][ T40] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 534.577626][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.592243][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 534.596167][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.609563][ T40] usb 3-1: USB disconnect, device number 91 [ 534.639060][ T313] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 534.664339][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.684908][ T313] usb 5-1: config 0 descriptor?? [ 534.915617][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2432'. [ 535.100441][ T313] hid-generic 0003:0C70:F0B6.0030: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 535.196071][ T3175] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 535.368037][ T40] usb 5-1: USB disconnect, device number 93 [ 535.397301][ T3175] usb 1-1: config 1 has an invalid interface number: 249 but max is 1 [ 535.413679][ T3175] usb 1-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 535.428270][ T3175] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 535.437405][ T3175] usb 1-1: config 1 has no interface number 2 [ 535.443574][ T3175] usb 1-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 535.456775][ T3175] usb 1-1: config 1 interface 249 has no altsetting 0 [ 535.477047][ T3175] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.479073][ T8364] binder: 8363:8364 ioctl c0306201 0 returned -14 [ 535.493675][ T3175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.501808][ T3175] usb 1-1: Product: syz [ 535.506053][ T3175] usb 1-1: Manufacturer: syz [ 535.510704][ T3175] usb 1-1: SerialNumber: syz [ 535.522149][ T3175] cdc_ncm 1-1:1.0: skipping garbage [ 535.527489][ T3175] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 535.534399][ T3175] cdc_ncm 1-1:1.0: bind() failure [ 535.542214][ T3175] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 535.549198][ T3175] cdc_ncm 1-1:1.1: bind() failure [ 535.725369][ T3175] usb 1-1: USB disconnect, device number 93 [ 535.776089][ T40] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 535.806514][ T8357] loop6: detected capacity change from 0 to 131072 [ 535.856497][ T351] I/O error, dev loop6, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 535.956079][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 535.962416][ T40] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.986474][ T40] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.996978][ T40] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.007591][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.015775][ T40] usb 5-1: Product: syz [ 536.020234][ T40] usb 5-1: Manufacturer: syz [ 536.025302][ T40] usb 5-1: SerialNumber: syz [ 536.033986][ T8373] loop2: detected capacity change from 0 to 1024 [ 536.051970][ T8373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 536.080936][ T8373] IPv6: NLM_F_REPLACE set, but no existing node found! [ 536.115102][ T5008] EXT4-fs (loop2): unmounting filesystem. [ 536.134445][ T8379] loop2: detected capacity change from 0 to 128 [ 536.162799][ T8379] syz.2.2440: attempt to access beyond end of device [ 536.162799][ T8379] loop2: rw=2049, sector=233, nr_sectors = 120 limit=128 [ 536.215215][ T28] audit: type=1400 audit(1781297128.520:1039): avc: denied { accept } for pid=8384 comm="syz.2.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 536.243338][ T40] usb 5-1: 0:2 : does not exist [ 536.252179][ T40] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 536.273327][ T40] usb 5-1: USB disconnect, device number 94 [ 536.289317][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 536.391281][ T8390] loop6: detected capacity change from 0 to 512 [ 536.418400][ T8390] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 536.427555][ T8390] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.444985][ T8390] Quota error (device loop6): do_check_range: Getting block 4128768 out of range 0-5 [ 536.546105][ T3175] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 536.757135][ T3175] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 536.777319][ T3175] usb 1-1: config 0 has no interface number 0 [ 536.783486][ T3175] usb 1-1: config 0 interface 41 has no altsetting 0 [ 536.830819][ T3175] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 536.859648][ T3175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.882720][ T3175] usb 1-1: Product: syz [ 536.906044][ T3175] usb 1-1: Manufacturer: syz [ 536.916170][ T3175] usb 1-1: SerialNumber: syz [ 536.934941][ T3175] usb 1-1: config 0 descriptor?? [ 537.059668][ T5479] EXT4-fs (loop6): unmounting filesystem. [ 537.096137][ T313] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 537.297216][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 537.323160][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.348343][ T3175] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 537.362525][ T28] audit: type=1326 audit(1781297129.670:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.0.2444" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20b679ce59 code=0x0 [ 537.387101][ T313] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 537.396450][ T3175] CoreChips: probe of 1-1:0.41 failed with error -71 [ 537.403261][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.417770][ T3175] usb 