last executing test programs: 36.305101108s ago: executing program 0 (id=234): r0 = userfaultfd(0x80001) r1 = epoll_create(0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x5, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000540)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f00000008c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0xb0000001}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x6, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x10000, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x4000038, 0x800003, 0x200, 0x82, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0x7, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x0, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x22, 0x2, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000880)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r9], 0x15) r11 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000280)={0x43}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 35.256494326s ago: executing program 0 (id=241): setuid(0xee00) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.169221561s ago: executing program 0 (id=243): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in=@private=0xa010100, @in=@multicast2, 0x4e20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x2, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x7}}]}, 0x110}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001b2274e0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/vtconsole/vtcon0/bind\x00', 0x20002, 0x10b) write(r4, &(0x7f0000000000)='7', 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r9 = socket(0x11, 0x80802, 0x0) sendmsg$sock(r9, &(0x7f0000000480)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x4008001) write(r6, &(0x7f0000000680)="656e61626c655f6576656e743a73636865642fdf66f5fc3e8b167de3f340aefcfa55cadc6a57efaa55dfc55c38053650e0a83bc42042", 0x36) splice(r0, 0x0, r5, 0x0, 0x7, 0x0) shutdown(r1, 0x1) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008000000010000000000001f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="010000000300"/28], 0x48) getdents(r5, &(0x7f0000000240)=""/33, 0x21) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r11, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) futex(&(0x7f0000000040)=0x1, 0x8, 0x1, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000004000000b704000000000000850000001c00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.940316841s ago: executing program 0 (id=247): r0 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x20c080, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="28a6b1", 0x3, 0x9) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000400)={{r1, &(0x7f00000000c0)='\x18', 0xc0000, &(0x7f0000000200)={@_ha_fsid={[0x779e, 0x3]}, {0x5, 0xa, 0x9, 0x7ff}}, 0xe, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x400}, 0x1, &(0x7f00000003c0)=[{0x3, 0x5, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="7c3ef009c55732a0329e73ab8b7457badb08177c3202f6af1fe2d3729081c75cee60f0e32e204c58f3bbbdd7546204980a3a29371bc5c07d66a365df4b6e0e238ca6bbb6abfc686211faffafb6c2c3768362e14209009a17fca2296c039f777bbc90e285651710a64fcd5af91846be6a52b1d251bb777810ff1d8eda3675b8ac8692c897bca8f76c4930ac29ce5d696654695226db8e106de7fbb61efb", 0x9d, 0xfaf855d3ff24bf97}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0x100000001) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000480)={r3, r5, 0x8}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) close(r6) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r8 = getpgid(0x0) syz_open_procfs(r8, &(0x7f0000000000)='mountinfo\x00') ftruncate(r7, 0x8008976) 34.476414542s ago: executing program 0 (id=259): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) readlinkat(r0, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)=""/59, 0x3b) r1 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10) 32.848783109s ago: executing program 0 (id=266): mkdir(0x0, 0x111) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x140341) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) lseek(r2, 0x4, 0x0) 32.81983957s ago: executing program 32 (id=266): mkdir(0x0, 0x111) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x140341) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) lseek(r2, 0x4, 0x0) 20.584776901s ago: executing program 1 (id=391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x15, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 20.521464803s ago: executing program 1 (id=393): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x62) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000680)="96f0a1e5278d67988155b606d96ff2e7aaa2e42879fbf0a162e9e9c3fbbd36584e64235dab8787c77b2e76fb523e860c66339771363e4875d62a7341d7c9bc60243f", 0x42}, {&(0x7f0000000700)="b5dd177af4023d035700dd7b6f8b2eca96140f376d93dadf9cb7c6f5ab47c1730e05b0d71cdffc9f0c996e62f44c74b4ca5e2e13d9b8077ae574928bca22df8c89e55e3cf5841b9871897f2a560f60f5", 0x50}, {&(0x7f0000000780)="39f3207ee9ab868d2ced54a494e8ab7878da7a9840b1c54985ad83c3fff2d60fbbe66ff3d129a7f24a651a3a7c22cc23be9d716df4f11db2190981eabcaf8064fe08dcfba069c6e08b0c518b3851c98e3687a09f4c982616e733e3532fa1367a10c7dda5035e90f02e518f5eda2c0feb9287cc", 0x73}, {&(0x7f0000000800)="70cd84f4975da8f817d7ec6355228ed27682b6ec145097d7c3c668145f27358f72f6c08cf7d6570f62df4196619853c34109591056f203ab9b8ce845ff3b9d72ae5f4c8f452e87839ac686c2", 0x4c}, {&(0x7f0000000880)="d288b06bbe7d15e2da7e0fbf8bdcab3c38731b3256a1743634345ad766578e228513797a3f05f189ff", 0x29}, {&(0x7f0000000900)="6db3e6", 0x3}], 0x6}}], 0x1, 0x4001c00) 20.517857873s ago: executing program 1 (id=394): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x47f, 0xc010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd, 0x80, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x23, 0x30, 0x75}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0xff, 0x2, {0xa, 0x25, 0x25, 0x10000, 0x2, 0xe80f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xb5, 0xc3, {0xa, 0x25, 0x25, 0x0, 0x8, 0x3}}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, 0xffffffffffffffff) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x104000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000000c0)=0x9) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='cifs\x00', 0x118000, &(0x7f00000001c0)='\x00') 18.061105978s ago: executing program 1 (id=405): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000007000000000a"], 0x17c}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file1\x00', 0x10, &(0x7f0000001cc0)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp862,utf8=1,shortname=lower,shortname=lower,utf8=1,iocharset=iso8859-15,utf8=1,iocharset=macgaelic,uni_xlate=1,check=strict,rodir,utf8=0,shortname=lower\x00\x00\x00\x00ir,shortname=lower,\x00'], 0x3, 0x2ab, &(0x7f00000002c0)="$eJzs3U9rI2UYAPBnksk/L+nBkwg7oAdPy9ZP0CIriAVBiaAeNLhZkCQs7EKgVYx78hP4CQS/jRfxC/gBFG/bgzgynUyatNPWaEmK/n6Xvnme95n3eTtT2su8/ezV6fjRk2ePn3/1S3S7STQO4iBOk9iLRlS+iVo//1YfBwDuuNM8j9/zUqcMHa/PaEX957SxlQYBgFu3+vt/170AANvxwUcfv3t4dPTw/SzrRky/nQ2SKL+W+cPH8UVMYhQPoh9/RORL5fjtd44eRpoV9uL16Xw2KCqnn/74ovxz4vDXiLP6/ejHXn39flZaqZ/PBq14abH+wSRG730f/Xi5vv7NmvoYtOON11b6vx/9+OnzeBKTeLTYe1X/9X6WvZV/9+LLT4poUZ/MZ4POct5idnPLtwYAAAAAAAAAAAAAAAAAAAAAgP+w+1mlE+W5O9X5O9XB/2W2u5i/lr/mfKD5yvk8D7Isy5OL9Wm8kka6q30DAAAAAAAAAAAAAAAAAADAXfLs+GQ8nExGTzcYfHg51Yy1SPVafxWJRvn5ZDyMP9cv2ImIjVZfG9zbtCqaEe2ilUkScWFOu+zwivJeROdsEzev1bw6VVzgUqpX9DN6mqQxHv6Q/7ObcnGQLCO91dS9KNcqIr1ysBL5t4tOunE2qJ6u8TC56eZ2Y4Mlmn+/n3zl8bu5vF339BZqJveuWb2dbrKd5SDvX5FKIqK1/GZef53WrdzB858UAAAAAAAAAAAAAAAAAABgy85f+q1JPt9BQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwA+f//3+DwXxRfCmV9yOOT8Z5s4iksUjteIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8D/wVAAD//y8hXHc=") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYRESDEC=r2]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000000c0)=@md0, r5, &(0x7f0000000380)) syz_open_procfs(r4, &(0x7f0000000000)='mountinfo\x00') syz_emit_ethernet(0x56, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "bdac70", 0x20, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x7e, 0x6, 0x7, 0x4, [{0x1, 0x1, "cbd238e05305"}, {0x1, 0x1, "3084c3ba1711"}]}}}}}}, 0x0) ftruncate(r3, 0x8008976) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r6, &(0x7f0000000000)=[{0x0}, {&(0x7f00000000c0)="0d1b5ef9923159", 0x7}, {0x0, 0x42}], 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) 16.918716821s ago: executing program 1 (id=414): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235222bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856a24cedd963c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75474939c664ff1849f8fbc403959f9c2de4b235261aba126be33a1762054cf2fad7dfc679c611c046f5764cfd3b84268cf21e9b8cd374866e2d55c4bfdd180a43e4fae7f5ddab3469cda8da12808566a285524ac700c24595dcd5c7784b30a4baafe80e10cecfe2393ecc927520408071c6901003dd15417429bfa90a54f501dd193865ebbb27e85c50605c45115595b04c410c2b2d6ef11e53872cba8091c88311d00c175bcf0a780265fe60228a640a746847d0138dc9f673fac8658d57ebaab4212bdcb1625a73bbda3c4a6e4282480077305b6afa3ebbcd525e588bf55760e556f1211a02cfe2e533ce915d86d62374332773744fcc8fdaf51812edd747c93b23bbe70d"], 0x1, 0x553a, &(0x7f0000006040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 16.585579907s ago: executing program 1 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x11, 0xb}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@ipv4_newrule={0x74, 0x20, 0x100, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x14, 0x7, 0x5, 0x0, 0x0, 0x8, 0x10}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}, @FRA_DST={0x8, 0x1, @remote}, @FRA_FLOW={0x8, 0xb, 0x7}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, @FRA_DST={0x8, 0x1, @empty}, @FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x16}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x440d0}, 0x4050) 16.585362907s ago: executing program 33 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x11, 0xb}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@ipv4_newrule={0x74, 0x20, 0x100, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x14, 0x7, 0x5, 0x0, 0x0, 0x8, 0x10}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}, @FRA_DST={0x8, 0x1, @remote}, @FRA_FLOW={0x8, 0xb, 0x7}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, @FRA_DST={0x8, 0x1, @empty}, @FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x16}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x440d0}, 0x4050) 6.831488451s ago: executing program 4 (id=494): setuid(0xee00) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.782027264s ago: executing program 4 (id=497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1000}}}}}}, 0x0) 6.695917878s ago: executing program 4 (id=499): r0 = userfaultfd(0x80001) r1 = epoll_create(0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x5, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000540)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f00000008c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0xb0000001}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x6, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x10000, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x4000038, 0x800003, 0x200, 0x82, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0x7, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x0, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x22, 0x2, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000880)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) write$P9_RVERSION(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r8], 0x15) r10 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000280)={0x43}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 5.836912758s ago: executing program 4 (id=504): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$pid(0x2, 0x0, 0x2004) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x9, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/115, 0x0, 0x80a0000}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0xfffffff2, @ipv4={'\x00', '\xff\xff', @local}, 0x108}, 0x1c) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="e0778729715fb6"], 0x50) 4.399781565s ago: executing program 4 (id=525): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xc0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 3.826709372s ago: executing program 5 (id=526): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@id={0x2, 0x0, @b}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x26008084}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0xd60bff4132ed1e6f) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000000964000008900"/20, @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) 3.489376627s ago: executing program 2 (id=527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3.444264769s ago: executing program 2 (id=528): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a4548a7177330772"}}, 0x48}}, 0x0) syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file0\x00', 0x800038, &(0x7f0000000000)=ANY=[], 0x4, 0x550c, &(0x7f00000089c0)="$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") syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x88002b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xfd, 0x555e, &(0x7f000000b3c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x2}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000900000000000000080009000d000000", 0x24) 3.44390606s ago: executing program 5 (id=529): r0 = userfaultfd(0x80001) r1 = epoll_create(0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x5, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000540)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f00000008c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0xb0000001}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x6, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x10000, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x4000038, 0x800003, 0x200, 0x82, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0x7, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x0, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x22, 0x2, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000880)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r9], 0x15) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 3.417135431s ago: executing program 4 (id=531): socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[], 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0xfffffeb1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) fallocate(r4, 0x10, 0x10c01, 0x8000) fallocate(r2, 0x20, 0x4000, 0x8000) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0xc0fe, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2.619720868s ago: executing program 3 (id=537): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.611103698s ago: executing program 5 (id=538): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004"], 0x48) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0xe70f, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x12, 0x0, 0x0, 0x406}, 0x40020000) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 2.249438515s ago: executing program 5 (id=539): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, 0x0, 0x0) 2.248982545s ago: executing program 3 (id=540): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) unshare(0x6020400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000700)={{r0}, "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"}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRES64=r2], 0x1, 0x3a2, &(0x7f0000000340)="$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") r4 = openat(r3, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x10) unshare(0x20000100) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031500000000000020001280f338df84c215e15a00113f3e59c2bd0eb29c723b0b00e4ff6172696467650000100002800a0700"/60], 0x40}, 0x1, 0x0, 0x0, 0x20041809}, 0x40) getpeername$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) 2.196314887s ago: executing program 5 (id=541): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000084000000000100000100000000000000", @ANYRES32, @ANYBLOB="00000000fdfffffffffffffff65f2e"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 2.194759728s ago: executing program 3 (id=543): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x88c7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) 2.180441519s ago: executing program 2 (id=544): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xc0, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 2.1333047s ago: executing program 5 (id=545): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x798, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x149007, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) write$P9_RREADLINK(r6, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) truncate(&(0x7f0000000080)='./file1\x00', 0x7fff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000cf0a6d66e1b682c7000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect$cdc_ecm(0x2, 0x55, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x2e, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x1, 0x400, 0x10}, [@mdlm_detail={0x4, 0x24, 0x13, 0x6}, @mdlm_detail={0x4, 0x24, 0x13, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x0, 0x5}}}}}]}}]}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff3, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)={0x4f8, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x2}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x94, 0x111, 0x0, 0x1, {0x90, 0x5, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x43c, 0x111, 0x0, 0x1, {0x438, 0x5, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xde}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x314, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x154, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfbff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfa3d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x158, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfeff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x2404c0d0}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 2.13309083s ago: executing program 3 (id=546): syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4000000, &(0x7f00000005c0), 0x1, 0x530, &(0x7f0000000600)="$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") 1.71501708s ago: executing program 3 (id=547): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f086dd1f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) 1.624191174s ago: executing program 3 (id=548): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0xc02, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT], 0x5, 0x2a6, &(0x7f0000000b80)="$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") r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x2002c084) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ftruncate(r3, 0x7fffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = getpid() r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) tkill(r4, 0x0) syz_usb_connect(0x3, 0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011003d55fc8089904a489cd4f010203010902230001020030050904e88001ffa57350082403070000000009050802"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 1.29116345s ago: executing program 2 (id=549): socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000201"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x26, 0x0, 0xb, 0x63552b74}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x94) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) fsmount(r3, 0x0, 0x0) r6 = gettid() fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x3ed4, 0x6, r6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$netlink(0x10, 0x3, 0x4) 1.262617951s ago: executing program 6 (id=550): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xb}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x409, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) unshare(0x60000600) r1 = socket$inet(0x2, 0xa, 0x9) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x48) 1.201472484s ago: executing program 6 (id=551): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = eventfd2(0x3, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000024c0)={0x2020}, 0x2020) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x50000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xff03, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r9 = eventfd2(0xfc, 0x80002) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = openat$selinux_policy(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r12, 0x0) getsockopt$packet_int(r11, 0x107, 0x15, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = accept$inet(0xffffffffffffffff, &(0x7f00000017c0)={0x2, 0x0, @broadcast}, &(0x7f0000001800)=0x10) r15 = eventfd(0xd0) r16 = socket$inet6_icmp(0xa, 0x2, 0x3a) r17 = eventfd(0x9) io_submit(r0, 0x9, &(0x7f0000001940)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xa, r1, &(0x7f00000000c0)="d61ef56fba522104e95a54087d4fbcafa6adda4f4c3afc34f8c3db7b9426ba6ede68e505b8cb5c05f7f5b15efcae62dcd124518734c585f2eed08f9a44037aac59ffc72883578cb597ba944c1de1db34a7", 0x51, 0x2, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x401, 0xffffffffffffffff, &(0x7f0000000200)="c05eb39f3f17bb2e4545b620ed533fa85b50b2773b5c31704c54fccfa8768160d69a189e012996d241c4e8b14e17ea9c1e3fcc31bf10204870cdbaa187360d628e7c08b80cc4861b", 0x48, 0x5, 0x0, 0x2, r3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000300)="92b3a021460106991507f3723d87bb969b45c3d53f138cdf41d9c2fb7f92759cb6d6d140aaeea28c1c796937422c2e4d51fe352278e212fee43e5d2bfe6577b43d04a9b5a736b27a8bd7ab1e2d6f1d89d54c59b70c76d9e3dc58cf747bd175ae339e237db8893dec1fec0f9625d9f35741758d3d28bf2cbcde49b0207a1e33154a6aa6c24860924c5d61e549f5ffd02ee010ad3f4d64992768feab3f3eede33f7be93f96cd7261747997a70ca3fba99feaf01a07f3e8f044418df8", 0xbb, 0x0, 0x0, 0x3, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x8, r6, &(0x7f00000004c0)="c241bf8c96992a6763e46f837afe8d05090767435d20073217aa26dc966de824d86eba7d6b5e62bc74047428464ab86d4f4eb2e2df8ddff1aec608d195cccc6cba470a0a74403e6c962660ae28c4d0e8da34f7fe174a5a114cdc67b553f0e7a68ed31f0a60cee7f9349b01d5d346140b3cce120602fe9b83a76c24e32c065b2b29ff0392cf091a37eca46b118a0353c3a3d4fef75b531e5d2504ad7be83b4865ce331e375207611836415ade8e00b94b63e4b9a55d4d2577eac3b88d94d35ea37f5a2f42f12f0f7f3be4b41617431522f62c4df0cdca6cc7df54863389dac1771ea1491a473af2b64498bb8b76ab15a8306de6ebff279750", 0xf8, 0x7f, 0x0, 0x2, r7}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0xd47, r8, &(0x7f0000000640)="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", 0x1000, 0x1, 0x0, 0x2, r9}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x8, 0x5, r10, &(0x7f0000001680)="df67d5a46a8d0a4fbda356a4a7606672c0cc65d27346073ad34a45fbddd0f5a524d1e15f70", 0x25, 0xffffffffffffe4da, 0x0, 0x1}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x6, r13, &(0x7f0000001740)="30d87fa95868f75b351e1f", 0xb, 0x200, 0x0, 0x3}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0xc0d7, r14, &(0x7f0000001840)="99d5ec7600", 0x5, 0xc, 0x0, 0x1, r15}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x5, 0x5cf3, r16, &(0x7f00000018c0)="ac9669f3da96d54f423f046c98b3e57ad3412587a9801e93d99802b6e1673f7c5243b544a068805590ad531a881794c0edc1d75948805682aac5e42842", 0x3d, 0x8b, 0x0, 0x0, r17}]) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r18) sendmsg$TIPC_NL_LINK_SET(r18, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r19, 0x1, 0x70bd28, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x88c4) 1.045330701s ago: executing program 2 (id=552): r0 = socket(0x22, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz9GJwjAABuA/bbhrOY7eGjeQI7iHruMwjtJXHxQqDUWcQH34PkLyQ/InJLxVl9+krun/K8kx3WXaD33y0x+SoW1N28maDOXRrOXpmnFMzblveVnaUtZRbtc5+d4abZ6X/JVkfS2706v+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf7B4AAP//9mIL1A==") sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e40)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_RATE64={0xc, 0x4, 0x6250cd94e2b012fa}]}}]}, 0x64}}, 0x44080) 987.635314ms ago: executing program 6 (id=553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000130001000000000000000100e000000200000000000000000000000000000000000000000002000000000000000000de0000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) 914.783767ms ago: executing program 2 (id=554): dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./file1/file2\x00', &(0x7f0000001600)='devtmpfs\x00', 0x40008, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) futex(0x0, 0x85, 0x9, 0x0, 0x0, 0xc5fffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000600)) listxattr(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x458, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2a0, 0x2e8, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 914.603307ms ago: executing program 6 (id=555): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100705b8b74000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}}, 0xc044) mknodat$loop(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) creat(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) 183.3µs ago: executing program 6 (id=556): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) pwrite64(r1, &(0x7f0000001f40)="c934d8bd4cdf922148b302e246c4539341563306157f4b3f58e023d35f1ba36603d1bd7163297379a6d20bd4424b659a702a3f2795a106548ab851a9d4e91dc465b70e0ca34eda3df0274a5af10b7c369f2dc755a67ff8daa9c0e0c73010e20f79f50f9e00", 0x65, 0x100000000) (async) r2 = syz_io_uring_complete(0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000004c0)={"416d02842536377ed94c2728f4d1f736", 0x0, 0x0, {0x7, 0x4}, {0x8, 0x81}, 0x5c57, [0x80000001, 0x8, 0x99b6, 0x8, 0x5, 0x4, 0x7309, 0xe4a6, 0x1, 0x3, 0x9, 0x100000001, 0x1, 0x6, 0x7cbe, 0x6]}) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x80000, 0x44) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000440)={r5, 0x6, 0x6}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000005c0)={{r2}, r3, 0x10, @unused=[0x4, 0x8, 0x4e97, 0x9], @devid=r5}) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x260, 0xffffff7a, 0xffffffff, 0x260, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a54f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000300000000a1602a6800", 0x80, 0x3, {0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x1, 0x3, 0x1, 0x2, 0x4], 0x6}, {0x4, [0x6, 0x4, 0x3, 0x3, 0x1], 0x4, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="50c338e088a8", 0x6, 0x8, [0x31, 0xc, 0x2a, 0x39, 0xa, 0x24, 0x6, 0x4, 0x18, 0x2f, 0x2c, 0x2e, 0x2, 0x3a, 0x2a, 0xd], 0x2, 0x80000000, 0x40}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 0s ago: executing program 6 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): d value for 'fd' [ 28.095188][ T24] audit: type=1400 audit(1790164318.780:161): avc: denied { write } for pid=416 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.115622][ T24] audit: type=1400 audit(1790164318.780:162): avc: denied { create } for pid=416 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.137055][ T24] audit: type=1400 audit(1790164318.780:163): avc: denied { ioctl } for pid=416 comm="syz.1.34" path="socket:[15296]" dev="sockfs" ino=15296 ioctlcmd=0x5865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.169219][ T24] audit: type=1400 audit(1790164318.870:164): avc: denied { mounton } for pid=421 comm="syz.4.35" path="/3/file0" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 28.192645][ T24] audit: type=1400 audit(1790164318.890:165): avc: denied { getopt } for pid=421 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.367398][ T24] audit: type=1400 audit(1790164319.160:166): avc: denied { mounton } for pid=439 comm="syz.4.43" path="/6/bus" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.389446][ T440] F2FS-fs (loop4): invalid crc value [ 28.390445][ T440] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.416072][ T440] F2FS-fs (loop4): Start checkpoint disabled! [ 28.422946][ T440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 28.464559][ T316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.534731][ T366] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.594605][ T20] cdc_mbim 1-1:1.0: bind() failure [ 28.604826][ T20] cdc_ncm 1-1:1.1: bind() failure [ 28.693138][ T440] F2FS-fs (loop4): invalid crc value [ 28.701609][ T440] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.708174][ T316] usb 2-1: Using ep0 maxpacket: 32 [ 28.754909][ T366] udc-core: couldn't find an available UDC or it's busy [ 28.762104][ T366] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.770035][ T440] F2FS-fs (loop4): Start checkpoint disabled! [ 28.795174][ T440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 28.803422][ T287] usb 1-1: USB disconnect, device number 2 [ 28.894615][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.904847][ T316] usb 2-1: config 0 has no interfaces? [ 28.910597][ T316] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.920849][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.997601][ T316] usb 2-1: config 0 descriptor?? [ 29.205397][ T455] erofs: (device loop3): mounted with root inode @ nid 36. [ 29.223782][ T24] audit: type=1400 audit(1790164320.010:167): avc: denied { map } for pid=454 comm="syz.3.45" path="/6/file0/file2" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.224571][ T455] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 29.249568][ T316] usb 2-1: USB disconnect, device number 2 [ 29.257448][ T455] erofs: (device loop3): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 29.274772][ T455] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 29.284915][ T24] audit: type=1400 audit(1790164320.010:168): avc: denied { execute } for pid=454 comm="syz.3.45" path="/6/file0/file2" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.285679][ T455] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 29.309541][ T463] netlink: 104 bytes leftover after parsing attributes in process `syz.4.46'. [ 29.317388][ T455] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 29.335832][ T455] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 29.344096][ T466] netlink: 252 bytes leftover after parsing attributes in process `syz.4.48'. [ 29.345102][ T455] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 29.364875][ T455] attempt to access beyond end of device [ 29.364875][ T455] loop3: rw=524288, want=34359738368, limit=16 [ 29.380995][ T470] netlink: 56 bytes leftover after parsing attributes in process `syz.4.49'. [ 29.383674][ T455] attempt to access beyond end of device [ 29.383674][ T455] loop3: rw=524288, want=136, limit=16 [ 29.405206][ T455] attempt to access beyond end of device [ 29.405206][ T455] loop3: rw=524288, want=88, limit=16 [ 29.416778][ T455] attempt to access beyond end of device [ 29.416778][ T455] loop3: rw=0, want=24, limit=16 [ 29.427586][ T455] attempt to access beyond end of device [ 29.427586][ T455] loop3: rw=0, want=24, limit=16 [ 29.442940][ T472] EXT4-fs (loop0): Ignoring removed bh option [ 29.451644][ T477] netlink: 87 bytes leftover after parsing attributes in process `syz.4.52'. [ 29.464559][ T472] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 29.466045][ T477] IPv6: Can't replace route, no match found [ 29.485655][ T472] EXT4-fs (loop0): 1 truncate cleaned up [ 29.494651][ T472] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,bsdgroups,usrjquota=,,errors=continue [ 29.649671][ T484] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 29.683375][ T484] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 29.734838][ T489] ====================================================== [ 29.734838][ T489] WARNING: the mand mount option is being deprecated and [ 29.734838][ T489] will be removed in v5.15! [ 29.734838][ T489] ====================================================== [ 29.797679][ T489] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.56: bad orphan inode 15 [ 29.807838][ T489] ext4_test_bit(bit=14, block=5) = 0 [ 29.813279][ T489] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 29.872512][ T487] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.55: Bad quota inum: 1, type: 1 [ 29.884741][ T487] EXT4-fs warning (device loop4): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 29.903323][ T487] EXT4-fs (loop4): mount failed [ 30.104867][ T503] netlink: 'syz.0.56': attribute type 4 has an invalid length. [ 30.871768][ T506] EXT4-fs (loop4): Unrecognized mount option "uid>00000000000000000000" or missing value [ 31.107200][ T520] tmpfs: Unknown parameter '00000000000000000000' [ 31.126069][ T520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 31.144536][ T520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 31.157897][ T520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 31.404515][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.605025][ T537] device batadv_slave_0 entered promiscuous mode [ 31.617068][ T537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 31.655101][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 31.664043][ T539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=539 comm=syz.1.70 [ 31.804584][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.824694][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.924595][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 31.943998][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.952236][ T25] usb 5-1: SerialNumber: syz [ 31.968413][ T564] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.978369][ T564] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 31.989413][ T564] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 31.998473][ T25] usb 5-1: 0:2 : does not exist [ 32.004204][ T544] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 32.023070][ T544] F2FS-fs (loop2): invalid crc value [ 32.030004][ T544] F2FS-fs (loop2): invalid crc value [ 32.035535][ T544] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 32.206071][ T522] udc-core: couldn't find an available UDC or it's busy [ 32.341358][ T522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 32.386189][ T582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 32.398432][ T25] usb 5-1: USB disconnect, device number 2 [ 32.565855][ T582] F2FS-fs (loop0): invalid crc value [ 32.573048][ T582] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 32.594214][ T582] F2FS-fs (loop0): Start checkpoint disabled! [ 32.606372][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.636887][ T582] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 33.015300][ T597] erofs: (device loop1): mounted with root inode @ nid 36. [ 33.186719][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 33.186729][ T24] audit: type=1400 audit(1790164323.980:190): avc: denied { connect } for pid=604 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.231562][ T24] audit: type=1400 audit(1790164324.020:191): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.251659][ T9] attempt to access beyond end of device [ 33.251659][ T9] loop0: rw=1, want=45112, limit=40427 [ 33.263625][ T9] attempt to access beyond end of device [ 33.263625][ T9] loop0: rw=2049, want=40984, limit=40427 [ 33.419068][ T607] F2FS-fs (loop4): Invalid segment count (6) [ 33.425566][ T607] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 33.426448][ T614] capability: warning: `syz.2.90' uses deprecated v2 capabilities in a way that may be insecure [ 33.434626][ T607] F2FS-fs (loop4): invalid crc value [ 33.468262][ T607] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 33.475246][ T623] Zero length message leads to an empty skb [ 33.547745][ T607] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 33.584562][ T607] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 33.659333][ T632] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.664738][ T24] audit: type=1400 audit(1790164324.450:192): avc: denied { map } for pid=606 comm="syz.4.85" path="/16/bus/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.670001][ T632] ------------[ cut here ]------------ [ 33.693431][ T632] WARNING: CPU: 1 PID: 632 at fs/ext4/xattr.c:1662 ext4_xattr_set_entry+0x32b6/0x3860 [ 33.697919][ T24] audit: type=1400 audit(1790164324.490:193): avc: denied { execute } for pid=606 comm="syz.4.85" path="/16/bus/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.703337][ T632] Modules linked in: [ 33.728166][ T634] EXT4-fs (loop3): Unrecognized mount option "fsname=ext4" or missing value [ 33.730120][ T632] CPU: 1 PID: 632 Comm: syz.2.94 Not tainted syzkaller #0 [ 33.746155][ T632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.746497][ T24] audit: type=1400 audit(1790164324.490:194): avc: denied { listen } for pid=606 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.756335][ T632] RIP: 0010:ext4_xattr_set_entry+0x32b6/0x3860 [ 33.776329][ T24] audit: type=1400 audit(1790164324.490:195): avc: denied { connect } for pid=606 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.782631][ T632] Code: 80 00 00 00 e9 ac fd ff ff e8 e6 3a 84 ff 48 8b 44 24 30 4c 8b 64 24 38 48 8b 9c 24 88 00 00 00 e9 a9 f2 ff ff e8 ca 3a 84 ff <0f> 0b e9 c1 d7 ff ff e8 be 3a 84 ff e9 24 fb ff ff e8 b4 3a 84 ff [ 33.822689][ T632] RSP: 0018:ffffc9000124f020 EFLAGS: 00010287 [ 33.827807][ T24] audit: type=1400 audit(1790164324.490:196): avc: denied { accept } for pid=606 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.828949][ T632] RAX: ffffffff81e079e6 RBX: 0000000000000000 RCX: 0000000000080000 [ 33.850117][ T620] F2FS-fs (loop0): Invalid segment count (6) [ 33.857762][ T632] RDX: ffffc9000251f000 RSI: 0000000000005686 RDI: 0000000000005687 [ 33.865220][ T620] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 33.871922][ T632] RBP: ffffc9000124f270 R08: 0000000000000001 R09: 0000000000000004 [ 33.888144][ T632] R10: dffffc0000000000 R11: fffff52000249db0 R12: ffff88812d240198 [ 33.893631][ T620] F2FS-fs (loop0): invalid crc value [ 33.896192][ T632] R13: ffff88813065e038 R14: ffffc9000124f540 R15: dffffc0000000000 [ 33.921527][ T620] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 33.942304][ T632] FS: 00007f9eb502a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.951773][ T632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.954386][ T620] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 33.959043][ T632] CR2: 00007f4bdf660000 CR3: 0000000117af4000 CR4: 00000000003506a0 [ 33.966149][ T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.975540][ T632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.984337][ T620] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.992443][ T632] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.001337][ T24] audit: type=1400 audit(1790164324.800:197): avc: denied { mount } for pid=633 comm="syz.3.95" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.008612][ T632] Call Trace: [ 34.038241][ T632] ? kmem_cache_free+0x100/0x2d0 [ 34.043241][ T632] ? __kasan_slab_free+0x11/0x20 [ 34.048520][ T632] ? ext4_xattr_ibody_set+0x330/0x330 [ 34.054365][ T632] ? kmem_cache_free+0x100/0x2d0 [ 34.060748][ T632] ? __mb_cache_entry_free+0x20a/0x320 [ 34.066378][ T632] ? mb_cache_entry_delete_or_get+0x1fc/0x210 [ 34.073093][ T632] ext4_xattr_block_set+0x4bf/0x2a80 [ 34.078904][ T632] ? __getblk_gfp+0x3b/0x780 [ 34.083885][ T632] ? ext4_xattr_block_find+0x500/0x500 [ 34.090766][ T632] ext4_expand_extra_isize_ea+0xf50/0x19d0 [ 34.096948][ T632] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 34.103232][ T632] __ext4_mark_inode_dirty+0x3d6/0x610 [ 34.109722][ T632] ext4_evict_inode+0xea4/0x1780 [ 34.115189][ T632] ? _raw_spin_unlock+0x4d/0x70 [ 34.120105][ T632] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 34.126629][ T632] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 34.132832][ T632] evict+0x4a9/0x940 [ 34.136835][ T632] ? mode_strip_sgid+0x150/0x150 [ 34.141793][ T632] ? _raw_spin_lock+0x94/0xf0 [ 34.146607][ T632] ? _raw_spin_trylock_bh+0x150/0x150 [ 34.152014][ T632] ? ext4_get_projid+0x140/0x140 [ 34.158096][ T632] ? __kasan_check_write+0x14/0x20 [ 34.163234][ T632] iput+0x654/0x7e0 [ 34.167133][ T632] ext4_orphan_cleanup+0x989/0xd40 [ 34.172439][ T632] ext4_fill_super+0x867e/0x8d90 [ 34.177553][ T632] ? ext4_mount+0x40/0x40 [ 34.181954][ T632] ? vscnprintf+0x80/0x80 [ 34.187085][ T632] ? set_blocksize+0x1eb/0x3a0 [ 34.192245][ T632] ? sb_set_blocksize+0xaa/0xf0 [ 34.197352][ T632] mount_bdev+0x26a/0x380 [ 34.201714][ T632] ? ext4_mount+0x40/0x40 [ 34.214510][ T632] ext4_mount+0x34/0x40 [ 34.218736][ T632] legacy_get_tree+0xed/0x190 [ 34.223435][ T632] ? ext4_chksum+0x180/0x180 [ 34.228152][ T24] audit: type=1400 audit(1790164324.930:198): avc: denied { mounton } for pid=644 comm="syz.1.96" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 34.264504][ T632] vfs_get_tree+0x89/0x260 [ 34.270310][ T632] do_new_mount+0x25a/0xa30 [ 34.274950][ T632] path_mount+0x581/0xca0 [ 34.279337][ T632] __se_sys_mount+0x320/0x390 [ 34.284045][ T632] ? __x64_sys_mount+0xd0/0xd0 [ 34.289343][ T24] audit: type=1400 audit(1790164324.940:199): avc: denied { map } for pid=644 comm="syz.1.96" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 34.312362][ T632] __x64_sys_mount+0xbf/0xd0 [ 34.317012][ T632] do_syscall_64+0x31/0x40 [ 34.321647][ T632] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.334580][ T632] RIP: 0033:0x7f9eb65d23ca [ 34.339046][ T632] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.377619][ T632] RSP: 002b:00007f9eb5029e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.386159][ T632] RAX: ffffffffffffffda RBX: 00007f9eb5029ee0 RCX: 00007f9eb65d23ca [ 34.394179][ T632] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9eb5029ea0 [ 34.403528][ T632] RBP: 0000200000000180 R08: 00007f9eb5029ee0 R09: 000000000080078b [ 34.411670][ T632] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 34.420111][ T5] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.424604][ T632] R13: 00007f9eb5029ea0 R14: 0000000000000491 R15: 00002000000000c0 [ 34.431225][ T5] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.452912][ T5] usb 5-1: config 0 interface 0 has no altsetting 0 [ 34.460610][ T5] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 34.470344][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.470994][ T632] ---[ end trace 132e29034021192a ]--- [ 34.484833][ T632] ------------[ cut here ]------------ [ 34.486020][ T646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 34.490558][ T5] usb 5-1: config 0 descriptor?? [ 34.503686][ T632] EA inode 11 i_nlink=2 [ 34.503783][ T632] WARNING: CPU: 0 PID: 632 at fs/ext4/xattr.c:1002 ext4_xattr_inode_update_ref+0x4ea/0x540 [ 34.506705][ T646] System zones: [ 34.507997][ T632] Modules linked in: [ 34.518353][ T457] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.521606][ T632] [ 34.526013][ T646] 1-12 [ 34.533142][ T632] CPU: 0 PID: 632 Comm: syz.2.94 Tainted: G W syzkaller #0 [ 34.533149][ T632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.533167][ T632] RIP: 0010:ext4_xattr_inode_update_ref+0x4ea/0x540 [ 34.533185][ T632] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 99 10 be ff 49 8b 34 24 48 c7 c7 60 eb 2c 85 44 89 fa e8 c6 61 98 02 <0f> 0b 4c 8b 74 24 08 4c 8b 64 24 10 e9 a5 fe ff ff e8 b0 fd 9b 02 [ 34.535826][ T646] [ 34.538355][ T632] RSP: 0018:ffffc9000124f080 EFLAGS: 00010246 [ 34.557141][ T632] [ 34.557153][ T632] RAX: 04036ff409cfe100 RBX: ffff88811c8e8ec8 RCX: 0000000000080000 [ 34.557160][ T632] RDX: ffffc9000251f000 RSI: 000000000007ffff RDI: 0000000000080000 [ 34.557168][ T632] RBP: ffffc9000124f170 R08: ffff8881f7027453 R09: 1ffff1103ee04e8a [ 34.557177][ T632] R10: dffffc0000000000 R11: ffffed103ee04e8b R12: ffff88811c8e8da8 [ 34.557185][ T632] R13: dffffc0000000000 R14: ffff88811c8e8d68 R15: 0000000000000002 [ 34.557196][ T632] FS: 00007f9eb502a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.557204][ T632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.557211][ T632] CR2: 00007f3c41a9cff8 CR3: 0000000117af4000 CR4: 00000000003506b0 [ 34.557223][ T632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.557231][ T632] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.557235][ T632] Call Trace: [ 34.557253][ T632] ? ext4_xattr_block_csum+0x560/0x560 [ 34.557274][ T632] ? __kasan_check_write+0x14/0x20 [ 34.564257][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.584485][ T632] ? ext4_xattr_inode_iget+0x282/0x370 [ 34.586950][ T646] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.96: missing EA_INODE flag [ 34.591993][ T632] ext4_xattr_set_entry+0xb09/0x3860 [ 34.594440][ T646] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.96: error while reading EA inode 12 err=-117 [ 34.602341][ T632] ? __brelse+0x5d/0x90 [ 34.620575][ T646] EXT4-fs (loop1): 1 orphan inode deleted [ 34.626510][ T632] ? ext4_xattr_ibody_set+0x330/0x330 [ 34.626524][ T632] ext4_xattr_ibody_set+0x114/0x330 [ 34.626544][ T632] ext4_expand_extra_isize_ea+0xf9b/0x19d0 [ 34.635290][ T646] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue [ 34.644561][ T632] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 34.644584][ T632] __ext4_mark_inode_dirty+0x3d6/0x610 [ 34.764514][ T52] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 34.770025][ T632] ext4_evict_inode+0xea4/0x1780 [ 34.784559][ T457] usb 2-1: Using ep0 maxpacket: 32 [ 34.788831][ T632] ? _raw_spin_unlock+0x4d/0x70 [ 34.804228][ T632] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 34.810266][ T632] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 34.816195][ T632] evict+0x4a9/0x940 [ 34.820105][ T632] ? mode_strip_sgid+0x150/0x150 [ 34.825085][ T632] ? _raw_spin_lock+0x94/0xf0 [ 34.830400][ T632] ? _raw_spin_trylock_bh+0x150/0x150 [ 34.835811][ T632] ? ext4_get_projid+0x140/0x140 [ 34.840768][ T632] ? __kasan_check_write+0x14/0x20 [ 34.845937][ T632] iput+0x654/0x7e0 [ 34.849775][ T632] ext4_orphan_cleanup+0x989/0xd40 [ 34.855026][ T632] ext4_fill_super+0x867e/0x8d90 [ 34.859984][ T632] ? ext4_mount+0x40/0x40 [ 34.864308][ T632] ? vscnprintf+0x80/0x80 [ 34.868763][ T632] ? set_blocksize+0x1eb/0x3a0 [ 34.873637][ T632] ? sb_set_blocksize+0xaa/0xf0 [ 34.878529][ T632] mount_bdev+0x26a/0x380 [ 34.882875][ T632] ? ext4_mount+0x40/0x40 [ 34.887274][ T632] ext4_mount+0x34/0x40 [ 34.891435][ T632] legacy_get_tree+0xed/0x190 [ 34.896146][ T632] ? ext4_chksum+0x180/0x180 [ 34.900929][ T632] vfs_get_tree+0x89/0x260 [ 34.905397][ T632] do_new_mount+0x25a/0xa30 [ 34.910080][ T632] path_mount+0x581/0xca0 [ 34.914540][ T632] __se_sys_mount+0x320/0x390 [ 34.914786][ T457] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.919248][ T632] ? __x64_sys_mount+0xd0/0xd0 [ 34.919261][ T632] __x64_sys_mount+0xbf/0xd0 [ 34.919281][ T632] do_syscall_64+0x31/0x40 [ 34.919302][ T632] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.929814][ T457] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.934162][ T632] RIP: 0033:0x7f9eb65d23ca [ 34.962605][ T632] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.964583][ T25] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.982261][ T632] RSP: 002b:00007f9eb5029e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.982277][ T632] RAX: ffffffffffffffda RBX: 00007f9eb5029ee0 RCX: 00007f9eb65d23ca [ 34.982285][ T632] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9eb5029ea0 [ 34.982292][ T632] RBP: 0000200000000180 R08: 00007f9eb5029ee0 R09: 000000000080078b [ 34.982310][ T632] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 34.993801][ T25] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.010352][ T632] R13: 00007f9eb5029ea0 R14: 0000000000000491 R15: 00002000000000c0 [ 35.018641][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.027766][ T5] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 35.048233][ T25] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 35.056235][ T632] ---[ end trace 132e29034021192b ]--- [ 35.084339][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.084400][ T5] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 35.095986][ T25] usb 1-1: config 0 descriptor?? [ 35.099700][ T5] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 35.105275][ T632] EXT4-fs (loop2): 1 orphan inode deleted [ 35.111747][ T5] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 35.117571][ T457] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 35.124821][ T5] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 35.133816][ T632] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x0000000000000060,norecovery,resgid=0x0000000000000000,sysvgroups,nogrpid,,errors=continue [ 35.140999][ T5] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 35.163668][ T457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.169736][ T5] samsung 0003:0419:0600.0001: unknown main item tag 0x0 [ 