last executing test programs: 18.001813272s ago: executing program 4 (id=79): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/32, 0x20) 17.666184598s ago: executing program 4 (id=84): statx(0xffffffffffffffff, &(0x7f0000000240)='./file2\x00', 0x100, 0x7ff, &(0x7f0000000280)) 17.592972715s ago: executing program 4 (id=85): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x15, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000200000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800008c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800009f0000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x40086610, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 17.455804555s ago: executing program 4 (id=87): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) (fail_nth: 9) 17.03292298s ago: executing program 4 (id=89): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="bf16000000000000b7070000ff030000487000000000000050000000000000009500000000000000e83d24a394a293b3bd23212fb56fa54f0b71d0e6adfefc41d86b60717142fa9ea4318123741c0a0f168c1886bf0fccf8d56ccb659427cf8593dbe3a2a3ad358061011fbc5ba1f07318988e6e01a41cc0990d0dc840a23f72eca0b2d89fc474c2a10000000077beee1cebf45fab73962fa8f6296b32a8343881dcc7b1b85f3c3da4cd36414e90a61965c3de4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d0054ce21fa41181a9580cfca031e5388ee5c9a7ddd04201f5200001fcadf95e5a4725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f588cb211624f40401691721715f46e0500000000000000a663739a190a4e825c908c0abc85d457ec5a57cb706eef32a3ed12d63c9c4c508530e173650a8a8f2a9c81bcffe437bccbe158024d8d4939e6fd9adc43f0f4b049218db92bf466e934330ed79bc9f626d68b0000600057d14854eef851bc8c30f5d0df6b94ea0b852d495085ff4eabaac9606f0497958c2c357a7124a69f6770ea6702bc53896a15fad5e55c64efd217450a975221b20d78e445e3da74a3c1e59bae44546bde4ac6de55a480f3ad5dc0f2d1818b696492285f60d914283f8d687b0bdb46261277671bba2c550bfef679bddf38ab35eaaf0268c4efa45b56a188a9195044a222ec06bb49784d5608d87c4832e4305bf8889e5db2a70f6a83d4b3cdc12546d2e9f6720dec489b6276856de6d895704ba3e8ee12c8121ffc4f5d2ae03f0227dcc4f38699d3db16f69ed45e918b07ce58bf576e253364fe0000000084f897400d4f5503a6e9ea4a480e3221f3c247ee8c55e487eaa25a7689689c9c305da4b0181f0f653fec399fcc0cc800e82bde039cc29c19b538c76e65642875bddbef61e5985751d9ebd37d2f32375357b5d2b4dc24baa6a7010038380f7029a292f1ad05000000e4e801a819aef69d081e2cacaa8ad1b4ca6df5dc37962ebc5337379e00645b6d2bec249c0612510000000000a7060d8d9b9ad109b62d1dab0eec6beabc76d765b9caf70900000399772ddfe89be4338e70d0ecfed537780a31fcaf4acaf9bd3711a4359d68ec71b0693ede07e7d18e797697901fbae4a9d9966b68eadae75ef1b8931b0818a57e5136fb8c61d73b17d8fd55c2b8d321a6cba8743114fcff01e5c10200c512000800009a021d377e477ea807cc00919ee8bfbd090034f67609cfde8877b5bb072572b421d6b1fdae83e5e250190628d02d01f978323fe36685e652ceb218a9cc9e125a4880faccaf5ac2345f20b1ee403885790500d0bc75c7e95d23904dc446e0201aafea0d3f4cc0cf285ccd000000000100005aee4199a34686905441c1fa62ed20328a10690432f59a4d3e05bd00997ea2b6f5213cb883d05b620f31869f6cce80f1ae09009ed7e3c5f3aa61bfd240cb9726bc512ba0eb1f68579c76144feb0100809f12bcf79c4d57f66703c2aee08e52de3eff160623e1af555dc7481128ed0bab22dcb6e5b6ac5e4010eaf2510fa440aabfdc80c77108c769ed2d666c555c6c38b30899a688d96a6c6dc0dd4309f6548765d3f53261b4890aa004e7f667a230b22bc6e248bf56b219d9a547b6e1c5077c9ba463329323b53910e7358b4d0c6882c590cf25e4d044a6afb10a070f285e3c94ed405aa8dc41718dd3f4bf474868538aad9a23f85a707e325c10a9f22e37c4213d0ca2910726de8e62d2e3ae7f64e40c7af3dc00bab70cf607869c5a11a03bce8aa43fa010348bc2fb420ba5e344fcdcb302548e571157d323f5fd535800284d32ffff000088ccd685f07309101a3196b705479897f4c9d97c4c7b77db7b15bfb4305d5e954a34385418e665af882a7d505323070929b228bc94b70300000066dab8c4e63debff174621a0ac7dd85b14cb7616ca23f044bd0ccd1c79292c3aa8f6e4a1c27315ef8d55781edbe368f72aeb2f48256131aaab707451c14747dfa3bb5f8725a98f6d3c797573f18810bf378e38107ece5cb7cf3b98975e9254248af