1-1: USB disconnect, device number 94 [ 537.426760][ T8420] FAULT_INJECTION: forcing a failure. [ 537.426760][ T8420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.432390][ T313] usb 5-1: config 0 descriptor?? [ 537.448066][ T8420] CPU: 0 PID: 8420 Comm: syz.2.2451 Not tainted syzkaller #0 [ 537.455498][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 537.465584][ T8420] Call Trace: [ 537.468893][ T8420] [ 537.471846][ T8420] __dump_stack+0x21/0x24 [ 537.476219][ T8420] dump_stack_lvl+0x110/0x170 [ 537.480953][ T8420] ? __cfi_dump_stack_lvl+0x8/0x8 [ 537.486012][ T8420] dump_stack+0x15/0x24 [ 537.490195][ T8420] should_fail_ex+0x3bf/0x510 [ 537.494914][ T8420] should_fail+0xb/0x10 [ 537.499087][ T8420] should_fail_usercopy+0x1a/0x20 [ 537.504136][ T8420] _copy_to_user+0x1e/0x90 [ 537.508586][ T8420] simple_read_from_buffer+0xe9/0x160 [ 537.513987][ T8420] proc_fail_nth_read+0x1a6/0x220 [ 537.519040][ T8420] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 537.524611][ T8420] ? security_file_permission+0x94/0xb0 [ 537.530190][ T8420] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 537.535768][ T8420] vfs_read+0x286/0x930 [ 537.539950][ T8420] ? __cfi_vfs_read+0x10/0x10 [ 537.544653][ T8420] ? do_sys_openat2+0x715/0x820 [ 537.549547][ T8420] ? __kasan_check_read+0x11/0x20 [ 537.554595][ T8420] ? __fdget_pos+0x2d4/0x380 [ 537.559213][ T8420] ksys_read+0x14a/0x260 [ 537.563487][ T8420] ? __cfi_ksys_read+0x10/0x10 [ 537.568276][ T8420] ? debug_smp_processor_id+0x17/0x20 [ 537.573675][ T8420] __x64_sys_read+0x7b/0x90 [ 537.578208][ T8420] x64_sys_call+0x2f/0x9a0 [ 537.582653][ T8420] do_syscall_64+0x4c/0xa0 [ 537.587100][ T8420] ? clear_bhb_loop+0x30/0x80 [ 537.591804][ T8420] ? clear_bhb_loop+0x30/0x80 [ 537.596501][ T8420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.602429][ T8420] RIP: 0033:0x7f896155d68e [ 537.606866][ T8420] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 537.626498][ T8420] RSP: 002b:00007f8962412fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 537.634944][ T8420] RAX: ffffffffffffffda RBX: 00007f89624136c0 RCX: 00007f896155d68e [ 537.642941][ T8420] RDX: 000000000000000f RSI: 00007f89624130a0 RDI: 0000000000000004 [ 537.650940][ T8420] RBP: 00007f8962413090 R08: 0000000000000000 R09: 0000000000000000 [ 537.658938][ T8420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.666935][ T8420] R13: 00007f8961816038 R14: 00007f8961815fa0 R15: 00007ffec3f5b998 [ 537.674946][ T8420] [ 537.698652][ T8422] loop2: detected capacity change from 0 to 128 [ 537.726402][ T8422] syz.2.2452: attempt to access beyond end of device [ 537.726402][ T8422] loop2: rw=2049, sector=233, nr_sectors = 120 limit=128 [ 537.796110][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'. [ 538.049199][ T28] audit: type=1400 audit(1781297130.360:1041): avc: denied { write } for pid=8429 comm="syz.6.2456" path="socket:[42182]" dev="sockfs" ino=42182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 538.082549][ T313] hid-generic 0003:0C70:F0B6.0031: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 538.094358][ T3215] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 538.287201][ T3215] usb 3-1: config 1 has an invalid interface number: 249 but max is 1 [ 538.295466][ T3215] usb 3-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 538.305850][ T3215] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 538.314897][ T3215] usb 3-1: config 1 has no interface number 2 [ 538.321135][ T3215] usb 3-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 538.334688][ T3215] usb 3-1: config 1 interface 249 has no altsetting 0 [ 538.342945][ T3215] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.352096][ T3215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.352764][ T40] usb 5-1: USB disconnect, device number 95 [ 538.360616][ T3215] usb 3-1: Product: syz [ 538.370683][ T3215] usb 3-1: Manufacturer: syz [ 538.377417][ T3215] usb 3-1: SerialNumber: syz [ 538.400365][ T3215] cdc_ncm 3-1:1.0: skipping garbage [ 538.411252][ T3215] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 538.419060][ T3215] cdc_ncm 3-1:1.0: bind() failure [ 538.425265][ T3215] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 538.437472][ T3215] cdc_ncm 3-1:1.1: bind() failure [ 538.455408][ T28] audit: type=1400 audit(1781297130.760:1042): avc: denied { setopt } for pid=8444 comm="syz.4.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 538.475107][ T8445] loop4: detected capacity change from 0 to 128 [ 538.486680][ T8445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 538.495541][ T8445] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 538.510078][ T8445] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 538.531384][ T5434] EXT4-fs (loop4): unmounting filesystem. [ 538.558372][ T8449] loop4: detected capacity change from 0 to 4096 [ 538.566254][ T8449] EXT4-fs (loop4): Test dummy encryption mode enabled [ 538.573820][ T8449] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 538.582166][ T8449] System zones: 0-5 [ 538.587824][ T8449] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 538.606945][ T3215] usb 3-1: USB disconnect, device number 92 [ 539.017492][ T8460] loop6: detected capacity change from 0 to 4096 [ 539.024921][ T8460] EXT4-fs (loop6): Test dummy encryption