35.177682][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 35.184894][ T5] samsung 0003:0419:0600.0001: unbalanced collection at end of report description [ 35.191288][ T457] usb 2-1: Product: syz [ 35.200933][ T5] samsung 0003:0419:0600.0001: parse failed [ 35.204795][ T52] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 35.211023][ T5] samsung: probe of 0003:0419:0600.0001 failed with error -22 [ 35.219765][ T457] usb 2-1: Manufacturer: syz [ 35.231318][ T5] usb 5-1: USB disconnect, device number 3 [ 35.234750][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.245900][ T457] usb 2-1: SerialNumber: syz [ 35.251858][ T52] usb 4-1: config 0 descriptor?? [ 35.359148][ T657] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.97: bad orphan inode 15 [ 35.369492][ T657] ext4_test_bit(bit=14, block=5) = 0 [ 35.375742][ T657] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 35.554249][ T662] xt_limit: Overflow, try lower: 1207959552/384 [ 35.589483][ T25] samsung 0003:0419:0600.0002: unknown main item tag 0x0 [ 35.597146][ T25] samsung 0003:0419:0600.0002: unknown main item tag 0x0 [ 35.604353][ T25] samsung 0003:0419:0600.0002: unknown main item tag 0x0 [ 35.612861][ T25] samsung 0003:0419:0600.0002: unknown main item tag 0x0 [ 35.620471][ T25] samsung 0003:0419:0600.0002: unknown main item tag 0x0 [ 35.628569][ T25] samsung 0003:0419:0600.0002: unknown main item tag 0x0 [ 35.636068][ T25] samsung 0003:0419:0600.0002: unknown main item tag 0x0 [ 35.643684][ T25] samsung 0003:0419:0600.0002: unbalanced collection at end of report description [ 35.655109][ T25] samsung 0003:0419:0600.0002: parse failed [ 35.661593][ T25] samsung: probe of 0003:0419:0600.0002 failed with error -22 [ 35.810816][ T634] futex_wake_op: syz.3.95 tries to shift op by 144; fix this program [ 35.852241][ T634] futex_wake_op: syz.3.95 tries to shift op by 144; fix this program [ 35.909764][ T280] attempt to access beyond end of device [ 35.909764][ T280] loop4: rw=2049, want=45104, limit=40427 [ 36.044902][ T52] usbhid 4-1:0.0: can't add hid device: -71 [ 36.051591][ T52] usbhid: probe of 4-1:0.0 failed with error -71 [ 36.131660][ T52] usb 4-1: USB disconnect, device number 2 [ 36.291688][ T25] usb 1-1: USB disconnect, device number 3 [ 36.422401][ T666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 36.465664][ T671] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 458786)! [ 36.476841][ T671] EXT4-fs (loop4): group descriptors corrupted! [ 36.694547][ T571] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 36.843972][ T281] attempt to access beyond end of device [ 36.843972][ T281] loop0: rw=2049, want=45112, limit=40427 [ 36.934542][ T571] usb 3-1: Using ep0 maxpacket: 8 [ 37.304773][ T457] usb 2-1: 0:1 : does not exist [ 37.312245][ T457] usb 2-1: 0:2 : does not exist [ 37.323581][ T457] usb 2-1: 0:3 : does not exist [ 37.345994][ T571] usb 3-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 37.363224][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 37.373239][ T571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.385272][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.396878][ T457] usb 2-1: 0:4 : does not exist [ 37.412861][ T457] usb 2-1: unit 0 not found! [ 37.421510][ T571] usb 3-1: Product: syz [ 37.427806][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 37.435932][ T571] usb 3-1: Manufacturer: syz [ 37.443047][ T457] usb 2-1: USB disconnect, device number 3 [ 37.451985][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.465551][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.496918][ T571] usb 3-1: SerialNumber: syz [ 37.507623][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.533352][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.541580][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.557651][ T686] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 37.592995][ T693] FAULT_INJECTION: forcing a failure. [ 37.592995][ T693] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.606128][ T693] CPU: 0 PID: 693 Comm: syz.3.107 Tainted: G W syzkaller #0 [ 37.614987][ T693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.625215][ T693] Call Trace: [ 37.628677][ T693] __dump_stack+0x21/0x24 [ 37.633096][ T693] dump_stack_lvl+0x1a7/0x208 [ 37.637759][ T693] ? show_regs_print_info+0x18/0x18 [ 37.643048][ T693] ? 0xffffffffa0018000 [ 37.647307][ T693] ? __kernel_text_address+0xa0/0x100 [ 37.652765][ T693] dump_stack+0x15/0x1c [ 37.656939][ T693] should_fail+0x3ab/0x500 [ 37.661376][ T693] should_fail_usercopy+0x1a/0x20 [ 37.666706][ T693] _copy_from_user+0x20/0xd0 [ 37.671427][ T693] __copy_msghdr_from_user+0xc9/0x630 [ 37.676929][ T693] ? stack_trace_snprint+0xe0/0xe0 [ 37.682032][ T693] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 37.687318][ T693] ? kasan_set_track+0x5b/0x70 [ 37.692075][ T693] ? kasan_set_track+0x4a/0x70 [ 37.696834][ T693] ? kasan_set_free_info+0x23/0x40 [ 37.702206][ T693] ? ____kasan_slab_free+0x125/0x160 [ 37.707483][ T693] ? __kasan_slab_free+0x11/0x20 [ 37.712432][ T693] ___sys_sendmsg+0x19a/0x2e0 [ 37.717109][ T693] ? __sys_sendmsg+0x280/0x280 [ 37.722162][ T693] ? kstrtouint_from_user+0x1c4/0x220 [ 37.727526][ T693] __sys_sendmmsg+0x2ab/0x4c0 [ 37.732224][ T693] ? __ia32_sys_sendmsg+0x2d0/0x2d0 [ 37.737522][ T693] ? __ia32_sys_read+0x90/0x90 [ 37.742320][ T693] ? debug_smp_processor_id+0x17/0x20 [ 37.747799][ T693] __x64_sys_sendmmsg+0xa0/0xb0 [ 37.754986][ T693] do_syscall_64+0x31/0x40 [ 37.760491][ T693] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.766379][ T693] RIP: 0033:0x7fe04338e159 [ 37.770786][ T693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.790776][ T693] RSP: 002b:00007fe041de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 37.799541][ T693] RAX: ffffffffffffffda RBX: 00007fe043615fa0 RCX: 00007fe04338e159 [ 37.807534][ T693] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 37.815511][ T693] RBP: 00007fe041de7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.823497][ T693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.832011][ T693] R13: 00007fe043616038 R14: 00007fe043615fa0 R15: 00007ffdb05df488 [ 37.914326][ T704] incfs: Options parsing error. -22 [ 37.919815][ T704] incfs: mount failed -22 [ 37.932255][ T706] mmap: syz.4.115 (706) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 37.985686][ T571] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 38.004856][ T571] usb 3-1: unit 5 not found! [ 38.027156][ T571] usb 3-1: USB disconnect, device number 2 [ 38.706321][ T720] xt_NFQUEUE: number of total queues is 0 [ 38.729330][ T720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 38.753610][ T729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 38.753778][ T726] xt_NFQUEUE: number of total queues is 0 [ 38.782643][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.952993][ T742] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 39.000115][ T756] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.021805][ T764] netlink: 76 bytes leftover after parsing attributes in process `syz.3.128'. [ 39.025369][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 39.025380][ T24] audit: type=1400 audit(1790164329.810:213): avc: denied { getopt } for pid=750 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.099161][ T24] audit: type=1400 audit(1790164329.890:214): avc: denied { sys_admin } for pid=767 comm="syz.2.131" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 39.154151][ T771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'. [ 39.520000][ T24] audit: type=1400 audit(1790164330.310:215): avc: denied { setattr } for pid=780 comm="syz.0.135" name="PPTP" dev="sockfs" ino=16358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.545214][ T24] audit: type=1400 audit(1790164330.310:216): avc: denied { bind } for pid=780 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.565462][ T24] audit: type=1400 audit(1790164330.310:217): avc: denied { read } for pid=780 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.592563][ T790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 39.602281][ T784] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.136: bad orphan inode 15 [ 39.613125][ T784] ext4_test_bit(bit=14, block=5) = 0 [ 39.618687][ T784] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 39.644217][ T781] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.663807][ T24] audit: type=1400 audit(1790164330.460:218): avc: denied { write } for pid=792 comm="syz.2.138" name="udp" dev="proc" ino=4026532636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.693646][ T781] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.716509][ T781] EXT4-fs (loop0): 1 truncate cleaned up [ 39.722282][ T781] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue [ 39.773031][ T24] audit: type=1400 audit(1790164330.560:219): avc: denied { nlmsg_read } for pid=792 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.894899][ T571] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 40.359092][ T803] netlink: 76 bytes leftover after parsing attributes in process `syz.1.140'. [ 40.464585][ T571] usb 5-1: Using ep0 maxpacket: 8 [ 40.524714][ T24] audit: type=1400 audit(1790164331.220:220): avc: denied { bind } for pid=780 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.568093][ T797] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.754625][ T571] usb 5-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 40.766481][ T571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.774903][ T571] usb 5-1: Product: syz [ 40.779180][ T571] usb 5-1: Manufacturer: syz [ 40.783847][ T571] usb 5-1: SerialNumber: syz [ 40.892598][ T816] netlink: 144 bytes leftover after parsing attributes in process `syz.0.142'. [ 40.965785][ T818] SELinux: Context system_u:object_r:dri_device_t:s0 is not valid (left unmapped). [ 40.975936][ T24] audit: type=1400 audit(1790164331.770:221): avc: denied { relabelto } for pid=817 comm="syz.0.144" name="file0" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dri_device_t:s0" [ 41.002632][ T24] audit: type=1400 audit(1790164331.770:222): avc: denied { associate } for pid=817 comm="syz.0.144" name="file0" dev="tmpfs" ino=114 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dri_device_t:s0" [ 41.144624][ T571] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 41.164572][ T571] usb 5-1: unit 5 not found! [ 41.174369][ T571] usb 5-1: USB disconnect, device number 4 [ 41.215551][ T828] xt_hashlimit: size too large, truncated to 1048576 [ 41.272419][ T821] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue [ 41.295774][ T821] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.491029][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.560457][ T832] syz.3.145 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.714530][ T837] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 41.732656][ T837] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 41.742415][ T837] overlayfs: missing 'lowerdir' [ 41.984521][ T571] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 42.046241][ T852] binder: 851:852 ioctl c0306201 200000000080 returned -22 [ 42.194568][ T688] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 42.304528][ T571] usb 5-1: Using ep0 maxpacket: 8 [ 42.424593][ T571] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.435353][ T571] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 146, using maximum allowed: 30 [ 42.446324][ T571] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 42.459691][ T571] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 42.469262][ T571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.499558][ T571] usb 5-1: config 0 descriptor?? [ 42.544914][ T571] usb 5-1: bad CDC descriptors [ 42.564520][ T579] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 42.646120][ T688] usb 4-1: unable to get BOS descriptor or descriptor too short [ 42.833621][ T865] cgroup: syz.2.156 (865) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 42.850117][ T865] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 42.912461][ T867] usb 5-1: USB disconnect, device number 5 [ 42.963997][ T688] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.984600][ T579] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.995574][ T579] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 43.056297][ T869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 43.194746][ T579] usb 1-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 43.204310][ T579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.204558][ T688] usb 4-1: string descriptor 0 read error: -22 [ 43.212543][ T579] usb 1-1: Product: syz [ 43.223206][ T688] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 43.223533][ T579] usb 1-1: Manufacturer: syz [ 43.232286][ T688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.238961][ T579] usb 1-1: SerialNumber: syz [ 43.354616][ T316] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.505530][ T852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'. [ 43.522340][ T871] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.158: missing EA_INODE flag [ 43.540243][ T871] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.158: error while reading EA inode 12 err=-117 [ 43.554303][ T871] EXT4-fs (loop4): 1 orphan inode deleted [ 43.560220][ T871] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 43.594715][ T316] usb 2-1: Using ep0 maxpacket: 8 [ 43.874874][ T316] usb 2-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 43.897727][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.943940][ T316] usb 2-1: Product: syz [ 43.965333][ T316] usb 2-1: Manufacturer: syz [ 43.989576][ T316] usb 2-1: SerialNumber: syz [ 44.004636][ T688] usb 4-1: 1:1: cannot get freq at ep 0x1 [ 44.086541][ T579] usb 1-1: MIDIStreaming interface descriptor not found [ 44.110356][ T688] usb 4-1: USB disconnect, device number 3 [ 44.130763][ T579] usb 1-1: USB disconnect, device number 4 [ 44.249313][ T894] device batadv_slave_0 entered promiscuous mode [ 44.256630][ T894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 44.378728][ T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 44.396772][ T316] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.414560][ T316] usb 2-1: unit 5 not found! [ 44.633125][ T723] udevd[723]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.685279][ T316] usb 2-1: USB disconnect, device number 4 [ 44.688962][ T903] binder: 902:903 ioctl 400c620e 2000000002c0 returned -22 [ 44.844254][ T903] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf, [ 44.861431][ T903] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.953139][ T24] kauditd_printk_skb: 596 callbacks suppressed [ 44.953155][ T24] audit: type=1400 audit(1790164335.740:819): avc: denied { mounton } for pid=902 comm="syz.3.168" path="/36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.004993][ T24] audit: type=1400 audit(1790164335.800:820): avc: denied { mount } for pid=902 comm="syz.3.168" name="/" dev="configfs" ino=14067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.063917][ T24] audit: type=1400 audit(1790164335.830:821): avc: denied { read } for pid=902 comm="syz.3.168" name="/" dev="configfs" ino=14067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.129020][ T24] audit: type=1400 audit(1790164335.830:822): avc: denied { open } for pid=902 comm="syz.3.168" path="/36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="configfs" ino=14067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.211367][ T282] EXT4-fs error (device loop3): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 45.224657][ T24] audit: type=1400 audit(1790164335.830:823): avc: denied { setattr } for pid=902 comm="syz.3.168" name="/" dev="configfs" ino=14067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.247471][ T282] EXT4-fs (loop3): Remounting filesystem read-only [ 45.249681][ T24] audit: type=1400 audit(1790164335.840:824): avc: denied { setattr } for pid=902 comm="syz.3.168" path="/36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.304553][ T24] audit: type=1400 audit(1790164335.990:825): avc: denied { remove_name } for pid=282 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.331219][ T9] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.349637][ T24] audit: type=1400 audit(1790164335.990:826): avc: denied { rmdir } for pid=282 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.364493][ T9] Quota error (device loop3): write_blk: dquota write failed [ 45.373337][ T24] audit: type=1400 audit(1790164336.000:827): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.425030][ T9] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.476297][ T960] x_tables: duplicate underflow at hook 3 [ 45.540028][ T966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 45.579257][ T966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 45.889222][ T985] EXT4-fs (loop0): Mount option "commit=0x00000000000000ff" incompatible with ext2 [ 46.044607][ T1006] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 46.054515][ T287] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 46.092350][ T1006] xt_hashlimit: size too large, truncated to 1048576 [ 46.224505][ T688] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 46.314493][ T287] usb 4-1: Using ep0 maxpacket: 16 [ 46.444631][ T287] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.463322][ T287] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.474486][ T688] usb 2-1: Using ep0 maxpacket: 8 [ 46.489267][ T287] usb 4-1: config 0 interface 0 has no altsetting 0 [ 46.490975][ T985] F2FS-fs (loop0): invalid crc value [ 46.502693][ T287] usb 4-1: New USB device found, idVendor=0404, idProduct=5011, bcdDevice= 0.00 [ 46.521785][ T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.531944][ T287] usb 4-1: config 0 descriptor?? [ 46.532773][ T985] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.563899][ T985] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 46.585238][ T985] fscrypt (loop0, inode 10): Reserved bits set in encryption policy [ 46.594766][ T688] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 60, changing to 7 [ 46.781462][ T688] usb 2-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 46.790807][ T688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.799389][ T688] usb 2-1: Product: syz [ 46.803858][ T688] usb 2-1: Manufacturer: syz [ 46.809419][ T688] usb 2-1: SerialNumber: syz [ 46.883424][ T1029] netlink: 173 bytes leftover after parsing attributes in process `syz.4.203'. [ 46.892659][ T287] usbhid 4-1:0.0: can't add hid device: -71 [ 46.902771][ T287] usbhid: probe of 4-1:0.0 failed with error -71 [ 46.918215][ T287] usb 4-1: USB disconnect, device number 4 [ 47.057772][ T1037] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 47.183093][ T1043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 47.504623][ T688] usb 2-1: unit 2 not found! [ 47.531809][ T1046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 47.544798][ T688] usb 2-1: USB disconnect, device number 5 [ 47.700100][ T1054] netlink: 173 bytes leftover after parsing attributes in process `syz.4.214'. [ 47.786276][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.888018][ T1057] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.929042][ T1064] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.942394][ T1057] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.210: bad orphan inode 13 [ 47.971602][ T1057] ext4_test_bit(bit=12, block=18) = 1 [ 47.979358][ T1064] EXT4-fs (loop4): 1 truncate cleaned up [ 47.991380][ T1057] is_bad_inode(inode)=0 [ 48.000028][ T1064] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 48.005919][ T1057] NEXT_ORPHAN(inode)=0 [ 48.013449][ T1057] max_ino=32 [ 48.016877][ T1057] i_nlink=1 [ 48.020055][ T1057] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 48.053701][ T1057] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 48.068551][ T1057] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.210: bg 0: block 248: padding at end of block bitmap is not set [ 48.160222][ T1057] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.210: Failed to acquire dquot type 1 [ 48.173792][ T305] EXT4-fs error (device loop0): ext4_release_dquot:6266: comm kworker/u4:4: Failed to release dquot type 1 [ 48.185815][ T1057] EXT4-fs (loop0): re-mounted. Opts: (null) [ 49.074440][ T1089] netlink: 112 bytes leftover after parsing attributes in process `syz.1.223'. [ 49.235306][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.386844][ T1101] netlink: 173 bytes leftover after parsing attributes in process `syz.4.227'. [ 49.418939][ T1105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 49.450410][ T1105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 49.625335][ T1126] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.239: bad orphan inode 15 [ 49.635662][ T1126] ext4_test_bit(bit=14, block=5) = 0 [ 49.641236][ T1126] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 49.842123][ T1137] netlink: 'syz.4.239': attribute type 4 has an invalid length. [ 50.349992][ T24] kauditd_printk_skb: 74 callbacks suppressed [ 50.350013][ T24] audit: type=1326 audit(1790164341.140:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1114 comm="syz.3.235" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04338e159 code=0x7fc00000 [ 50.567750][ T1131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1131 comm=syz.1.240 [ 50.636952][ T1144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.243'. [ 50.675675][ T24] audit: type=1400 audit(1790164341.470:897): avc: denied { mount } for pid=1142 comm="syz.0.243" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.754245][ T24] audit: type=1400 audit(1790164341.510:898): avc: denied { mount } for pid=1142 comm="syz.0.243" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.815484][ T24] audit: type=1400 audit(1790164341.610:899): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.854502][ T24] audit: type=1400 audit(1790164341.610:900): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.004862][ T1159] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 51.021545][ T24] audit: type=1400 audit(1790164341.810:901): avc: denied { write } for pid=1151 comm="syz.0.247" name="/" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.062087][ T1159] tmpfs: Unknown parameter '00000000000000000000' [ 51.117181][ T24] audit: type=1400 audit(1790164341.850:902): avc: denied { remove_name } for pid=1151 comm="syz.0.247" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.143757][ T1156] FAT-fs (loop1): Unrecognized mount option "00000000000000000000003%ߎešLž $Þ¦ ;nåœâÂìA6]T(5" 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.491288][ T1369] RSP: 002b:00007fc343a68028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 57.500052][ T1369] RAX: ffffffffffffffda RBX: 00007fc345296fa0 RCX: 00007fc34500f159 [ 57.508062][ T1369] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000081 [ 57.516204][ T1369] RBP: 00007fc343a68090 R08: 0000000000000000 R09: 0000000000000000 [ 57.524171][ T1369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.532148][ T1369] R13: 00007fc345297038 R14: 00007fc345296fa0 R15: 00007ffcb0f8aaa8 [ 57.586352][ T24] audit: type=1400 audit(1790164348.380:4717): avc: denied { mounton } for pid=1376 comm="syz.2.319" path="/57/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 57.612110][ T1378] FAULT_INJECTION: forcing a failure. [ 57.612110][ T1378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.654570][ T1378] CPU: 0 PID: 1378 Comm: syz.2.319 Tainted: G W syzkaller #0 [ 57.663022][ T1388] netlink: 112 bytes leftover after parsing attributes in process `syz.1.323'. [ 57.663610][ T1378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.683317][ T1378] Call Trace: [ 57.686615][ T1378] __dump_stack+0x21/0x24 [ 57.690946][ T1378] dump_stack_lvl+0x1a7/0x208 [ 57.695628][ T1378] ? show_regs_print_info+0x18/0x18 [ 57.700849][ T1378] ? selinux_socket_setsockopt+0x282/0x360 [ 57.707166][ T1378] ? selinux_socket_getsockopt+0x340/0x340 [ 57.713099][ T1378] dump_stack+0x15/0x1c [ 57.717254][ T1378] should_fail+0x3ab/0x500 [ 57.721754][ T1378] should_fail_usercopy+0x1a/0x20 [ 57.726857][ T1378] _copy_from_user+0x20/0xd0 [ 57.731447][ T1378] __sys_connect+0x16d/0x450 [ 57.736206][ T1378] ? __sys_connect_file+0x170/0x170 [ 57.741397][ T1378] ? __kasan_check_read+0x11/0x20 [ 57.746433][ T1378] __x64_sys_connect+0x7a/0x90 [ 57.751222][ T1378] do_syscall_64+0x31/0x40 [ 57.755645][ T1378] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 57.761877][ T1378] RIP: 0033:0x7f9eb65d1159 [ 57.766289][ T1378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.786234][ T1378] RSP: 002b:00007f9eb5009028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 57.796383][ T1378] RAX: ffffffffffffffda RBX: 00007f9eb6859090 RCX: 00007f9eb65d1159 [ 57.804726][ T1378] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000006 [ 57.812796][ T1378] RBP: 00007f9eb666806b R08: 0000000000000000 R09: 0000000000000000 [ 57.820761][ T1378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.828836][ T1378] R13: 00007f9eb6859128 R14: 00007f9eb6859090 R15: 00007ffd47697798 [ 57.923188][ T1401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.328'. [ 57.971385][ T24] audit: type=1400 audit(1790164348.760:4718): avc: denied { watch } for pid=1407 comm="syz.4.330" path="/75" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.178175][ T1409] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.244581][ T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.284417][ T1409] EXT4-fs (loop2): 1 truncate cleaned up [ 58.291311][ T1409] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 58.311231][ T1421] netlink: 112 bytes leftover after parsing attributes in process `syz.4.334'. [ 58.378695][ T24] audit: type=1400 audit(1790164349.130:4719): avc: denied { mounton } for pid=1422 comm="syz.4.335" path="/79/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 58.688510][ T1423] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 58.994604][ T20] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.009963][ T1423] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 59.031073][ T20] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.054840][ T20] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.075753][ T1423] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.199320][ T1423] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 59.225729][ T1423] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 59.264597][ T20] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 59.277855][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.296375][ T20] usb 6-1: Product: syz [ 59.311935][ T20] usb 6-1: Manufacturer: syz [ 59.320808][ T20] usb 6-1: SerialNumber: syz [ 59.385891][ T20] uvcvideo: Found UVC 1.00 device syz (046d:0821) [ 59.395736][ T20] uvcvideo: No valid video chain found. [ 59.416664][ T1453] netlink: 112 bytes leftover after parsing attributes in process `syz.2.345'. [ 59.478834][ T1455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 59.518077][ T1455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 59.586816][ T316] usb 6-1: USB disconnect, device number 3 [ 59.796982][ T1472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 60.265291][ T1499] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 60.461468][ T1513] tipc: Started in network mode [ 60.467217][ T1513] tipc: Own node identity 00000000000000000071000000000001, cluster identity 4711 [ 60.478415][ T1507] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,dioread_lock,,errors=continue [ 60.491067][ T1513] tipc: Enabling of bearer rejected, failed to enable media [ 60.495026][ T1510] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.506279][ T1507] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 60.526360][ T1507] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 60.540247][ T1507] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.540247][ T1507] [ 60.550221][ T1507] EXT4-fs (loop4): Total free blocks count 0 [ 60.556741][ T1507] EXT4-fs (loop4): Free/Dirty block details [ 60.559552][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 60.559564][ T24] audit: type=1400 audit(1790164351.350:4729): avc: denied { bind } for pid=1506 comm="syz.4.363" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.562938][ T1507] EXT4-fs (loop4): free_blocks=4096 [ 60.577107][ T24] audit: type=1400 audit(1790164351.350:4730): avc: denied { node_bind } for pid=1506 comm="syz.4.363" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 60.589353][ T1507] EXT4-fs (loop4): dirty_blocks=48 [ 60.601559][ T1523] 9pnet: Insufficient options for proto=fd [ 60.619010][ T1507] EXT4-fs (loop4): Block reservation details [ 60.637792][ T1507] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 60.644186][ T24] audit: type=1400 audit(1790164351.350:4731): avc: denied { name_bind } for pid=1506 comm="syz.4.363" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 60.682705][ T305] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 60.714496][ T305] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.714496][ T305] [ 60.762450][ T24] audit: type=1400 audit(1790164351.550:4732): avc: denied { mounton } for pid=1509 comm="syz.1.366" path="/80/file1/bus" dev="loop1" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 60.917510][ T1518] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 60.947085][ T1518] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 60.983223][ T1518] F2FS-fs (loop3): invalid crc value [ 61.029666][ T1518] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.108153][ T1518] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 61.115805][ T1518] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 61.138753][ T1513] attempt to access beyond end of device [ 61.138753][ T1513] loop3: rw=2049, want=45152, limit=40427 [ 61.162869][ T1513] device syzkaller0 entered promiscuous mode [ 61.359902][ T1546] netlink: 60 bytes leftover after parsing attributes in process `syz.1.375'. [ 61.375511][ T1546] netlink: 60 bytes leftover after parsing attributes in process `syz.1.375'. [ 61.611272][ T1548] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 61.671005][ T1548] xt_hashlimit: size too large, truncated to 1048576 [ 61.870589][ T1540] F2FS-fs (loop5): invalid crc value [ 61.912831][ T1540] F2FS-fs (loop5): Found nat_bits in checkpoint [ 61.950883][ T1540] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 61.974562][ T1540] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 62.004608][ T304] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 62.200250][ T1561] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.377: bad orphan inode 15 [ 62.224846][ T1561] ext4_test_bit(bit=14, block=5) = 0 [ 62.231918][ T1561] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 62.375368][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.394427][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.484553][ T1571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.377'. [ 63.444596][ T304] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.457869][ T304] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.467236][ T304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.476868][ T304] usb 4-1: config 0 descriptor?? [ 63.898287][ T1581] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 63.910061][ T1581] System zones: 1-3, 19-19, 35-36 [ 63.915258][ T304] usbhid 4-1:0.0: can't add hid device: -71 [ 63.921281][ T304] usbhid: probe of 4-1:0.0 failed with error -71 [ 63.928493][ T304] usb 4-1: USB disconnect, device number 6 [ 63.935660][ T1579] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 63.942468][ T1579] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 63.944778][ T1581] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,debug,,errors=continue [ 63.953594][ T1579] F2FS-fs (loop1): invalid crc value [ 63.991350][ T1579] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 64.007317][ T1581] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.044792][ T1579] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 64.052091][ T1579] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 64.174730][ T24] audit: type=1400 audit(1790164354.970:4733): avc: denied { watch watch_reads } for pid=1580 comm="syz.5.380" path="/22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.580108][ T279] attempt to access beyond end of device [ 64.580108][ T279] loop1: rw=2049, want=45104, limit=40427 [ 64.604514][ T579] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.798265][ T1577] F2FS-fs (loop2): invalid crc value [ 64.815486][ T1577] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.851965][ T1577] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.884590][ T579] usb 6-1: device descriptor read/64, error -71 [ 65.113435][ T24] audit: type=1400 audit(1790164355.900:4734): avc: denied { connect } for pid=1576 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.216168][ T1617] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 65.233449][ T24] audit: type=1400 audit(1790164356.030:4735): avc: denied { relabelto } for pid=1616 comm="syz.4.392" name="file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 65.271130][ T24] audit: type=1400 audit(1790164356.060:4736): avc: denied { associate } for pid=1616 comm="syz.4.392" name="file0" dev="tmpfs" ino=521 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 65.334539][ T579] usb 6-1: device descriptor read/64, error -71 [ 65.340742][ T24] audit: type=1400 audit(1790164356.060:4737): avc: denied { rmdir } for pid=280 comm="syz-executor" name="file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 65.482020][ T1624] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.395: bad orphan inode 15 [ 65.492730][ T1624] ext4_test_bit(bit=14, block=5) = 0 [ 65.498216][ T1624] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 65.544552][ T1201] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 65.665325][ T579] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.769318][ T24] audit: type=1400 audit(1790164356.560:4738): avc: denied { associate } for pid=1593 comm="syz.3.384" name="223" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.834259][ T1634] netlink: 'syz.4.395': attribute type 4 has an invalid length. [ 65.934753][ T579] usb 6-1: device descriptor read/64, error -71 [ 65.974704][ T1201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 66.034761][ T1201] usb 2-1: not running at top speed; connect to a high speed hub [ 66.601633][ T1639] EXT4-fs (loop2): Ignoring removed orlov option [ 66.614727][ T1639] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 66.633956][ T1639] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.398: corrupted in-inode xattr [ 66.664806][ T1639] EXT4-fs (loop2): Remounting filesystem read-only [ 66.671503][ T1639] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.398: couldn't read orphan inode 15 (err -117) [ 66.684596][ T1201] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 66.693646][ T1201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.714544][ T579] usb 6-1: device descriptor read/64, error -71 [ 66.721100][ T1639] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,inode_readahead_blks=0x0000000000000200,orlov,noload,inode_readahead_blks=0x0000000000100000,mblk_io_submit,commit=0x0000000000000000,inode_readahead_blks=0x0000000008000000,journal_ioprio=0x000000000000000 [ 66.749232][ T1201] usb 2-1: Product: syz [ 66.753834][ T1201] usb 2-1: Manufacturer: syz [ 66.759413][ T1201] usb 2-1: SerialNumber: syz [ 66.764775][ T1638] netlink: 72 bytes leftover after parsing attributes in process `syz.3.384'. [ 66.862795][ T579] usb usb6-port1: attempt power cycle [ 67.185202][ T1201] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 67.256965][ T1201] usb 2-1: USB disconnect, device number 6 [ 67.493873][ T1653] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 67.504680][ T1653] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 67.513859][ T1653] F2FS-fs (loop5): invalid crc value [ 67.520649][ T1653] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 67.539189][ T1649] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 67.547847][ T1649] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 67.561323][ T1653] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 67.564795][ T1649] F2FS-fs (loop2): invalid crc value [ 67.569168][ T1653] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 67.581918][ T1649] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 67.613065][ T1649] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 67.620343][ T1649] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 67.662560][ T283] attempt to access beyond end of device [ 67.662560][ T283] loop2: rw=2049, want=45104, limit=40427 [ 67.868536][ T1670] netlink: 196 bytes leftover after parsing attributes in process `syz.1.405'. [ 68.081299][ T1668] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 68.131933][ T1668] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.218025][ T1668] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue [ 68.239123][ T1668] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.250081][ T1208] attempt to access beyond end of device [ 68.250081][ T1208] loop5: rw=2049, want=45104, limit=40427 [ 68.681082][ T1685] EXT4-fs (loop3): Unrecognized mount option "smackfshat=ext4" or missing value [ 68.815738][ T279] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000000ff) [ 68.861114][ T279] FAT-fs (loop1): Filesystem has been set read-only [ 68.868136][ T279] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000000ff) [ 68.961991][ T1685] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.411: iget: bad i_size value: 38620345925642 [ 68.986822][ T1685] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.411: couldn't read orphan inode 15 (err -117) [ 69.000196][ T1703] netlink: 16 bytes leftover after parsing attributes in process `syz.5.417'. [ 69.028131][ T1685] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 69.284572][ T571] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 69.400489][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.412857][ T1707] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.420863][ T1707] device bridge_slave_0 entered promiscuous mode [ 69.421854][ T305] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 69.440373][ T305] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 69.453389][ T305] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.453389][ T305] [ 69.463599][ T305] EXT4-fs (loop3): Total free blocks count 0 [ 69.463642][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.469900][ T305] EXT4-fs (loop3): Free/Dirty block details [ 69.477072][ T1707] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.483130][ T305] EXT4-fs (loop3): free_blocks=0 [ 69.496707][ T305] EXT4-fs (loop3): dirty_blocks=11728 [ 69.502291][ T305] EXT4-fs (loop3): Block reservation details [ 69.508418][ T305] EXT4-fs (loop3): i_reserved_data_blocks=11728 [ 69.508851][ T1707] device bridge_slave_1 entered promiscuous mode [ 69.525145][ T305] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 69.525229][ T9] device bridge_slave_1 left promiscuous mode [ 69.544342][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.551561][ T305] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.551561][ T305] [ 69.561597][ T9] device bridge_slave_0 left promiscuous mode [ 69.567794][ T571] usb 6-1: device descriptor read/64, error -71 [ 69.577944][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.584563][ T1365] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.595636][ T9] device veth1_macvtap left promiscuous mode [ 69.611857][ T9] device veth0_vlan left promiscuous mode [ 69.774665][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.781785][ T1707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.789106][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.796244][ T1707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.905277][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.926378][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.936934][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.072120][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.105174][ T1365] usb 3-1: Using ep0 maxpacket: 16 [ 70.110574][ T571] usb 6-1: device descriptor read/64, error -71 [ 70.113605][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.125911][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.132956][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.140449][ T1725] syz.3.424 uses obsolete (PF_INET,SOCK_PACKET) [ 70.147234][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.155780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.163937][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.172561][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.191033][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.199474][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.215821][ T1725] EXT4-fs (loop3): Ignoring removed bh option [ 70.218928][ T1707] device veth0_vlan entered promiscuous mode [ 70.228130][ T1365] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 70.236608][ T1365] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 70.245249][ T1365] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 70.261382][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.264171][ T1725] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable, [ 70.299423][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.308226][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.308795][ T1725] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.316148][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.343894][ T1707] device veth1_macvtap entered promiscuous mode [ 70.361756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.370488][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.385178][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.414567][ T571] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 70.414875][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.430462][ T1365] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 70.440429][ T1365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.449470][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.458004][ T1365] usb 3-1: Product: syz [ 70.462264][ T1365] usb 3-1: Manufacturer: syz [ 70.479067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.498118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.517622][ T1365] usb 3-1: SerialNumber: syz [ 70.581034][ T1365] usb 3-1: config 0 descriptor?? [ 70.694718][ T571] usb 6-1: device descriptor read/64, error -71 [ 70.705591][ T24] audit: type=1400 audit(1790164361.500:4739): avc: denied { name_bind } for pid=1723 comm="syz.3.424" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 70.731710][ T1743] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 71.186725][ T867] usb 3-1: USB disconnect, device number 3 [ 71.235295][ T24] audit: type=1400 audit(1790164361.990:4740): avc: denied { setopt } for pid=1749 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.275895][ T24] audit: type=1400 audit(1790164362.060:4741): avc: denied { read } for pid=1749 comm="syz.3.428" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.309154][ T24] audit: type=1400 audit(1790164362.060:4742): avc: denied { open } for pid=1749 comm="syz.3.428" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.335274][ T571] usb 6-1: device descriptor read/64, error -71 [ 71.505796][ T571] usb usb6-port1: attempt power cycle [ 71.626433][ T1754] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,errors=remount-ro,barrier,noinit_itable,quota,delalloc, [ 71.640268][ T1754] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.924549][ T571] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 72.094778][ T1778] netlink: 165 bytes leftover after parsing attributes in process `syz.2.437'. [ 72.114661][ T1771] EXT4-fs (loop6): Unrecognized mount option "smackfshat=ext4" or missing value [ 72.138097][ T1780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 72.148848][ T1780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 72.164909][ T571] usb 6-1: device descriptor read/8, error -71 [ 72.282633][ T1771] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.436: iget: bad i_size value: 38620345925642 [ 72.295736][ T1771] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.436: couldn't read orphan inode 15 (err -117) [ 72.308172][ T1771] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 72.395369][ T571] usb 6-1: device descriptor read/8, error -71 [ 72.500228][ T1771] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.436: bg 0: block 5: invalid block bitmap [ 72.512879][ T1771] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 72.525567][ T1771] EXT4-fs (loop6): This should not happen!! Data will be lost [ 72.525567][ T1771] [ 72.535310][ T1771] EXT4-fs (loop6): Total free blocks count 0 [ 72.541633][ T1771] EXT4-fs (loop6): Free/Dirty block details [ 72.547807][ T1771] EXT4-fs (loop6): free_blocks=0 [ 72.553149][ T1771] EXT4-fs (loop6): dirty_blocks=5236 [ 72.563616][ T1796] EXT4-fs (loop5): Ignoring removed bh option [ 72.580187][ T1771] EXT4-fs (loop6): Block reservation details [ 72.586939][ T1771] EXT4-fs (loop6): i_reserved_data_blocks=5236 [ 72.604871][ T1796] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable, [ 72.621836][ T112] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 72.649573][ T112] EXT4-fs (loop6): This should not happen!! Data will be lost [ 72.649573][ T112] [ 72.766331][ T1810] fuse: Bad value for 'fd' [ 72.840226][ T1814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.448'. [ 72.868813][ T1814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.448'. [ 73.029354][ T1819] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 73.039604][ T1819] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.086984][ T1707] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 73.258895][ T1834] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.457: bad orphan inode 15 [ 73.269918][ T1834] ext4_test_bit(bit=14, block=5) = 0 [ 73.275580][ T1834] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 73.344518][ T688] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 74.140799][ T1843] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 74.272530][ T1843] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 74.287522][ T1849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.461'. [ 74.297192][ T1852] xt_hashlimit: size too large, truncated to 1048576 [ 74.354903][ T1854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.461'. [ 74.371536][ T24] audit: type=1400 audit(1790164365.160:4743): avc: denied { connect } for pid=1851 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.411331][ T1843] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 74.438495][ T1845] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 18 with max blocks 608 with error 28 [ 74.452757][ T1845] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.452757][ T1845] [ 74.476639][ T1845] EXT4-fs (loop3): Total free blocks count 0 [ 74.482714][ T1845] EXT4-fs (loop3): Free/Dirty block details [ 74.489204][ T1845] EXT4-fs (loop3): free_blocks=4096 [ 74.495057][ T1845] EXT4-fs (loop3): dirty_blocks=624 [ 74.500554][ T1845] EXT4-fs (loop3): Block reservation details [ 74.507196][ T1845] EXT4-fs (loop3): i_reserved_data_blocks=39 [ 74.644578][ T688] usb 3-1: unable to get BOS descriptor or descriptor too short [ 74.663579][ T1863] EXT4-fs (sda1): re-mounted. Opts: (null) [ 74.684610][ T688] usb 3-1: not running at top speed; connect to a high speed hub [ 74.692704][ T688] usb 3-1: too many configurations: 119, using maximum allowed: 8 [ 74.814553][ T688] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 74.825806][ T688] usb 3-1: can't read configurations, error -61 [ 74.854575][ T1365] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 74.974494][ T688] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 75.214621][ T1365] usb 4-1: config 0 has no interfaces? [ 75.220259][ T1365] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 75.229537][ T1365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.238206][ T1365] usb 4-1: config 0 descriptor?? [ 75.292241][ T1872] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.468: bad orphan inode 15 [ 75.303012][ T1872] ext4_test_bit(bit=14, block=5) = 0 [ 75.308647][ T1872] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 75.368555][ T1878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7456 sclass=netlink_route_socket pid=1878 comm=syz.5.470 [ 75.381560][ T688] usb 3-1: unable to get BOS descriptor or descriptor