last executing test programs: 9.180920445s ago: executing program 1 (id=651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="400f01c448b800a00000000000000f23c80f21f835080000000f23f82e6766430f821cbfaaff0fc73366ba4300b000ee0f20d835080000000f22d8c744240089000000c74424020b000100c7442406000000000f011424f75df80f009b8b0000000f019a0000c0fe", 0x68}], 0x1, 0x14, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xe0000, 0x0) r6 = epoll_create1(0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wffno=', @ANYRESHEX=r6, @ANYBLOB=',hash,\x00']) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000081c0)={0x20000004}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001002abd700000000000fe800000000000bf91e195dfdc03cebbfe80000000fda47fdf22de00000000000000000001bb000000004e240000020000000000000044bef31f1929d0299893eaf4639ea85fef1c65ce822b5565e28d2c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003c00000000000000fe8800000000000000000000000000010000000000000000ff010000fd1f0000000000007f000001000000000000000000000000000000006c00000000000000fe80000000000000000000000000003b0000000001000000000000000000000081000000"], 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000340)={{0x1, 0x2000, 0xb, 0xad, 0x3, 0x4, 0x7f, 0x7, 0x0, 0x2b, 0x8}, {0x2, 0x30000, 0xf, 0x2c, 0x8, 0x0, 0x7f, 0x1, 0x4, 0x5, 0x9}, {0x2, 0x5000, 0xb, 0x5, 0x1, 0x2, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x41000, 0xd, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x0, 0xf2, 0x47}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x80, 0xc, 0x8, 0x3d}, {0xd000, 0x100002, 0x3, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82, 0x3}, {0x5000, 0x3000, 0x3, 0x5, 0x9, 0xf, 0x3, 0x37, 0x0, 0x9, 0xef}, {0x70000, 0x2073}, {0xd000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x4, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x3]}) listen(r4, 0x70000008) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r12, &(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10) listen(r12, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xffff, 0x6, 0x7, 0x3}]}) 8.959975098s ago: executing program 1 (id=657): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x5543, &(0x7f0000007a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0x6) getpid() r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000060000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x80, 0x1c, {0xe, 0xa08, 0x0, 0xb, 0x441, 0x9, 0x7fff, 0x5, 0xa01, 0xd, 0xc, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 5.481261333s ago: executing program 1 (id=668): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x704, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xfffffffd}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x5}, @ETHTOOL_A_COALESCE_TX_USECS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004005}, 0x40001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "23e19a73"}]}}, 0x0}, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x62, 0x0, 0x10, 0x2, 0x0, @remote, @local}, {0x16, 0x9, 0x0, @local}}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0x8}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000340)={0x4f6, 0x6, 0x7, 0xffffffff, 0x0, 'Mk\x00\x00\x00\x00\x00 \x00', 0x0, 0xfffffffd}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000a40)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000200), 0x5, 0x4f3, &(0x7f00000005c0)="$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") r7 = open(&(0x7f0000000400)='./file1\x00', 0x0, 0xe5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x40, 0x4}, @window={0x3, 0x7, 0xff}, @window={0x3, 0x8000, 0x1000}, @timestamp], 0x4) 4.597611184s ago: executing program 2 (id=672): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x0, 0x6a, 0x2, 0x5, 0x3}}, {0x3, 0x3, 0x0, 0x0, @sint={0x0, 0x2689}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000340)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1006}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044884}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1000, 0x800000000000000) splice(r2, 0x0, r7, 0x0, 0x80, 0x8) write$tun(r3, &(0x7f00000033c0)=ANY=[], 0x107c) 4.240575224s ago: executing program 2 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) faccessat(0xffffffffffffffff, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0xd, 0x14, 0x3, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000680)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="dd812246da16e3f3744109adecbf790b293943c866e410686871297a5f0d7ae82908f6ba144c43d8299b393f0bf8d5ce774794f45e41d2baac5bb21da7bfa7953e1b99f77929f7a4f3069219c59678f7fd86f2371cd5238783f37d25cfb853f3330632288112a663e0547534d398a77ef57503cb1b1b2548726354308bb8723bedc0c1997f043d9ff1745bc4f980882eb24cce51c0f9e6cfac5596d0013f775910ea2f18d46216b9ecd3508b347cf690c1db6bd77bff73e719be2d22b0bc374048d493bb3262859982a98b7f523ea4e8044ab6de9cdbee0cc9540eb8f06aa7b239e62bc6fab71a2ca0ff472263f9fcca9c45", @ANYRES8=0x0, @ANYRESHEX, @ANYRES32, @ANYRES16=r0], 0x0, 0x151a, &(0x7f0000002a80)="$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") listen(0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x94}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0xa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) 4.228894782s ago: executing program 4 (id=676): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000340)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1006}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044884}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1000, 0x800000000000000) splice(r2, 0x0, r7, 0x0, 0x80, 0x8) 4.086687898s ago: executing program 0 (id=680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x8081000, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x8, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0xc6, 0x8, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x1, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x1f, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0xe, 0x0, 0x10, '\x00', 0x10001}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0x1d0000, 0x0, {[0x8000000000000001, 0x8, 0x5, 0x5, 0x401, 0x2, 0x6, 0x7f]}}) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000240)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@minixdf}, {@test_dummy_encryption}]}, 0x3, 0x45c, &(0x7f0000000580)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) chdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0xe, 0x0, &(0x7f0000000900)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.951188945s ago: executing program 0 (id=681): fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x8001d, 0x0, @thr={&(0x7f0000000380)="cebed7d1bca91b073bbbe36169abec99f5f2719db93ca1cd98a656ba0bdfbf3703dec91a6d2ca50502ddfdec295fa2bd13eb5d7f3fc342a10d84bd6e2f5e0a6f8b5f991861dcb73e9488b994a42c868ee94df7b54e9a26999a9752a6f21088406bfc1976d9656116ca595692e58d5c09748d1ff38b5c8ea7cbbf1c3f1233f56a153e3efc17937cf52f9a3958d26545ede914b2b52dc5520600fbde481b7d14ec32a8a63dc96ce82b93e515be8ab89d4477f80ee35eeeb8ffbe7913788579c3a9520dd1f3d74e86007716e22ab8a996a946693893c250ade5169aa6958ea0c69896767b2bb93bde1be537ce", &(0x7f0000002140)="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"}}, &(0x7f00000001c0)) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x9) fchdir(r3) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)={0x200000, 0x0, 0x29}, 0x18) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_read_part_table(0x1050, &(0x7f00000010c0)="$eJzsz7GtwjAYBOB7youSdIzAGlTp2IB9mAEmoKVgPhpkZDnJBgghfV/h3z77Cofvuk11/U/SL8n19SxJhhr0NRwfh8xJuuXBPCXj2t+vtRzb2M4ZuvR/bbtr45zLuN2XktP9k18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/xDgAA///3lgp+") 3.782640147s ago: executing program 0 (id=682): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x5dc) r2 = creat(&(0x7f0000000240)='./file1\x00', 0xd) r3 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x800402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=iso8859-15,iocharset=iso8859-4,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,iocharset=cp737,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=r2, @ANYBLOB="0000536dcef25dae4d9893271343988e0ad734abbf80ceb92c02603002cf90dbd94b5c5bf0f52b30dc74d2946af121d6373cd8925ccba65fadecb8b356"], 0x1, 0x151e, &(0x7f0000007640)="$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") syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRES64=r3, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYRESOCT=r2, @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") r4 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) ftruncate(r4, 0x998) 3.292039994s ago: executing program 2 (id=683): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100040000000000091931007b1140000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) epoll_create(0x7) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r3, &(0x7f0000000000), 0x8) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) 2.050275775s ago: executing program 1 (id=684): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x1010000, &(0x7f0000000100)={[{@utf8}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@shortname_win95}, {@rodir}, {@rodir}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}]}, 0x1, 0x374, &(0x7f00000005c0)="$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") syz_emit_ethernet(0x11e, &(0x7f0000000940)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv4={0x800, @icmp={{0x3b, 0x4, 0x0, 0x0, 0x110, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4, 0xffff}, @timestamp={0x44, 0x14, 0x4e, 0x0, 0x0, [0x6da, 0xbdbd, 0x3, 0xef17]}, @noop, @lsrr={0x83, 0x17, 0x7f, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast, @multicast2, @multicast2]}, @end, @timestamp_addr={0x44, 0x44, 0x80, 0x1, 0xb, [{@remote, 0x1}, {@remote, 0x3}, {@empty, 0x5}, {@loopback, 0x1fb1}, {@broadcast, 0x9}, {@multicast2, 0xc}, {@remote, 0x8}, {@local, 0x3}]}, @end, @timestamp_prespec={0x44, 0x14, 0x6f, 0x3, 0x9, [{@multicast2, 0x9}, {@remote, 0x4}]}, @timestamp_prespec={0x44, 0x34, 0x59, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x5}, {@rand_addr=0x64010102, 0xc}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}, {@multicast2, 0x6}]}, @ssrr={0x89, 0x17, 0xa7, [@loopback, @local, @local, @rand_addr=0x64010101, @multicast2]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x29, 0x0, @broadcast}, "1e7aa1eb9902cf0e"}}}}}, 0x0) open(0x0, 0x8a080, 0x112) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000002000002"], 0x48) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xdf2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x4f2b}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x16}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 2.038063813s ago: executing program 0 (id=685): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x3, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x6c}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) socket$pptp(0x18, 0x1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file3\x00', 0x56f000, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xd3f0, 0x2000, 0x8, 0xadeb}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x314}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x4) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r6 = fsmount(r5, 0x0, 0x80) openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) 2.027074881s ago: executing program 4 (id=686): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x0, 0x6a, 0x2, 0x5, 0x3}}, {0x3, 0x3, 0x0, 0x0, @sint={0x0, 0x2689}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000340)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1006}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044884}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1000, 0x800000000000000) splice(r2, 0x0, r7, 0x0, 0x80, 0x8) write$tun(r3, &(0x7f00000033c0)=ANY=[], 0x107c) 1.989497795s ago: executing program 2 (id=687): openat$null(0xffffffffffffff9c, 0x0, 0xa2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b00a84302911000ed3900090035000800060000001900150004000000000000dc1338d54400009b84136ef75a0184de4411000500c43ab8220000060cb211d2f994", 0x55}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x1fa009, 0x0, 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) pwritev(r5, &(0x7f00000029c0)=[{&(0x7f0000001680)="58f14caa75167f", 0x7}], 0x1, 0x9, 0x5) 1.978778723s ago: executing program 3 (id=688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.84638903s ago: executing program 3 (id=689): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000080000000000000f08000200000000000000000000c9e4f297e77e1bdd145443677a9dd175e69b8a16d1e49b39e07cb2f8e2a047bee9084cb66c71b55fe943e136813222a11c3c9a935ce32e9eb04243693e2cbf48dcc13fbec6f2b1e4"], 0x0, 0x2d}, 0x28) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000000000000000000000700000001830b04"], 0x20}, 0x4000) unshare(0x6000480) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}, {@nobh}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r1 = socket$inet6(0xa, 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000640)={[{@data_err_ignore}, {@noquota}, {@barrier_val}, {@nojournal_checksum}, {@bh}, {@usrquota}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0xb8a5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x200000000008}}, {@user_xattr}, {@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000380)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x2, 0x38, 0x54, 0x64, 0x38, 0x33, 0x63], 0x2d, [0x38, 0x63, 0x66, 0x64], 0x2d, [0x63, 0x32, 0x30, 0x38], 0x2d, [0x38, 0x32, 0x30, 0x61], 0x2d, [0x35, 0x32, 0x34, 0x63, 0x62, 0x37, 0x30, 0x66]}}}, {@smackfshat={'smackfshat', 0x3d, '\xde\xff\xff\xff\xff\xff\xff\xff'}}]}, 0xf9, 0x555, &(0x7f00000009c0)="$eJzs3c9vHFcdAPDvrL2Okzi1CxwgUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQrWfwESQoDECS5ckPgDkFAkLhwRUiS4AlIRCEEKEhxKB83urG3Ws/YmXXtj+/ORJvPe/Njv9zl+45mdp5kAzq3nIuL1iPggTdMXI2I6X17Kp2h1pmy79x6+s5hNSaTpm39PIsmXZZulaZp2P/NyvttkRHztKxHfTPYFnMznW9t3Fur12nperTZX71Y3trZvrKwuLNeWa2tzc7OvzL86//L8zaG080pEvPalP3//Oz/98mu//Ozbf7r11+vfytKaytd32/EYxg9b2Wl6+cJkzw7rjxnsSZS1p/x+Xrk42D47x5kQAAB9Zef4H4mIT0XEizEdY4efzgIAAACnUPqFqXg/6dy/KzDRZzkAAABwipTaY2CTUiUfCzAVpVKl0hnD+7G4VKo3Npqfud3YXFvqjJWdiXLp9kq9djMfKzwT5SSrz7bLe/WXeupzEfF0RHxv+mK7Xlls1JdG/eUHAAAAnBOXe67//zXduf4/XHIyyQEAAADDMzPqBAAAAIBj5/ofAAAAzrTyqBMAAAAAjt1X33gjm/7Qff/10ltbm3cab91Yqm3cqaxuLlYWG+t3K8uNxnL7mX2rR31evdG4+7lY27xXbdY2mtUrW9u3Vhuba81bKzF5Ig0CAAAADnj6k/d/n0RE6/MX21NmYtRJASdifLfUfaZnQe//41Od+bsnlBRwIsYG2ObdC8XLnSfA6Tbeu6BPXwfOHuP/gaPe6NF38M5vOrPSkPMBAACG79oniu//H30+33LKD6ecTgznV8/9/3R6VIkAJ659/3/QgTxOFuBMKQ80AhA4yz7s/f+jpekjJQQAAAzdVHtKSpX8672pKJUqlYgr7dcClpPbK/XazYh4KiJ+N12+kNVn23smR14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAJxpEaW/JL/qPMv/2vQLU73fD0wk/2m/EngiIt7+0Zs/uLfQbK7PZsv/sbu8+cN8+Uuj+AYDAAAA6NW9Tm/P/z3qbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4a957+M5idxpg84vDivu3L0bETFH88ZhszyejHBGX/pnE+L79kogYG0L81k5EfLwofpKltRuyKP4wfgitnaSVthXGj5n8p1AU//IQ4sN5dj87/rxe1P9L8Vx7Xtz/xiP+r/64+h//Yvf4N9an/18ZMMbVBz+v9o1/dSqujhcf/7rxkz7xnx8oejm+8fXt7X5r0x9HXOv+/Wkf8fZH2CtVm6t3qxtb2zdWVheWa8u1tbm52VfmX51/ef5m9fZKvZb/Wxjju8/84oO+7d+JuFT49y/Js+nf/hcKPm+sIP//Prj38KPdSutg/OvPF8T/9U/yLQ7GL+VxPp2Xs/XXuuVWp7zfsz/77bOHtX9pr/3lR/n/v97vQ3sd6CjPDParAwAci42t7TsL9Xpt/XQVLkTEgBtnV+lPRM6PXpiIJyKNs1v4dlZ4MODGY3HENmmaplmfKlh1PyIGSSyJIbe0VJzPXqHvEWDURyYAAGDY9k76R50JAAAAAAAAAAAAAAAAAAAAnF8n8ZS13ph7j0BOhvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAofhfAAAA///4rNkC") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0xb2) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x4000000000000, 0x0, 0x0, 0xfffffffffdffffff}) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r7 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x20000088) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) 1.646267687s ago: executing program 4 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) fcntl$setflags(r2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="fbff4c060a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) (async) fcntl$setflags(r2, 0x2, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="fbff4c060a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) (async) 1.479979259s ago: executing program 4 (id=691): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000340)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1006}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044884}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x1000, 0x800000000000000) 1.402030136s ago: executing program 0 (id=692): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x8081000, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x8, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0xc6, 0x8, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x1, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x1f, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0xe, 0x0, 0x10, '\x00', 0x10001}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0x1d0000, 0x0, {[0x8000000000000001, 0x8, 0x5, 0x5, 0x401, 0x2, 0x6, 0x7f]}}) 1.401196406s ago: executing program 4 (id=693): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000700), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000740)='THAWED\x00', 0x7) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000840)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r10 = getpid() r11 = geteuid() getresuid(&(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe8) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1a, 0x200, 0x2555c191, 0x9, 0x48000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB='huge=within_size,usrquota_inode_hardlimit=0,usrquota,quota,huge=within_size,quota,uid=', @ANYRESHEX=r11, @ANYBLOB=',huge=always,grpquota,fowner<', @ANYRESDEC=r12, @ANYBLOB=',uid>', @ANYRESDEC=r15, @ANYBLOB="2c736d61636b6673726f6f743d5e232c7569643ea8c09c700f001fd5a584c91e188c3fdf2247c09536ca9b8d9022e46f595089a2dd6678f789bbd07acf0c82aba0dd9acf10cf9ee69f4b250b1d8f72b979c229393f774522d26d9ff10065d3272ee8939d5a6a243f9a0e8a0a83afbb42cb1ab19941ceb0ba59d9f55681209d43045e1ceee825", @ANYRESDEC=0xee00, @ANYBLOB=',subj_type={-%,\x00']) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) waitid(0x1, 0x0, 0x0, 0x80000000, &(0x7f0000000300)) r17 = getegid() r18 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r19 = getgid() syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000003c0)='./file1\x00', 0x1404, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r18, @ANYBLOB=',rootm000000000020000,user_id=\x00'/42, @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=r19, @ANYBLOB=',blksize=0x0000000000001000,default_permissions,blksize=0x0000000000000e00,func=POLICY_CHECK,seclabel,smackfsdef=-:,hash,\x00'], 0x1, 0x0, &(0x7f0000000380)="4d0deb16392ee794b8f7fb65fa241c669f3365a558a28edf3f") r20 = dup(r1) r21 = openat$rtc(0xffffffffffffff9c, &(0x7f0000005c00), 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000005d00)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000002000)="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", 0x141}, {&(0x7f0000000d80)="e8bbba78990742123af179b301d8b0c20eab5afff3abe60f669604ffd830d3f918388ac48d6a30f1af0bdc28e5c347d0cbd853a9f056e26af4df2e182ab832099dd22361ce8593b4b06b6d71be9c58cd994cf7c3195694981c36dc14289e47e090a136f0252bb60ac4ab983247a00564fbe6582e66a91877fe6927ff6bb50000000000000db29e8399f2c52d04d2c492dbad688700bd498a50e20c4e4f00", 0x9e}, {&(0x7f0000000680)="f3334745b8e3fc18537e416287a0555d0dd3397ba302b5eb1f6b93a8712322c1cbdd2eb18e1ef0f35c2f50483f177e8db7ca50ba07a85f550c0dbed3275b8e064e50cffb79348c7aa236", 