mode enabled [ 539.033087][ T8460] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 539.041339][ T8460] System zones: 0-5 [ 539.046423][ T8460] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 539.256074][ T5479] EXT4-fs (loop6): unmounting filesystem. [ 539.588682][ T8475] loop3: detected capacity change from 0 to 256 [ 539.600855][ T8475] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 539.611630][ T3215] usb 1-1: new low-speed USB device number 95 using dummy_hcd [ 539.642129][ T8475] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 539.658025][ T8475] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 539.699150][ T8475] exFAT-fs (loop3): hint_cluster is invalid (17) [ 539.777324][ T8477] fuseblk: Bad value for 'fd' [ 539.827174][ T3215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 539.848369][ T3215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.886107][ T3215] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 539.895314][ T3215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.907395][ T8481] loop3: detected capacity change from 0 to 512 [ 539.919953][ T3215] usb 1-1: config 0 descriptor?? [ 539.942495][ T8481] EXT4-fs error (device loop3): ext4_iget_extra_inode:4765: inode #15: comm syz.3.2472: corrupted in-inode xattr [ 539.985192][ T8481] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2472: couldn't read orphan inode 15 (err -117) [ 540.007676][ T8481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 540.008615][ T8472] loop6: detected capacity change from 0 to 131072 [ 540.027345][ T8472] F2FS-fs (loop6): invalid crc value [ 540.063213][ T287] EXT4-fs (loop3): unmounting filesystem. [ 540.078427][ T8472] F2FS-fs (loop6): Found nat_bits in checkpoint [ 540.133166][ T8472] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 540.146694][ T8472] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 540.328274][ T3215] hid-generic 0003:0C70:F0B6.0032: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 540.697890][ T40] usb 1-1: USB disconnect, device number 95 [ 540.954680][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2477'. [ 541.116098][ T40] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 541.286082][ T3215] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 541.296228][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 541.303905][ T40] usb 1-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice= 0.40 [ 541.313064][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.321162][ T40] usb 1-1: Product: syz [ 541.325376][ T40] usb 1-1: Manufacturer: syz [ 541.330067][ T40] usb 1-1: SerialNumber: syz [ 541.466066][ T3215] usb 7-1: Using ep0 maxpacket: 32 [ 541.472456][ T3215] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.483773][ T3215] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.495007][ T3215] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 541.504188][ T3215] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 541.512625][ T3215] usb 7-1: Product: syz [ 541.516866][ T3215] usb 7-1: Manufacturer: syz [ 541.523778][ T3215] hub 7-1:4.0: USB hub found [ 541.567717][ T5434] EXT4-fs (loop4): unmounting filesystem. [ 541.724411][ T3215] hub 7-1:4.0: 2 ports detected [ 541.856059][ T1837] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 541.890272][ T8517] loop3: detected capacity change from 0 to 256 [ 541.899312][ T8517] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 541.913732][ T8517] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 541.924136][ T8517] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 541.940421][ T8517] exFAT-fs (loop3): hint_cluster is invalid (17) [ 541.971023][ T28] audit: type=1400 audit(1781297134.280:1043): avc: denied { execute } for pid=8518 comm="syz.3.2482" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=1883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 542.000481][ T40] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 542.017848][ T40] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 542.038301][ T40] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 542.061613][ T1837] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 542.070127][ T40] usb 1-1: USB disconnect, device number 96 [ 542.074104][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 542.076213][ T1837] usb 5-1: config 0 has no interface number 0 [ 542.118313][ T1837] usb 5-1: config 0 interface 41 has no altsetting 0 [ 542.133974][ T1837] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 542.153279][ T1837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.173466][ T1837] usb 5-1: Product: syz [ 542.177894][ T1837] usb 5-1: Manufacturer: syz [ 542.187017][ T1837] usb 5-1: SerialNumber: syz [ 542.199005][ T1837] usb 5-1: config 0 descriptor?? [ 542.209350][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.222065][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.231695][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2476'. [ 542.241016][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2476'. [ 542.259101][ T3215] hub 7-1:4.0: set hub depth failed [ 542.275271][ T3215] usb 7-1: USB disconnect, device number 45 [ 542.607268][ T1837] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 542.621172][ T8512] loop4: detected capacity change from 0 to 256 [ 542.621710][ T1837] CoreChips: probe of 5-1:0.41 failed with error -71 [ 542.646680][ T1837] usb 5-1: USB disconnect, device number 96 [ 542.680232][ T8512] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 542.770712][ T28] audit: type=1326 audit(1781297135.080:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8511 comm="syz.4.2480" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b7379ce59 code=0x0 [ 542.816076][ T3215] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 543.007145][ T3215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 543.026923][ T3215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.048012][ T3215] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 543.066943][ T3215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.080262][ T8519] loop3: detected capacity change from 0 to 131072 [ 543.090761][ T3215] usb 1-1: config 0 descriptor?? [ 543.104575][ T8519] F2FS-fs (loop3): invalid crc value [ 543.134936][ T8519] F2FS-fs (loop3): Found nat_bits in checkpoint [ 543.179895][ T8519] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 543.226167][ T28] audit: type=1400 audit(1781297135.520:1045): avc: denied { execute_no_trans } for pid=8518 comm="syz.3.2482" path="/478/bus/file1" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 543.492632][ T8519] F2FS-fs (loop3): Unrecognized mount option "ÿÿÿ" or missing value [ 543.518435][ T3215] hid-generic 0003:0C70:F0B6.0033: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 543.575127][ T8540] FAULT_INJECTION: forcing a failure. [ 543.575127][ T8540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.616365][ T8540] CPU: 0 PID: 8540 Comm: syz.6.2488 Not tainted syzkaller #0 [ 543.623820][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 543.633910][ T8540] Call Trace: [ 543.637220][ T8540] [ 543.640181][ T8540] __dump_stack+0x21/0x24 [ 543.644548][ T8540] dump_stack_lvl+0x110/0x170 [ 543.649257][ T8540] ? __cfi_dump_stack_lvl+0x8/0x8 [ 543.654322][ T8540] dump_stack+0x15/0x24 [ 543.658511][ T8540] should_fail_ex+0x3bf/0x510 [ 543.663222][ T8540] should_fail+0xb/0x10 [ 543.667400][ T8540] should_fail_usercopy+0x1a/0x20 [ 543.672454][ T8540] _copy_from_user+0x1e/0xc0 [ 543.677089][ T8540] __sys_bpf+0x2a0/0x850 [ 543.681481][ T8540] ? bpf_link_show_fdinfo+0x330/0x330 [ 543.686904][ T8540] ? __cfi_ksys_write+0x10/0x10 [ 543.691798][ T8540] ? debug_smp_processor_id+0x17/0x20 [ 543.697219][ T8540] __x64_sys_bpf+0x7c/0x90 [ 543.701676][ T8540] x64_sys_call+0x488/0x9a0 [ 543.706212][ T8540] do_syscall_64+0x4c/0xa0 [ 543.710671][ T8540] ? clear_bhb_loop+0x30/0x80 [ 543.715402][ T8540] ? clear_bhb_loop+0x30/0x80 [ 543.720116][ T8540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.726072][ T8540] RIP: 0033:0x7ff7c199ce59 [ 543.730516][ T8540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.750157][ T8540] RSP: 002b:00007ff7c2855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.758778][ T8540] RAX: ffffffffffffffda RBX: 00007ff7c1c15fa0 RCX: 00007ff7c199ce59 [ 543.766780][ T8540] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 543.774784][ T8540] RBP: 00007ff7c2855090 R08: 0000000000000000 R09: 0000000000000000 [ 543.782784][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.790783][ T8540] R13: 00007ff7c1c16038 R14: 00007ff7c1c15fa0 R15: 00007fffc50f5608 [ 543.798794][ T8540] [ 543.926176][ T1837] usb 1-1: USB disconnect, device number 97 [ 544.369727][ T1837] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 544.392707][ T8558] loop6: detected capacity change from 0 to 4096 [ 544.402838][ T8558] EXT4-fs (loop6): Test dummy encryption mode enabled [ 544.410525][ T8558] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 544.419383][ T8558] System zones: 0-5 [ 544.424465][ T8558] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 544.556095][ T1837] usb 1-1: Using ep0 maxpacket: 32 [ 544.562860][ T1837] usb 1-1: unable to get BOS descriptor or descriptor too short [ 544.572874][ T1837] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 544.582040][ T1837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.590086][ T1837] usb 1-1: Product: syz [ 544.594290][ T1837] usb 1-1: Manufacturer: syz [ 544.598970][ T1837] usb 1-1: SerialNumber: syz [ 544.624785][ T8565] loop4: detected capacity change from 0 to 128 [ 544.637362][ T5479] EXT4-fs (loop6): unmounting filesystem. [ 544.672058][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2495'. [ 544.693876][ T8565] kvm: apic: phys broadcast and lowest prio [ 544.702484][ T8565] input: syz1 as /devices/virtual/input/input7 [ 544.766212][ T28] audit: type=1400 audit(1781297137.080:1046): avc: denied { mounton } for pid=8564 comm="syz.4.2494" path="/176/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 544.774845][ T8565] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 544.801000][ T28] audit: type=1400 audit(1781297137.110:1047): avc: denied { read write } for pid=8564 comm="syz.4.2494" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 544.830708][ T28] audit: type=1400 audit(1781297137.110:1048): avc: denied { open } for pid=8564 comm="syz.4.2494" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 544.874944][ T1837] usb 1-1: unit 4 not found! [ 544.879783][ T1837] usb 1-1: unit 0 not found! [ 544.898405][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 