too short [ 75.464663][ T688] usb 3-1: not running at top speed; connect to a high speed hub [ 75.472779][ T688] usb 3-1: too many configurations: 119, using maximum allowed: 8 [ 75.474900][ T1884] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.501057][ T1884] EXT4-fs (loop5): 1 truncate cleaned up [ 75.507235][ T1884] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 75.548945][ T1888] netlink: 'syz.6.468': attribute type 4 has an invalid length. [ 77.176007][ T1895] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.476: bad orphan inode 15 [ 77.190292][ T1895] ext4_test_bit(bit=14, block=5) = 0 [ 77.196636][ T1895] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 77.454593][ T688] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 77.462505][ T688] usb 3-1: can't read configurations, error -71 [ 77.469147][ T688] usb usb3-port1: attempt power cycle [ 77.489810][ T1904] netlink: 'syz.2.476': attribute type 4 has an invalid length. [ 77.756391][ T1201] usb 4-1: USB disconnect, device number 7 [ 77.985345][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 498 with error 28 [ 77.997896][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.997896][ T9] [ 78.105031][ T1913] netlink: 104 bytes leftover after parsing attributes in process `syz.4.481'. [ 78.326356][ T1928] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 78.364095][ T1928] EXT4-fs (loop4): shut down requested (1) [ 78.596014][ T24] audit: type=1400 audit(1790164369.390:4744): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 78.626970][ T1928] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 78.658891][ T1928] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 78.662715][ T24] audit: type=1400 audit(1790164369.410:4745): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.699230][ T1928] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 78.712038][ T24] audit: type=1400 audit(1790164369.410:4746): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.716666][ T1928] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 78.734472][ T24] audit: type=1400 audit(1790164369.410:4747): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.764164][ T24] audit: type=1400 audit(1790164369.410:4748): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.775767][ T1928] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 78.813295][ T24] audit: type=1400 audit(1790164369.410:4749): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.819087][ T1928] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 78.843893][ T24] audit: type=1400 audit(1790164369.410:4750): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.870274][ T24] audit: type=1400 audit(1790164369.590:4751): avc: denied { write } for pid=1942 comm="syz.2.490" name="udp" dev="proc" ino=4026532636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.187605][ T1959] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 79.195870][ T1959] System zones: 1-12 [ 79.200348][ T1959] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.498: missing EA_INODE flag [ 79.212520][ T1959] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.498: error while reading EA inode 12 err=-117 [ 79.225214][ T1959] EXT4-fs (loop2): 1 orphan inode deleted [ 79.231653][ T1959] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue [ 79.244488][ T579] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 79.254805][ T1920] F2FS-fs (loop3): invalid crc value [ 79.368081][ T1920] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.400977][ T1920] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 79.408350][ T1920] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 79.490144][ T24] audit: type=1400 audit(1790164370.270:4752): avc: denied { lock } for pid=1957 comm="syz.2.498" path="/93/file0/file0" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.804554][ T579] usb 7-1: unable to get BOS descriptor or descriptor too short [ 79.914648][ T579] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.945411][ T1978] EXT4-fs (loop3): Ignoring removed bh option [ 79.964096][ T1978] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable, [ 80.264712][ T579] usb 7-1: string descriptor 0 read error: -22 [ 80.275370][ T579] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 80.394944][ T579] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.573185][ T2008] devpts: called with bogus options [ 80.607090][ T2010] devpts: called with bogus options [ 80.644133][ T2001] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 80.652994][ T24] audit: type=1400 audit(1790164371.440:4753): avc: denied { search } for pid=1953 comm="syz.6.495" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 80.684876][ T2001] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 80.694204][ T2001] F2FS-fs (loop5): invalid crc value [ 80.711682][ T2001] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 80.750276][ T2001] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 80.757856][ T2001] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 80.904523][ T579] usb 7-1: 1:1: cannot set freq 48000 to ep 0x1 [ 80.917483][ T579] usb 7-1: USB disconnect, device number 2 [ 81.315062][ T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.361705][ T1208] attempt to access beyond end of device [ 81.361705][ T1208] loop5: rw=2049, want=45104, limit=40427 [ 81.388469][ T2037] EXT4-fs (loop6): dax option not supported [ 81.405137][ T2038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 81.413215][ T2038] System zones: 1-12 [ 81.418159][ T2038] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.522: missing EA_INODE flag [ 81.429908][ T2038] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.522: error while reading EA inode 12 err=-117 [ 81.442435][ T2038] EXT4-fs (loop3): 1 orphan inode deleted [ 81.452911][ T2038] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue [ 81.950454][ T2051] FAULT_INJECTION: forcing a failure. [ 81.950454][ T2051] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 81.963937][ T2051] CPU: 0 PID: 2051 Comm: syz.5.526 Tainted: G W syzkaller #0 [ 81.972712][ T2051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.982877][ T2051] Call Trace: [ 81.986194][ T2051] __dump_stack+0x21/0x24 [ 81.990627][ T2051] dump_stack_lvl+0x1a7/0x208 [ 81.995306][ T2051] ? show_regs_print_info+0x18/0x18 [ 82.000585][ T2051] dump_stack+0x15/0x1c [ 82.004739][ T2051] should_fail+0x3ab/0x500 [ 82.009332][ T2051] should_fail_alloc_page+0x4f/0x60 [ 82.014760][ T2051] __alloc_pages_nodemask+0x11a/0x640 [ 82.020232][ T2051] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 82.025775][ T2051] __get_free_pages+0xe/0x30 [ 82.030460][ T2051] __tlb_remove_page_size+0x18a/0x310 [ 82.036119][ T2051] unmap_page_range+0x1303/0x2190 [ 82.041163][ T2051] ? lru_cache_disable+0xa0/0xa0 [ 82.046114][ T2051] ? copy_page_range+0x27a0/0x27a0 [ 82.051318][ T2051] unmap_vmas+0x25f/0x360 [ 82.056090][ T2051] ? unmap_page_range+0x2190/0x2190 [ 82.061373][ T2051] ? __kasan_check_write+0x14/0x20 [ 82.066480][ T2051] ? tlb_gather_mmu+0x269/0x330 [ 82.071326][ T2051] exit_mmap+0x309/0x590 [ 82.075698][ T2051] ? vm_brk+0x30/0x30 [ 82.079686][ T2051] ? mutex_lock+0x92/0xf0 [ 82.084011][ T2051] ? mutex_unlock+0x1c/0x40 [ 82.088512][ T2051] __mmput+0x92/0x2d0 [ 82.092494][ T2051] mmput+0x4e/0x150 [ 82.096305][ T2051] do_exit+0x9d8/0x24e0 [ 82.100452][ T2051] ? try_to_wake_up+0x670/0xdf0 [ 82.105469][ T2051] ? wake_up_q+0x123/0x1e0 [ 82.109966][ T2051] ? put_task_struct+0x90/0x90 [ 82.114837][ T2051] ? futex_wake+0x4c4/0x570 [ 82.119367][ T2051] ? __kasan_check_write+0x14/0x20 [ 82.124677][ T2051] ? _raw_spin_lock_irq+0x95/0xf0 [ 82.130896][ T2051] do_group_exit+0x149/0x310 [ 82.135695][ T2051] ? __kasan_check_write+0x14/0x20 [ 82.140908][ T2051] ? recalc_sigpending+0x1ac/0x230 [ 82.146036][ T2051] get_signal+0xfb1/0x1300 [ 82.150673][ T2051] arch_do_signal_or_restart+0xe7/0x11b0 [ 82.156323][ T2051] ? array_map_alloc_check+0x1c6/0x390 [ 82.161990][ T2051] ? futex_exit_release+0x1e0/0x1e0 [ 82.167182][ T2051] ? map_create+0x43d/0x1f50 [ 82.171855][ T2051] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 82.177477][ T2051] ? __se_sys_futex+0x2ba/0x370 [ 82.182338][ T2051] exit_to_user_mode_loop+0xa2/0xe0 [ 82.188600][ T2051] exit_to_user_mode_prepare+0x76/0xa0 [ 82.194066][ T2051] syscall_exit_to_user_mode+0x1d/0x40 [ 82.199525][ T2051] do_syscall_64+0x3d/0x40 [ 82.204041][ T2051] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 82.210099][ T2051] RIP: 0033:0x7fe21d924159 [ 82.214609][ T2051] Code: Unable to access opcode bytes at RIP 0x7fe21d92412f. [ 82.222161][ T2051] RSP: 002b:00007fe21c37d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.230573][ T2051] RAX: 0000000000000001 RBX: 00007fe21dbabfa8 RCX: 00007fe21d924159 [ 82.238718][ T2051] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe21dbabfac [ 82.246687][ T2051] RBP: 00007fe21dbabfa0 R08: 0035c876da595360 R09: 0000000000000000 [ 82.254662][ T2051] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 82.262932][ T2051] R13: 00007fe21dbac038 R14: 00007ffd569b0f80 R15: 00007ffd569b1068 [ 82.413519][ T2063] EXT4-fs (loop4): Ignoring removed bh option [ 82.442752][ T2063] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable, [ 82.488916][ T2068] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 82.735861][ T2078] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.778360][ T2078] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.534: bad orphan inode 131083 [ 82.807028][ T2078] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,init_itable,dioread_lock,,errors=continue [ 82.865831][ T2078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.534'. [ 82.890352][ T2078] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #12: block 7: comm syz.3.534: bad entry in directory: rec_len % 4 != 0 - offset=16, inode=1560281102, rec_len=65535, size=56 fake=0 [ 82.938534][ T2078] incfs: Can't find or create .index dir in ./file0 [ 82.953837][ T2078] incfs: mount failed -117 [ 83.717802][ T2105] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 84.059499][ T2105] EXT4-fs (loop5): shut down requested (2) [ 84.076187][ T2105] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 84.085291][ T2105] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 84.094736][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 84.094749][ T24] audit: type=1400 audit(1790164374.890:4755): avc: denied { write } for pid=2104 comm="syz.5.545" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.123266][ T2105] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 84.133257][ T2105] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 84.142399][ T2105] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 84.214721][ T2124] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ017777777777777777777770177777777777777777777701777777777777777777777" or missing value [ 84.424521][ T1572] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 84.529111][ T24] audit: type=1400 audit(1790164375.320:4756): avc: denied { create } for pid=2130 comm="syz.6.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.574513][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 84.726970][ T24] audit: type=1400 audit(1790164375.520:4757): avc: denied { create } for pid=2136 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 84.804569][ T1572] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 84.816179][ T1572] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.829221][ T1572] usb 6-1: config 1 interface 0 has no altsetting 0 [ 84.844578][ T25] usb 4-1: device descriptor read/64, error -71 [ 84.873623][ T2142] tipc: Enabling of bearer rejected, failed to enable media [ 84.873749][ T2144] futex_wake_op: syz.2.554 tries to shift op by -1; fix this program [ 84.883228][ T2142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2142 comm=syz.6.555 [ 84.892241][ T2144] futex_wake_op: syz.2.554 tries to shift op by -1; fix this program [ 84.962243][ T24] audit: type=1400 audit(1790164375.750:4758): avc: denied { getopt } for pid=2141 comm="syz.6.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.034716][ T1572] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.044230][ T1572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.052504][ T1572] usb 6-1: Product: syz [ 85.056771][ T1572] usb 6-1: Manufacturer: syz [ 85.061920][ T1572] usb 6-1: SerialNumber: syz [ 85.104741][ T2105] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.120458][ T2147] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 85.284553][ T25] usb 4-1: device descriptor read/64, error -71 [ 85.766696][ T24] audit: type=1400 audit(1790164376.550:4759): avc: denied { mount } for pid=2153 comm="syz.6.557" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 85.800761][ T24] audit: type=1400 audit(1790164376.560:4760): avc: denied { unmount } for pid=1707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 185.734396][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 185.741241][ C1] rcu: 1-....: (10051 ticks this GP) idle=dbe/1/0x4000000000000000 softirq=10881/10883 fqs=4999 last_accelerate: abcd/d306 dyntick_enabled: 1 [ 185.756203][ C1] (t=10002 jiffies g=9337 q=903) [ 185.761311][ C1] NMI backtrace for cpu 1 [ 185.765733][ C1] CPU: 1 PID: 2105 Comm: syz.5.545 Tainted: G W syzkaller #0 [ 185.774385][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.784440][ C1] Call Trace: [ 185.787720][ C1] [ 185.790576][ C1] __dump_stack+0x21/0x24 [ 185.795123][ C1] dump_stack_lvl+0x1a7/0x208 [ 185.800204][ C1] ? show_regs_print_info+0x18/0x18 [ 185.805558][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 185.811128][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 185.815897][ C1] ? printk+0xda/0x130 [ 185.819998][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 185.826265][ C1] dump_stack+0x15/0x1c [ 185.830683][ C1] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 185.836679][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 185.842700][ C1] rcu_dump_cpu_stacks+0x1a2/0x2c0 [ 185.848116][ C1] rcu_sched_clock_irq+0xf89/0x1880 [ 185.853874][ C1] ? rcutree_dead_cpu+0x310/0x310 [ 185.859156][ C1] ? debug_smp_processor_id+0x17/0x20 [ 185.865136][ C1] ? hrtimer_run_queues+0x166/0x420 [ 185.870445][ C1] update_process_times+0x198/0x200 [ 185.875868][ C1] tick_sched_timer+0x17c/0x240 [ 185.880820][ C1] ? tick_setup_sched_timer+0x460/0x460 [ 185.886384][ C1] __hrtimer_run_queues+0x33a/0x7d0 [ 185.891843][ C1] ? hrtimer_interrupt+0xc80/0xc80 [ 185.897248][ C1] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 185.903653][ C1] hrtimer_interrupt+0x313/0xc80 [ 185.908668][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 185.914560][ C1] asm_call_irq_on_stack+0xf/0x20 [ 185.919585][ C1] [ 185.922547][ C1] sysvec_apic_timer_interrupt+0x85/0xe0 [ 185.928456][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 185.935435][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 185.942202][ C1] Code: c0 b8 9d 7e 65 8b 15 c5 b8 9d 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 dc 0a 00 00 00 74 2c 8b 91 b8 0a 00 00 <83> fa 02 75 21 48 8b 91 c0 0a 00 00 48 8b 32 48 8d 7e 01 8b 89 bc [ 185.963960][ C1] RSP: 0018:ffffc90000b26f18 EFLAGS: 00000246 [ 185.970241][ C1] RAX: ffffffff83b25494 RBX: 1ffffffff0ae102c RCX: ffff88810c14bc00 [ 185.978763][ C1] RDX: 0000000000000002 RSI: 000000000007ffff RDI: ffff88810f5e00cc [ 185.987166][ C1] RBP: ffffc90000b26f18 R08: 1ffff1102506c182 R09: 1ffff1102506c192 [ 185.995382][ C1] R10: 1ffff1102506c181 R11: fffff52000164de0 R12: 00000000fffffff1 [ 186.004565][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88810f5e0000 [ 186.013561][ C1] ? qdisc_tree_reduce_backlog+0x284/0x380 [ 186.019667][ C1] qdisc_tree_reduce_backlog+0x284/0x380 [ 186.026516][ C1] fq_codel_change+0xa6d/0xeb0 [ 186.031660][ C1] ? fq_codel_destroy+0x90/0x90 [ 186.037179][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 186.043349][ C1] fq_codel_init+0x33f/0xa40 [ 186.048544][ C1] ? fq_codel_peek+0x360/0x360 [ 186.053749][ C1] qdisc_create+0x84c/0x1220 [ 186.058358][ C1] ? sysvec_reschedule_ipi+0x69/0x70 [ 186.064007][ C1] ? qdisc_notify+0x350/0x350 [ 186.068767][ C1] ? qdisc_lookup+0x306/0x4d0 [ 186.073706][ C1] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 