60de2f04e2429d9b6eba525fd1b1b665f77710fa494e2b619c975acd535fc78696fc980573c35e9916f0000000000002c8ee5ec55faffffffffffffffcd59cc0600000053d0a1f4ea4477022c9f376b3191efeb46be3c174fb24009379bbc949fd2923715540556450f12d1645177ce3eca0d65d17deff51a024f0180000000006100499e829bda469048c70e5968375feb39e6918e591a384851ba3079ad9c376bdaf0650e212eb4185cbbb6c0dc0e699afc34ca3b9a307cd2519cd9b192d678492ea2228ff0817d68f97b18402d271036067c141b911c4e0207e2c9d37ac203f440e1a065a2d227c6ec860c0104000000000000fe7144ec680c0dac7b5906a6197c8173080c9ab3ecb72820f04a42e4a43ee3f325f93edb3a204b9c9dc8953375e37c83876f248d91f166676b54781c6855c5e067ab2c2c6d22b20a703d68d77312333deff80883cb5a25c738f4e7cbb075e10f5c36396156abb221adebb9303342bfa2b745a5e045d5db847e4810270ed1c5bbb1548ec3184ff9b8ed1687333d0e0412d452ba6b390199bd684ff458d6c8114833efde87215e5f9569d92d24579f3ef473bce24e61eb21336ad441eea93cbcb69d2156b9b6e3000000000000000000fc411d2eadcadc7c0a2c12410e4b9d634807f2a6f1c3a13508e274ecef5cfccb707a1640973973fd2d1d60138d9b7a778827fd07fbd093a0ba779dcd32556613e1fac161825da91acde7fa964c689b1f0ea96047a98260270c3a3ccb2142b074db79aa88614663ff33f9966502a2361e49aabe58eb086c5827dd9d92fa4ff0c0e8b949d585f2cbc111de478905cb37f3cbfb019c6daace508b926718506a577234468f9279a52360d1a80b88b4eb1cda949ca77b6ec43bdf5f5a400989705746b86b400947891b33d591ec5ea9ae45983273f62027998d72f83625021a72e27e0449fa154ade55071546d4000000000000000000000000000000002f907c5db9c967a1f86c57bb5062fed7c37ec16a7e62b6e370c3c5a32adee9032367814394a7a7fd12c44b81fb5ac2ad92220a72aa3355e894cbefe344a6b5eb4c25128d5427a640faae401eccf3aca4294410461e946010c50f9ee556b38eae0b252ef288397672bbbd17e5306589f93dc130b6be5b19dfb2462348355ef24762509cf29becacf8515abe299b8a7dfd585f5dbf7578bfdbfa37deeb872c3291b59349238add315cd18e6f4196b404e48955657d680511c7ba7f5e0f9d97d649583190c78015aaf4db05aa2a6cc9d00084ce958406e09fe508a0ee5feb2d34f48d87000000000000001108780004ec696f618c20771a7ae436d733f603f20c9189567b63d47fae002e616969d888a418d139a25b11c0da7aecb8c14f1a879f7b985ab634b0f5cdb2090ad2c336e9a28289247ef4f3cfcafa393927d27711ed0543a5e8ec6c1c62082549791f75fccd54582f990234496954e6e54bcbb90f2756912ab7e511a55a9e0512e5c1c10bcd76ee4799af611179a39bd0c0323cae1aaaaaa8dafb55bca104ada3252c5d9de5b9cdb6217c35ca3d28b1d8b9d2fa79376c13167a9ef1b1f4b7509debbeacc153ca8bea4a0a65ee1d1d20a9106499f0bf7f416b051e835d790ac978b90143d9125224f74b6167f7a967c7e33eb5f43570b9f3c91371968a30e528968b233d0396db424e5fd73d380318e9676d074dd5ce552a222e250f9f6d0bdd9e46e7f22d9abfd4573b57e3b52d407b464b0146ea15560a2ce034b1623fecc84842928223d17ce4ab31ef4c2a9f9caebf65341fa3da1bbae7972097e24603b9db8edc25a152bd39af179eab23ed555040c2bbb89ea22c08b97264b3616a41abfad0ab12a79574c60cf1841ea45f10e9438e55e1e0eb645200993b08833bb14517b0d0e5ba72bdacd92d57b6029129c95ab0a93857c7205e8450b27aee5e684ece77f53112873f40247a998cc896ab4d55573c7a7ef2936a29425cab46cd4fdd1452ea8429c63c74d5673f5e4d47d1b001d0d3a9e1d5c840ab37a69cb30d17ff7591f01549e552dc43b672e0feff94408171d682565dc2d84476297c6901040000cb9f7f2eb690d7a032c09f0a3d48663fe5ece30f592d71755dd6cbfac96016a2ecd4e499ce9adce6e59db0494fa25117a2bc13275c9a94a3532c1b8417e9ed5e6cd5f51f8ccc878ba73305ad19b0cf05625439cdf688d33c8fd6cf52c5c5685444b65eb918884727d3a780bdac17d447745e4accd85d3aca4d63127bb3a58095cffa08a6cecae329dd5f47552c40b560b05e962363e99300d61931ddd97444c2bae02edb26383cb96ee7d2742d24dc7e9b6dac831674ae09b7d180ebb30b9221480ad78706dadf7ca3540eb6c6c43dc7e31b2c8d188f28d6ab10d3c0c97b9f6b5feb9abeb6a801975c0bbab0b1fed7485f2fca1730906a6dc1914386118646dab2618582c4ce0a8ce7a1a3ca7d56f6ca8c7d43cad0116c70751a0db051d9adc4ab34dafbca31fecd9191d38fa011a4c1fc19df0b9aac3a0de17dc01b413c4d4eccf9eb1cd90569508fc6479111544807f11dad193a170ac290f28d3e7f702c5bced7ed90c3251897446fdbb1195136d9092168e2deedb3e0afdf0f543363fbf8759df07270981c0bd7260998963e45a2c84e8b82ddfa98dab68a23cfb2ffa4fcc4ebcd38f273e9bdb240f77eb51e259bb88dc383b19107af39ffcc708a1278b3e53c2130a9c7150593794f8f22ae9b2ff0d46c8d175bf9ff227870f1dcecd5b564d20230ac32a10982cf1bbe5ca15ed6d85b2c447f3fb0872ea6170352fd4c76c75941d1c3684a466c81a5892e9f56c0b512be586381c2390aaf93347d318aa5de4322b11088435730c69bc1cfd96d869803a3113b2a33dbf7973434ba9e4ec15c0423bb384975498ff56bf8b51237dadf6264532fdca7c44e485e4c9b695cd000"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x8, 