0x4a}, {&(0x7f0000000e40)="d4942672f94f2cd182132823df939bc9f4e6b279dca50b4064eedf2cc2a6764ce923b1dad305d9e76459fa87b07e9d6585d2a77d05ab8996884c885e4b27538affdf7bc4d9675f5d7b009095ab274df1e0d643845115d329955ab016b19cb81cb898dcc4000cf46ce0fdd8ef067b24567b73d49960b2ced01ee3d859a0b985bcb810c26ebb68e0998157f8e1637cfa1bcc5f2037d8d8442223149a3371ff39dafe6963ed011b5051cb20959ba9b2fe443484a5947b44f4", 0xb7}, {&(0x7f0000000f00)="3b39f91dd20d66681889969d26c624d056f5ba97131a011cb8f1f775cc613ecd9fc2737f7de56851245ae9f0696f69fc49ff99f0969004297082985aeddf83e7e1ab4e250dafef1256180c8323fcf49aca9815996ac31e732627d580800e373af27bbdc7768c5db2ba35d35c7ba0e0c8cc458d4228add8139e07a576708541790bb6e2abbeb90cbdb754b7608deea3f6dc6e2a6b9a954412aeb36c043a79850ece99ae10", 0xa4}, {&(0x7f0000000fc0)="043f442d9bd0016c510c566c28e157047453555e074e06a6d1778cf1de70d419891e2f98535eb5e085a544dcb0ea58b5d1494d3349d2118b3063d509484041ec973773e1c82e268d17f3c94b9bb76ce49b3b874ecfa1e4067b8c0234f5a9c25d8b193db1b22209e0c5eb1bc95f53c232921f224e4135590ec5d5baf1a0f04281aa3430f0619ccc85b5145d7de1aeb0868aa2028af7a208f202023bc4c7f4685497041dea1f673b2e1d96a17722cc2f6c39058a60513c07f80ded48da78210a197b80f960502483c423595e0f66399aaf1e7e976384eb9991d324fc95d582402b66cb6958607e18e596851874b5", 0xed}, {&(0x7f0000000b40)="120c0723b2dac27b1d991328ec226e296b85a70399d5bc8dae32ae2c4ada6d44a07e1be938dc35f04c7ecffde274cb7bb64e265a37efb360a059270b8e44f5a7c00724db22e9e6", 0x47}, {&(0x7f00000010c0)="f06b2f3bea38319622b592a64d111bc60ffd573a20172f1c8988b4f2c3803d2da56604b76f05c0603b94433b81e2df6a927d584c2435322479f0808241ecb91f8cd54f1c0cd3f500da8a2fdbb7b107a63837ebbcbca1a1e20d083483bfe020e8855db6bcad19ea77a31eda486d28879dabedc30b29edf92b8062dfd78ee069578fbe4a2f329785c39c27871860d74e02a7e0ed932227d26d776e2db2625164e5cddd8c4ca1ebd3786888cdf35496dbd3beec2c66876a9be863c3463f01ffc642d33e8165c22c9e2a188b47afcf5d46b6aeac92b041e24f925a2883a80df77f2aef76a3", 0xe3}, {&(0x7f0000000940)="fed6517764d9bcfdbc910b1126904dde19bef39dcabd312c6c563bd3c94850b3", 0x20}, {&(0x7f00000011c0)="8469118dddded70e5c06c57ffde6e50226ef0b2c5ce0b5741f76b527245673492559b65f158d949acd475bbbe45815be43e24ae153596c5c70ee2c65ae5362bdcd4e3562c791fdfb3cc0a8d2de1c4234245d4166e714dcaf81772ca854d915c3d6375b11d7d4e934211422a0495472c573bfbf4fe9b48ad2a1978569b40737dd3285e8b854cc8520ef120d61c4b6a711dd5de02726ac09f348d12f15cc5b035dd90bf9381765c162ae8c3cd22b8dd6035f2ad5e65698169785e194ba1e6e", 0xbe}], 0xa, &(0x7f0000001400)=[@rights={{0x1c, 0x1, 0x1, [r2, r4, r5]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r10, r13}}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r7, r2]}}], 0x78, 0x10}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001480)="e89cfcab99db8e8f3be2befae4fac8a2725d81018ea6ab935c927d4112d771327f70d73295ab82ac8177eab5e4d426b6773ddfb73537caab81692b77aae003743ef7c6cbab5382ae24d907bc9844d770639e77c8fbdc4e05794f38d8842861aa900609ae40a12e5447082aeebcba9cd880275db4c6d47273585a700c1ee057c5913241b915912dcce541df048ed1", 0x8e}, {&(0x7f0000001540)="925ccbd95800eb1e186b39", 0xb}, {&(0x7f0000001580)="30f4dea898fe6ef444045b910a82b44aee1cb25ab962d876252504263d4857bfce5112822825f7def26f7fbbf0c49c2adab8205eaf57d0161ebbc5a2502859ce061e07c9b7944563dfa553471bd0579c0d465d931de2690a86c24c55690f2e8dd8f17f212e89d362259e92aac0563e7dddb76b440aa318057e0585953104f99ef4eac15bbe8b623d9f6eb80d8ef1f030261d3ab363c217d9e75541330698333a75fc", 0xa2}, {&(0x7f0000001640)="1215a2b9de70f0f7a8c7e87765e6d2f7073337224450bde4bd9b4bb988f72e281069e29f4796949369817768d3e8549093fb9bb0b7f657546b0efe964d7593168e66706f", 0x44}], 0x4, &(0x7f0000001780)=[@rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x20, 0x1, 0x1, [r3, r8, 0xffffffffffffffff, r0]}}], 0x68, 0x40000}}, {{&(0x7f0000001800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001880)="abb3b1b5eb4ad0b7af6b58bd42ff3904b36b40fb2cdf04f41244b4c528948f9cf3df3250666a055a07867e806d8ab75ae90c0bb8df444e7bdb8bed8af556a956a1eb73105539b609df83b81e70683839e466bb9b5ec77fae2e6c944e7232d88161b246f8806d16c1d310218d32ad5e90bbaef69f37eea7f7d23661caf04f8bf5afb2fec24b288be553011f1d4f580276d2f8ec0b34ba31b0479fe6299f06f8650d9ef588e2348e9876c12194306c6ae3693c02dd6b9c989d6830dedda82e20bb5fb3e0119c010781c0a4b2e663dca9f6c5260f8ee7477e79f1e7993dfa0f5b9dd3686ec3ee894c6874", 0xe9}, {&(0x7f0000001980)="36839029e7e46d331a70f4278f26376168aaa48a31de5012a6255d7ddb3501f4f93eaad35d0c9196c1cdea71c19cdd5a2a2b8f6a614c52d5cafc08f52dbebc65d13c0193ea0b05390098870a58ec575aaf86d630b0bc93f9677904dfa4dba86dba7c6dab887e02ca32182b33a51233c5b3939362306941719c257e7d0fb323df73d1d9f9652294997b892e5f7d4ac43d94d0a0ed8db1f8d8cd5a3a42016e6a6996153f14f2ce3a291ab677a520a14f95af63b422", 0xb4}, {&(0x7f0000001a40)="7a8eb39781f55a3ac294d92be608f31d0962e5027afde4ddd069d4a7a5b3665f963a9ce2ccbc4235a7a8f2ea81d7303be490269b96f01cbb7637", 0x3a}], 0x3, &(0x7f0000001ac0)=[@rights={{0x30, 0x1, 0x1, [r4, r8, r2, r5, r5, r0, r6, r16]}}], 0x30, 0x804}}, {{&(0x7f0000001b00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001ec0)="c744637b8f23f5b89083284c84d29f48fb8c455bc949a6db49f4a3d1a5bf32e68f934bd300ea3d51acb8f2e2149e60871a1d0aae22abee520842ce66195f3933ee1503cfdb9ffdcf76c5ed9047ce71656e50a11191c1c4794b73026e4b2b8afa980b69d81d1cd515ceeef860bf406be10065df9063d0bf5729d8bfbffde89d99884a4c98420e62c5ee89a8adf56c5a8d984fec9db1cb3b9a03b15cf02e1e5f805c23825b71cce6eecaac4f14c05a5884dc72321c35049ee17652e82393a1a60851c22ef6c69a4fed96c2acf550bdf134a1a5e6f0f2ba4540d278f59e25a32555ecb254e45147258e166ebea34a245c1d0249bfd8d9fa91b30ba6a7b815c7555831370d0d64f479937d6ea7b126eeec7ed7", 0x111}, {&(0x7f0000001c40)="d58a1f720f7dc7656253a9069684e193b5031e0c25f733e89a34d5f2870d1b0bee970f3a0acf3ac714b0e819b2842972443988a2250cdb3b1a375c827ffd540e859ac8de48b7cd33285996b01defe09a9368d5e53f8fb885a69492593eb4c215169e6b4b373033b4ee34c859e737c5c273d9b9179b9b99e26930b32669196f5d2c0508dd820763c94fdff97975393ece6a6f2c04ba565d7c13f2ee722d3f7b888a58ade24b46", 0xa6}, {&(0x7f0000001d00)="25f0d0f5bbff7491787c58faa25557f99320462f6a5996464f7e2a4a88759659d8dfd174928b8b3c223d567bb79e7cdb468e91d05122fb7af1775bb2dc2debf45f022f11a98f04656a5c9d7353914acd03cabce8bdc08b727911691b7ece66c0af2ce96726a4d923204e5d06df1eb5f2134c82d3f1bf2494236d87a33a3648da696fff0c3d85c02b8fe6a5ea6e845c57c5ea63a8661baa689e744a37fe38c1440e5566e564ffcf0b697799471d5e73e78eb92ceabad2ad56d59d7d8e317a3a5dd6d076", 0xc3}, {&(0x7f0000001e00)="59053259e2828872ebb0fcb29250a9345f63ed5fc0fa71a8324a62cd7becdf274805761d5240d3c6815d22924cc1716476c572058d9c849d3f2d5b94a12dc1957441ee2b016c096ffa5a8e25e0163e", 0x4f}], 0x4, &(0x7f0000004100)=[@cred={{0x1c, 0x1, 0x2, {0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15}}}, @cred={{0x1c, 0x1, 0x2, {r10, r14}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r8, r6, r0]}}], 0x88, 0x4001}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f00000041c0)="1b6926dad63059c1d828abec8d0507c7965caf76d09f88ef0b1975286cca795871cf5a992117bb2f12f1659bbba59363749d0a3549a92cb9d56993bd78e911470168d22b1f9784b593908bfc8d09fcdd686688fbc378e18db6a8bb3fffcaf9e323986f1981a8ee0ae109e00a09f1fa38768d51c014af41f20b67", 0x7a}], 0x1, &(0x7f0000004400)=[@cred={{0x1c, 0x1, 0x2, {0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r10, r15}}}, @rights={{0x28, 0x1, 0x1, [r4, r6, r8, r1, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, r17}}}], 0xa8, 0x80}}, {{&(0x7f00000044c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005b40)=[{&(0x7f0000004540)="f929231f519865d2e0862b6b1a65c8cf8cca2f0115da4e492ca148271094acfda2b95a45cdb63d5498fde68db0b086ce4c9dd3ae9e3143088f4903973976a51d23d0cc4a0e112dca23507422e644a7303d42857ff842e045c2f7bc6d28fb2d65348f6f3d6512ba24809dfea435c00ca9e248dc2c62bb400993aeccb09e0406b939e5a9799346e7b9d1776837a7db196ec8140bbaabedf0ee24ccd42e69babd0bfb18d485c9adaf829ba39570b538e9fb2e474181820008fd5471e0cceb7bf889472d48e5c1a34de320de66db8821329e06935e2f795e8d234617180eb300f3e8587456f7580bae41cdb6", 0xea}, {&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000005640)="480ea4ada2beb4b241f55b9d64a6bc6e969758e27e53f3ceb91b31a0c516e47605c4627aaf04024d548c9a2bfdec723bcea4d4a3fb4619ab870152f0dc975aa5afe15782b2cc2581dbc6665cddc7cc632017306f1abb6f5b8913c015e73ba90e0086d91e13d41862b71608fb09783a6caf4d58aece721329e5f208d6144136494a5f0ba07936a81620066aa9ef299edfa9c864816e59040e4f81264a589225844bd9fcfd47449c3a1ec6a1af5588691b127787f7468cd50274205382cb3bcfa164766e51e489c0605f7b58c63919eb3f529e80fed95797ad7e500fd553c6a728c80f9c", 0xe3}, {&(0x7f0000005740)="81ae03465051f075862673c71a341784701449581b57c9364d43580648b673df66c4a4d26b2ce4d877b50e761653726c1e93ce06bc29cedc974ac88675c7412a077ea8f720a41ceb", 0x48}, {&(0x7f00000057c0)="decfe9e4462f2f91e00a2495101407d951d06ad0b2ba09e4ab1a2f998e4940f9df7a93ab9a2c576662e5914650c13d0592b89a05e1056e11801d1a6b9f84aebb163f1a01c06aaaf7a92c3c9ba58ff844752d4cdc88ba30c425d80308c5a46b179850aeb82b9eac033ff68a7ef97862bb1e419729324c19a387f719f0295f07d66886ed63595a36b02132864053601609f96cfd690d43a3f4e5499b0c656458b9abe222c669a400ae3f88d0a6fc71d6656bfbae43a950ff403c4f8755fa7014565f6d00bf11a15d68", 0xc8}, {&(0x7f00000058c0)="e02ca6b87d29f552830a99acd95ba9d7803d6fafb6703baee2a52ea9fc7fa952de53c9df2c6891893ea4fdbcb5c7255b290a57e55e065853e0d69fde7bb0be921f4001781687463e541c0a279d54e27262ddf93416d359f674b5203815d13d4b639a72914e9d8c1d52604c6d4dc2004a3802be57d45d7436edf9afbf8a4320e3314f1689731e90ef1f030ebe3691d42a280de05e9c19182993f53341321616b59a636a534d6e1a027addac7a736a9bd3514b5c997aeb8d5c52998dd52d639ddf559937608daf8699c17cbb114cb81c3cfe7ac0", 0xd3}, {&(0x7f00000059c0)="a73a707d372996fcbc5ddc43aeaeb8c44b5b586e7fc50719e977f944db1b9ecaec690747b7a0816786a7197b7ebced535cb4445b4bbf240a309f5c4947b92f05213cdf580d0ecc2ddd74124fded32525c11f38a3068e255446e26bc9921c7dac676b", 0x62}, {&(0x7f0000005a40)="7c0dc59c7822d03220f4fb68309c6284a324cb02af07a666743f30bc5ec3c4315480b8acaca9b020513b5e8accd5db79c40b80fd2224db4f800865f0ff8970f31b740aebcf26d04d87de4a25b660f47757b6", 0x52}, {&(0x7f0000005ac0)="cfa993de68420775354e339f9e40b66a3b3c15baaf6d84e9db4dff18ed4d46b043e4a36333c801c69da73512dc58fbe1231388612b3286933d58089e56", 0x3d}, {&(0x7f0000005b00)="7fda47f377ccca88", 0x8}], 0xa, &(0x7f0000005c40)=[@cred={{0x1c, 0x1, 0x2, {r10, r13, r19}}}, @rights={{0x14, 0x1, 0x1, [r16]}}, @rights={{0x20, 0x1, 0x1, [r20, r2, r0, r9]}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @rights={{0x20, 0x1, 0x1, [r8, r6, r5, r5]}}], 0x90, 0x41}}], 0x6, 0x40800) 1.254760941s ago: executing program 1 (id=694): sched_setscheduler(0x0, 0x3, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x8080) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) setsockopt$inet_tcp_int(r4, 0x6, 0xa88b70278d424ced, &(0x7f0000000040)=0x4, 0x4) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) 1.241655859s ago: executing program 0 (id=695): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105d6, &(0x7f0000010640)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto, @struct={0x2, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x4, 0x2, 0x1}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4077, 0x42, 0xfed, 0x2}, 0x28) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x1400) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./bus\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) read(r1, &(0x7f0000000140)=""/83, 0x53) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x40c0) 1.240878569s ago: executing program 4 (id=696): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000140)) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f0000000240)) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) ftruncate(r0, 0xae7) r4 = socket$inet(0x2, 0x80000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r4, &(0x7f0000002780)={0x2, 0x4e23, @broadcast}, 0x10) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x140000000000, 0xa2203) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r9, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x316c82f62442e48c, 0x26, 0x16, {0x16, 0x8, "bd9a96ef80b5271095737c93be91b5e771d30286"}}, 0x0, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x8) write(r4, &(0x7f0000000000)="08001800000020a3", 0x8) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000100)={'geneve0\x00', 0x5}) read(r4, &(0x7f00000003c0)=""/7, 0x7) 1.002223738s ago: executing program 2 (id=697): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000340)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1006}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044884}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1000, 0x800000000000000) splice(r2, 0x0, r7, 0x0, 0x80, 0x8) 302.414661ms ago: executing program 3 (id=698): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e40800", 0x0, 0x5, 0x3000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 201.737884ms ago: executing program 3 (id=699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 201.056054ms ago: executing program 3 (id=700): r0 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x8080, &(0x7f00000004c0)=ANY=[@ANYBLOB='dots,nfs,dots,nodots,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x17b, &(0x7f0000000880)="$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") chdir(&(0x7f0000000400)='./file0\x00') rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}}) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x40800) recvmmsg(r3, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/22, 0x16}], 0x1, &(0x7f00000001c0)}, 0x400000}, {{&(0x7f0000000240)=@un=@abs, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000600)=""/130, 0x82}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x6, &(0x7f00000007c0)=""/174, 0xae}, 0x1}, {{&(0x7f0000000a00)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000a80)=""/118, 0x76}, {&(0x7f0000000b00)=""/173, 0xad}, {&(0x7f0000000bc0)=""/104, 0x68}, {&(0x7f0000000c40)=""/170, 0xaa}], 0x4, &(0x7f0000000d00)=""/96, 0x60}, 0x3}, {{&(0x7f0000000d80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/243, 0xf3}], 0x1, &(0x7f0000000f40)=""/150, 0x96}, 0x3}, {{&(0x7f0000001000)=@x25={0x9, @remote}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001080)=""/104, 0x68}], 0x1}, 0x1}, {{&(0x7f0000001140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001480)=[{&(0x7f00000011c0)=""/67, 0x43}, {&(0x7f0000001240)=""/55, 0x37}, {&(0x7f0000001280)=""/80, 0x50}, {&(0x7f0000001300)=""/118, 0x76}, {&(0x7f0000001380)=""/142, 0x8e}, {&(0x7f0000001440)=""/58, 0x3a}], 0x6, &(0x7f0000001500)=""/66, 0x42}, 0xf}, {{&(0x7f0000001580)=@sco, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001600)=""/81, 0x51}, {&(0x7f0000001680)=""/226, 0xe2}, {&(0x7f0000001780)=""/18, 0x12}, {&(0x7f00000017c0)=""/85, 0x55}, {&(0x7f0000001840)=""/210, 0xd2}, {&(0x7f0000001940)=""/81, 0x51}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/112, 0x70}, {&(0x7f0000001a80)=""/111, 0x6f}, {&(0x7f0000001b00)=""/105, 0x69}], 0xa, &(0x7f0000001c40)=""/104, 0x68}, 0x9}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000001cc0)=""/84, 0x54}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/157, 0x9d}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/148, 0x94}, {&(0x7f0000003ec0)=""/216, 0xd8}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x7, &(0x7f0000005040)=""/42, 0x2a}, 0xbf9}], 0x8, 0x40000000, &(0x7f0000005280)={0x77359400}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15615, 0x14e6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xf}]}}}]}, 0x44}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 83.967004ms ago: executing program 3 (id=701): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000340)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1006}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044884}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1000, 0x800000000000000) splice(r2, 0x0, r7, 0x0, 0x80, 0x8) write$tun(r3, &(0x7f00000033c0)=ANY=[], 0x107c) 44.037038ms ago: executing program 1 (id=702): r0 = eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r0}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x3, 0x200, r0, 0x0, 0x0, 0x4, 0x0, 0x1, r0}]) r2 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x2a) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000040)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) prlimit64(0x0, 0x2, 0x0, &(0x7f0000000280)) ioctl$XFS_IOC_GETBMAPA(r5, 0xc020582c, &(0x7f0000000000)={0x9, 0x1, 0x5, 0x2, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) read$eventfd(r2, 0x0, 0x0) 0s ago: executing program 2 (id=703): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x3, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x6c}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) socket$pptp(0x18, 0x1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file3\x00', 0x56f000, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xd3f0, 0x2000, 0x8, 0xadeb}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x314}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x4) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r6 = fsmount(r5, 0x0, 0x80) openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): 0000 R09: 0000000000000000 [ 63.780876][ T1673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.788817][ T1673] R13: 00007f1775f48038 R14: 00007f1775f47fa0 R15: 00007ffd4bb91e28 [ 64.032935][ T1676] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 64.092830][ T24] audit: type=1400 audit(1772567900.126:251): avc: denied { map } for pid=1674 comm="syz.4.358" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.133327][ T1678] netlink: 25 bytes leftover after parsing attributes in process `syz.4.358'. [ 64.178220][ T1678] netlink: 'syz.4.358': attribute type 4 has an invalid length. [ 64.198037][ T1689] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 64.201658][ T24] audit: type=1400 audit(1772567900.164:252): avc: denied { call } for pid=1674 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.231491][ T1678] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 64.236902][ T1689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 64.256483][ T1689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 64.263004][ T24] audit: type=1400 audit(1772567900.183:253): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.414587][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 64.607932][ T24] audit: type=1400 audit(1772567900.613:254): avc: denied { write } for pid=1705 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.015470][ T1714] FAT-fs (loop2): bogus number of reserved sectors [ 65.022186][ T1714] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 65.031574][ T1714] FAT-fs (loop2): Can't find a valid FAT filesystem [ 65.311147][ T1702] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.434493][ T1702] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.507040][ T1702] netlink: 165 bytes leftover after parsing attributes in process `syz.4.366'. [ 66.001752][ T1744] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.040312][ T1744] EXT4-fs (loop0): 1 orphan inode deleted [ 66.046084][ T1744] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 66.126449][ T1719] F2FS-fs (loop1): Test dummy encryption mode enabled [ 66.147866][ T1719] F2FS-fs (loop1): invalid crc value [ 66.156144][ T1719] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.192396][ T1719] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.276109][ T1760] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 66.301702][ T1760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 66.310521][ T1760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 66.380511][ T492] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 66.787991][ T492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.798974][ T20] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 66.806610][ T492] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.815912][ T492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.824691][ T492] usb 3-1: config 0 descriptor?? [ 66.867755][ T1776] FAULT_INJECTION: forcing a failure. [ 66.867755][ T1776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.880897][ T1776] CPU: 0 PID: 1776 Comm: syz.1.386 Not tainted syzkaller #0 [ 66.888169][ T1776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.898196][ T1776] Call Trace: [ 66.901466][ T1776] __dump_stack+0x21/0x24 [ 66.905767][ T1776] dump_stack_lvl+0x1a7/0x208 [ 66.910414][ T1776] ? show_regs_print_info+0x18/0x18 [ 66.915581][ T1776] dump_stack+0x15/0x1c [ 66.919704][ T1776] should_fail+0x3c1/0x510 [ 66.924089][ T1776] should_fail_usercopy+0x1a/0x20 [ 66.929083][ T1776] _copy_to_iter+0x1df/0xa40 [ 66.933645][ T1776] ? memset+0x35/0x40 [ 66.937601][ T1776] ? __check_object_size+0x2f4/0x3c0 [ 66.942854][ T1776] simple_copy_to_iter+0x50/0x70 [ 66.947758][ T1776] __skb_datagram_iter+0xdb/0x700 [ 66.952754][ T1776] ? skb_copy_datagram_iter+0x150/0x150 [ 66.958284][ T1776] skb_copy_datagram_iter+0x43/0x150 [ 66.963542][ T1776] ping_recvmsg+0x207/0xfa0 [ 66.968022][ T1776] ? selinux_socket_recvmsg+0x22f/0x340 [ 66.973544][ T1776] ? ping_common_sendmsg+0x230/0x230 [ 66.978803][ T1776] ? selinux_socket_sendmsg+0x340/0x340 [ 66.984345][ T1776] inet_recvmsg+0x13a/0x480 [ 66.988824][ T1776] ? inet_sendpage+0x100/0x100 [ 66.993559][ T1776] ? security_socket_recvmsg+0x87/0xb0 [ 66.998989][ T1776] sock_read_iter+0x2b8/0x380 [ 67.003637][ T1776] ? kernel_sock_ip_overhead+0x240/0x240 [ 67.009243][ T1776] ? security_file_permission+0x83/0xa0 [ 67.014762][ T1776] ? iov_iter_init+0x3f/0x120 [ 67.019409][ T1776] vfs_read+0x62a/0xa60 [ 67.023535][ T1776] ? kernel_read+0x70/0x70 [ 67.027919][ T1776] ? __fget_files+0x2c4/0x320 [ 67.032567][ T1776] ? __fdget_pos+0x1f7/0x380 [ 67.037123][ T1776] ? ksys_read+0x71/0x250 [ 67.041421][ T1776] ksys_read+0x149/0x250 [ 67.045631][ T1776] ? vfs_write+0xdc0/0xdc0 [ 67.050018][ T1776] ? debug_smp_processor_id+0x17/0x20 [ 67.055358][ T1776] __x64_sys_read+0x7b/0x90 [ 67.059830][ T1776] do_syscall_64+0x31/0x40 [ 67.064220][ T1776] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 67.070079][ T1776] RIP: 0033:0x7f031c6c5799 [ 67.074469][ T1776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.087230][ T20] usb 4-1: device descriptor read/64, error -71 [ 67.094045][ T1776] RSP: 002b:00007f031b120028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.094058][ T1776] RAX: ffffffffffffffda RBX: 00007f031c93efa0 RCX: 00007f031c6c5799 [ 67.094072][ T1776] RDX: 000000000000000e RSI: 00002000000003c0 RDI: 0000000000000003 [ 67.124548][ T1776] RBP: 00007f031b120090 R08: 0000000000000000 R09: 0000000000000000 [ 67.132490][ T1776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.140430][ T1776] R13: 00007f031c93f038 R14: 00007f031c93efa0 R15: 00007ffcd181b7a8 [ 67.409116][ T492] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 67.440433][ T492] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input5 [ 67.495778][ T1784] FAT-fs (loop4): bogus number of reserved sectors [ 67.502316][ T1784] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 67.511658][ T1784] FAT-fs (loop4): Can't find a valid FAT filesystem [ 67.538256][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 67.538266][ T24] audit: type=1400 audit(1772567903.354:258): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=730 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.545514][ T492] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 67.592705][ T24] audit: type=1400 audit(1772567903.354:259): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=730 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.617412][ T24] audit: type=1400 audit(1772567903.354:260): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=730 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.728681][ T20] usb 4-1: device descriptor read/64, error -71 [ 67.862252][ T1778] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.903560][ T1778] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 67.934413][ T1778] netlink: 165 bytes leftover after parsing attributes in process `syz.1.387'. [ 68.017340][ T20] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 68.029261][ T1782] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 68.042460][ T1782] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 68.059506][ T1782] F2FS-fs (loop0): invalid crc value [ 68.066320][ T1782] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.101387][ T1782] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 68.108549][ T1782] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 68.172970][ T366] usb 3-1: USB disconnect, device number 7 [ 68.200522][ T1802] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.218823][ T1802] EXT4-fs (loop1): 1 orphan inode deleted [ 68.224675][ T1802] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 68.235122][ T1802] FAULT_INJECTION: forcing a failure. [ 68.235122][ T1802] name failslab, interval 1, probability 0, space 0, times 0 [ 68.257467][ T1802] CPU: 1 PID: 1802 Comm: syz.1.390 Not tainted syzkaller #0 [ 68.264740][ T1802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.274782][ T1802] Call Trace: [ 68.278071][ T1802] __dump_stack+0x21/0x24 [ 68.282388][ T1802] dump_stack_lvl+0x1a7/0x208 [ 68.287060][ T1802] ? show_regs_print_info+0x18/0x18 [ 68.292247][ T1802] dump_stack+0x15/0x1c [ 68.296391][ T1802] should_fail+0x3c1/0x510 [ 68.300796][ T1802] ? __iomap_dio_rw+0x206/0x1120 [ 68.305721][ T1802] __should_failslab+0xa4/0xe0 [ 68.310476][ T1802] should_failslab+0x9/0x20 [ 68.314974][ T1802] kmem_cache_alloc_trace+0x3a/0x2e0 [ 68.315067][ T1808] overlayfs: './file2' not a directory [ 68.320245][ T1802] __iomap_dio_rw+0x206/0x1120 [ 68.320257][ T1802] ? stack_trace_save+0xa6/0xf0 [ 68.320267][ T1802] ? __kasan_slab_alloc+0x69/0xf0 [ 68.320276][ T1802] ? alloc_pipe_info+0x1fc/0x4b0 [ 68.320284][ T1802] ? iomap_dio_complete+0x6a0/0x6a0 [ 68.320294][ T1802] ? __kmalloc+0x1a4/0x330 [ 68.320303][ T1802] ? do_syscall_64+0x31/0x40 [ 68.320315][ T1802] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 68.320324][ T1802] iomap_dio_rw+0x35/0x80 [ 68.320336][ T1802] ext4_file_read_iter+0x41b/0x530 [ 68.320346][ T1802] generic_file_splice_read+0x3ec/0x5f0 [ 68.320356][ T1802] ? splice_shrink_spd+0xb0/0xb0 [ 68.320367][ T1802] ? fsnotify_perm+0x2fa/0x4b0 [ 68.320377][ T1802] ? security_file_permission+0x83/0xa0 [ 68.320387][ T1802] ? rw_verify_area+0x1c0/0x360 [ 68.320394][ T1802] splice_direct_to_actor+0x40a/0xb30 [ 68.320412][ T1802] ? do_splice_direct+0x2d0/0x2d0 [ 68.369834][ T1805] netlink: 'syz.0.389': attribute type 29 has an invalid length. [ 68.374859][ T1802] ? pipe_to_sendpage+0x320/0x320 [ 68.374870][ T1802] ? rw_verify_area+0x1c0/0x360 [ 68.374878][ T1802] do_splice_direct+0x1c2/0x2d0 [ 68.374886][ T1802] ? do_splice_to+0x180/0x180 [ 68.374898][ T1802] ? fsnotify_perm+0x66/0x4b0 [ 68.374908][ T1802] ? security_file_permission+0x83/0xa0 [ 68.374918][ T1802] do_sendfile+0x8df/0x1040 [ 68.374929][ T1802] ? __kasan_check_write+0x14/0x20 [ 68.374938][ T1802] ? do_preadv+0x390/0x390 [ 68.374947][ T1802] ? fput_many+0x15a/0x1a0 [ 68.374956][ T1802] ? ksys_write+0x1f4/0x250 [ 68.374966][ T1802] __x64_sys_sendfile64+0x199/0x1f0 [ 68.374976][ T1802] ? __ia32_sys_sendfile+0x190/0x190 [ 68.374987][ T1802] ? debug_smp_processor_id+0x17/0x20 [ 68.375011][ T1802] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 68.492495][ T1802] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 68.498102][ T1802] do_syscall_64+0x31/0x40 [ 68.502496][ T1802] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 68.508364][ T1802] RIP: 0033:0x7f031c6c5799 [ 68.512764][ T1802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.532342][ T1802] RSP: 002b:00007f031b120028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 68.540737][ T1802] RAX: ffffffffffffffda RBX: 00007f031c93efa0 RCX: 00007f031c6c5799 [ 68.548684][ T1802] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 68.556634][ T1802] RBP: 00007f031b120090 R08: 0000000000000000 R09: 0000000000000000 [ 68.564578][ T1802] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 68.572523][ T1802] R13: 00007f031c93f038 R14: 00007f031c93efa0 R15: 00007ffcd181b7a8 [ 68.584026][ T20] usb 4-1: device descriptor read/64, error -71 [ 68.592486][ T24] audit: type=1400 audit(1772567904.336:261): avc: denied { mount } for pid=1809 comm="syz.4.392" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 68.620387][ T24] audit: type=1400 audit(1772567904.364:262): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 68.853734][ T1826] FAULT_INJECTION: forcing a failure. [ 68.853734][ T1826] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.915035][ T1826] CPU: 0 PID: 1826 Comm: syz.2.398 Not tainted syzkaller #0 [ 68.922341][ T1826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.932380][ T1826] Call Trace: [ 68.935662][ T1826] __dump_stack+0x21/0x24 [ 68.939979][ T1826] dump_stack_lvl+0x1a7/0x208 [ 68.944644][ T1826] ? show_regs_print_info+0x18/0x18 [ 68.949831][ T1826] ? slab_post_alloc_hook+0x5d/0x2f0 [ 68.955102][ T1826] ? __alloc_skb+0x9e/0x520 [ 68.959594][ T1826] ? alloc_skb_with_frags+0xa2/0x560 [ 68.964866][ T1826] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 68.970222][ T1826] ? ____sys_sendmsg+0x5b7/0x8f0 [ 68.975156][ T1826] dump_stack+0x15/0x1c [ 68.979305][ T1826] should_fail+0x3c1/0x510 [ 68.983715][ T1826] should_fail_alloc_page+0x4f/0x60 [ 68.988899][ T1826] __alloc_pages_nodemask+0x119/0x620 [ 68.994263][ T1826] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 68.999794][ T1826] kmalloc_order+0x4c/0x160 [ 69.004283][ T1826] ? slab_post_alloc_hook+0x7d/0x2f0 [ 69.009550][ T1826] kmalloc_order_trace+0x16/0x80 [ 69.014473][ T1826] __kmalloc_track_caller+0x1d4/0x320 [ 69.019832][ T1826] ? __alloc_skb+0x9e/0x520 [ 69.024320][ T1826] ? alloc_skb_with_frags+0xa2/0x560 [ 69.029593][ T1826] __alloc_skb+0xdc/0x520 [ 69.033911][ T1826] alloc_skb_with_frags+0xa2/0x560 [ 69.039007][ T1826] sock_alloc_send_pskb+0x87f/0x9a0 [ 69.044191][ T1826] ? sock_kzfree_s+0x60/0x60 [ 69.048769][ T1826] ? __kasan_check_write+0x14/0x20 [ 69.053861][ T1826] ? _raw_spin_lock+0x94/0xf0 [ 69.058524][ T1826] ? _raw_spin_trylock_bh+0x150/0x150 [ 69.063878][ T1826] unix_dgram_sendmsg+0x601/0x17e0 [ 69.068974][ T1826] ? selinux_socket_accept+0x570/0x570 [ 69.074416][ T1826] ? unix_dgram_poll+0x630/0x630 [ 69.079343][ T1826] ? ____kasan_slab_free+0x125/0x160 [ 69.084610][ T1826] ? __kasan_slab_free+0x11/0x20 [ 69.089531][ T1826] ? slab_free_freelist_hook+0xc5/0x190 [ 69.095057][ T1826] ? security_socket_sendmsg+0x82/0xa0 [ 69.100499][ T1826] ? unix_dgram_poll+0x630/0x630 [ 69.105417][ T1826] ____sys_sendmsg+0x5b7/0x8f0 [ 69.110168][ T1826] ? __sys_sendmsg_sock+0x40/0x40 [ 69.115175][ T1826] ? import_iovec+0x7c/0xb0 [ 69.119662][ T1826] ___sys_sendmsg+0x236/0x2e0 [ 69.124322][ T1826] ? __sys_sendmsg+0x280/0x280 [ 69.129069][ T1826] ? rw_verify_area+0x1c0/0x360 [ 69.133907][ T1826] ? __fdget+0x1a1/0x230 [ 69.138132][ T1826] __x64_sys_sendmsg+0x1f9/0x2c0 [ 69.143052][ T1826] ? fput+0x1a/0x20 [ 69.146844][ T1826] ? ___sys_sendmsg+0x2e0/0x2e0 [ 69.151679][ T1826] ? debug_smp_processor_id+0x17/0x20 [ 69.157036][ T1826] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 69.163091][ T1826] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 69.168716][ T1826] do_syscall_64+0x31/0x40 [ 69.173121][ T1826] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 69.178997][ T1826] RIP: 0033:0x7f63ed4ea799 [ 69.183398][ T1826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.202986][ T1826] RSP: 002b:00007f63ebf45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.211393][ T1826] RAX: ffffffffffffffda RBX: 00007f63ed763fa0 RCX: 00007f63ed4ea799 [ 69.219355][ T1826] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 69.227308][ T1826] RBP: 00007f63ebf45090 R08: 0000000000000000 R09: 0000000000000000 [ 69.235262][ T1826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.243228][ T1826] R13: 00007f63ed764038 R14: 00007f63ed763fa0 R15: 00007ffc51eaacc8 [ 69.343075][ T20] usb 4-1: device descriptor read/64, error -71 [ 69.482372][ T20] usb usb4-port1: attempt power cycle [ 69.602609][ T1829] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 69.624679][ T1832] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.680434][ T1829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 69.689718][ T1829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 69.705150][ T1832] EXT4-fs (loop0): 1 orphan inode deleted [ 69.711052][ T1832] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 69.893959][ T1832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 69.964001][ T1818] F2FS-fs (loop1): Test dummy encryption mode enabled [ 69.973405][ T1818] F2FS-fs (loop1): invalid crc value [ 69.984203][ T1818] F2FS-fs (loop1): Found nat_bits in checkpoint [ 70.262546][ T1818] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 70.527188][ T1852] FAT-fs (loop4): bogus number of reserved sectors [ 70.533773][ T1852] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 70.543083][ T1852] FAT-fs (loop4): Can't find a valid FAT filesystem [ 70.888925][ T1859] F2FS-fs (loop3): invalid crc value [ 70.925899][ T1859] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.936337][ T1876] FAULT_INJECTION: forcing a failure. [ 70.936337][ T1876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.961330][ T1859] F2FS-fs (loop3): Start checkpoint disabled! [ 70.968399][ T1876] CPU: 0 PID: 1876 Comm: syz.2.409 Not tainted syzkaller #0 [ 70.975680][ T1876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.985724][ T1876] Call Trace: [ 70.989008][ T1876] __dump_stack+0x21/0x24 [ 70.989368][ T1859] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 70.993322][ T1876] dump_stack_lvl+0x1a7/0x208 [ 70.993332][ T1876] ? show_regs_print_info+0x18/0x18 [ 70.993342][ T1876] ? vfs_write+0xb27/0xdc0 [ 70.993353][ T1876] dump_stack+0x15/0x1c [ 70.993361][ T1876] should_fail+0x3c1/0x510 [ 70.993371][ T1876] should_fail_usercopy+0x1a/0x20 [ 70.993381][ T1876] _copy_from_user+0x20/0xd0 [ 70.993395][ T1876] __se_sys_bpf+0x1bb/0x740 [ 71.036203][ T1859] input: syz0 as /devices/virtual/input/input6 [ 71.037615][ T1876] ? __x64_sys_bpf+0x90/0x90 [ 71.037634][ T1876] ? debug_smp_processor_id+0x17/0x20 [ 71.053673][ T1876] __x64_sys_bpf+0x7b/0x90 [ 71.058081][ T1876] do_syscall_64+0x31/0x40 [ 71.062496][ T1876] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 71.068376][ T1876] RIP: 0033:0x7f63ed4ea799 [ 71.072784][ T1876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.092371][ T1876] RSP: 002b:00007f63ebf45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.100755][ T1876] RAX: ffffffffffffffda RBX: 00007f63ed763fa0 RCX: 00007f63ed4ea799 [ 71.108698][ T1876] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 71.116646][ T1876] RBP: 00007f63ebf45090 R08: 0000000000000000 R09: 0000000000000000 [ 71.124591][ T1876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.132538][ T1876] R13: 00007f63ed764038 R14: 00007f63ed763fa0 R15: 00007ffc51eaacc8 [ 71.202850][ T1849] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.267291][ T1849] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 71.296906][ T1888] exfat: Bad value for 'errors' [ 71.344861][ T1849] netlink: 165 bytes leftover after parsing attributes in process `syz.0.401'. [ 71.387096][ T1891] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 71.521886][ T1891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 71.530723][ T1891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 72.881531][ T15] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 72.967637][ T24] audit: type=1400 audit(1772567908.433:263): avc: denied { write } for pid=1923 comm="syz.2.422" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.006002][ T24] audit: type=1400 audit(1772567908.452:264): avc: denied { read write } for pid=1923 comm="syz.2.422" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.030329][ T24] audit: type=1400 audit(1772567908.452:265): avc: denied { open } for pid=1923 comm="syz.2.422" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.063991][ T1888] F2FS-fs (loop3): Test dummy encryption mode enabled [ 73.088559][ T24] audit: type=1400 audit(1772567908.452:266): avc: denied { ioctl } for pid=1923 comm="syz.2.422" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.125052][ T1888] F2FS-fs (loop3): invalid crc value [ 73.159510][ T15] usb 2-1: Using ep0 maxpacket: 8 [ 73.181581][ T1888] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.245045][ T1888] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.298506][ T15] usb 2-1: config 9 has an invalid interface number: 135 but max is 0 [ 73.302452][ T1920] F2FS-fs (loop4): Test dummy encryption mode enabled [ 73.314430][ T15] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 73.334795][ T15] usb 2-1: config 9 has no interface number 0 [ 73.341098][ T15] usb 2-1: config 9 interface 135 altsetting 12 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.347969][ T1920] F2FS-fs (loop4): invalid crc value [ 73.358008][ T15] usb 2-1: config 9 interface 135 has no altsetting 0 [ 73.373249][ T1920] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.428880][ T1920] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 73.533971][ T15] usb 2-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9c.6d [ 73.553151][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.579418][ T15] usb 2-1: Product: syz [ 73.588205][ T15] usb 2-1: Manufacturer: syz [ 73.597361][ T15] usb 2-1: SerialNumber: syz [ 74.103669][ T1951] FAT-fs (loop3): bogus number of reserved sectors [ 74.110216][ T1951] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 74.119536][ T1951] FAT-fs (loop3): Can't find a valid FAT filesystem [ 74.175204][ T15] uvcvideo: Found UVC 0.00 device syz (1b3b:2951) [ 74.183990][ T15] uvcvideo: No valid video chain found. [ 74.200553][ T15] usb 2-1: USB disconnect, device number 6 [ 74.374382][ T1954] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 74.406323][ T1954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 74.415247][ T1954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 74.496982][ T1947] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.531103][ T1947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.772490][ T1947] netlink: 165 bytes leftover after parsing attributes in process `syz.0.426'. [ 75.110663][ T1983] FAULT_INJECTION: forcing a failure. [ 75.110663][ T1983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.123879][ T1983] CPU: 0 PID: 1983 Comm: syz.1.436 Not tainted syzkaller #0 [ 75.131150][ T1983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.141183][ T1983] Call Trace: [ 75.144458][ T1983] __dump_stack+0x21/0x24 [ 75.148774][ T1983] dump_stack_lvl+0x1a7/0x208 [ 75.153441][ T1983] ? thaw_kernel_threads+0x220/0x220 [ 75.158710][ T1983] ? vsnprintf+0x189c/0x1990 [ 75.163276][ T1983] ? show_regs_print_info+0x18/0x18 [ 75.168446][ T1983] dump_stack+0x15/0x1c [ 75.172575][ T1983] should_fail+0x3c1/0x510 [ 75.176968][ T1983] should_fail_usercopy+0x1a/0x20 [ 75.181963][ T1983] _copy_to_user+0x20/0x90 [ 75.186350][ T1983] simple_read_from_buffer+0xe9/0x160 [ 75.191708][ T1983] proc_fail_nth_read+0x1a6/0x220 [ 75.196718][ T1983] ? proc_fault_inject_write+0x310/0x310 [ 75.202335][ T1983] ? rw_verify_area+0x1c0/0x360 [ 75.207162][ T1983] ? proc_fault_inject_write+0x310/0x310 [ 75.212764][ T1983] vfs_read+0x209/0xa60 [ 75.216893][ T1983] ? kernel_read+0x70/0x70 [ 75.221286][ T1983] ? __kasan_check_write+0x14/0x20 [ 75.226369][ T1983] ? mutex_lock+0x92/0xf0 [ 75.230668][ T1983] ? mutex_trylock+0xa0/0xa0 [ 75.235228][ T1983] ? __fget_files+0x2c4/0x320 [ 75.239876][ T1983] ? __fdget_pos+0x2d2/0x380 [ 75.244435][ T1983] ? ksys_read+0x71/0x250 [ 75.248739][ T1983] ksys_read+0x149/0x250 [ 75.252952][ T1983] ? vfs_write+0xdc0/0xdc0 [ 75.257345][ T1983] ? debug_smp_processor_id+0x17/0x20 [ 75.262689][ T1983] __x64_sys_read+0x7b/0x90 [ 75.267178][ T1983] do_syscall_64+0x31/0x40 [ 75.271588][ T1983] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 75.277464][ T1983] RIP: 0033:0x7f031c685fce [ 75.281859][ T1983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 75.301437][ T1983] RSP: 002b:00007f031b11ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.309824][ T1983] RAX: ffffffffffffffda RBX: 00007f031b1206c0 RCX: 00007f031c685fce [ 75.317767][ T1983] RDX: 000000000000000f RSI: 00007f031b1200a0 RDI: 0000000000000004 [ 75.325711][ T1983] RBP: 00007f031b120090 R08: 0000000000000000 R09: 0000000000000000 [ 75.333652][ T1983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.341595][ T1983] R13: 00007f031c93f038 R14: 00007f031c93efa0 R15: 00007ffcd181b7a8 [ 75.461761][ T1993] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.482843][ T1993] EXT4-fs (loop2): 1 orphan inode deleted [ 75.488619][ T1993] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 75.522128][ T15] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.579557][ T1990] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 75.581414][ T1993] FAULT_INJECTION: forcing a failure. [ 75.581414][ T1993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 75.596979][ T1990] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 75.600811][ T1993] CPU: 0 PID: 1993 Comm: syz.2.439 Not tainted syzkaller #0 [ 75.615888][ T1993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.625927][ T1993] Call Trace: [ 75.629210][ T1993] __dump_stack+0x21/0x24 [ 75.633533][ T1993] dump_stack_lvl+0x1a7/0x208 [ 75.638199][ T1993] ? show_regs_print_info+0x18/0x18 [ 75.643389][ T1993] dump_stack+0x15/0x1c [ 75.647531][ T1993] should_fail+0x3c1/0x510 [ 75.651844][ T1990] F2FS-fs (loop0): invalid crc value [ 75.651939][ T1993] should_fail_alloc_page+0x4f/0x60 [ 75.662362][ T1993] __alloc_pages_nodemask+0x119/0x620 [ 75.667723][ T1993] ? _raw_read_unlock+0x25/0x40 [ 75.672559][ T1993] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 75.678092][ T1993] ? ext4_map_blocks+0x6a9/0x1bd0 [ 75.683105][ T1993] ? is_bpf_text_address+0x177/0x190 [ 75.688379][ T1993] push_pipe+0x36b/0x630 [ 75.692609][ T1993] pipe_zero+0xa4/0x510 [ 75.696751][ T1993] iov_iter_zero+0x33d/0x8e0 [ 75.701328][ T1993] ? __kasan_kmalloc+0xec/0x110 [ 75.706163][ T1993] ? __kasan_kmalloc+0xda/0x110 [ 75.711000][ T1993] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 75.716532][ T1993] ? ext4_alloc_da_blocks+0x190/0x190 [ 75.721890][ T1993] ? generic_file_splice_read+0x3ec/0x5f0 [ 75.727595][ T1993] iomap_dio_actor+0xe4/0x5f0 [ 75.732255][ T1993] iomap_apply+0x2b9/0x720 [ 75.736657][ T1993] ? trace_raw_output_iomap_iter+0x250/0x250 [ 75.742626][ T1993] ? __kasan_check_read+0x11/0x20 [ 75.747638][ T1993] __iomap_dio_rw+0x7bb/0x1120 [ 75.752384][ T1993] ? __iomap_dio_rw+0x1120/0x1120 [ 75.757397][ T1993] ? iomap_dio_complete+0x6a0/0x6a0 [ 75.762580][ T1993] ? __kmalloc+0x1a4/0x330 [ 75.766980][ T1993] ? do_syscall_64+0x31/0x40 [ 75.771560][ T1993] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 75.777615][ T1993] iomap_dio_rw+0x35/0x80 [ 75.781932][ T1993] ext4_file_read_iter+0x41b/0x530 [ 75.785007][ T1990] F2FS-fs (loop0): Found nat_bits in checkpoint [ 75.787038][ T1993] generic_file_splice_read+0x3ec/0x5f0 [ 75.798766][ T1993] ? splice_shrink_spd+0xb0/0xb0 [ 75.803693][ T1993] ? fsnotify_perm+0x2fa/0x4b0 [ 75.808443][ T1993] ? security_file_permission+0x83/0xa0 [ 75.813972][ T1993] ? rw_verify_area+0x1c0/0x360 [ 75.818804][ T1993] splice_direct_to_actor+0x40a/0xb30 [ 75.820898][ T1990] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 75.824162][ T1993] ? do_splice_direct+0x2d0/0x2d0 [ 75.824172][ T1993] ? pipe_to_sendpage+0x320/0x320 [ 75.824180][ T1993] ? rw_verify_area+0x1c0/0x360 [ 75.824194][ T1993] do_splice_direct+0x1c2/0x2d0 [ 75.831190][ T1990] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 75.836175][ T1993] ? do_splice_to+0x180/0x180 [ 75.836186][ T1993] ? fsnotify_perm+0x66/0x4b0 [ 75.836202][ T1993] ? security_file_permission+0x83/0xa0 [ 75.873024][ T1993] do_sendfile+0x8df/0x1040 [ 75.877494][ T1993] ? __kasan_check_write+0x14/0x20 [ 75.882573][ T1993] ? do_preadv+0x390/0x390 [ 75.886953][ T1993] ? fput_many+0x15a/0x1a0 [ 75.891334][ T1993] ? ksys_write+0x1f4/0x250 [ 75.895803][ T1993] __x64_sys_sendfile64+0x199/0x1f0 [ 75.900976][ T1993] ? __ia32_sys_sendfile+0x190/0x190 [ 75.906233][ T1993] ? debug_smp_processor_id+0x17/0x20 [ 75.911581][ T1993] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 75.917621][ T1993] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 75.923223][ T1993] do_syscall_64+0x31/0x40 [ 75.927613][ T1993] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 75.933473][ T1993] RIP: 0033:0x7f63ed4ea799 [ 75.937861][ T1993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.957435][ T1993] RSP: 002b:00007f63ebf45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 75.965822][ T1993] RAX: ffffffffffffffda RBX: 00007f63ed763fa0 RCX: 00007f63ed4ea799 [ 75.973765][ T1993] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 75.981708][ T1993] RBP: 00007f63ebf45090 R08: 0000000000000000 R09: 0000000000000000 [ 75.989653][ T1993] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 75.997597][ T1993] R13: 00007f63ed764038 R14: 00007f63ed763fa0 R15: 00007ffc51eaacc8 [ 76.017405][ T1991] F2FS-fs (loop1): Test dummy encryption mode enabled [ 76.028158][ T1991] F2FS-fs (loop1): invalid crc value [ 76.034767][ T1991] F2FS-fs (loop1): Found nat_bits in checkpoint [ 76.056266][ T1991] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 76.082054][ T24] audit: type=1400 audit(1772567911.342:267): avc: denied { ioctl } for pid=1988 comm="syz.0.437" path="socket:[22626]" dev="sockfs" ino=22626 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.137309][ T1991] overlayfs: failed to resolve './file0': -2 [ 76.148103][ T24] audit: type=1400 audit(1772567911.370:268): avc: denied { append } for pid=1988 comm="syz.0.437" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.462958][ T15] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.472700][ T15] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.485881][ T2012] FAT-fs (loop3): bogus number of reserved sectors [ 76.492411][ T2012] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 76.501797][ T2012] FAT-fs (loop3): Can't find a valid FAT filesystem [ 76.535989][ T15] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.542792][ T15] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 76.552898][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.583779][ T15] usb 5-1: config 0 descriptor?? [ 76.820143][ T2009] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.856135][ T2009] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.887731][ T2009] netlink: 165 bytes leftover after parsing attributes in process `syz.2.441'. [ 76.935898][ T1976] cgroup: noprefix used incorrectly [ 77.014724][ T2034] FAULT_INJECTION: forcing a failure. [ 77.014724][ T2034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.028281][ T2034] CPU: 1 PID: 2034 Comm: syz.3.448 Not tainted syzkaller #0 [ 77.035557][ T2034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.045598][ T2034] Call Trace: [ 77.048881][ T2034] __dump_stack+0x21/0x24 [ 77.053197][ T2034] dump_stack_lvl+0x1a7/0x208 [ 77.057858][ T2034] ? show_regs_print_info+0x18/0x18 [ 77.063046][ T2034] dump_stack+0x15/0x1c [ 77.067185][ T2034] should_fail+0x3c1/0x510 [ 77.071583][ T2034] should_fail_usercopy+0x1a/0x20 [ 77.076594][ T2034] _copy_from_iter+0x1d1/0x9f0 [ 77.081341][ T2034] ? __kasan_check_read+0x11/0x20 [ 77.082961][ T15] usbhid 5-1:0.0: can't add hid device: -71 [ 77.086353][ T2034] ? __check_object_size+0x2f4/0x3c0 [ 77.092278][ T15] usbhid: probe of 5-1:0.0 failed with error -71 [ 77.097473][ T2034] skb_copy_datagram_from_iter+0xfa/0x6b0 [ 77.097489][ T2034] ? _raw_spin_trylock_bh+0x150/0x150 [ 77.097497][ T2034] ? skb_put+0x10e/0x1f0 [ 77.097513][ T2034] unix_dgram_sendmsg+0x8e5/0x17e0 [ 77.124114][ T2034] ? selinux_socket_accept+0x570/0x570 [ 77.129545][ T2034] ? unix_dgram_poll+0x630/0x630 [ 77.134455][ T2034] ? ____kasan_slab_free+0x125/0x160 [ 77.139717][ T2034] ? __kasan_slab_free+0x11/0x20 [ 77.144623][ T2034] ? slab_free_freelist_hook+0xc5/0x190 [ 77.150143][ T2034] ? security_socket_sendmsg+0x82/0xa0 [ 77.155572][ T2034] ? unix_dgram_poll+0x630/0x630 [ 77.160482][ T2034] ____sys_sendmsg+0x5b7/0x8f0 [ 77.165215][ T2034] ? __sys_sendmsg_sock+0x40/0x40 [ 77.170212][ T2034] ? import_iovec+0x7c/0xb0 [ 77.174693][ T2034] ___sys_sendmsg+0x236/0x2e0 [ 77.179353][ T2034] ? __sys_sendmsg+0x280/0x280 [ 77.184088][ T2034] ? rw_verify_area+0x1c0/0x360 [ 77.188913][ T2034] ? __fdget+0x1a1/0x230 [ 77.193127][ T2034] __x64_sys_sendmsg+0x1f9/0x2c0 [ 77.198034][ T2034] ? fput+0x1a/0x20 [ 77.201829][ T2034] ? ___sys_sendmsg+0x2e0/0x2e0 [ 77.206652][ T2034] ? debug_smp_processor_id+0x17/0x20 [ 77.211994][ T2034] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 77.218029][ T2034] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 77.223654][ T2034] do_syscall_64+0x31/0x40 [ 77.228044][ T2034] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 77.233905][ T2034] RIP: 0033:0x7f02286d8799 [ 77.238301][ T2034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.257875][ T2034] RSP: 002b:00007f0227133028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.266259][ T2034] RAX: ffffffffffffffda RBX: 00007f0228951fa0 RCX: 00007f02286d8799 [ 77.274200][ T2034] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 77.282143][ T2034] RBP: 00007f0227133090 R08: 0000000000000000 R09: 0000000000000000 [ 77.290085][ T2034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.298027][ T2034] R13: 00007f0228952038 R14: 00007f0228951fa0 R15: 00007ffefcc511a8 [ 77.325855][ T15] usb 5-1: USB disconnect, device number 2 [ 77.391920][ T2044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.419787][ T2044] EXT4-fs (loop1): 1 orphan inode deleted [ 77.426892][ T2044] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 77.440859][ T2046] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 77.443023][ T2044] overlayfs: unrecognized mount option "verity=off" or missing value [ 77.449818][ T24] audit: type=1400 audit(1772567912.614:269): avc: denied { mounton } for pid=2042 comm="syz.1.449" path="/98/file2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 77.521827][ T24] audit: type=1400 audit(1772567912.698:270): avc: denied { append } for pid=2055 comm="syz.2.452" name="hwrng" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 77.522650][ T2056] fuse: Bad value for 'fd' [ 77.572743][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 77.581648][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 78.205486][ T15] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 78.453844][ T2060] F2FS-fs (loop2): Test dummy encryption mode enabled [ 78.475157][ T2074] EXT4-fs (loop1): Ignoring removed bh option [ 78.481357][ T2060] F2FS-fs (loop2): invalid crc value [ 78.491190][ T2074] EXT4-fs (loop1): Ignoring removed oldalloc option [ 78.526568][ T2074] EXT4-fs (loop1): Ignoring removed nobh option [ 78.532927][ T2074] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.715000][ T2074] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 78.738548][ T2080] FAT-fs (loop0): bogus number of reserved sectors [ 78.745086][ T2080] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 78.754397][ T2080] FAT-fs (loop0): Can't find a valid FAT filesystem [ 78.767472][ T2060] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.802742][ T2060] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.822980][ T2074] mmap: syz.1.459 (2074) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 78.851027][ T2060] overlayfs: failed to resolve './file0': -2 [ 79.157625][ T2072] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.191276][ T2072] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.215372][ T2072] netlink: 165 bytes leftover after parsing attributes in process `syz.3.457'. [ 79.629310][ T2117] FAULT_INJECTION: forcing a failure. [ 79.629310][ T2117] name failslab, interval 1, probability 0, space 0, times 0 [ 79.642029][ T2117] CPU: 1 PID: 2117 Comm: syz.2.462 Not tainted syzkaller #0 [ 79.643997][ T2114] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 79.649307][ T2117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.649311][ T2117] Call Trace: [ 79.649333][ T2117] __dump_stack+0x21/0x24 [ 79.649342][ T2117] dump_stack_lvl+0x1a7/0x208 [ 79.649352][ T2117] ? show_regs_print_info+0x18/0x18 [ 79.649370][ T2117] ? memset+0x35/0x40 [ 79.659789][ T2103] F2FS-fs (loop0): Found nat_bits in checkpoint [ 79.668227][ T2117] dump_stack+0x15/0x1c [ 79.699043][ T2103] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.699892][ T2117] should_fail+0x3c1/0x510 [ 79.711699][ T2117] ? bpf_prog_test_run_skb+0x1d0/0x10b0 [ 79.717217][ T2117] __should_failslab+0xa4/0xe0 [ 79.721949][ T2117] should_failslab+0x9/0x20 [ 79.726422][ T2117] __kmalloc+0x60/0x330 [ 79.730554][ T2117] ? rw_verify_area+0x1c0/0x360 [ 79.735377][ T2117] bpf_prog_test_run_skb+0x1d0/0x10b0 [ 79.740721][ T2117] ? __kasan_check_write+0x14/0x20 [ 79.745801][ T2117] ? fput_many+0x15a/0x1a0 [ 79.750188][ T2117] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 79.756055][ T2117] bpf_prog_test_run+0x350/0x3c0 [ 79.760966][ T2117] __se_sys_bpf+0x501/0x740 [ 79.765437][ T2117] ? __x64_sys_bpf+0x90/0x90 [ 79.770005][ T2117] ? debug_smp_processor_id+0x17/0x20 [ 79.775349][ T2117] __x64_sys_bpf+0x7b/0x90 [ 79.779734][ T2117] do_syscall_64+0x31/0x40 [ 79.784123][ T2117] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 79.789983][ T2117] RIP: 0033:0x7f63ed4ea799 [ 79.794367][ T2117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.813943][ T2117] RSP: 002b:00007f63ebf45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.822329][ T2117] RAX: ffffffffffffffda RBX: 00007f63ed763fa0 RCX: 00007f63ed4ea799 [ 79.830270][ T2117] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 79.838209][ T2117] RBP: 00007f63ebf45090 R08: 0000000000000000 R09: 0000000000000000 [ 79.846148][ T2117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.854090][ T2117] R13: 00007f63ed764038 R14: 00007f63ed763fa0 R15: 00007ffc51eaacc8 [ 79.872566][ T2107] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 79.884540][ T2107] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 79.893244][ T2114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 79.902057][ T2114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 79.926770][ T2107] F2FS-fs (loop1): invalid crc value [ 79.976002][ T24] audit: type=1400 audit(1772567914.981:271): avc: denied { ioctl } for pid=2100 comm="syz.0.464" path="/84/file0/bus" dev="loop0" ino=10 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.000320][ T2107] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.023058][ T277] attempt to access beyond end of device [ 80.023058][ T277] loop0: rw=2049, want=45104, limit=40427 [ 80.173640][ T2107] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 80.181072][ T2107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 80.271382][ T2107] attempt to access beyond end of device [ 80.271382][ T2107] loop1: rw=2051, want=45064, limit=40427 [ 80.282857][ T2107] attempt to access beyond end of device [ 80.282857][ T2107] loop1: rw=2051, want=65536, limit=40427 [ 80.294361][ T2107] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 80.294378][ T2107] F2FS-fs (loop1): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 80.536627][ T2137] netlink: 165 bytes leftover after parsing attributes in process `syz.3.472'. [ 80.649299][ T2139] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 80.835377][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.043409][ T15] usb 5-1: unable to get BOS descriptor set [ 82.099539][ T2148] FAT-fs (loop1): bogus number of reserved sectors [ 82.106083][ T2148] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 82.107550][ T15] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 82.115394][ T2148] FAT-fs (loop1): Can't find a valid FAT filesystem [ 82.135676][ T15] usb 5-1: can't read configurations, error -71 [ 82.218012][ T2166] netlink: 'syz.4.479': attribute type 3 has an invalid length. [ 82.268919][ T2170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'. [ 82.302926][ T2171] binder: 2160:2171 ioctl 5412 200000000240 returned -22 [ 82.319394][ T2175] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 82.351371][ T2175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 82.360195][ T2175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 82.369393][ T2174] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.386313][ T2180] netlink: 165 bytes leftover after parsing attributes in process `syz.2.484'. [ 82.407776][ T2174] EXT4-fs (loop1): 1 orphan inode deleted [ 82.413515][ T2174] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 82.467256][ T2174] FAULT_INJECTION: forcing a failure. [ 82.467256][ T2174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 82.481139][ T2174] CPU: 0 PID: 2174 Comm: syz.1.482 Not tainted syzkaller #0 [ 82.488533][ T2174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.498571][ T2174] Call Trace: [ 82.501848][ T2174] __dump_stack+0x21/0x24 [ 82.506169][ T2174] dump_stack_lvl+0x1a7/0x208 [ 82.510844][ T2174] ? show_regs_print_info+0x18/0x18 [ 82.516038][ T2174] dump_stack+0x15/0x1c [ 82.520187][ T2174] should_fail+0x3c1/0x510 [ 82.524597][ T2174] should_fail_alloc_page+0x4f/0x60 [ 82.529783][ T2174] __alloc_pages_nodemask+0x119/0x620 [ 82.535146][ T2174] ? _raw_read_unlock+0x25/0x40 [ 82.539985][ T2174] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 82.545521][ T2174] ? ext4_map_blocks+0x6a9/0x1bd0 [ 82.550535][ T2174] ? is_bpf_text_address+0x177/0x190 [ 82.555814][ T2174] push_pipe+0x36b/0x630 [ 82.560048][ T2174] pipe_zero+0xa4/0x510 [ 82.564193][ T2174] iov_iter_zero+0x33d/0x8e0 [ 82.568770][ T2174] ? __kasan_kmalloc+0xec/0x110 [ 82.573601][ T2174] ? __kasan_kmalloc+0xda/0x110 [ 82.577941][ T24] audit: type=1400 audit(1772567917.328:272): avc: denied { block_suspend } for pid=2185 comm="syz.2.486" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.578438][ T2174] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 82.578455][ T2174] ? ext4_alloc_da_blocks+0x190/0x190 [ 82.610451][ T2174] ? generic_file_splice_read+0x3ec/0x5f0 [ 82.616144][ T2174] iomap_dio_actor+0xe4/0x5f0 [ 82.620794][ T2174] iomap_apply+0x2b9/0x720 [ 82.625184][ T2174] ? trace_raw_output_iomap_iter+0x250/0x250 [ 82.631137][ T2174] ? __kasan_check_read+0x11/0x20 [ 82.636132][ T2174] __iomap_dio_rw+0x7bb/0x1120 [ 82.640867][ T2174] ? __iomap_dio_rw+0x1120/0x1120 [ 82.645863][ T2174] ? iomap_dio_complete+0x6a0/0x6a0 [ 82.651033][ T2174] ? __kmalloc+0x1a4/0x330 [ 82.655425][ T2174] ? do_syscall_64+0x31/0x40 [ 82.659990][ T2174] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 82.666033][ T2174] iomap_dio_rw+0x35/0x80 [ 82.670341][ T2174] ext4_file_read_iter+0x41b/0x530 [ 82.675426][ T2174] generic_file_splice_read+0x3ec/0x5f0 [ 82.680941][ T2174] ? splice_shrink_spd+0xb0/0xb0 [ 82.685850][ T2174] ? fsnotify_perm+0x2fa/0x4b0 [ 82.690584][ T2174] ? security_file_permission+0x83/0xa0 [ 82.696098][ T2174] ? rw_verify_area+0x1c0/0x360 [ 82.700927][ T2174] splice_direct_to_actor+0x40a/0xb30 [ 82.706270][ T2174] ? do_splice_direct+0x2d0/0x2d0 [ 82.711264][ T2174] ? pipe_to_sendpage+0x320/0x320 [ 82.716258][ T2174] ? rw_verify_area+0x1c0/0x360 [ 82.721078][ T2174] do_splice_direct+0x1c2/0x2d0 [ 82.725897][ T2174] ? do_splice_to+0x180/0x180 [ 82.730549][ T2174] ? fsnotify_perm+0x66/0x4b0 [ 82.735198][ T2174] ? security_file_permission+0x83/0xa0 [ 82.740713][ T2174] do_sendfile+0x8df/0x1040 [ 82.745193][ T2174] ? __kasan_check_write+0x14/0x20 [ 82.750281][ T2174] ? do_preadv+0x390/0x390 [ 82.754669][ T2174] ? fput_many+0x15a/0x1a0 [ 82.759055][ T2174] ? ksys_write+0x1f4/0x250 [ 82.763530][ T2174] __x64_sys_sendfile64+0x199/0x1f0 [ 82.768698][ T2174] ? __ia32_sys_sendfile+0x190/0x190 [ 82.773960][ T2174] ? debug_smp_processor_id+0x17/0x20 [ 82.779304][ T2174] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 82.785351][ T2174] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 82.790954][ T2174] do_syscall_64+0x31/0x40 [ 82.795344][ T2174] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 82.801206][ T2174] RIP: 0033:0x7f031c6c5799 [ 82.805593][ T2174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.825168][ T2174] RSP: 002b:00007f031b120028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 82.833552][ T2174] RAX: ffffffffffffffda RBX: 00007f031c93efa0 RCX: 00007f031c6c5799 [ 82.841493][ T2174] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 82.849438][ T2174] RBP: 00007f031b120090 R08: 0000000000000000 R09: 0000000000000000 [ 82.857385][ T2174] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 82.865328][ T2174] R13: 00007f031c93f038 R14: 00007f031c93efa0 R15: 00007ffcd181b7a8 [ 82.873747][ T2142] F2FS-fs (loop3): Test dummy encryption mode enabled [ 82.892915][ T2142] F2FS-fs (loop3): invalid crc value [ 82.906139][ T2142] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.952119][ T296] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 82.996337][ T2142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.071695][ T2142] overlayfs: failed to resolve './file0': -2 [ 83.376612][ T296] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.396610][ T296] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.502991][ T296] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.518803][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.527009][ T296] usb 1-1: SerialNumber: syz [ 83.689106][ T24] audit: type=1400 audit(1772567918.451:273): avc: denied { mounton } for pid=2212 comm="syz.2.494" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 83.820266][ T2170] device bridge0 entered promiscuous mode [ 84.075141][ T2218] FAT-fs (loop4): bogus number of reserved sectors [ 84.077785][ T296] usb 1-1: 0:2 : does not exist [ 84.081683][ T2218] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 84.095796][ T2218] FAT-fs (loop4): Can't find a valid FAT filesystem [ 84.114282][ T296] usb 1-1: USB disconnect, device number 5 [ 84.168506][ T2221] FAULT_INJECTION: forcing a failure. [ 84.168506][ T2221] name failslab, interval 1, probability 0, space 0, times 0 [ 84.181319][ T2221] CPU: 0 PID: 2221 Comm: syz.3.492 Not tainted syzkaller #0 [ 84.188576][ T2221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.198607][ T2221] Call Trace: [ 84.201893][ T2221] __dump_stack+0x21/0x24 [ 84.206217][ T2221] dump_stack_lvl+0x1a7/0x208 [ 84.208043][ T2224] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 84.210887][ T2221] ? thaw_kernel_threads+0x220/0x220 [ 84.210898][ T2221] ? show_regs_print_info+0x18/0x18 [ 84.210914][ T2221] ? kernel_write+0x3c0/0x3c0 [ 84.231098][ T2224] FAT-fs (loop1): Filesystem has been set read-only [ 84.233512][ T2221] dump_stack+0x15/0x1c [ 84.233521][ T2221] should_fail+0x3c1/0x510 [ 84.233539][ T2221] ? getname_flags+0xb9/0x500 [ 84.242937][ T2224] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 84.244235][ T2221] __should_failslab+0xa4/0xe0 [ 84.265500][ T2221] should_failslab+0x9/0x20 [ 84.269975][ T2221] kmem_cache_alloc+0x3d/0x2d0 [ 84.274709][ T2221] getname_flags+0xb9/0x500 [ 84.279182][ T2221] do_mkdirat+0x4b/0x340 [ 84.283404][ T2221] __x64_sys_mkdirat+0x7b/0x90 [ 84.288145][ T2221] do_syscall_64+0x31/0x40 [ 84.292530][ T2221] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 84.298391][ T2221] RIP: 0033:0x7f02286d8799 [ 84.302778][ T2221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.322354][ T2221] RSP: 002b:00007f0227133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 84.330736][ T2221] RAX: ffffffffffffffda RBX: 00007f0228951fa0 RCX: 00007f02286d8799 [ 84.338678][ T2221] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 84.346620][ T2221] RBP: 00007f0227133090 R08: 0000000000000000 R09: 0000000000000000 [ 84.354570][ T2221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.362515][ T2221] R13: 00007f0228952038 R14: 00007f0228951fa0 R15: 00007ffefcc511a8 [ 84.371011][ T15] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 84.416220][ T2224] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 84.433038][ T2227] netlink: 165 bytes leftover after parsing attributes in process `syz.3.496'. [ 84.451860][ T2229] FAULT_INJECTION: forcing a failure. [ 84.451860][ T2229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.465481][ T2229] CPU: 1 PID: 2229 Comm: syz.0.497 Not tainted syzkaller #0 [ 84.472761][ T2229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.482794][ T2229] Call Trace: [ 84.486060][ T2229] __dump_stack+0x21/0x24 [ 84.490359][ T2229] dump_stack_lvl+0x1a7/0x208 [ 84.495007][ T2229] ? thaw_kernel_threads+0x220/0x220 [ 84.500263][ T2229] ? vsnprintf+0x189c/0x1990 [ 84.504827][ T2229] ? show_regs_print_info+0x18/0x18 [ 84.509995][ T2229] dump_stack+0x15/0x1c [ 84.514131][ T2229] should_fail+0x3c1/0x510 [ 84.518530][ T2229] should_fail_usercopy+0x1a/0x20 [ 84.523532][ T2229] _copy_to_user+0x20/0x90 [ 84.527943][ T2229] simple_read_from_buffer+0xe9/0x160 [ 84.533305][ T2229] proc_fail_nth_read+0x1a6/0x220 [ 84.538306][ T2229] ? proc_fault_inject_write+0x310/0x310 [ 84.543922][ T2229] ? rw_verify_area+0x1c0/0x360 [ 84.548754][ T2229] ? proc_fault_inject_write+0x310/0x310 [ 84.554358][ T2229] vfs_read+0x209/0xa60 [ 84.558481][ T2229] ? kernel_read+0x70/0x70 [ 84.562871][ T2229] ? __kasan_check_write+0x14/0x20 [ 84.567953][ T2229] ? mutex_lock+0x92/0xf0 [ 84.572256][ T2229] ? mutex_trylock+0xa0/0xa0 [ 84.576814][ T2229] ? __fget_files+0x2c4/0x320 [ 84.581473][ T2229] ? __fdget_pos+0x2d2/0x380 [ 84.586041][ T2229] ? ksys_read+0x71/0x250 [ 84.590340][ T2229] ksys_read+0x149/0x250 [ 84.594551][ T2229] ? vfs_write+0xdc0/0xdc0 [ 84.598942][ T2229] ? debug_smp_processor_id+0x17/0x20 [ 84.604291][ T2229] __x64_sys_read+0x7b/0x90 [ 84.608765][ T2229] do_syscall_64+0x31/0x40 [ 84.613155][ T2229] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 84.619015][ T2229] RIP: 0033:0x7f1775c8efce [ 84.623404][ T2229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.642980][ T2229] RSP: 002b:00007f1774728fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.651366][ T2229] RAX: ffffffffffffffda RBX: 00007f17747296c0 RCX: 00007f1775c8efce [ 84.659310][ T2229] RDX: 000000000000000f RSI: 00007f17747290a0 RDI: 0000000000000007 [ 84.667255][ T2229] RBP: 00007f1774729090 R08: 0000000000000000 R09: 0000000000000000 [ 84.675198][ T2229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.683141][ T2229] R13: 00007f1775f48038 R14: 00007f1775f47fa0 R15: 00007ffd4bb91e28 [ 84.743849][ T2231] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 84.753744][ T2231] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 84.802115][ T2239] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.822510][ T2239] EXT4-fs (loop0): 1 orphan inode deleted [ 84.824881][ T2237] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 84.828519][ T2239] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 84.855104][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8207, setting to 1024 [ 84.859811][ T2237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 84.874936][ T2237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 85.036832][ T15] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 85.046274][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.054441][ T15] usb 3-1: Product: syz [ 85.058774][ T15] usb 3-1: Manufacturer: syz [ 85.063359][ T15] usb 3-1: SerialNumber: syz [ 85.071951][ T15] usb 3-1: config 0 descriptor?? [ 85.112157][ T15] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 85.118743][ T15] uvcvideo: No valid video chain found. [ 85.329770][ T25] usb 3-1: USB disconnect, device number 8 [ 85.432987][ T2247] F2FS-fs (loop3): Test dummy encryption mode enabled [ 85.442066][ T2247] F2FS-fs (loop3): invalid crc value [ 85.563288][ T2247] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.710303][ T2247] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.737170][ T24] audit: type=1400 audit(1772567920.378:274): avc: denied { shutdown } for pid=2268 comm="syz.4.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.832104][ T2272] netlink: 165 bytes leftover after parsing attributes in process `syz.4.508'. [ 86.857990][ T2285] FAT-fs (loop2): bogus number of reserved sectors [ 86.864536][ T2285] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 86.873840][ T2285] FAT-fs (loop2): Can't find a valid FAT filesystem [ 86.904287][ T2289] FAULT_INJECTION: forcing a failure. [ 86.904287][ T2289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.918703][ T2289] CPU: 1 PID: 2289 Comm: syz.4.513 Not tainted syzkaller #0 [ 86.925988][ T2289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.936023][ T2289] Call Trace: [ 86.939303][ T2289] __dump_stack+0x21/0x24 [ 86.943617][ T2289] dump_stack_lvl+0x1a7/0x208 [ 86.948279][ T2289] ? thaw_kernel_threads+0x220/0x220 [ 86.953546][ T2289] ? show_regs_print_info+0x18/0x18 [ 86.958727][ T2289] dump_stack+0x15/0x1c [ 86.962863][ T2289] should_fail+0x3c1/0x510 [ 86.967269][ T2289] should_fail_usercopy+0x1a/0x20 [ 86.972275][ T2289] _copy_from_user+0x20/0xd0 [ 86.976850][ T2289] bpf_prog_test_run_skb+0x20a/0x10b0 [ 86.982209][ T2289] ? __kasan_check_write+0x14/0x20 [ 86.987309][ T2289] ? fput_many+0x15a/0x1a0 [ 86.991709][ T2289] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 86.997584][ T2289] bpf_prog_test_run+0x350/0x3c0 [ 87.002505][ T2289] __se_sys_bpf+0x501/0x740 [ 87.006992][ T2289] ? __x64_sys_bpf+0x90/0x90 [ 87.011569][ T2289] ? debug_smp_processor_id+0x17/0x20 [ 87.016924][ T2289] __x64_sys_bpf+0x7b/0x90 [ 87.021323][ T2289] do_syscall_64+0x31/0x40 [ 87.025724][ T2289] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 87.031598][ T2289] RIP: 0033:0x7f074d4bd799 [ 87.035999][ T2289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.055590][ T2289] RSP: 002b:00007f074bf18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.063987][ T2289] RAX: ffffffffffffffda RBX: 00007f074d736fa0 RCX: 00007f074d4bd799 [ 87.071942][ T2289] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 87.079894][ T2289] RBP: 00007f074bf18090 R08: 0000000000000000 R09: 0000000000000000 [ 87.087848][ T2289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.095809][ T2289] R13: 00007f074d737038 R14: 00007f074d736fa0 R15: 00007fffdfb95ee8 [ 87.321007][ T2296] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.516: bad orphan inode 11862016 [ 87.331716][ T2296] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 87.340802][ T2296] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.367633][ T2309] netlink: 165 bytes leftover after parsing attributes in process `syz.0.521'. [ 87.382139][ T2308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2308 comm=syz.2.520 [ 87.450747][ T2306] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x3cef241f, utbl_chksum : 0xe619d30d) [ 87.496313][ T2317] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 87.506581][ T2317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 87.515353][ T2317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 87.529900][ T24] audit: type=1400 audit(1772567922.052:275): avc: denied { bind } for pid=2320 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.727245][ T24] audit: type=1400 audit(1772567922.211:276): avc: denied { ioctl } for pid=2327 comm="syz.1.527" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0x5875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 87.752671][ T24] audit: type=1400 audit(1772567922.211:277): avc: denied { mounton } for pid=2327 comm="syz.1.527" path="/114/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 87.778380][ T24] audit: type=1400 audit(1772567922.286:278): avc: denied { mount } for pid=2327 comm="syz.1.527" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 87.805984][ T24] audit: type=1400 audit(1772567922.314:279): avc: denied { remount } for pid=2327 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 87.843428][ T2333] FAT-fs (loop0): bogus number of reserved sectors [ 87.850022][ T2333] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 87.859323][ T2333] FAT-fs (loop0): Can't find a valid FAT filesystem [ 88.297910][ T2329] F2FS-fs (loop2): Test dummy encryption mode enabled [ 88.305419][ T2329] F2FS-fs (loop2): invalid crc value [ 88.367237][ T2329] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.574109][ T2329] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.602051][ T24] audit: type=1400 audit(1772567923.053:280): avc: denied { create } for pid=2352 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.660579][ T24] audit: type=1400 audit(1772567923.053:281): avc: denied { setopt } for pid=2352 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.680334][ T24] audit: type=1400 audit(1772567923.053:282): avc: denied { bind } for pid=2352 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.700287][ T24] audit: type=1326 audit(1772567923.062:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2352 comm="syz.0.533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1775cce799 code=0x0 [ 88.775618][ T2361] netlink: 165 bytes leftover after parsing attributes in process `syz.3.534'. [ 88.856288][ T2363] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.948464][ T2363] EXT4-fs (loop3): 1 orphan inode deleted [ 88.969734][ T2363] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 89.052012][ T2363] FAULT_INJECTION: forcing a failure. [ 89.052012][ T2363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 89.070399][ T2363] CPU: 0 PID: 2363 Comm: syz.3.535 Not tainted syzkaller #0 [ 89.077692][ T2363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.087732][ T2363] Call Trace: [ 89.091011][ T2363] __dump_stack+0x21/0x24 [ 89.095330][ T2363] dump_stack_lvl+0x1a7/0x208 [ 89.099999][ T2363] ? show_regs_print_info+0x18/0x18 [ 89.105189][ T2363] dump_stack+0x15/0x1c [ 89.109337][ T2363] should_fail+0x3c1/0x510 [ 89.113747][ T2363] should_fail_alloc_page+0x4f/0x60 [ 89.118940][ T2363] __alloc_pages_nodemask+0x119/0x620 [ 89.124304][ T2363] ? _raw_read_unlock+0x25/0x40 [ 89.129133][ T2363] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 89.134658][ T2363] ? ext4_map_blocks+0x6a9/0x1bd0 [ 89.139655][ T2363] ? is_bpf_text_address+0x177/0x190 [ 89.144914][ T2363] push_pipe+0x36b/0x630 [ 89.149128][ T2363] pipe_zero+0xa4/0x510 [ 89.153254][ T2363] iov_iter_zero+0x33d/0x8e0 [ 89.157819][ T2363] ? __kasan_kmalloc+0xec/0x110 [ 89.162644][ T2363] ? __kasan_kmalloc+0xda/0x110 [ 89.167466][ T2363] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 89.172985][ T2363] ? ext4_alloc_da_blocks+0x190/0x190 [ 89.178330][ T2363] ? generic_file_splice_read+0x3ec/0x5f0 [ 89.184022][ T2363] iomap_dio_actor+0xe4/0x5f0 [ 89.188674][ T2363] iomap_apply+0x2b9/0x720 [ 89.193061][ T2363] ? trace_raw_output_iomap_iter+0x250/0x250 [ 89.199016][ T2363] ? __kasan_check_read+0x11/0x20 [ 89.204013][ T2363] __iomap_dio_rw+0x7bb/0x1120 [ 89.208748][ T2363] ? __iomap_dio_rw+0x1120/0x1120 [ 89.213746][ T2363] ? iomap_dio_complete+0x6a0/0x6a0 [ 89.218915][ T2363] ? __kmalloc+0x1a4/0x330 [ 89.223303][ T2363] ? do_syscall_64+0x31/0x40 [ 89.227870][ T2363] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.233923][ T2363] iomap_dio_rw+0x35/0x80 [ 89.238228][ T2363] ext4_file_read_iter+0x41b/0x530 [ 89.243313][ T2363] generic_file_splice_read+0x3ec/0x5f0 [ 89.248831][ T2363] ? splice_shrink_spd+0xb0/0xb0 [ 89.253744][ T2363] ? fsnotify_perm+0x2fa/0x4b0 [ 89.258479][ T2363] ? security_file_permission+0x83/0xa0 [ 89.263998][ T2363] ? rw_verify_area+0x1c0/0x360 [ 89.268820][ T2363] splice_direct_to_actor+0x40a/0xb30 [ 89.274163][ T2363] ? do_splice_direct+0x2d0/0x2d0 [ 89.279158][ T2363] ? pipe_to_sendpage+0x320/0x320 [ 89.284155][ T2363] ? rw_verify_area+0x1c0/0x360 [ 89.288976][ T2363] do_splice_direct+0x1c2/0x2d0 [ 89.293797][ T2363] ? do_splice_to+0x180/0x180 [ 89.298448][ T2363] ? fsnotify_perm+0x66/0x4b0 [ 89.303099][ T2363] ? security_file_permission+0x83/0xa0 [ 89.308617][ T2363] do_sendfile+0x8df/0x1040 [ 89.313096][ T2363] ? __kasan_check_write+0x14/0x20 [ 89.318180][ T2363] ? do_preadv+0x390/0x390 [ 89.322574][ T2363] ? fput_many+0x15a/0x1a0 [ 89.326963][ T2363] ? ksys_write+0x1f4/0x250 [ 89.331442][ T2363] __x64_sys_sendfile64+0x199/0x1f0 [ 89.336615][ T2363] ? __ia32_sys_sendfile+0x190/0x190 [ 89.341879][ T2363] ? debug_smp_processor_id+0x17/0x20 [ 89.347225][ T2363] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 89.353267][ T2363] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 89.358874][ T2363] do_syscall_64+0x31/0x40 [ 89.363265][ T2363] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.369128][ T2363] RIP: 0033:0x7f02286d8799 [ 89.373521][ T2363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.393099][ T2363] RSP: 002b:00007f0227133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 89.401636][ T2363] RAX: ffffffffffffffda RBX: 00007f0228951fa0 RCX: 00007f02286d8799 [ 89.409589][ T2363] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 89.417539][ T2363] RBP: 00007f0227133090 R08: 0000000000000000 R09: 0000000000000000 [ 89.425487][ T2363] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 89.433434][ T2363] R13: 00007f0228952038 R14: 00007f0228951fa0 R15: 00007ffefcc511a8 [ 90.078551][ T2382] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 90.173867][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 90.182741][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 90.695983][ T2390] FAT-fs (loop0): bogus number of reserved sectors [ 90.702529][ T2390] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 90.711823][ T2390] FAT-fs (loop0): Can't find a valid FAT filesystem [ 90.888034][ T2399] netlink: 165 bytes leftover after parsing attributes in process `syz.4.545'. [ 90.986848][ T2403] FAULT_INJECTION: forcing a failure. [ 90.986848][ T2403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.002875][ T2411] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.004853][ T2403] CPU: 0 PID: 2403 Comm: syz.2.539 Not tainted syzkaller #0 [ 91.019948][ T2403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.029991][ T2403] Call Trace: [ 91.033272][ T2403] __dump_stack+0x21/0x24 [ 91.037599][ T2403] dump_stack_lvl+0x1a7/0x208 [ 91.042270][ T2403] ? thaw_kernel_threads+0x220/0x220 [ 91.047543][ T2403] ? show_regs_print_info+0x18/0x18 [ 91.047652][ T2411] EXT4-fs (loop4): 1 orphan inode deleted [ 91.052731][ T2403] dump_stack+0x15/0x1c [ 91.058528][ T2411] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 91.062556][ T2403] should_fail+0x3c1/0x510 [ 91.075759][ T2403] should_fail_usercopy+0x1a/0x20 [ 91.080772][ T2403] strncpy_from_user+0x24/0x2e0 [ 91.085609][ T2403] ? kmem_cache_alloc+0x162/0x2d0 [ 91.090617][ T2403] ? getname_flags+0xb9/0x500 [ 91.095282][ T2403] getname_flags+0xf4/0x500 [ 91.099777][ T2403] do_mkdirat+0x4b/0x340 [ 91.104010][ T2403] __x64_sys_mkdirat+0x7b/0x90 [ 91.108765][ T2403] do_syscall_64+0x31/0x40 [ 91.113174][ T2403] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 91.119051][ T2403] RIP: 0033:0x7f63ed4ea799 [ 91.123453][ T2403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.143047][ T2403] RSP: 002b:00007f63ebf45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 91.151451][ T2403] RAX: ffffffffffffffda RBX: 00007f63ed763fa0 RCX: 00007f63ed4ea799 [ 91.159412][ T2403] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 91.167370][ T2403] RBP: 00007f63ebf45090 R08: 0000000000000000 R09: 0000000000000000 [ 91.175328][ T2403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.183287][ T2403] R13: 00007f63ed764038 R14: 00007f63ed763fa0 R15: 00007ffc51eaacc8 [ 91.635053][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 91.635065][ T24] audit: type=1400 audit(1772567925.897:286): avc: denied { lock } for pid=2427 comm="syz.2.554" path="socket:[24039]" dev="sockfs" ino=24039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 91.679706][ T2428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 92.054110][ T2417] F2FS-fs (loop1): Test dummy encryption mode enabled [ 92.068855][ T2441] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14875 sclass=netlink_xfrm_socket pid=2441 comm=syz.2.559 [ 92.077080][ T2417] F2FS-fs (loop1): invalid crc value [ 92.109005][ T2417] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.136664][ T2443] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 92.157082][ T2443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 92.165878][ T2443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 92.250157][ T2417] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.734519][ T2467] FAT-fs (loop3): bogus number of reserved sectors [ 92.744013][ T2467] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 92.757220][ T2467] FAT-fs (loop3): Can't find a valid FAT filesystem [ 92.777176][ T2472] FAULT_INJECTION: forcing a failure. [ 92.777176][ T2472] name failslab, interval 1, probability 0, space 0, times 0 [ 92.796230][ T2472] CPU: 1 PID: 2472 Comm: syz.2.566 Not tainted syzkaller #0 [ 92.803514][ T2472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.813554][ T2472] Call Trace: [ 92.816831][ T2472] __dump_stack+0x21/0x24 [ 92.821145][ T2472] dump_stack_lvl+0x1a7/0x208 [ 92.825811][ T2472] ? thaw_kernel_threads+0x220/0x220 [ 92.831088][ T2472] ? show_regs_print_info+0x18/0x18 [ 92.836273][ T2472] dump_stack+0x15/0x1c [ 92.840414][ T2472] should_fail+0x3c1/0x510 [ 92.844814][ T2472] ? sk_prot_alloc+0xb2/0x340 [ 92.849477][ T2472] __should_failslab+0xa4/0xe0 [ 92.854232][ T2472] should_failslab+0x9/0x20 [ 92.858718][ T2472] __kmalloc+0x60/0x330 [ 92.862863][ T2472] sk_prot_alloc+0xb2/0x340 [ 92.867349][ T2472] sk_alloc+0x38/0x4e0 [ 92.871399][ T2472] ? bpf_ctx_init+0x173/0x1b0 [ 92.876059][ T2472] ? _copy_from_user+0x95/0xd0 [ 92.880805][ T2472] bpf_prog_test_run_skb+0x2fd/0x10b0 [ 92.886167][ T2472] ? __kasan_check_write+0x14/0x20 [ 92.891267][ T2472] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 92.897145][ T2472] bpf_prog_test_run+0x350/0x3c0 [ 92.902066][ T2472] __se_sys_bpf+0x501/0x740 [ 92.906552][ T2472] ? __x64_sys_bpf+0x90/0x90 [ 92.911128][ T2472] ? debug_smp_processor_id+0x17/0x20 [ 92.916491][ T2472] __x64_sys_bpf+0x7b/0x90 [ 92.920890][ T2472] do_syscall_64+0x31/0x40 [ 92.925296][ T2472] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 92.931171][ T2472] RIP: 0033:0x7f63ed4ea799 [ 92.935571][ T2472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.955160][ T2472] RSP: 002b:00007f63ebf45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.963564][ T2472] RAX: ffffffffffffffda RBX: 00007f63ed763fa0 RCX: 00007f63ed4ea799 [ 92.971523][ T2472] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 92.979490][ T2472] RBP: 00007f63ebf45090 R08: 0000000000000000 R09: 0000000000000000 [ 92.987450][ T2472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.995416][ T2472] R13: 00007f63ed764038 R14: 00007f63ed763fa0 R15: 00007ffc51eaacc8 [ 93.200503][ T24] audit: type=1400 audit(1772567927.356:287): avc: denied { create } for pid=2473 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 94.244138][ T2496] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14875 sclass=netlink_xfrm_socket pid=2496 comm=syz.3.572 [ 94.437493][ T2510] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 94.462471][ T24] audit: type=1400 audit(1772567928.535:288): avc: denied { unlink } for pid=2514 comm="syz.4.580" name="#1d" dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.515356][ T2516] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x111908d0, checksum : 0x1119abd0) [ 94.526983][ T2510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 94.535791][ T2510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 94.562648][ T2516] exFAT-fs (loop0): invalid boot region [ 94.572951][ T2516] exFAT-fs (loop0): failed to recognize exfat type [ 94.648588][ T2500] F2FS-fs (loop1): invalid crc value [ 94.660613][ T2500] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 94.848438][ T2500] F2FS-fs (loop1): recover fsync data on readonly fs [ 94.855419][ T2500] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 94.862217][ T2500] F2FS-fs (loop1): checkpoint=disable on readonly fs [ 95.134016][ T2530] FAT-fs (loop3): bogus number of reserved sectors [ 95.140957][ T2530] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 95.150566][ T2530] FAT-fs (loop3): Can't find a valid FAT filesystem [ 95.220143][ T2537] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14875 sclass=netlink_xfrm_socket pid=2537 comm=syz.0.586 [ 95.310449][ T356] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.348613][ T2539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.359765][ T2539] EXT4-fs (loop2): 1 orphan inode deleted [ 95.365749][ T2539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 95.390041][ T2539] FAULT_INJECTION: forcing a failure. [ 95.390041][ T2539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.403590][ T2539] CPU: 0 PID: 2539 Comm: syz.2.585 Not tainted syzkaller #0 [ 95.410868][ T2539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.420895][ T2539] Call Trace: [ 95.424162][ T2539] __dump_stack+0x21/0x24 [ 95.428465][ T2539] dump_stack_lvl+0x1a7/0x208 [ 95.433115][ T2539] ? show_regs_print_info+0x18/0x18 [ 95.438284][ T2539] dump_stack+0x15/0x1c [ 95.442409][ T2539] should_fail+0x3c1/0x510 [ 95.446798][ T2539] should_fail_alloc_page+0x4f/0x60 [ 95.451965][ T2539] __alloc_pages_nodemask+0x119/0x620 [ 95.457308][ T2539] ? _raw_read_unlock+0x25/0x40 [ 95.462126][ T2539] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 95.467642][ T2539] ? ext4_map_blocks+0x6a9/0x1bd0 [ 95.472639][ T2539] ? is_bpf_text_address+0x177/0x190 [ 95.477907][ T2539] push_pipe+0x36b/0x630 [ 95.482124][ T2539] pipe_zero+0xa4/0x510 [ 95.486251][ T2539] iov_iter_zero+0x33d/0x8e0 [ 95.490819][ T2539] ? __kasan_kmalloc+0xec/0x110 [ 95.495641][ T2539] ? __kasan_kmalloc+0xda/0x110 [ 95.500461][ T2539] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 95.505977][ T2539] ? ext4_alloc_da_blocks+0x190/0x190 [ 95.511314][ T2539] ? generic_file_splice_read+0x3ec/0x5f0 [ 95.517003][ T2539] iomap_dio_actor+0xe4/0x5f0 [ 95.521653][ T2539] iomap_apply+0x2b9/0x720 [ 95.526042][ T2539] ? trace_raw_output_iomap_iter+0x250/0x250 [ 95.531991][ T2539] ? __kasan_check_read+0x11/0x20 [ 95.536980][ T2539] __iomap_dio_rw+0x7bb/0x1120 [ 95.541724][ T2539] ? __iomap_dio_rw+0x1120/0x1120 [ 95.546723][ T2539] ? iomap_dio_complete+0x6a0/0x6a0 [ 95.551896][ T2539] ? __kmalloc+0x1a4/0x330 [ 95.556287][ T2539] ? do_syscall_64+0x31/0x40 [ 95.560849][ T2539] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 95.566888][ T2539] iomap_dio_rw+0x35/0x80 [ 95.571189][ T2539] ext4_file_read_iter+0x41b/0x530 [ 95.576270][ T2539] generic_file_splice_read+0x3ec/0x5f0 [ 95.581797][ T2539] ? splice_shrink_spd+0xb0/0xb0 [ 95.586724][ T2539] ? fsnotify_perm+0x2fa/0x4b0 [ 95.591461][ T2539] ? security_file_permission+0x83/0xa0 [ 95.596981][ T2539] ? rw_verify_area+0x1c0/0x360 [ 95.601810][ T2539] splice_direct_to_actor+0x40a/0xb30 [ 95.607151][ T2539] ? do_splice_direct+0x2d0/0x2d0 [ 95.612146][ T2539] ? pipe_to_sendpage+0x320/0x320 [ 95.617137][ T2539] ? rw_verify_area+0x1c0/0x360 [ 95.621957][ T2539] do_splice_direct+0x1c2/0x2d0 [ 95.626774][ T2539] ? do_splice_to+0x180/0x180 [ 95.631418][ T2539] ? fsnotify_perm+0x66/0x4b0 [ 95.636064][ T2539] ? security_file_permission+0x83/0xa0 [ 95.641578][ T2539] do_sendfile+0x8df/0x1040 [ 95.646051][ T2539] ? __kasan_check_write+0x14/0x20 [ 95.651130][ T2539] ? do_preadv+0x390/0x390 [ 95.655515][ T2539] ? fput_many+0x15a/0x1a0 [ 95.659896][ T2539] ? ksys_write+0x1f4/0x250 [ 95.664368][ T2539] __x64_sys_sendfile64+0x199/0x1f0 [ 95.669533][ T2539] ? __ia32_sys_sendfile+0x190/0x190 [ 95.674789][ T2539] ? debug_smp_processor_id+0x17/0x20 [ 95.680131][ T2539] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 95.686168][ T2539] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 95.691766][ T2539] do_syscall_64+0x31/0x40 [ 95.696152][ T2539] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 95.702009][ T2539] RIP: 0033:0x7f63ed4ea799 [ 95.706395][ T2539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.725977][ T2539] RSP: 002b:00007f63ebf45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 95.734366][ T2539] RAX: ffffffffffffffda RBX: 00007f63ed763fa0 RCX: 00007f63ed4ea799 [ 95.742307][ T2539] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 95.750250][ T2539] RBP: 00007f63ebf45090 R08: 0000000000000000 R09: 0000000000000000 [ 95.758197][ T2539] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 95.766152][ T2539] R13: 00007f63ed764038 R14: 00007f63ed763fa0 R15: 00007ffc51eaacc8 [ 95.983982][ T356] usb 2-1: device descriptor read/64, error -71 [ 96.094590][ T2559] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 96.144464][ T2559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 96.153264][ T2559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 96.508044][ T356] usb 2-1: device descriptor read/64, error -71 [ 96.570118][ T2580] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14875 sclass=netlink_xfrm_socket pid=2580 comm=syz.2.598 [ 96.828508][ T356] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 97.045669][ T2591] FAT-fs (loop4): bogus number of reserved sectors [ 97.052197][ T2591] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 97.061673][ T2591] FAT-fs (loop4): Can't find a valid FAT filesystem [ 97.127852][ T356] usb 2-1: device descriptor read/64, error -71 [ 97.254523][ T2604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=108 sclass=netlink_tcpdiag_socket pid=2604 comm=syz.3.606 [ 97.270034][ T2604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=109 sclass=netlink_tcpdiag_socket pid=2604 comm=syz.3.606 [ 97.391532][ T2610] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 97.473193][ T24] audit: type=1326 audit(1772567931.350:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1775cce799 code=0x7ffc0000 [ 97.496479][ T24] audit: type=1326 audit(1772567931.350:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1775cce799 code=0x7ffc0000 [ 97.519736][ T24] audit: type=1326 audit(1772567931.350:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f1775cce799 code=0x7ffc0000 [ 97.543492][ T24] audit: type=1326 audit(1772567931.350:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1775cce799 code=0x7ffc0000 [ 97.567032][ T356] usb 2-1: device descriptor read/64, error -71 [ 97.573955][ T24] audit: type=1326 audit(1772567931.350:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1775cce799 code=0x7ffc0000 [ 97.597351][ T24] audit: type=1326 audit(1772567931.350:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1775cce799 code=0x7ffc0000 [ 97.620690][ T24] audit: type=1326 audit(1772567931.416:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1775cce799 code=0x7ffc0000 [ 97.646235][ T24] audit: type=1326 audit(1772567931.416:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1775cce799 code=0x7ffc0000 [ 97.651682][ T15] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.677241][ T24] audit: type=1326 audit(1772567931.425:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f1775cce799 code=0x7ffc0000 [ 97.700623][ T24] audit: type=1326 audit(1772567931.425:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1775cce799 code=0x7ffc0000 [ 97.726667][ T356] usb usb2-port1: attempt power cycle [ 97.774529][ T2626] xt_TCPMSS: Only works on TCP SYN packets [ 97.877509][ T2628] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 97.886558][ T2628] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.905902][ T2630] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 97.916513][ T2630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 97.925519][ T2630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 97.972484][ T15] usb 4-1: device descriptor read/64, error -71 [ 98.038166][ T2651] device sit0 entered promiscuous mode [ 98.044981][ T2651] netlink: 'syz.2.619': attribute type 1 has an invalid length. [ 98.052882][ T2651] netlink: 9 bytes leftover after parsing attributes in process `syz.2.619'. [ 98.146128][ T2657] device syzkaller0 entered promiscuous mode [ 98.175554][ T356] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 98.303841][ T356] usb 2-1: device descriptor read/8, error -71 [ 98.389349][ T15] usb 4-1: device descriptor read/64, error -71 [ 98.539027][ T356] usb 2-1: device descriptor read/8, error -71 [ 98.678023][ T15] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 98.868198][ T2663] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 98.998702][ T15] usb 4-1: device descriptor read/64, error -71 [ 99.132010][ T2675] FAT-fs (loop4): bogus number of reserved sectors [ 99.138609][ T2675] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 99.148183][ T2675] FAT-fs (loop4): Can't find a valid FAT filesystem [ 99.217051][ T2678] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.228488][ T2678] EXT4-fs (loop0): 1 orphan inode deleted [ 99.234439][ T2678] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 99.266780][ T2678] FAULT_INJECTION: forcing a failure. [ 99.266780][ T2678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.280059][ T2678] CPU: 1 PID: 2678 Comm: syz.0.628 Not tainted syzkaller #0 [ 99.287323][ T2678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.297360][ T2678] Call Trace: [ 99.300629][ T2678] __dump_stack+0x21/0x24 [ 99.304932][ T2678] dump_stack_lvl+0x1a7/0x208 [ 99.309579][ T2678] ? show_regs_print_info+0x18/0x18 [ 99.314747][ T2678] dump_stack+0x15/0x1c [ 99.318877][ T2678] should_fail+0x3c1/0x510 [ 99.323268][ T2678] should_fail_alloc_page+0x4f/0x60 [ 99.328442][ T2678] __alloc_pages_nodemask+0x119/0x620 [ 99.333783][ T2678] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 99.339300][ T2678] ? ext4_map_blocks+0x6a9/0x1bd0 [ 99.344310][ T2678] ? is_bpf_text_address+0x177/0x190 [ 99.349569][ T2678] push_pipe+0x36b/0x630 [ 99.353799][ T2678] pipe_zero+0xa4/0x510 [ 99.357941][ T2678] iov_iter_zero+0x33d/0x8e0 [ 99.362509][ T2678] ? __kasan_kmalloc+0xec/0x110 [ 99.367340][ T2678] ? __kasan_kmalloc+0xda/0x110 [ 99.372172][ T2678] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 99.377691][ T2678] ? ext4_alloc_da_blocks+0x190/0x190 [ 99.383133][ T2678] ? generic_file_splice_read+0x3ec/0x5f0 [ 99.388829][ T2678] iomap_dio_actor+0xe4/0x5f0 [ 99.393482][ T2678] iomap_apply+0x2b9/0x720 [ 99.397877][ T2678] ? trace_raw_output_iomap_iter+0x250/0x250 [ 99.403837][ T2678] ? __kasan_check_read+0x11/0x20 [ 99.408839][ T2678] __iomap_dio_rw+0x7bb/0x1120 [ 99.413577][ T2678] ? __iomap_dio_rw+0x1120/0x1120 [ 99.418579][ T2678] ? iomap_dio_complete+0x6a0/0x6a0 [ 99.423750][ T2678] ? __kmalloc+0x1a4/0x330 [ 99.428140][ T2678] ? do_syscall_64+0x31/0x40 [ 99.432704][ T2678] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 99.438740][ T2678] iomap_dio_rw+0x35/0x80 [ 99.443044][ T2678] ext4_file_read_iter+0x41b/0x530 [ 99.448128][ T2678] generic_file_splice_read+0x3ec/0x5f0 [ 99.453660][ T2678] ? splice_shrink_spd+0xb0/0xb0 [ 99.458577][ T2678] ? fsnotify_perm+0x2fa/0x4b0 [ 99.463316][ T2678] ? security_file_permission+0x83/0xa0 [ 99.468834][ T2678] ? rw_verify_area+0x1c0/0x360 [ 99.473661][ T2678] splice_direct_to_actor+0x40a/0xb30 [ 99.479010][ T2678] ? do_splice_direct+0x2d0/0x2d0 [ 99.484020][ T2678] ? pipe_to_sendpage+0x320/0x320 [ 99.489027][ T2678] ? rw_verify_area+0x1c0/0x360 [ 99.493852][ T2678] do_splice_direct+0x1c2/0x2d0 [ 99.498673][ T2678] ? do_splice_to+0x180/0x180 [ 99.503322][ T2678] ? fsnotify_perm+0x66/0x4b0 [ 99.507977][ T2678] ? security_file_permission+0x83/0xa0 [ 99.513499][ T2678] do_sendfile+0x8df/0x1040 [ 99.517976][ T2678] ? __kasan_check_write+0x14/0x20 [ 99.523060][ T2678] ? do_preadv+0x390/0x390 [ 99.527449][ T2678] ? fput_many+0x15a/0x1a0 [ 99.531852][ T2678] ? ksys_write+0x1f4/0x250 [ 99.536331][ T2678] __x64_sys_sendfile64+0x199/0x1f0 [ 99.541502][ T2678] ? __ia32_sys_sendfile+0x190/0x190 [ 99.546760][ T2678] ? debug_smp_processor_id+0x17/0x20 [ 99.552102][ T2678] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 99.558142][ T2678] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 99.563743][ T2678] do_syscall_64+0x31/0x40 [ 99.568135][ T2678] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 99.573998][ T2678] RIP: 0033:0x7f1775cce799 [ 99.578388][ T2678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.597966][ T2678] RSP: 002b:00007f1774729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 99.606362][ T2678] RAX: ffffffffffffffda RBX: 00007f1775f47fa0 RCX: 00007f1775cce799 [ 99.614308][ T2678] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 99.622250][ T2678] RBP: 00007f1774729090 R08: 0000000000000000 R09: 0000000000000000 [ 99.630195][ T2678] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 99.638148][ T2678] R13: 00007f1775f48038 R14: 00007f1775f47fa0 R15: 00007ffd4bb91e28 [ 99.646232][ T15] usb 4-1: device descriptor read/64, error -71 [ 99.779221][ T15] usb usb4-port1: attempt power cycle [ 99.833690][ T2694] F2FS-fs (loop1): invalid crc value [ 99.840614][ T2694] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 99.868003][ T2694] F2FS-fs (loop1): recover fsync data on readonly fs [ 99.874899][ T2694] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 99.881722][ T2694] F2FS-fs (loop1): checkpoint=disable on readonly fs [ 99.982266][ T1827] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 100.084642][ T2700] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 100.095077][ T2700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 100.103905][ T2700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 100.217451][ T15] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 100.302954][ T1827] usb 1-1: device descriptor read/64, error -71 [ 100.409924][ T15] usb 4-1: device descriptor read/8, error -71 [ 100.609022][ T2710] 9pnet: Insufficient options for proto=fd [ 100.634365][ T15] usb 4-1: device descriptor read/8, error -71 [ 100.719949][ T1827] usb 1-1: device descriptor read/64, error -71 [ 100.733436][ T2715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 101.008546][ T1827] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 101.171829][ T2729] FAT-fs (loop4): bogus number of reserved sectors [ 101.178381][ T2729] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 101.187706][ T2729] FAT-fs (loop4): Can't find