544.910453][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 545.076140][ T40] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 545.171822][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.179008][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.186278][ T405] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 545.187420][ T8579] device bridge_slave_0 entered promiscuous mode [ 545.202602][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.209860][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.217453][ T8579] device bridge_slave_1 entered promiscuous mode [ 545.257175][ T40] usb 7-1: config 1 has an invalid interface number: 249 but max is 1 [ 545.265493][ T40] usb 7-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 545.276957][ T1837] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 545.284364][ T40] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 545.293980][ T1837] usb 1-1: unit 4 not found! [ 545.298662][ T1837] usb 1-1: unit 0 not found! [ 545.303363][ T40] usb 7-1: config 1 has no interface number 2 [ 545.309667][ T40] usb 7-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 545.323470][ T40] usb 7-1: config 1 interface 249 has no altsetting 0 [ 545.323971][ T1837] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 545.339373][ T40] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.348539][ T1837] usb 1-1: unit 4 not found! [ 545.353239][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.358013][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.361340][ T1837] usb 1-1: unit 0 not found! [ 545.368351][ T8579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.368623][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.373081][ T40] usb 7-1: Product: syz [ 545.380199][ T8579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.398791][ T40] usb 7-1: Manufacturer: syz [ 545.403583][ T40] usb 7-1: SerialNumber: syz [ 545.410124][ T405] usb 4-1: config 1 has an invalid interface number: 249 but max is 1 [ 545.420850][ T1837] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 545.428049][ T405] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 545.439552][ T40] cdc_ncm 7-1:1.0: skipping garbage [ 545.445549][ T1837] usb 1-1: USB disconnect, device number 98 [ 545.451688][ T40] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 545.459493][ T405] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 545.469097][ T40] cdc_ncm 7-1:1.0: bind() failure [ 545.474262][ T405] usb 4-1: config 1 has no interface number 2 [ 545.481516][ T40] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 545.488423][ T40] cdc_ncm 7-1:1.1: bind() failure [ 545.493521][ T405] usb 4-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 545.507301][ T405] usb 4-1: config 1 interface 249 has no altsetting 0 [ 545.512770][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 545.523252][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.530981][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.538851][ T405] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.548106][ T405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.556220][ T405] usb 4-1: Product: syz [ 545.560446][ T405] usb 4-1: Manufacturer: syz [ 545.565084][ T405] usb 4-1: SerialNumber: syz [ 545.569652][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 545.578252][ T405] cdc_ncm 4-1:1.0: skipping garbage [ 545.578320][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.583504][ T405] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 545.583527][ T405] cdc_ncm 4-1:1.0: bind() failure [ 545.590583][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.609954][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 545.613393][ T405] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 545.620758][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.625245][ T405] cdc_ncm 4-1:1.1: bind() failure [ 545.632019][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.646816][ T40] usb 7-1: USB disconnect, device number 46 [ 545.653205][ T1747] device bridge_slave_1 left promiscuous mode [ 545.661047][ T1747] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.668803][ T1747] device bridge_slave_0 left promiscuous mode [ 545.675389][ T1747] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.686576][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 545.796628][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 545.804901][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 545.821578][ T405] usb 4-1: USB disconnect, device number 89 [ 545.836613][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 545.849922][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 545.858189][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 545.865819][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 545.875651][ T8579] device veth0_vlan entered promiscuous mode [ 545.888772][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 545.903341][ T8579] device veth1_macvtap entered promiscuous mode [ 545.914694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 545.933914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.965078][ T8590] tipc: Started in network mode [ 545.970089][ T8590] tipc: Node identity , cluster identity 4711 [ 545.977755][ T8590] tipc: Failed to obtain node