0x1, 0x7fff, 0x1, 0x7, 0x9, 0xa4, 0xffc, 0x7, 0xb69, 0xc1, 0x4, 0x40001, 0x3, 0x4, 0xfe, 0x0, 0x9, 0x3, 0x3, 0x6, 0xffbffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0xfffffffd, 0xe, 0x2b12, 0x1100, 0x6, 0x100, 0xb, 0x40, 0xbed4, 0x4000001, 0x1, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x1, 0x7f, 0x7, 0x4c3e, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x5, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xfffffffe, 0x400, 0x9, 0x4, 0x7, 0x4009, 0xf9, 0x4, 0x100002, 0x8, 0x752, 0xfffffffc, 0x3, 0x0, 0x10001, 0x8, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x6, 0xb, 0x23, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x4, 0x40000005, 0x9, 0x8000000, 0x4, 0x2, 0x80003b, 0x4, 0x4, 0x4, 0x2, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0x3, 0xffffffff]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x146) write(r3, &(0x7f0000000300)='1', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000540)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000002380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0xc, {"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", 0x356}}, 0x877) ioctl$sock_bt_hci(r7, 0x400448e3, &(0x7f00000001c0)="853ceea005578ece1388088250f75ec744898b5d1d15787ee59a703ee87822ecce7bae9ff5694f33db93358671f799876d674f558ce8547240caaffb595cabf6b3b36869e86dcbd53e60415cf27ff4bf765c84b243dfa54b1cee2da155251a6beee0f11d2770ef6f5f2706b0dc92eaaa852157d908b3b9d7c78d37873f1e461333cd3f549cdeaa1785cdd75c343e23e9cc72601dbdb18a214933087cff95e31fe641f4b455831068aeccdff969d72f55335f0b360a6bae007894c145079324fac6e14fb8d9a7bd4e045f6d350e8c843a87f6cef4658d0f72d14af7545e0c8fc99e11eae9ec07896502dcfba551dbef73") 16.98718735s ago: executing program 4 (id=91): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/159, 0x9f}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (fail_nth: 9) 9.553201527s ago: executing program 3 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdb0c12462a2ecb}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x184, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff2b1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa77}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1f9}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40081}, 0x400c0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r3, @ANYBLOB="09000000000000000000140000000c0003800800010008000000580007"], 0x19c}}, 0x0) 9.552148988s ago: executing program 3 (id=133): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/32, 0x20) 9.54045039s ago: executing program 3 (id=134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d4", 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x18, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x74000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000004000073111e00000000080000000000000000edca705807633f8006c37fedd82db93263d346eca7dc79ecbc33cce1e461999010055beb84572226c662ce756813dcbea63243df02a1a96cf8d41540d6d9f528a3dc0b6adb1b1bb4c0e73710fbd349b48749da3d050e0000001f8adf229f45ab4fb29a30dbccc853132fdcf173e72a0ad5b5ce3586566684ff1ae513153bb6165c094aa9470d7c86187dfa3e3439b4481ab2b50d3740d3bd914878c12d95ba52020df521214dc405af541ebeb4b28f8f3015bf1928cfebbedb576e70023be92ce65eb2270d02fbcd27567f5f729cd216e8"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000bc0)={[{@grpquota}, {@discard}, {@resuid}, {@debug}, {@dioread_nolock}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2cf7b53888d75ee2d3616e733d66642c2c6ba7c8b2f8b261e23b2b"]) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000085000000070000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x7, 