186.079455][ C1] tc_modify_qdisc+0x8c2/0x1470 [ 186.084627][ C1] ? qdisc_offload_graft_helper+0x280/0x280 [ 186.090631][ C1] ? qdisc_offload_graft_helper+0x280/0x280 [ 186.096513][ C1] rtnetlink_rcv_msg+0x9e9/0xca0 [ 186.101440][ C1] ? rtnetlink_bind+0x80/0x80 [ 186.106949][ C1] ? sched_clock+0x3a/0x40 [ 186.111395][ C1] ? __kasan_check_write+0x14/0x20 [ 186.116768][ C1] ? __switch_to+0x53e/0x10a0 [ 186.121549][ C1] ? compat_start_thread+0x80/0x80 [ 186.126694][ C1] ? native_set_ldt+0x370/0x370 [ 186.131740][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 186.137287][ C1] ? finish_task_switch+0x12e/0x5a0 [ 186.142575][ C1] ? switch_mm_irqs_off+0x752/0x990 [ 186.147781][ C1] ? __switch_to_asm+0x3a/0x60 [ 186.152642][ C1] ? __schedule+0xc0b/0x13e0 [ 186.157334][ C1] netlink_rcv_skb+0x1e9/0x430 [ 186.162131][ C1] ? rtnetlink_bind+0x80/0x80 [ 186.166805][ C1] ? netlink_ack+0xb30/0xb30 [ 186.171700][ C1] ? preempt_schedule_irq+0xca/0x120 [ 186.176996][ C1] ? __netlink_lookup+0x387/0x3b0 [ 186.182220][ C1] rtnetlink_rcv+0x1c/0x20 [ 186.186758][ C1] netlink_unicast+0x86c/0xa30 [ 186.191900][ C1] netlink_sendmsg+0x949/0xb70 [ 186.197073][ C1] ? netlink_getsockopt+0x530/0x530 [ 186.202942][ C1] ? security_socket_sendmsg+0x82/0xa0 [ 186.208508][ C1] ? netlink_getsockopt+0x530/0x530 [ 186.213810][ C1] ____sys_sendmsg+0x5be/0x8f0 [ 186.218685][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 186.223799][ C1] ? import_iovec+0x7c/0xb0 [ 186.228298][ C1] ___sys_sendmsg+0x236/0x2e0 [ 186.233206][ C1] ? __sys_sendmsg+0x280/0x280 [ 186.238152][ C1] ? __fdget+0x1a1/0x230 [ 186.242404][ C1] __x64_sys_sendmsg+0x201/0x2d0 [ 186.247357][ C1] ? __kasan_check_write+0x14/0x20 [ 186.252475][ C1] ? ___sys_sendmsg+0x2e0/0x2e0 [ 186.257776][ C1] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 186.263837][ C1] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 186.269831][ C1] do_syscall_64+0x31/0x40 [ 186.274471][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 186.280987][ C1] RIP: 0033:0x7fe21d924159 [ 186.285408][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.305651][ C1] RSP: 002b:00007fe21c37d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.314156][ C1] RAX: ffffffffffffffda RBX: 00007fe21dbabfa0 RCX: 00007fe21d924159 [ 186.322244][ C1] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 186.330295][ C1] RBP: 00007fe21d9bb06b R08: 0000000000000000 R09: 0000000000000000 [ 186.338988][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.348076][ C1] R13: 00007fe21dbac038 R14: 00007fe21dbabfa0 R15: 00007ffd569b1068 [ 188.234911][ T5] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-... } 10251 jiffies s: 4149 root: 0x2/. [ 188.247293][ T5] rcu: blocking rcu_node structures: [ 188.252862][ T5] Task dump for CPU 1: [ 188.257164][ T5] task:syz.5.545 state:R running task stack: 0 pid: 2105 ppid: 1208 flags:0x0000400c [ 188.269837][ T5] Call Trace: [ 188.273165][ T5] ? kvm_sched_clock_read+0x18/0x40 [ 188.280864][ T5] sched_clock_cpu+0x1b/0x3d0 [ 188.285841][ T5] ? sched_clock+0x3a/0x40 [ 188.291105][ T5] ? sched_clock_cpu+0x1b/0x3d0 [ 188.296995][ T5] ? debug_smp_processor_id+0x17/0x20 [ 188.302402][ T5] ? __irq_exit_rcu+0x40/0x150 [ 188.307841][ T5] ? __irq_exit_rcu+0x40/0x150 [ 188.312676][ T5] ? irq_exit_rcu+0x9/0x10 [ 188.317299][ T5] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 188.323203][ T5] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 188.329602][ T5] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 188.335436][ T5] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 188.341252][ T5] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 188.347429][ T5] ? __sanitizer_cov_trace_cmp2+0x90/0x90 [ 188.353157][ T5] ? qdisc_lookup+0x306/0x4d0 [ 188.357963][ T5] ? qdisc_tree_reduce_backlog+0x10b/0x380 [ 188.364160][ T5] ? fq_codel_change+0xa6d/0xeb0 [ 188.369181][ T5] ? fq_codel_destroy+0x90/0x90 [ 188.374269][ T5] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 188.380655][ T5] ? fq_codel_init+0x33f/0xa40 [ 188.385473][ T5] ? fq_codel_peek+0x360/0x360 [ 188.390330][ T5] ? qdisc_create+0x84c/0x1220 [ 188.395155][ T5] ? sysvec_reschedule_ipi+0x69/0x70 [ 188.400667][ T5] ? qdisc_notify+0x350/0x350 [ 188.405662][ T5] ? qdisc_lookup+0x306/0x4d0 [ 188.411086][ T5] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 188.417006][ T5] ? tc_modify_qdisc+0x8c2/0x1470 [ 188.422247][ T5] ? qdisc_offload_graft_helper+0x280/0x280 [ 188.428950][ T5] ? qdisc_offload_graft_helper+0x280/0x280 [ 188.437127][ T5] ? rtnetlink_rcv_msg+0x9e9/0xca0 [ 188.442263][ T5] ? rtnetlink_bind+0x80/0x80 [ 188.447129][ T5] ? sched_clock+0x3a/0x40 [ 188.451778][ T5] ? __kasan_check_write+0x14/0x20 [ 188.457031][ T5] ? __switch_to+0x53e/0x10a0 [ 188.462076][ T5] ? compat_start_thread+0x80/0x80 [ 188.468242][ T5] ? native_set_ldt+0x370/0x370 [ 188.474685][ T5] ? _raw_spin_unlock_irq+0x4e/0x70 [ 188.481278][ T5] ? finish_task_switch+0x12e/0x5a0 [ 188.486916][ T5] ? switch_mm_irqs_off+0x752/0x990 [ 188.492771][ T5] ? __switch_to_asm+0x3a/0x60 [ 188.499314][ T5] ? __schedule+0xc0b/0x13e0 [ 188.504097][ T5] ? netlink_rcv_skb+0x1e9/0x430 [ 188.509679][ T5] ? rtnetlink_bind+0x80/0x80 [ 188.515111][ T5] ? netlink_ack+0xb30/0xb30 [ 188.519842][ T5] ? preempt_schedule_irq+0xca/0x120 [ 188.525547][ T5] ? __netlink_lookup+0x387/0x3b0 [ 188.531165][ T5] ? rtnetlink_rcv+0x1c/0x20 [ 188.535818][ T5] ? netlink_unicast+0x86c/0xa30 [ 188.540770][ T5] ? netlink_sendmsg+0x949/0xb70 [ 188.545729][ T5] ? netlink_getsockopt+0x530/0x530 [ 188.551024][ T5] ? security_socket_sendmsg+0x82/0xa0 [ 188.556515][ T5] ? netlink_getsockopt+0x530/0x530 [ 188.561851][ T5] ? ____sys_sendmsg+0x5be/0x8f0 [ 188.567092][ T5] ? __sys_sendmsg_sock+0x40/0x40 [ 188.572671][ T5] ? import_iovec+0x7c/0xb0 [ 188.577225][ T5] ? ___sys_sendmsg+0x236/0x2e0 [ 188.582577][ T5] ? __sys_sendmsg+0x280/0x280 [ 188.587540][ T5] ? __fdget+0x1a1/0x230 [ 188.591812][ T5] ? __x64_sys_sendmsg+0x201/0x2d0 [ 188.597310][ T5] ? __kasan_check_write+0x14/0x20 [ 188.602459][ T5] ? ___sys_sendmsg+0x2e0/0x2e0 [ 188.607578][ T5] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 188.613250][ T5] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 188.619169][ T5] ? do_syscall_64+0x31/0x40 [ 188.623783][ T5] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 331.071441][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.5.545:2105] [ 331.079614][ C1] Modules linked in: [ 331.083608][ C1] CPU: 1 PID: 2105 Comm: syz.5.545 Tainted: G W syzkaller #0 [ 331.092272][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.102337][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x45/0x60 [ 331.108474][ C1] Code: ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 dc 0a 00 00 00 74 2c 8b 91 b8 0a 00 00 83 fa 02 75 21 48 8b 91 c0 0a 00 00 48 8b 32 <48> 8d 7e 01 8b 89 bc 0a 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 [ 331.128240][ C1] RSP: 0018:ffffc90000b26f18 EFLAGS: 00000246 [ 331.134290][ C1] RAX: ffffffff83b25494 RBX: 1ffffffff0ae102c RCX: ffff88810c14bc00 [ 331.142244][ C1] RDX: ffffc9000191c000 RSI: 000000000007ffff RDI: ffff88810f5e00cc [ 331.150639][ C1] RBP: ffffc90000b26f18 R08: 1ffff1102506c182 R09: 1ffff1102506c192 [ 331.159184][ C1] R10: 1ffff1102506c181 R11: fffff52000164de0 R12: 00000000fffffff1 [ 331.167372][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88810f5e0000 [ 331.175596][ C1] FS: 00007fe21c37d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 331.185423][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.192398][ C1] CR2: 0000001b30324220 CR3: 000000011661a000 CR4: 00000000003526a0 [ 331.200719][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.209575][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.217890][ C1] Call Trace: [ 331.221582][ C1] qdisc_tree_reduce_backlog+0x284/0x380 [ 331.227330][ C1] fq_codel_change+0xa6d/0xeb0 [ 331.232094][ C1] ? fq_codel_destroy+0x90/0x90 [ 331.236957][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 331.243537][ C1] fq_codel_init+0x33f/0xa40 [ 331.248124][ C1] ? fq_codel_peek+0x360/0x360 [ 331.253654][ C1] qdisc_create+0x84c/0x1220 [ 331.258603][ C1] ? sysvec_reschedule_ipi+0x69/0x70 [ 331.264056][ C1] ? qdisc_notify+0x350/0x350 [ 331.268805][ C1] ? qdisc_lookup+0x306/0x4d0 [ 331.273771][ C1] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 331.279346][ C1] tc_modify_qdisc+0x8c2/0x1470 [ 331.284231][ C1] ? qdisc_offload_graft_helper+0x280/0x280 [ 331.290112][ C1] ? qdisc_offload_graft_helper+0x280/0x280 [ 331.296079][ C1] rtnetlink_rcv_msg+0x9e9/0xca0 [ 331.301101][ C1] ? rtnetlink_bind+0x80/0x80 [ 331.305849][ C1] ? sched_clock+0x3a/0x40 [ 331.310336][ C1] ? __kasan_check_write+0x14/0x20 [ 331.315759][ C1] ? __switch_to+0x53e/0x10a0 [ 331.320676][ C1] ? compat_start_thread+0x80/0x80 [ 331.325952][ C1] ? native_set_ldt+0x370/0x370 [ 331.330792][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 331.336143][ C1] ? finish_task_switch+0x12e/0x5a0 [ 331.341333][ C1] ? switch_mm_irqs_off+0x752/0x990 [ 331.347023][ C1] ? __switch_to_asm+0x3a/0x60 [ 331.352469][ C1] ? __schedule+0xc0b/0x13e0 [ 331.357060][ C1] netlink_rcv_skb+0x1e9/0x430 [ 331.361979][ C1] ? rtnetlink_bind+0x80/0x80 [ 331.366655][ C1] ? netlink_ack+0xb30/0xb30 [ 331.371415][ C1] ? preempt_schedule_irq+0xca/0x120 [ 331.376717][ C1] ? __netlink_lookup+0x387/0x3b0 [ 331.381725][ C1] rtnetlink_rcv+0x1c/0x20 [ 331.386146][ C1] netlink_unicast+0x86c/0xa30 [ 331.391130][ C1] netlink_sendmsg+0x949/0xb70 [ 331.395934][ C1] ? netlink_getsockopt+0x530/0x530 [ 331.401230][ C1] ? security_socket_sendmsg+0x82/0xa0 [ 331.406759][ C1] ? netlink_getsockopt+0x530/0x530 [ 331.411951][ C1] ____sys_sendmsg+0x5be/0x8f0 [ 331.417002][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 331.422050][ C1] ? import_iovec+0x7c/0xb0 [ 331.426565][ C1] ___sys_sendmsg+0x236/0x2e0 [ 331.431387][ C1] ? __sys_sendmsg+0x280/0x280 [ 331.436674][ C1] ? __fdget+0x1a1/0x230 [ 331.441251][ C1] __x64_sys_sendmsg+0x201/0x2d0 [ 331.446389][ C1] ? __kasan_check_write+0x14/0x20 [ 331.451515][ C1] ? ___sys_sendmsg+0x2e0/0x2e0 [ 331.456785][ C1] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 331.462436][ C1] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 331.468168][ C1] do_syscall_64+0x31/0x40 [ 331.472591][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 331.478593][ C1] RIP: 0033:0x7fe21d924159 [ 331.483708][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.504439][ C1] RSP: 002b:00007fe21c37d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.512955][ C1] RAX: ffffffffffffffda RBX: 00007fe21dbabfa0 RCX: 00007fe21d924159 [ 331.521107][ C1] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 331.529176][ C1] RBP: 00007fe21d9bb06b R08: 0000000000000000 R09: 0000000000000000 [ 331.537135][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.545223][ C1] R13: 00007fe21dbac038 R14: 00007fe21dbabfa0 R15: 00007ffd569b1068 [ 331.553488][ C1] Sending NMI from CPU 1 to CPUs 0: [ 331.558724][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0x12/0x20 [ 331.559685][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 331.573401][ C1] CPU: 1 PID: 2105 Comm: syz.5.545 Tainted: G W L syzkaller #0 [ 331.582293][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.592356][ C1] Call Trace: [ 331.595631][ C1] [ 331.598497][ C1] __dump_stack+0x21/0x24 [ 331.602899][ C1] dump_stack_lvl+0x1a7/0x208 [ 331.607759][ C1] ? show_regs_print_info+0x18/0x18 [ 331.613211][ C1] dump_stack+0x15/0x1c [ 331.617571][ C1] panic+0x2d5/0x800 [ 331.621580][ C1] ? find_next_bit+0xc9/0x100 [ 331.626262][ C1] ? bpf_jit_dump+0xe0/0xe0 [ 331.631214][ C1] watchdog_timer_fn+0x591/0x5a0 [ 331.636540][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 331.642106][ C1] __hrtimer_run_queues+0x33a/0x7d0 [ 331.647388][ C1] ? hrtimer_interrupt+0xc80/0xc80 [ 331.652824][ C1] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 331.658997][ C1] hrtimer_interrupt+0x313/0xc80 [ 331.663923][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 331.669906][ C1] asm_call_irq_on_stack+0xf/0x20 [ 331.674927][ C1] [ 331.677943][ C1] sysvec_apic_timer_interrupt+0x85/0xe0 [ 331.683821][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 331.689798][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x45/0x60 [ 331.695937][ C1] Code: ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 dc 0a 00 00 00 74 2c 8b 91 b8 0a 00 00 83 fa 02 75 21 48 8b 91 c0 0a 00 00 48 8b 32 <48> 8d 7e 01 8b 89 bc 0a 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 [ 331.715616][ C1] RSP: 0018:ffffc90000b26f18 EFLAGS: 00000246 [ 331.721775][ C1] RAX: ffffffff83b25494 RBX: 1ffffffff0ae102c RCX: ffff88810c14bc00 [ 331.729735][ C1] RDX: ffffc9000191c000 RSI: 000000000007ffff RDI: ffff88810f5e00cc [ 331.738067][ C1] RBP: ffffc90000b26f18 R08: 1ffff1102506c182 R09: 1ffff1102506c192 [ 331.746030][ C1] R10: 1ffff1102506c181 R11: fffff52000164de0 R12: 00000000fffffff1 [ 331.753996][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88810f5e0000 [ 331.762116][ C1] ? qdisc_tree_reduce_backlog+0x284/0x380 [ 331.767912][ C1] qdisc_tree_reduce_backlog+0x284/0x380 [ 331.773537][ C1] fq_codel_change+0xa6d/0xeb0 [ 331.778376][ C1] ? fq_codel_destroy+0x90/0x90 [ 331.783210][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 331.789405][ C1] fq_codel_init+0x33f/0xa40 [ 331.794231][ C1] ? fq_codel_peek+0x360/0x360 [ 331.799079][ C1] qdisc_create+0x84c/0x1220 [ 331.803659][ C1] ? sysvec_reschedule_ipi+0x69/0x70 [ 331.808949][ C1] ? qdisc_notify+0x350/0x350 [ 331.813960][ C1] ? qdisc_lookup+0x306/0x4d0 [ 331.818632][ C1] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 331.824165][ C1] tc_modify_qdisc+0x8c2/0x1470 [ 331.829124][ C1] ? qdisc_offload_graft_helper+0x280/0x280 [ 331.835014][ C1] ? qdisc_offload_graft_helper+0x280/0x280 [ 331.840945][ C1] rtnetlink_rcv_msg+0x9e9/0xca0 [ 331.846043][ C1] ? rtnetlink_bind+0x80/0x80 [ 331.850722][ C1] ? sched_clock+0x3a/0x40 [ 331.855124][ C1] ? __kasan_check_write+0x14/0x20 [ 331.860219][ C1] ? __switch_to+0x53e/0x10a0 [ 331.864895][ C1] ? compat_start_thread+0x80/0x80 [ 331.870281][ C1] ? native_set_ldt+0x370/0x370 [ 331.875127][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 331.880312][ C1] ? finish_task_switch+0x12e/0x5a0 [ 331.885499][ C1] ? switch_mm_irqs_off+0x752/0x990 [ 331.890795][ C1] ? __switch_to_asm+0x3a/0x60 [ 331.895635][ C1] ? __schedule+0xc0b/0x13e0 [ 331.900232][ C1] netlink_rcv_skb+0x1e9/0x430 [ 331.904979][ C1] ? rtnetlink_bind+0x80/0x80 [ 331.909635][ C1] ? netlink_ack+0xb30/0xb30 [ 331.914213][ C1] ? preempt_schedule_irq+0xca/0x120 [ 331.919691][ C1] ? __netlink_lookup+0x387/0x3b0 [ 331.924706][ C1] rtnetlink_rcv+0x1c/0x20 [ 331.929286][ C1] netlink_unicast+0x86c/0xa30 [ 331.934120][ C1] netlink_sendmsg+0x949/0xb70 [ 331.938897][ C1] ? netlink_getsockopt+0x530/0x530 [ 331.944138][ C1] ? security_socket_sendmsg+0x82/0xa0 [ 331.949595][ C1] ? netlink_getsockopt+0x530/0x530 [ 331.954864][ C1] ____sys_sendmsg+0x5be/0x8f0 [ 331.959785][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 331.964887][ C1] ? import_iovec+0x7c/0xb0 [ 331.969716][ C1] ___sys_sendmsg+0x236/0x2e0 [ 331.975520][ C1] ? __sys_sendmsg+0x280/0x280 [ 331.980294][ C1] ? __fdget+0x1a1/0x230 [ 331.984542][ C1] __x64_sys_sendmsg+0x201/0x2d0 [ 331.989649][ C1] ? __kasan_check_write+0x14/0x20 [ 331.995039][ C1] ? ___sys_sendmsg+0x2e0/0x2e0 [ 332.000212][ C1] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 332.006369][ C1] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 332.012522][ C1] do_syscall_64+0x31/0x40 [ 332.017242][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 332.023268][ C1] RIP: 0033:0x7fe21d924159 [ 332.027981][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.048182][ C1] RSP: 002b:00007fe21c37d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.056787][ C1] RAX: ffffffffffffffda RBX: 00007fe21dbabfa0 RCX: 00007fe21d924159 [ 332.065418][ C1] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 332.073660][ C1] RBP: 00007fe21d9bb06b R08: 0000000000000000 R09: 0000000000000000 [ 332.082441][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.090753][ C1] R13: 00007fe21dbac038 R14: 00007fe21dbabfa0 R15: 00007ffd569b1068 [ 332.099813][ C1] Kernel Offset: disabled [ 332.104544][ C1] Rebooting in 86400 seconds..