identity [ 545.983443][ T8590] tipc: Enabling of bearer rejected, failed to enable media [ 546.051131][ T8601] loop2: detected capacity change from 0 to 128 [ 546.154168][ T8605] loop7: detected capacity change from 0 to 256 [ 546.161494][ T8605] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 546.173308][ T8605] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 546.185172][ T8605] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 546.218102][ T8606] syz.2.2507: attempt to access beyond end of device [ 546.218102][ T8606] loop2: rw=2049, sector=233, nr_sectors = 120 limit=128 [ 546.233503][ T8601] syz.2.2507: attempt to access beyond end of device [ 546.233503][ T8601] loop2: rw=2049, sector=233, nr_sectors = 120 limit=128 [ 546.263523][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2509'. [ 546.328028][ T8612] loop7: detected capacity change from 0 to 256 [ 546.348993][ T8612] FAT-fs (loop7): Directory bread(block 64) failed [ 546.361525][ T8612] FAT-fs (loop7): Directory bread(block 65) failed [ 546.368646][ T8612] FAT-fs (loop7): Directory bread(block 66) failed [ 546.375276][ T8612] FAT-fs (loop7): Directory bread(block 67) failed [ 546.382202][ T8612] FAT-fs (loop7): Directory bread(block 68) failed [ 546.389981][ T8612] FAT-fs (loop7): Directory bread(block 69) failed [ 546.396881][ T8612] FAT-fs (loop7): Directory bread(block 70) failed [ 546.403494][ T8612] FAT-fs (loop7): Directory bread(block 71) failed [ 546.412581][ T8612] FAT-fs (loop7): Directory bread(block 72) failed [ 546.419379][ T8612] FAT-fs (loop7): Directory bread(block 73) failed [ 546.512850][ T8624] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2516'. [ 546.526274][ T8624] input: syz0 as /devices/virtual/input/input8 [ 546.553937][ T28] audit: type=1400 audit(1781297138.860:1049): avc: denied { map } for pid=8616 comm="syz.6.2514" path="socket:[43717]" dev="sockfs" ino=43717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 546.670700][ T8638] SELinux: policydb version 223355371 does not match my version range 15-33 [ 546.681510][ T8638] SELinux: failed to load policy [ 546.704125][ T8617] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2514'. [ 546.713588][ T8617] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2514'. [ 546.791025][ T8642] FAULT_INJECTION: forcing a failure. [ 546.791025][ T8642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.804215][ T8642] CPU: 1 PID: 8642 Comm: syz.6.2521 Not tainted syzkaller #0 [ 546.811598][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 546.821658][ T8642] Call Trace: [ 546.825297][ T8642] [ 546.828249][ T8642] __dump_stack+0x21/0x24 [ 546.832615][ T8642] dump_stack_lvl+0x110/0x170 [ 546.837301][ T8642] ? __cfi_dump_stack_lvl+0x8/0x8 [ 546.842361][ T8642] dump_stack+0x15/0x24 [ 546.846553][ T8642] should_fail_ex+0x3bf/0x510 [ 546.851286][ T8642] should_fail+0xb/0x10 [ 546.855465][ T8642] should_fail_usercopy+0x1a/0x20 [ 546.860523][ T8642] _copy_to_user+0x1e/0x90 [ 546.864982][ T8642] simple_read_from_buffer+0xe9/0x160 [ 546.870396][ T8642] proc_fail_nth_read+0x1a6/0x220 [ 546.875459][ T8642] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 546.881132][ T8642] ? security_file_permission+0x94/0xb0 [ 546.886726][ T8642] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 546.892315][ T8642] vfs_read+0x286/0x930 [ 546.896506][ T8642] ? __cfi_vfs_read+0x10/0x10 [ 546.901214][ T8642] ? __kasan_check_write+0x14/0x20 [ 546.906367][ T8642] ? mutex_lock+0x93/0x1b0 [ 546.910835][ T8642] ? __cfi_mutex_lock+0x10/0x10 [ 546.915771][ T8642] ? __fdget_pos+0x2cd/0x380 [ 546.920400][ T8642] ? ksys_read+0x70/0x260 [ 546.924767][ T8642] ksys_read+0x14a/0x260 [ 546.929048][ T8642] ? __cfi_ksys_read+0x10/0x10 [ 546.933842][ T8642] ? debug_smp_processor_id+0x17/0x20 [ 546.939262][ T8642] __x64_sys_read+0x7b/0x90 [ 546.943793][ T8642] x64_sys_call+0x2f/0x9a0 [ 546.948246][ T8642] do_syscall_64+0x4c/0xa0 [ 546.952700][ T8642] ? clear_bhb_loop+0x30/0x80 [ 546.957416][ T8642] ? clear_bhb_loop+0x30/0x80 [ 546.962152][ T8642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.968181][ T8642] RIP: 0033:0x7ff7c195d68e [ 546.972654][ T8642] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 546.992290][ T8642] RSP: 002b:00007ff7c2854fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.000754][ T8642] RAX: ffffffffffffffda RBX: 00007ff7c28556c0 RCX: 00007ff7c195d68e [ 547.008754][ T8642] RDX: 000000000000000f RSI: 00007ff7c28550a0 RDI: 0000000000000009 [ 547.016761][ T8642] RBP: 00007ff7c2855090 R08: 0000000000000000 R09: 0000000000000000 [ 547.024759][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.032739][ T8642] R13: 00007ff7c1c16038 R14: 00007ff7c1c15fa0 R15: 00007fffc50f5608 [ 547.040731][ T8642] [ 547.046351][ T3215] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 547.069776][ T8648] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2524'. [ 547.226112][ T3215] usb 4-1: Using ep0 maxpacket: 16 [ 547.232682][ T3215] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 547.240907][ T3215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.251192][ T313] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 547.258811][ T3215] usb 4-1: config 0 has no interface number 0 [ 547.266406][ T3215] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 547.275476][ T3215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.283532][ T3215] usb 4-1: Product: syz [ 547.287762][ T3215] usb 4-1: Manufacturer: syz [ 547.292360][ T3215] usb 4-1: SerialNumber: syz [ 547.297608][ T3215] usb 4-1: config 0 descriptor?? [ 547.303498][ T3215] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 547.309900][ T3215] usb 4-1: No valid video chain found. [ 547.346106][ T423] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 547.436055][ T313] usb 1-1: Using ep0 maxpacket: 32 [ 547.443919][ T313] usb 1-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice= 0.40 [ 547.453259][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.456307][ T405] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 547.461797][ T313] usb 1-1: Product: syz [ 547.473200][ T313] usb 1-1: Manufacturer: syz [ 547.477934][ T313] usb 1-1: SerialNumber: syz [ 547.492574][ T8653] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2526'. [ 547.505621][ T3215] usb 4-1: USB disconnect, device number 90 [ 547.523581][ T8655] loop7: detected capacity change from 0 to 128 [ 547.531162][ T423] usb 7-1: config 1 has an invalid interface number: 249 but max is 1 [ 547.541828][ T423] usb 7-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 547.552504][ T423] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 547.562119][ T8655] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 547.570922][ T423] usb 7-1: config 1 has no interface number 2 [ 547.571221][ T8655] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 547.577678][ T423] usb 7-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 547.600421][ T423] usb 7-1: config 1 interface 249 has no altsetting 0 [ 547.616143][ T423] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.625282][ T423] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.633406][ T423] usb 7-1: Product: syz [ 547.637706][ T423] usb 7-1: Manufacturer: syz [ 547.642388][ T423] usb 7-1: SerialNumber: syz [ 547.650239][ T423] cdc_ncm 7-1:1.0: skipping garbage [ 547.655508][ T423] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 547.662523][ T423] cdc_ncm 7-1:1.0: bind() failure [ 547.667646][ T405] usb 3-1: Using ep0 maxpacket: 32 [ 547.673849][ T405] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.684361][ T423] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 547.691218][ T423] cdc_ncm 7-1:1.1: bind() failure [ 547.699568][ T405] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 547.708710][ T405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.716772][ T405] usb 3-1: Product: syz [ 547.720970][ T405] usb 3-1: Manufacturer: syz [ 547.725589][ T405] usb 3-1: SerialNumber: syz [ 547.731079][ T405] usb 3-1: config 0 descriptor?? [ 547.737185][ T405] usb 3-1: bad CDC descriptors [ 547.742190][ T405] usb 3-1: unsupported MDLM descriptors [ 547.775479][ T8579] EXT4-fs (loop7): unmounting filesystem. [ 547.791309][ T8659] FAULT_INJECTION: forcing a failure. [ 547.791309][ T8659] name failslab, interval 1, probability 0, space 0, times 0 [ 547.804181][ T8659] CPU: 1 PID: 8659 Comm: syz.7.2528 Not tainted syzkaller #0 [ 547.811597][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 547.821690][ T8659] Call Trace: [ 547.824986][ T8659] [ 547.828011][ T8659] __dump_stack+0x21/0x24 [ 547.832394][ T8659] dump_stack_lvl+0x110/0x170 [ 547.837089][ T8659] ? __cfi_dump_stack_lvl+0x8/0x8 [ 547.842127][ T8659] ? prep_new_page+0x1c/0x110 [ 547.846838][ T8659] ? get_page_from_freelist+0x2ca9/0x2d20 [ 547.852591][ T8659] dump_stack+0x15/0x24 [ 547.856785][ T8659] should_fail_ex+0x3bf/0x510 [ 547.861493][ T8659] ? mas_alloc_nodes+0x2d8/0x850 [ 547.866563][ T8659] __should_failslab+0xac/0xf0 [ 547.871358][ T8659] should_failslab+0x9/0x20 [ 547.875892][ T8659] kmem_cache_alloc+0x3b/0x320 [ 547.880673][ T8659] mas_alloc_nodes+0x2d8/0x850 [ 547.885469][ T8659] mas_preallocate+0xe3d/0x1430 [ 547.890349][ T8659] ? __cfi_mas_preallocate+0x10/0x10 [ 547.895669][ T8659] ? rwsem_write_trylock+0x136/0x300 [ 547.901153][ T8659] vma_expand+0x437/0xad0 [ 547.905600][ T8659] mmap_region+0xf04/0x2130 [ 547.910147][ T8659] ? get_delayacct_enabled+0x19/0x30 [ 547.915485][ T8659] ? __cfi_mmap_region+0x10/0x10 [ 547.920461][ T8659] ? cap_mmap_addr+0x165/0x2e0 [ 547.925276][ T8659] ? get_unmapped_area+0x30c/0x370 [ 547.930464][ T8659] do_mmap+0x858/0xdd0 [ 547.934574][ T8659] ? __count_memcg_events+0x8f/0xe0 [ 547.939905][ T8659] ? __cfi_do_mmap+0x10/0x10 [ 547.943389][ T3215] usb 3-1: USB disconnect, device number 93 [ 547.944550][ T8659] vm_mmap_pgoff+0x206/0x3f0 [ 547.955072][ T8659] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 547.960222][ T8659] ? up_read+0x56/0x1d0 [ 547.964428][ T8659] ksys_mmap_pgoff+0xf6/0x1d0 [ 547.969162][ T8659] __x64_sys_mmap+0xfa/0x110 [ 547.973804][ T8659] x64_sys_call+0x8fd/0x9a0 [ 547.978345][ T8659] do_syscall_64+0x4c/0xa0 [ 547.982808][ T8659] ? clear_bhb_loop+0x30/0x80 [ 547.987515][ T8659] ? clear_bhb_loop+0x30/0x80 [ 547.992215][ T8659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.998146][ T8659] RIP: 0033:0x7f2ff179cbc2 [ 548.002592][ T8659] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 548.022237][ T8659] RSP: 002b:00007f2ff267fd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 548.030694][ T8659] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ff179cbc2 [ 548.038726][ T8659] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 548.046733][ T8659] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 548.054742][ T8659] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 548.062749][ T8659] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f2ff18305b0 [ 548.070782][ T8659] [ 548.077419][ T423] usb 7-1: USB disconnect, device number 47 [ 548.089806][ T8659] ------------[ cut here ]------------ [ 548.095347][ T8659] kernel BUG at mm/mmap.c:2854! [ 548.108309][ T8659] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 548.114539][ T8659] CPU: 0 PID: 8659 Comm: syz.7.2528 Not tainted syzkaller #0 [ 548.121946][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.132045][ T8659] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 548.133950][ T8663] loop3: detected capacity change from 0 to 256 [ 548.137464][ T8659] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 bf ba c3 ff 0f 0b e8 b8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 548.137482][ T8659] RSP: 0018:ffffc900016f7a40 EFLAGS: 00010293 [ 548.137501][ T8659] RAX: ffffffff81ad9a68 RBX: 00007f2ff01f8000 RCX: ffff88811b4ee540 [ 548.137515][ T8659] RDX: 0000000000000000 RSI: 00007f2ff01f7fff RDI: 00007f2ff01f8000 [ 548.137529][ T8659] RBP: ffffc900016f7c30 R08: ffff88811b4ee540 R09: 0000000000000003 [ 548.137542][ T8659] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f2ff01f7fff [ 548.137554][ T8659] R13: 00007f2ff01f8000 R14: dffffc0000000000 R15: 00007f2fe81f8000 [ 548.137568][ T8659] FS: 00007f2ff26816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 548.218405][ T8659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.225036][ T8659] CR2: 00007f84bd348060 CR3: 000000012f196000 CR4: 00000000003506b0 [ 548.233060][ T8659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 548.241067][ T8659] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 548.249108][ T8659] Call Trace: [ 548.252414][ T8659] [ 548.255356][ T8659] ? get_delayacct_enabled+0x19/0x30 [ 548.260672][ T8659] ? __cfi_mmap_region+0x10/0x10 [ 548.265645][ T8659] ? cap_mmap_addr+0x165/0x2e0 [ 548.270422][ T8659] ? get_unmapped_area+0x30c/0x370 [ 548.275557][ T8659] do_mmap+0x858/0xdd0 [ 548.279655][ T8659] ? __count_memcg_events+0x8f/0xe0 [ 548.284878][ T8659] ? __cfi_do_mmap+0x10/0x10 [ 548.289490][ T8659] vm_mmap_pgoff+0x206/0x3f0 [ 548.294091][ T8659] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 548.299212][ T8659] ? up_read+0x56/0x1d0 [ 548.303404][ T8659] ksys_mmap_pgoff+0xf6/0x1d0 [ 548.308104][ T8659] __x64_sys_mmap+0xfa/0x110 [ 548.312708][ T8659] x64_sys_call+0x8fd/0x9a0 [ 548.317225][ T8659] do_syscall_64+0x4c/0xa0 [ 548.321662][ T8659] ? clear_bhb_loop+0x30/0x80 [ 548.326353][ T8659] ? clear_bhb_loop+0x30/0x80 [ 548.331049][ T8659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.336978][ T8659] RIP: 0033:0x7f2ff179cbc2 [ 548.341409][ T8659] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 548.361030][ T8659] RSP: 002b:00007f2ff267fd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 548.369455][ T8659] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ff179cbc2 [ 548.377527][ T8659] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 548.385518][ T8659] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 548.393499][ T8659] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 548.401572][ T8659] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f2ff18305b0 [ 548.409557][ T8659] [ 548.412598][ T8659] Modules linked in: [ 548.416960][ T8663] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 548.421328][ T8659] ---[ end trace 0000000000000000 ]--- [ 548.434972][ T8663] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 548.440613][ T8659] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 548.449177][ T8659] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 bf ba c3 ff 0f 0b e8 b8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 548.469355][ T8659] RSP: 0018:ffffc900016f7a40 EFLAGS: 00010293 [ 548.475522][ T8659] RAX: ffffffff81ad9a68 RBX: 00007f2ff01f8000 RCX: ffff88811b4ee540 [ 548.480964][ T8663] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 548.484626][ T8659] RDX: 0000000000000000 RSI: 00007f2ff01f7fff RDI: 00007f2ff01f8000 [ 548.505367][ T8659] RBP: ffffc900016f7c30 R08: ffff88811b4ee540 R09: 0000000000000003 [ 548.513750][ T8659] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f2ff01f7fff [ 548.517168][ T313] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 548.522678][ T8659] R13: 00007f2ff01f8000 R14: dffffc0000000000 R15: 00007f2fe81f8000 [ 548.537840][ T8659] FS: 00007f2ff26816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 548.545385][ T8663] exFAT-fs (loop3): hint_cluster is invalid (17) [ 548.548640][ T313] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 548.561288][ T8659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.571445][ T8659] CR2: 000000110c31e0a6 CR3: 000000012f196000 CR4: 00000000003506b0 [ 548.579759][ T8659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 548.588077][ T8659] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 548.596578][ T8659] Kernel panic - not syncing: Fatal exception [ 548.603246][ T8659] Kernel Offset: disabled [ 548.607576][ T8659] Rebooting in 86400 seconds..