0xfffffffffffffe73}, 0x28) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r11, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x37, [0x8000, 0xc95a, 0xf, 0xc, 0x7ad6, 0x2, 0x3, 0x7f, 0x20000006, 0x4f, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x51, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40001, 0x3, 0xe, 0x0, 0x4, 0x7, 0x19, 0x1, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x9, 0x4, 0x2, 0x40], [0x10000007, 0xf0000000, 0x8800012f, 0x8004, 0x5, 0x6, 0x129432e2, 0xc8, 0xf9, 0xb, 0x2bd, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x2, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x0, 0xb, 0x15c, 0x9, 0x8, 0xfffffffd, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xff, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x6, 0xb, 0x0, 0x9, 0x5, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0xfffffffd, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x7, 0x5, 0x9, 0xac9, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x3, 0x0, 0x5, 0x6, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x2], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x2, 0x101, 0x10002, 0x4, 0xfffffff9, 0xffff, 0x2000a620, 0x2, 0x5, 0x4, 0x5, 0x5, 0xe7, 0x6, 0x100, 0xbeb, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0x28000af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1d, 0xf40, 0x3, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x31e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.636089203s ago: executing program 3 (id=139): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xff, 0x553a, &(0x7f0000006040)="$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") unshare(0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x200000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x156) write(r0, &(0x7f0000000040)='0', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001300)=""/220, 0xdc) 7.335759245s ago: executing program 1 (id=150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="00020c0000000c00029e980ccc07a5d843ad7cc5a94c532f80d5da28d5"], 0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x2) writev(r3, &(0x7f0000001a40)=[{&(0x7f0000000a00)="5f250977eb50442ccf9804227580591ff348187c04d4ffa8c4c27f027c13a9d23fac888901f928e80176948b86f0f53fde8fb5a36c1f4373190141b46d5b86439a9f2c21cae70eea966717907c8950a79dcdc06e68fec07259253c01ba043ee641f3726246fbb18a8bed2c64fb499ae6923237ce795efa9d8ef0b31fdc9202108eea247311110f841668475dda9711d6f7d8dd8874b78eb8ea2348481654a7e1c177a5e59f2714e7bd1874303c10dd7d2d2df88aef9c69dbc3216d3a93df1e14493c3b646eeece1e25fea6dfc5fd56cdc1c43e7b39f73a9c7ca66e339cf44ca792da0d499350631ee250596e40305f2559e9ec3fb1b9ce85a8436a8b0c7f8d6832287ccb53e7b70ca857110c0b2ae3f51141be0e5c30f18df1920a8eaaeb2d3efd33833850295b47ae3d408d05db02bac02d50b6704e13eb04db47020cddd3320898938e0e62c27df8bd7876d3ca07355040c0d399d369b133b268d65490d39c59c3a4cb9501ebfa586ce5a7641b36c1925d061ded85a835639b451aeae9ec78801955677a903427024dfba7fe71757cd7873b84b8dfd5302bf34a0917a460f43be61fb75fe66f7e20035e996e076bdf0114d6f62798b3593456fc6fab5dfd3e5aabed92108bab2a7ea62db1808e410eb30ba74352aff22a1287e61aef44cb4d3738a22bbd8dce9e07a09414eab13c443720ee261b4c9efcefeb70c37c9c8d338f89098d4ac3955de506d20a0be2e340fe2eb4d80034dd93883e1a31a19275b9574edc34b6cf4d202ca06ed95e80be1929aadecd146dac5838dce00f08d2a33e882ebad9426d9582bd6cb23b7781272229be9b50910a4220385279e5c640e4675a5ab8ac24ddff384a38d4dd57aeafc6e5723fa9a095aab0bcd76e62bb0eed766e1ae60716166daaabf726cc0bdf28ca0735bcc186bd044e284402690284b5101c04a9066cc6ca6b974384c693674cfec1fb5587b52058c8a35c04199dacedacd373771df1d8233e4661bbf8b846438f70927a66f10a293a1a32c50944839ecff8d87eb954613409925ae5c0b2011ac22615c117e34b45b8c250e8aa699293fdbcdc068e4e30335c14631cadd3591abb618813f82ab49e597f524066e92af62d7d399323c7cf5303922e1de02ff760377d96ca162bf06ccac79bd30bceaa2751f337f3711d788b8fa9914a204068f7fc27756d6b9211f33dc628f7beba05ea594aa689ee384817eb784a5e850faa35f6a8196914dd156bf1ca54c67fc884ecadf968aa90d2fbdd58edfd65733dbdc8ada3bed156562a017286f3fa33a9de1131629bc4ca23493bfc0ba0bad6330aba0550dcd842d9d578fe1eff1ad8566604a5c166c6ea88a01ab03589046934d46e800ad99164a29a0e86da8c7ca5e1a5bec3a9c5faf5f725322c8815d9c47bbaff7656335d3799299260fddc64fc6512f555a845cc21fd52ca65bc20e957b1d571951293d32d26018968b310d3c70ad09875674e1a2384d5de1dffac04c1f42b38aa38257ce5d3bafa668a78490d25fa4497701fc288a3f98f746a5bb0bebd0aef5e72e25d0fbebc747b7a1954c7bdcd9c87863102b82f286ed843983203a09d46e988ff7e892216dc9f29937bff1885638d44854d1fe42a369892392e25ff879d1657d836bffd7e531535ce0d6d45e0fc51dc5e9814c3ebadbede382e72b5d0013beffeec55d56669734f85868116187114600989fc20d90ec336f3dd7186052cea17010f66803251d788a3ebbf77224adc9bf0e1a87a1045b97d005887840a70c5f9658781b2fc735b708a7edb4931ca1b7b003ac9fd649429a381a2f763b110b751fdcc8242551b6ec2c13986049f82440989b0c4054940cfc96e098b0d4d600808e2b50b2ead10f850c5b6494493fb3082b6dfd14707c38cc17038fb0e3fbc6aad3236a5d4e9b252c453051a505008ac3b7870ac3ff11989df96c72820d789fd0f99292c6cce81ed2a84fe1c2d97cac3221b22455976196ecd4774aaf678bce0230e9c780f51f4fd336645fcd027d9914d4b495438890dfda680ee4dd63ddd24c64aca2a25b72973e6d6f7e877a02a4ce178ec259dec51e2bead0b962b4b0f1a2ec91d66128bcbd917fd72a6f673b32652c291e1625d8b3ed4ed17297d40d0ed9b6c4637d37c82cbad78340166963bd361", 0x601}], 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3261e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x2) futex(&(0x7f000000cffc), 0x4, 0x1, 0x0, &(0x7f0000000080), 0x0) syz_clone3(&(0x7f0000000b80)={0x8001100, &(0x7f0000000880), &(0x7f00000004c0), &(0x7f0000000480), {0x40}, &(0x7f0000000600)=""/220, 0xfffffffffffffe5f, &(0x7f0000000540)=""/127, &(0x7f0000000700)=[0x0, 0x0], 0x2}, 0x58) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) 7.324688577s ago: executing program 3 (id=151): unshare(0x22020600) syz_mount_image$msdos(&(0x7f0000000440), &(0x7f0000000280)='./file0\x00', 0x1000400, &(0x7f0000000480)=ANY=[@ANYBLOB="636865636b3d7374726963742c6e6f646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c007db9b87a3b22e5cdbfd3408bf7f26c6f9e2e5a33a3de79757cd012da0fa08b018021308de4ff8e18c85136d66ca70f9e0202d9f4ae6ea8be44247a411f017b3641e72534ed28887e107245165398cb2190b1c94e503b949600a547d22bd1f5389f7d4c9888f5cf2358d4258a2647e5563c5bf7447ab02ee8751259a8c6ee852e305393a69052893580c4820d1ce2dcfccf9b1f8250ea0de206b8ef12366ebe20bc74087f57f579b70bd08afcf902e41a55b58f624e5ce5a03cf74baddfb64769c330584e79449ff96c074b0065a305dd039b056c50c00d1d6a", @ANYRESDEC], 0x1, 0x236, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) (fail_nth: 2) 7.048436319s ago: executing program 3 (id=157): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x801) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0x2, 0x2, 0x4, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x3, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x800000000380000, 0x1, 0xb, 0x5, 0x4, 0x8000], 0xfec00000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 7.048315569s ago: executing program 32 (id=157): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x801) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0x2, 0x2, 0x4, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x3, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x800000000380000, 0x1, 0xb, 0x5, 0x4, 0x8000], 0xfec00000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 6.407617043s ago: executing program 0 (id=162): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000c040), 0x0, 0x8c0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000000000000000130000000c0009800800420000000000"], 0x20}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x113, 