a valid FAT filesystem [ 101.297345][ T1827] usb 1-1: device descriptor read/64, error -71 [ 101.385330][ T2734] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 101.399551][ T2734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.457828][ T2737] netlink: 104 bytes leftover after parsing attributes in process `syz.3.646'. [ 101.544157][ T2734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=2734 comm=syz.2.645 [ 101.564958][ T2741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.576336][ T2741] EXT4-fs (loop3): 1 orphan inode deleted [ 101.582074][ T2741] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 101.592071][ T2741] FAULT_INJECTION: forcing a failure. [ 101.592071][ T2741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.605287][ T2741] CPU: 1 PID: 2741 Comm: syz.3.648 Not tainted syzkaller #0 [ 101.612553][ T2741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.622585][ T2741] Call Trace: [ 101.625876][ T2741] __dump_stack+0x21/0x24 [ 101.630180][ T2741] dump_stack_lvl+0x1a7/0x208 [ 101.634843][ T2741] ? show_regs_print_info+0x18/0x18 [ 101.640014][ T2741] dump_stack+0x15/0x1c [ 101.644157][ T2741] should_fail+0x3c1/0x510 [ 101.644174][ T2741] should_fail_alloc_page+0x4f/0x60 [ 101.653730][ T2741] __alloc_pages_nodemask+0x119/0x620 [ 101.659075][ T2741] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 101.664597][ T2741] ? ext4_map_blocks+0x6a9/0x1bd0 [ 101.669591][ T2741] ? is_bpf_text_address+0x177/0x190 [ 101.674854][ T2741] push_pipe+0x36b/0x630 [ 101.679074][ T2741] pipe_zero+0xa4/0x510 [ 101.683200][ T2741] iov_iter_zero+0x33d/0x8e0 [ 101.687761][ T2741] ? __kasan_kmalloc+0xec/0x110 [ 101.692579][ T2741] ? __kasan_kmalloc+0xda/0x110 [ 101.697397][ T2741] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 101.702916][ T2741] ? ext4_alloc_da_blocks+0x190/0x190 [ 101.708254][ T2741] ? generic_file_splice_read+0x3ec/0x5f0 [ 101.713940][ T2741] iomap_dio_actor+0xe4/0x5f0 [ 101.718588][ T2741] iomap_apply+0x2b9/0x720 [ 101.722980][ T2741] ? trace_raw_output_iomap_iter+0x250/0x250 [ 101.728932][ T2741] ? __kasan_check_read+0x11/0x20 [ 101.733924][ T2741] __iomap_dio_rw+0x7bb/0x1120 [ 101.738657][ T2741] ? __iomap_dio_rw+0x1120/0x1120 [ 101.743655][ T2741] ? iomap_dio_complete+0x6a0/0x6a0 [ 101.748826][ T2741] ? __kmalloc+0x1a4/0x330 [ 101.753211][ T2741] ? do_syscall_64+0x31/0x40 [ 101.757773][ T2741] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 101.763807][ T2741] iomap_dio_rw+0x35/0x80 [ 101.768109][ T2741] ext4_file_read_iter+0x41b/0x530 [ 101.773194][ T2741] generic_file_splice_read+0x3ec/0x5f0 [ 101.778713][ T2741] ? splice_shrink_spd+0xb0/0xb0 [ 101.783621][ T2741] ? fsnotify_perm+0x2fa/0x4b0 [ 101.788359][ T2741] ? security_file_permission+0x83/0xa0 [ 101.793877][ T2741] ? rw_verify_area+0x1c0/0x360 [ 101.798698][ T2741] splice_direct_to_actor+0x40a/0xb30 [ 101.804040][ T2741] ? do_splice_direct+0x2d0/0x2d0 [ 101.809035][ T2741] ? pipe_to_sendpage+0x320/0x320 [ 101.814031][ T2741] ? rw_verify_area+0x1c0/0x360 [ 101.818853][ T2741] do_splice_direct+0x1c2/0x2d0 [ 101.823673][ T2741] ? do_splice_to+0x180/0x180 [ 101.828324][ T2741] ? fsnotify_perm+0x66/0x4b0 [ 101.832972][ T2741] ? security_file_permission+0x83/0xa0 [ 101.838486][ T2741] do_sendfile+0x8df/0x1040 [ 101.842960][ T2741] ? __kasan_check_write+0x14/0x20 [ 101.848039][ T2741] ? do_preadv+0x390/0x390 [ 101.852445][ T2741] ? fput_many+0x15a/0x1a0 [ 101.856831][ T2741] ? ksys_write+0x1f4/0x250 [ 101.861313][ T2741] __x64_sys_sendfile64+0x199/0x1f0 [ 101.866479][ T2741] ? __ia32_sys_sendfile+0x190/0x190 [ 101.871743][ T2741] ? debug_smp_processor_id+0x17/0x20 [ 101.877094][ T2741] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 101.883132][ T2741] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 101.888735][ T2741] do_syscall_64+0x31/0x40 [ 101.893124][ T2741] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 101.898989][ T2741] RIP: 0033:0x7f02286d8799 [ 101.903384][ T2741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.922960][ T2741] RSP: 002b:00007f0227133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 101.931340][ T2741] RAX: ffffffffffffffda RBX: 00007f0228951fa0 RCX: 00007f02286d8799 [ 101.939283][ T2741] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 101.947229][ T2741] RBP: 00007f0227133090 R08: 0000000000000000 R09: 0000000000000000 [ 101.955179][ T2741] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 101.963124][ T2741] R13: 00007f0228952038 R14: 00007f0228951fa0 R15: 00007ffefcc511a8 [ 102.045707][ T1827] usb 1-1: device descriptor read/64, error -71 [ 102.076260][ T2745] FAULT_INJECTION: forcing a failure. [ 102.076260][ T2745] name failslab, interval 1, probability 0, space 0, times 0 [ 102.088928][ T2745] CPU: 0 PID: 2745 Comm: syz.3.649 Not tainted syzkaller #0 [ 102.096194][ T2745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.106234][ T2745] Call Trace: [ 102.109501][ T2745] __dump_stack+0x21/0x24 [ 102.113801][ T2745] dump_stack_lvl+0x1a7/0x208 [ 102.118445][ T2745] ? thaw_kernel_threads+0x220/0x220 [ 102.123710][ T2745] ? unwind_get_return_address+0x4d/0x90 [ 102.129312][ T2745] ? show_regs_print_info+0x18/0x18 [ 102.134499][ T2745] dump_stack+0x15/0x1c [ 102.138622][ T2745] should_fail+0x3c1/0x510 [ 102.143013][ T2745] ? fat_parse_long+0x9a/0x820 [ 102.147746][ T2745] __should_failslab+0xa4/0xe0 [ 102.152482][ T2745] should_failslab+0x9/0x20 [ 102.156958][ T2745] kmem_cache_alloc+0x3d/0x2d0 [ 102.161699][ T2745] fat_parse_long+0x9a/0x820 [ 102.166261][ T2745] ? do_syscall_64+0x31/0x40 [ 102.170825][ T2745] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 102.173882][ T1827] usb usb1-port1: attempt power cycle [ 102.176877][ T2745] fat_search_long+0x282/0x1100 [ 102.176894][ T2745] ? fat_bmap+0x4d0/0x4d0 [ 102.191354][ T2745] ? mutex_trylock+0xa0/0xa0 [ 102.195924][ T2745] vfat_lookup+0x1a7/0x510 [ 102.200319][ T2745] ? setup+0xe0/0xe0 [ 102.204195][ T2745] ? _raw_spin_unlock+0x4d/0x70 [ 102.209031][ T2745] ? d_alloc+0x1f5/0x260 [ 102.213251][ T2745] __lookup_hash+0x114/0x250 [ 102.217820][ T2745] filename_create+0x1d5/0x680 [ 102.222558][ T2745] ? __check_object_size+0x2f4/0x3c0 [ 102.227817][ T2745] ? kern_path_create+0x40/0x40 [ 102.232642][ T2745] ? getname_flags+0x206/0x500 [ 102.237381][ T2745] do_mkdirat+0x5e/0x340 [ 102.241596][ T2745] __x64_sys_mkdirat+0x7b/0x90 [ 102.246331][ T2745] do_syscall_64+0x31/0x40 [ 102.250722][ T2745] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 102.256586][ T2745] RIP: 0033:0x7f02286d8799 [ 102.260977][ T2745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.280565][ T2745] RSP: 002b:00007f0227133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 102.288969][ T2745] RAX: ffffffffffffffda RBX: 00007f0228951fa0 RCX: 00007f02286d8799 [ 102.296927][ T2745] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 102.304877][ T2745] RBP: 00007f0227133090 R08: 0000000000000000 R09: 0000000000000000 [ 102.312828][ T2745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.320769][ T2745] R13: 00007f0228952038 R14: 00007f0228951fa0 R15: 00007ffefcc511a8 [ 102.612120][ T1827] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 102.793897][ T1827] usb 1-1: device descriptor read/8, error -71 [ 103.018399][ T1827] usb 1-1: device descriptor read/8, error -71 [ 114.361159][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.224248][ T2763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.655'. [ 152.229366][ T2750] 9pnet: Insufficient options for proto=fd [ 152.249597][ T2763] netlink: 72 bytes leftover after parsing attributes in process `syz.0.655'. [ 152.262069][ T2750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.651'. [ 152.381589][ T2767] erofs: (device loop0): mounted with root inode @ nid 36. [ 152.483924][ T356] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.508525][ T2754] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 152.526654][ T1827] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.526678][ T2754] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 152.543330][ T2754] F2FS-fs (loop2): invalid crc value [ 152.560058][ T2754] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.576847][ T2773] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 152.601461][ T2773] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 152.604509][ T2754] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 152.616804][ T2754] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.642592][ T2773] F2FS-fs (loop1): invalid crc value [ 152.660588][ T2773] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.703114][ T2773] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 152.708626][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 152.708637][ T24] audit: type=1400 audit(1772567983.022:349): avc: denied { read } for pid=2766 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.713690][ T2773] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.759929][ T24] audit: type=1400 audit(1772567983.068:350): avc: denied { setopt } for pid=2751 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.783266][ T356] usb 5-1: Using ep0 maxpacket: 16 [ 152.825999][ T1827] usb 4-1: Using ep0 maxpacket: 16 [ 152.922261][ T356] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 152.931439][ T356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.940487][ T356] usb 5-1: config 0 descriptor?? [ 152.954283][ T1827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.964444][ T1827] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=25.58 [ 152.973521][ T1827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.982309][ T1827] usb 4-1: config 0 descriptor?? [ 152.997869][ T356] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 153.029677][ T1827] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 153.071869][ T54] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 153.268106][ T2788] tpacket_rcv: packet too big, clamped from 30436 to 3944. macoff=96 [ 153.270788][ T15] usb 4-1: USB disconnect, device number 10 [ 153.296372][ T356] usb 5-1: Detected FT232BM [ 153.404768][ T2790] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 153.412595][ T2790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0003] [ 153.420553][ T2790] System zones: 1-12 [ 153.425184][ T2790] EXT4-fs error (device loop0): ext4_iget_extra_inode:4685: inode #15: comm syz.0.659: corrupted in-inode xattr [ 153.437310][ T2790] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.659: couldn't read orphan inode 15 (err -117) [ 153.449254][ T2790] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000010,debug,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpjquota=,nogrpid,init_itable=0x0000000000000fff,,errors=continue [ 153.478133][ T54] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.489131][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.510281][ T54] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 153.531621][ T54] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 153.547835][ T54] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 153.563627][ T356] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 153.584995][ T356] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 153.592368][ T356] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 153.601382][ T356] usb 5-1: USB disconnect, device number 5 [ 153.615819][ T356] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 153.625395][ T356] ftdi_sio 5-1:0.0: device disconnected [ 153.691963][ T54] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.704552][ T54] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 153.723397][ T54] usb 2-1: Product: syz [ 153.727635][ T54] usb 2-1: SerialNumber: syz [ 153.745392][ T2773] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 153.752376][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 153.895109][ T25] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 65535, setting to 1024 [ 153.906457][ T25] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 153.916731][ T25] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.929878][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 153.981511][ T2773] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 153.988628][ T2773] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 154.098194][ T25] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 154.109508][ T2797] F2FS-fs (loop3): Test dummy encryption mode enabled [ 154.116923][ T2797] F2FS-fs (loop3): invalid crc value [ 154.122423][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.131219][ T25] usb 3-1: Product: syz [ 154.135396][ T25] usb 3-1: Manufacturer: syz [ 154.139470][ T2797] F2FS-fs (loop3): Found nat_bits in checkpoint [ 154.139975][ T25] usb 3-1: SerialNumber: syz [ 154.164435][ T2797] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 154.183707][ T2787] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 154.194548][ T2800] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.219880][ T2800] EXT4-fs (loop4): 1 orphan inode deleted [ 154.225893][ T2800] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 154.440923][ T25] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 154.537529][ T2809] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.662: bg 0: block 288: padding at end of block bitmap is not set [ 154.568660][ T2809] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 154.590250][ T2809] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #13: comm syz.4.662: attempt to clear invalid blocks 1024 len 1 [ 154.622236][ T2809] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.662: invalid indirect mapped block 1819239214 (level 0) [ 154.658621][ T24] audit: type=1400 audit(1772567984.846:351): avc: denied { wake_alarm } for pid=2814 comm="syz.3.663" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.679899][ T2809] EXT4-fs (loop4): 1 truncate cleaned up [ 154.696992][ T2773] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 154.697093][ T2809] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 154.707775][ T2773] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 154.736489][ T24] audit: type=1326 audit(1772567984.874:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2814 comm="syz.3.663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02286d8799 code=0x0 [ 154.781524][ T24] audit: type=1400 audit(1772567984.902:353): avc: denied { setopt } for pid=2786 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.863771][ T24] audit: type=1400 audit(1772567984.902:354): avc: denied { read write } for pid=2786 comm="syz.2.658" name="lp0" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 154.868302][ T2787] EXT4-fs (loop2): Ignoring removed bh option [ 155.057842][ T2787] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 155.081921][ T54] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 155.092576][ T54] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 155.110004][ T24] audit: type=1400 audit(1772567984.902:355): avc: denied { open } for pid=2786 comm="syz.2.658" path="/dev/usb/lp0" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 155.133975][ T24] audit: type=1326 audit(1772567984.920:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2814 comm="syz.3.663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02286d8799 code=0x0 [ 155.150302][ T54] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 155.306241][ T54] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 155.325257][ T54] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 155.369355][ T54] usb 2-1: USB disconnect, device number 11 [ 155.375344][ T24] audit: type=1400 audit(1772567985.500:357): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 155.402715][ T54] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 155.455849][ T24] audit: type=1400 audit(1772567985.519:358): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.572203][ T2813] F2FS-fs (loop0): invalid crc value [ 155.644359][ T2813] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.711267][ T2813] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 155.730613][ T2813] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 155.766798][ T2787] F2FS-fs (loop2): fault_injection options not supported [ 155.795982][ T2787] F2FS-fs (loop2): invalid crc value [ 155.812384][ T2787] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.932106][ T2787] F2FS-fs (loop2): Start checkpoint disabled! [ 155.941010][ T2787] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 156.010782][ T2864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'. [ 156.020691][ T2864] netlink: 2 bytes leftover after parsing attributes in process `syz.3.667'. [ 156.031655][ T2813] ------------[ cut here ]------------ [ 156.043836][ T2813] WARNING: CPU: 0 PID: 2813 at fs/iomap/direct-io.c:391 iomap_dio_actor+0x559/0x5f0 [ 156.053213][ T2813] Modules linked in: [ 156.057969][ T2864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'. [ 156.069906][ T2864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'. [ 156.079174][ T2813] CPU: 0 PID: 2813 Comm: syz.0.664 Not tainted syzkaller #0 [ 156.086568][ T2813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.096852][ T2864] netlink: 2 bytes leftover after parsing attributes in process `syz.3.667'. [ 156.106031][ T2864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'. [ 156.116091][ T2813] RIP: 0010:iomap_dio_actor+0x559/0x5f0 [ 156.122305][ T2864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'. [ 156.132220][ T2813] Code: 7e 48 81 c2 98 07 00 00 48 c7 c7 20 33 2a 85 e8 bd 9b b8 02 e9 07 fe ff ff e8 33 6e a3 ff 0f 0b e9 fb fd ff ff e8 27 6e a3 ff <0f> 0b e9 ef fd ff ff e8 1b 6e a3 ff 0f 0b e9 1e ff ff ff e8 0f 6e [ 156.155661][ T15] usb 3-1: USB disconnect, device number 9 [ 156.163241][ T15] usblp0: removed [ 156.168127][ T2813] RSP: 0000:ffffc900082e6f00 EFLAGS: 00010283 [ 156.179987][ T2813] RAX: ffffffff81c14829 RBX: ffff88810fc4c180 RCX: 0000000000080000 [ 156.189244][ T2813] RDX: ffffc9000190c000 RSI: 0000000000073e9c RDI: 0000000000073e9d [ 156.197389][ T2813] RBP: ffffc900082e6f70 R08: ffff888117c70000 R09: 0000000000000005 [ 156.205521][ T2813] R10: 0000000000000004 R11: 0000000000000002 R12: dffffc0000000000 [ 156.213558][ T2813] R13: ffffc900082e6fe0 R14: 0000000000360000 R15: 0000000040000000 [ 156.221886][ T2813] FS: 00007f17747296c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 156.230831][ T2813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.237422][ T2813] CR2: 00007f02286c1900 CR3: 0000000118663000 CR4: 00000000003506b0 [ 156.245386][ T2813] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.253368][ T2813] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.262473][ T2813] Call Trace: [ 156.265776][ T2813] ? invalidate_mapping_pagevec+0x40/0x40 [ 156.272245][ T2813] iomap_apply+0x2b9/0x720 [ 156.276666][ T2813] ? trace_raw_output_iomap_iter+0x250/0x250 [ 156.282873][ T54] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 156.290594][ T2813] ? filemap_fdatawait_range+0xe6/0x130 [ 156.296220][ T2813] __iomap_dio_rw+0x7bb/0x1120 [ 156.301018][ T2813] ? __iomap_dio_rw+0x1120/0x1120 [ 156.306085][ T2813] ? iomap_dio_complete+0x6a0/0x6a0 [ 156.311357][ T2813] ? __init_rwsem+0x1c0/0x1c0 [ 156.316016][ T2813] ? f2fs_should_use_dio+0x5e3/0x7a0 [ 156.321454][ T2813] f2fs_file_write_iter+0x141c/0x27a0 [ 156.326873][ T2813] ? f2fs_file_read_iter+0xbc0/0xbc0 [ 156.332165][ T2813] ? is_bpf_text_address+0x177/0x190 [ 156.337598][ T2813] ? iter_file_splice_write+0x19e/0xcb0 [ 156.343208][ T2813] ? __kernel_text_address+0xa0/0x100 [ 156.348590][ T2813] ? unwind_get_return_address+0x4d/0x90 [ 156.354265][ T2813] ? stack_trace_save+0xf0/0xf0 [ 156.359100][ T2813] ? arch_stack_walk+0xee/0x140 [ 156.364019][ T2813] ? stack_trace_save+0xa6/0xf0 [ 156.369132][ T2813] ? stack_trace_snprint+0xf0/0xf0 [ 156.374279][ T2813] ? __kasan_slab_alloc+0x69/0xf0 [ 156.379353][ T2813] ? iter_file_splice_write+0x19e/0xcb0 [ 156.385007][ T2813] ? __kasan_kmalloc+0xda/0x110 [ 156.389881][ T2813] ? __kmalloc+0x1a4/0x330 [ 156.394301][ T2813] ? iter_file_splice_write+0x19e/0xcb0 [ 156.399947][ T2813] ? direct_splice_actor+0xe9/0x120 [ 156.405160][ T2813] ? splice_direct_to_actor+0x4cb/0xb30 [ 156.410797][ T2813] ? do_splice_direct+0x1c2/0x2d0 [ 156.415848][ T2813] do_iter_readv_writev+0x478/0x5f0 [ 156.437346][ T2813] ? avc_policy_seqno+0x1b/0x70 [ 156.442511][ T2813] ? generic_file_rw_checks+0x2a0/0x2a0 [ 156.448181][ T2813] ? security_file_permission+0x83/0xa0 [ 156.454090][ T2813] ? rw_verify_area+0x1c0/0x360 [ 156.459051][ T2813] do_iter_write+0x189/0x630 [ 156.463911][ T2813] vfs_iter_write+0x7d/0xa0 [ 156.468778][ T2813] iter_file_splice_write+0x68c/0xcb0 [ 156.474321][ T2813] ? splice_from_pipe+0x180/0x180 [ 156.479850][ T2813] ? generic_file_splice_read+0x462/0x5f0 [ 156.485723][ T2813] ? splice_shrink_spd+0xb0/0xb0 [ 156.490754][ T2813] ? fsnotify_perm+0x2fa/0x4b0 [ 156.495683][ T2813] ? splice_from_pipe+0x180/0x180 [ 156.500744][ T2813] direct_splice_actor+0xe9/0x120 [ 156.506048][ T2813] splice_direct_to_actor+0x4cb/0xb30 [ 156.511415][ T2813] ? do_splice_direct+0x2d0/0x2d0 [ 156.516477][ T2813] ? pipe_to_sendpage+0x320/0x320 [ 156.521524][ T2813] ? rw_verify_area+0x1c0/0x360 [ 156.526482][ T2813] do_splice_direct+0x1c2/0x2d0 [ 156.531413][ T2813] ? do_splice_to+0x180/0x180 [ 156.536121][ T2813] ? fsnotify_perm+0x66/0x4b0 [ 156.540877][ T2813] ? security_file_permission+0x83/0xa0 [ 156.546295][ T356] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 156.546484][ T2813] do_sendfile+0x8df/0x1040 [ 156.558524][ T2813] ? do_preadv+0x390/0x390 [ 156.562953][ T2813] ? __kasan_check_write+0x14/0x20 [ 156.568197][ T2813] ? switch_fpu_return+0x19c/0x330 [ 156.573340][ T2813] __x64_sys_sendfile64+0x199/0x1f0 [ 156.578575][ T2813] ? __ia32_sys_sendfile+0x190/0x190 [ 156.583900][ T2813] ? __kasan_check_read+0x11/0x20 [ 156.588934][ T2813] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 156.594707][ T2813] do_syscall_64+0x31/0x40 [ 156.599119][ T2813] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 156.605022][ T2813] RIP: 0033:0x7f1775cce799 [ 156.609488][ T2813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.629198][ T2813] RSP: 002b:00007f1774729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 156.637648][ T2813] RAX: ffffffffffffffda RBX: 00007f1775f47fa0 RCX: 00007f1775cce799 [ 156.645673][ T2813] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 156.653766][ T2813] RBP: 00007f1775d64bd9 R08: 0000000000000000 R09: 0000000000000000 [ 156.661743][ T2813] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000 [ 156.669740][ T2813] R13: 00007f1775f48038 R14: 00007f1775f47fa0 R15: 00007ffd4bb91e28 [ 156.677744][ T2813] ---[ end trace 0b52371f75875edd ]--- [ 156.696003][ T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.706124][ T54] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 156.715201][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.723699][ T54] usb 2-1: config 0 descriptor?? [ 156.771322][ T54] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 156.784896][ T301] attempt to access beyond end of device [ 156.784896][ T301] loop2: rw=2049, want=41016, limit=40427 [ 156.876883][ T2872] exfat: Unknown parameter 'ÿÿ0x0000000000000000' [ 156.941886][ T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.942477][ T2872] exfat: Bad value for 'uid' [ 156.952988][ T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.971414][ T2872] xt_bpf: check failed: parse error [ 157.048833][ T356] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 157.058039][ T356] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 157.070500][ T356] usb 4-1: Manufacturer: syz [ 157.084000][ T2882] input: syz0 as /devices/virtual/input/input7 [ 157.091720][ T356] usb 4-1: config 0 descriptor?? [ 157.198886][ T2892] exfat: Bad value for 'uid' [ 157.232169][ T2892] xt_bpf: check failed: parse error [ 157.305725][ T2899] EXT4-fs (loop0): Test dummy encryption mode enabled [ 157.312647][ T2899] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.325005][ T2899] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.680: corrupted xattr entries [ 157.336630][ T2899] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2797: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 157.349874][ T2899] EXT4-fs (loop0): 1 orphan inode deleted [ 157.355623][ T2899] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,minixdf,test_dummy_encryption,,errors=continue [ 157.381779][ T2899] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 157.509160][ T2905] loop0: p1 < > p2 < > p4 < > [ 157.758405][ T2913] udc-core: couldn't find an available UDC or it's busy [ 157.765648][ T2913] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 157.891383][ T2911] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 157.908163][ T2913] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 157.917416][ T2913] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.952962][ T2913] fs-verity (loop1, inode 15): Unrecognized descriptor size: 0 bytes [ 158.376187][ T2868] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.452539][ T2868] EXT4-fs (loop3): 1 orphan inode deleted [ 158.474996][ T2868] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 158.557842][ T356] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 158.566983][ T356] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 158.575467][ T356] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 158.722769][ T356] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 158.734694][ T356] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 158.844079][ T356] usb 4-1: USB disconnect, device number 11 [ 159.308734][ T54] usb 2-1: USB disconnect, device number 12 [ 159.545407][ T2931] FAT-fs (loop1): Directory bread(block 64) failed [ 159.552837][ T2931] FAT-fs (loop1): Directory bread(block 65) failed [ 159.559516][ T2931] FAT-fs (loop1): Directory bread(block 66) failed [ 159.567361][ T2931] FAT-fs (loop1): Directory bread(block 67) failed [ 159.574397][ T2931] FAT-fs (loop1): Directory bread(block 68) failed [ 159.581096][ T2931] FAT-fs (loop1): Directory bread(block 69) failed [ 159.588396][ T2931] FAT-fs (loop1): Directory bread(block 70) failed [ 159.595497][ T2931] FAT-fs (loop1): Directory bread(block 71) failed [ 159.602422][ T2931] FAT-fs (loop1): Directory bread(block 72) failed [ 159.617034][ T2931] FAT-fs (loop1): Directory bread(block 73) failed [ 159.741610][ T2936] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 159.786303][ T2938] EXT4-fs (loop3): Test dummy encryption mode enabled [ 159.791379][ T2936] __nla_validate_parse: 23 callbacks suppressed [ 159.791388][ T2936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 159.799041][ T2938] EXT4-fs (loop3): Test dummy encryption mode enabled [ 159.799355][ T2936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 159.808190][ T2938] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 159.834160][ T2938] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 159.841530][ T2938] EXT4-fs (loop3): Ignoring removed nobh option [ 159.903756][ T2938] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,nobh,,errors=continue [ 159.922947][ T2938] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.978441][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 159.978463][ T24] audit: type=1400 audit(1772567989.822:379): avc: denied { read } for pid=2954 comm="syz.4.693" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.029401][ T24] audit: type=1400 audit(1772567989.841:380): avc: denied { open } for pid=2954 comm="syz.4.693" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.104900][ T9] attempt to access beyond end of device [ 160.104900][ T9] loop1: rw=1, want=1480, limit=256 [ 160.121825][ T9] attempt to access beyond end of device [ 160.121825][ T9] loop1: rw=1, want=1832, limit=256 [ 160.136624][ T9] attempt to access beyond end of device [ 160.136624][ T9] loop1: rw=1, want=9336, limit=256 [ 160.152785][ T9] attempt to access beyond end of device [ 160.152785][ T9] loop1: rw=1, want=16672, limit=256 [ 160.172683][ T9] attempt to access beyond end of device [ 160.172683][ T9] loop1: rw=1, want=31712, limit=256 [ 160.187993][ T9] attempt to access beyond end of device [ 160.187993][ T9] loop1: rw=1, want=33800, limit=256 [ 160.451044][ T356] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.722637][ T2968] EXT4-fs (loop3): Online defrag not supported for encrypted files [ 160.986588][ T2962] F2FS-fs (loop0): Test dummy encryption mode enabled [ 160.993645][ T356] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.007945][ T2962] F2FS-fs (loop0): invalid crc value [ 161.048208][ T2962] F2FS-fs (loop0): Found nat_bits in checkpoint [ 161.085593][ T2962] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 161.175376][ T356] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 161.189264][ T356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 161.200868][ T356] usb 5-1: Product: syz [ 161.205262][ T356] usb 5-1: Manufacturer: syz [ 161.232571][ T356] usb 5-1: SerialNumber: syz [ 161.389645][ T2988] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 161.423027][ T2994] ================================================================== [ 161.431131][ T2994] BUG: KASAN: use-after-free in __ext4_iget+0x381/0x44c0 [ 161.438149][ T2994] Read of size 8 at addr ffff8881387a3f18 by task syz.2.703/2994 [ 161.445850][ T2994] [ 161.448179][ T2994] CPU: 0 PID: 2994 Comm: syz.2.703 Tainted: G W syzkaller #0 [ 161.456839][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.466882][ T2994] Call Trace: [ 161.470172][ T2994] __dump_stack+0x21/0x24 [ 161.474498][ T2994] dump_stack_lvl+0x1a7/0x208 [ 161.479175][ T2994] ? show_regs_print_info+0x18/0x18 [ 161.484373][ T2994] ? thaw_kernel_threads+0x220/0x220 [ 161.489656][ T2994] ? _raw_spin_lock+0x94/0xf0 [ 161.494329][ T2994] print_address_description+0x7f/0x2c0 [ 161.499875][ T2994] ? __ext4_iget+0x381/0x44c0 [ 161.504547][ T2994] kasan_report+0xe2/0x130 [ 161.508971][ T2994] ? __ext4_iget+0x381/0x44c0 [ 161.513653][ T2994] __asan_report_load8_noabort+0x14/0x20 [ 161.518826][ T2988] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf, [ 161.519282][ T2994] __ext4_iget+0x381/0x44c0 [ 161.542997][ T2994] ? __kasan_check_write+0x14/0x20 [ 161.548115][ T2994] ? _raw_write_lock+0x94/0xf0 [ 161.552881][ T2994] ? _raw_write_trylock+0x150/0x150 [ 161.558072][ T2994] ? __proc_create+0x570/0x8e0 [ 161.561844][ T2988] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.702: bg 0: block 234: padding at end of block bitmap is not set [ 161.562831][ T2994] ? __kasan_check_write+0x14/0x20 [ 161.582034][ T2994] ? ext4_get_projid+0x140/0x140 [ 161.586963][ T2994] ? _raw_write_unlock+0x2b/0x60 [ 161.591890][ T2994] ? proc_register+0x34d/0x4e0 [ 161.592008][ T2988] EXT4-fs (loop1): Remounting filesystem read-only [ 161.596642][ T2994] ext4_enable_quotas+0x33c/0x6d0 [ 161.596673][ T2994] ext4_fill_super+0x84ad/0x8d70 [ 161.596690][ T2994] ? ext4_mount+0x40/0x40 [ 161.617365][ T2994] ? vscnprintf+0x80/0x80 [ 161.621671][ T2994] ? set_blocksize+0x1ed/0x3b0 [ 161.626408][ T2994] ? sb_set_blocksize+0xaa/0xf0 [ 161.631232][ T2994] mount_bdev+0x28b/0x3a0 [ 161.635534][ T2994] ? ext4_mount+0x40/0x40 [ 161.640012][ T2994] ext4_mount+0x34/0x40 [ 161.644140][ T2994] legacy_get_tree+0xed/0x190 [ 161.648789][ T2994] ? ext4_chksum+0x180/0x180 [ 161.653355][ T2994] vfs_get_tree+0x89/0x260 [ 161.657746][ T2994] do_new_mount+0x25a/0xa20 [ 161.662229][ T2994] path_mount+0x585/0xc90 [ 161.666538][ T2994] __se_sys_mount+0x320/0x390 [ 161.671187][ T2994] ? __x64_sys_mount+0xd0/0xd0 [ 161.675930][ T2994] ? debug_smp_processor_id+0x17/0x20 [ 161.681275][ T2994] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 161.687312][ T2994] __x64_sys_mount+0xbf/0xd0 [ 161.691874][ T2994] do_syscall_64+0x31/0x40 [ 161.696266][ T2994] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 161.702130][ T2994] RIP: 0033:0x7f63ed4eba0a [ 161.706520][ T2994] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.726098][ T2994] RSP: 002b:00007f63ebf44e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.734483][ T2994] RAX: ffffffffffffffda RBX: 00007f63ebf44ee0 RCX: 00007f63ed4eba0a [ 161.742428][ T2994] RDX: 0000200000000580 RSI: 00002000000005c0 RDI: 00007f63ebf44ea0 [ 161.750381][ T2994] RBP: 0000200000000580 R08: 00007f63ebf44ee0 R09: 0000000001008002 [ 161.758328][ T2994] R10: 0000000001008002 R11: 0000000000000246 R12: 00002000000005c0 [ 161.766272][ T2994] R13: 00007f63ebf44ea0 R14: 00000000000005eb R15: 0000200000000040 [ 161.774214][ T2994] [ 161.776518][ T2994] Allocated by task 2500: [ 161.780828][ T2994] __kasan_slab_alloc+0xbd/0xf0 [ 161.785651][ T2994] slab_post_alloc_hook+0x5d/0x2f0 [ 161.790731][ T2994] kmem_cache_alloc+0x162/0x2d0 [ 161.795556][ T2994] f2fs_alloc_inode+0x26/0x410 [ 161.800306][ T2994] iget_locked+0x146/0x7d0 [ 161.804701][ T2994] f2fs_iget+0x55/0x4b60 [ 161.808920][ T2994] f2fs_fill_super+0x4d6f/0x73f0 [ 161.813839][ T2994] mount_bdev+0x28b/0x3a0 [ 161.818148][ T2994] f2fs_mount+0x34/0x40 [ 161.822281][ T2994] legacy_get_tree+0xed/0x190 [ 161.826931][ T2994] vfs_get_tree+0x89/0x260 [ 161.831320][ T2994] do_new_mount+0x25a/0xa20 [ 161.835793][ T2994] path_mount+0x585/0xc90 [ 161.840096][ T2994] __se_sys_mount+0x320/0x390 [ 161.844743][ T2994] __x64_sys_mount+0xbf/0xd0 [ 161.849305][ T2994] do_syscall_64+0x31/0x40 [ 161.853694][ T2994] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 161.859551][ T2994] [ 161.861851][ T2994] Last potentially related work creation: [ 161.867542][ T2994] kasan_save_stack+0x3a/0x60 [ 161.872190][ T2994] __kasan_record_aux_stack+0xd2/0x100 [ 161.877620][ T2994] kasan_record_aux_stack_noalloc+0xb/0x10 [ 161.883397][ T2994] call_rcu+0x11a/0x10b0 [ 161.887611][ T2994] evict+0x881/0x930 [ 161.891477][ T2994] iput+0x638/0x7c0 [ 161.895259][ T2994] f2fs_fill_super+0x5caf/0x73f0 [ 161.900166][ T2994] mount_bdev+0x28b/0x3a0 [ 161.904467][ T2994] f2fs_mount+0x34/0x40 [ 161.908597][ T2994] legacy_get_tree+0xed/0x190 [ 161.913245][ T2994] vfs_get_tree+0x89/0x260 [ 161.917633][ T2994] do_new_mount+0x25a/0xa20 [ 161.922108][ T2994] path_mount+0x585/0xc90 [ 161.926410][ T2994] __se_sys_mount+0x320/0x390 [ 161.931058][ T2994] __x64_sys_mount+0xbf/0xd0 [ 161.935622][ T2994] do_syscall_64+0x31/0x40 [ 161.940013][ T2994] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 161.945874][ T2994] [ 161.948177][ T2994] The buggy address belongs to the object at ffff8881387a39f0 [ 161.948177][ T2994] which belongs to the cache f2fs_inode_cache of size 1520 [ 161.962723][ T2994] The buggy address is located 1320 bytes inside of [ 161.962723][ T2994] 1520-byte region [ffff8881387a39f0, ffff8881387a3fe0) [ 161.976136][ T2994] The buggy address belongs to the page: [ 161.981758][ T2994] page:ffffea0004e1e800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881387a6d70 pfn:0x1387a0 [ 161.993264][ T2994] head:ffffea0004e1e800 order:3 compound_mapcount:0 compound_pincount:0 [ 162.001564][ T2994] flags: 0x4000000000010200(slab|head) [ 162.006998][ T2994] raw: 4000000000010200 ffffea00046fce00 0000000500000005 ffff88810278cf00 [ 162.015555][ T2994] raw: ffff8881387a6d70 000000008013000b 00000001ffffffff 0000000000000000 [ 162.024108][ T2994] page dumped because: kasan: bad access detected [ 162.030491][ T2994] page_owner tracks the page as allocated [ 162.036190][ T2994] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 2247, ts 85772700428, free_ts 85194858907 [ 162.057595][ T2994] prep_new_page+0x179/0x180 [ 162.062160][ T2994] get_page_from_freelist+0x223b/0x23d0 [ 162.067682][ T2994] __alloc_pages_nodemask+0x290/0x620 [ 162.073027][ T2994] new_slab+0x84/0x3f0 [ 162.077074][ T2994] ___slab_alloc+0x2a6/0x450 [ 162.081634][ T2994] __slab_alloc+0x63/0xa0 [ 162.085946][ T2994] kmem_cache_alloc+0x1ac/0x2d0 [ 162.090768][ T2994] f2fs_alloc_inode+0x26/0x410 [ 162.095504][ T2994] new_inode_pseudo+0x62/0x210 [ 162.100237][ T2994] new_inode+0x28/0x1e0 [ 162.104365][ T2994] f2fs_new_inode+0xf3/0x1420 [ 162.109011][ T2994] f2fs_mkdir+0x17b/0x680 [ 162.113310][ T2994] vfs_mkdir+0x4c7/0x6a0 [ 162.117526][ T2994] ovl_mkdir_real+0x4f/0x190 [ 162.122093][ T2994] ovl_workdir_create+0x2e3/0x5a0 [ 162.127090][ T2994] ovl_get_workdir+0x350/0xda0 [ 162.131821][ T2994] page last free stack trace: [ 162.136471][ T2994] __free_pages_ok+0x80b/0x830 [ 162.141206][ T2994] __free_pages+0xd8/0x3b0 [ 162.145593][ T2994] __free_slab+0xcf/0x190 [ 162.149894][ T2994] unfreeze_partials+0x15f/0x190 [ 162.154801][ T2994] put_cpu_partial+0xc1/0x180 [ 162.159464][ T2994] __slab_free+0x2c9/0x3a0 [ 162.163884][ T2994] ___cache_free+0x10e/0x130 [ 162.168458][ T2994] qlink_free+0x50/0x90 [ 162.172592][ T2994] qlist_free_all+0x5f/0xb0 [ 162.177069][ T2994] kasan_quarantine_reduce+0x14a/0x160 [ 162.182502][ T2994] __kasan_slab_alloc+0x2f/0xf0 [ 162.187326][ T2994] slab_post_alloc_hook+0x5d/0x2f0 [ 162.192410][ T2994] kmem_cache_alloc+0x162/0x2d0 [ 162.197233][ T2994] shmem_alloc_inode+0x1a/0x30 [ 162.201987][ T2994] new_inode_pseudo+0x62/0x210 [ 162.206738][ T2994] new_inode+0x28/0x1e0 [ 162.210868][ T2994] [ 162.213172][ T2994] Memory state around the buggy address: [ 162.218782][ T2994] ffff8881387a3e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.226819][ T2994] ffff8881387a3e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.234855][ T2994] >ffff8881387a3f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.242885][ T2994] ^ [ 162.247706][ T2994] ffff8881387a3f80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 162.255738][ T2994] ffff8881387a4000: fc fc fc fc fc fc fc fc fc fc fc fc 00 00 00 00 [ 162.263784][ T2994] ================================================================== [ 162.271827][ T2994] Disabling lock debugging due to kernel taint [ 162.281153][ T2994] EXT4-fs warning (device loop2): ext4_enable_quotas:6490: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 162.295021][ T24] audit: type=1400 audit(1772567991.973:381): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 162.296223][ T2994] EXT4-fs (loop2): mount failed [ 162.319347][ T24] audit: type=1400 audit(1772567991.973:382): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.344311][ T356] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.344530][ T24] audit: type=1400 audit(1772567991.973:383): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.377297][ T24] audit: type=1400 audit(1772567991.973:384): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.398201][ T24] audit: type=1400 audit(1772567991.973:385): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.419144][ T24] audit: type=1400 audit(1772567991.973:386): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.442379][ T24] audit: type=1400 audit(1772567991.973:387): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.512549][ T2994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 162.521349][ T2994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 162.580504][ T24] audit: type=1326 audit(1772567992.254:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2959 comm="syz.4.696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f074d4bd799 code=0x0 [ 163.078389][ T25] usb 5-1: USB disconnect, device number 6 [ 163.085090][ T25] usblp0: removed