0x2) socket$nl_route(0x10, 0x3, 0x0) write$tcp_mem(r0, &(0x7f0000000240)={0xfffffffffffffffe, 0x2c, 0x0, 0x2c, 0x0, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 6.292716619s ago: executing program 0 (id=164): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/147, 0x93}], 0x1, 0x9, 0x80000000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) r1 = fsopen(&(0x7f0000000300)='ramfs\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000940)='./file0\x00', 0x102) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4}, &(0x7f0000000300)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0x3, 0x0, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0xec, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x56}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xc04c884}, 0x24000080) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000100)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @random="69ea1f001c52"}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) write$binfmt_format(r8, &(0x7f00000003c0)='-1\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 5.972201341s ago: executing program 0 (id=166): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x4d2e40, 0x0) write(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000540)={{r1, &(0x7f0000000080)='/dev/kvm\x00', 0x400, &(0x7f0000000100)={@align=0x1, {0x9, 0x9, 0x3, 0x6}}, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x1}, 0x3, &(0x7f0000000480)=[{0x1, 0x6, &(0x7f00000001c0)='/dev/kvm\x00', &(0x7f0000000200)="17574529c027852059563d00fa87ccf0b3e22dc63921382c7ff24b7c8b6055c73c3577951ee7f4f7c57e77e4acaa5e9e24b54c21e69f84560fabbd55f579006359a2c225d20e77f886c8c1e9b2c297faf930838e614468712366435b7eb04064701c11763106ab92dd7884c23593694d31c302d8d9c540f2256d7b8baa21bc9dcaaa0d95cc9c16ea8df0268a97bd7eb48b0a44520136c5fbd024cf1ad26f986aec3967335177d9a19388ad8e3fe6ded521", 0xb1, 0x40}, {0x3, 0x5, &(0x7f00000002c0)='-.}^,\xa4\x00', &(0x7f0000000300)="4ccd56a61886db250f684f2818b7b7fc", 0x10, 0x2}, {0x1, 0xfb8e, &(0x7f0000000340)='/dev/kvm\x00', &(0x7f0000000380)="d410bb1adce8e263ab0d979abf51e129ead9fec27bcb0bfc9775d7865c47ed2d97ccfde2a03d20c477d6f1ae3c43b29917d7a6d2fdaa13f43a79174c0ca6a2b367b71fc1d54c95697afad4bee0cc192d35b5d2d1749709d80ca01d0ff330474db4b89e7a7dcf46cee84ad8652a65d3b3495333076c29d4ade2b6558bb663f577c466cf26cc41e495ce49b286285fe3668e0091da52b70bf604e262189ab9e2c0102b691eaba5519f135a6118535f4124e5ba852e286093cded775a5b31c65d679eeca139b97e4626ec593be622b905b722fe1616b30d587d7c0a58e7421378a3612ed47c3aaa420b", 0xe8, 0x28}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000500000000000000dedd00"/120], 0x78) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x1000800, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="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", @ANYRES64=r0, @ANYRES64, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC=r1, @ANYRES32=r3], 0x0, 0x5549, &(0x7f000000b640)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000005c0)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x1400, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lstat(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000300)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) 5.510941484s ago: executing program 0 (id=167): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82401, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x3800) 5.347106291s ago: executing program 0 (id=168): socket$inet6(0xa, 0x5, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000001600000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}], [{@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$(\'(-\\]/#{'}}]}, 0x1, 0x504, &(0x7f0000000c40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername$packet(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x40016, [0x0, 0x0, 0x1, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x0, 0x0, 0x4003, 0x20, 0x403, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x6, 0x0, 0x0, 0x7c1, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x8001, 0x200080, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1fe, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x80000005, 0xfffffffd, 0x7, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffe, 0xfffffffc, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xfffc], [0x4, 0x2, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x2, 0x9, 0x1, 0x4000000, 0xfffffffe, 0x7, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffdfffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xe, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x1000000, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3], [0x40000000, 0x0, 0x74e2, 0x1, 0x0, 0x3, 0x4, 0x0, 0x7, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x16c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xfffffff4]}, 0x45c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x100, 0x0, 0x80, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x0, "6e2bf0518cac42dd42fa2e99cf63d19d9b0d31351d7055f17143d60daeff5bcb", "bfe548c37a88b665572a987024aba234", {"1691219b1678b3cec94e5c0aa517ed7c", "86bf4abd9a1cf98ba1f231d7e2c62410"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="100402"], 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 4.167716435s ago: executing program 1 (id=179): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x40010, 0xffffffffffffffff, 0x400000) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) tee(r3, r2, 0x2000200000000, 0x3) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvfrom(r5, &(0x7f0000000040)=""/93, 0x5d, 0x10181, &(0x7f0000000140)=@nl=@unspec, 0x80) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x403, 0x0) ioctl$FIBMAP(r6, 0x5386, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x3, 0x0, 0x3, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x3, 0x0, 0x3, 0x2}}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)) syz_clone(0xe8344400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = syz_clone(0xe8344400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000000, 0x2010, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r9, &(0x7f0000001640)=[{{&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000000580)=""/104, 0x68}], 0x4}, 0x6}, {{&(0x7f0000000640)=@in, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000a00)=""/145, 0x91}], 0x6}, 0x33}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/137, 0x89}], 0x1, &(0x7f0000000c40)}, 0x4}, {{&(0x7f0000000c80)=@ax25={{0x3, @rose}, [@netrom, @rose, @rose, @bcast, @default, @bcast, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d40)=""/42, 0x2a}, {&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/182, 0xb6}], 0x3}, 0x101}, {{&(0x7f0000000f80)=@nfc_llcp, 0x80, &(0x7f0000001200)=[{&(0x7f0000001000)=""/16, 0x10}, {&(0x7f0000001040)=""/150, 0x96}, {&(0x7f0000001100)=""/226, 0xe2}], 0x3}, 0x3}, {{&(0x7f0000001240)=@un=@abs, 0x80, &(0x7f0000001580)=[{&(0x7f00000012c0)=""/220, 0xdc}, {&(0x7f00000013c0)=""/129, 0x81}, {&(0x7f0000001480)=""/183, 0xb7}, {&(0x7f0000001540)=""/27, 0x1b}], 0x4, &(0x7f00000015c0)=""/88, 0x58}, 0x8c}], 0x6, 0x40000003, &(0x7f00000017c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) geteuid() sendmmsg$unix(r10, &(0x7f0000003000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff}}}], 0x20, 0x80}}], 0x2, 0x0) ioctl$KDSIGACCEPT(r7, 0x5607, 0x800084) syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12011000559bb240580403500000000000c0b6f647bda4b9758b5109021b000111100000090400000195699b0009058b00000000000000", @ANYRESDEC=r5, @ANYRES8], 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12011000559bb240580403500000000000c0b6f647bda4b9758b5109021b000111100000090400000195699b0009058b00000000000000", @ANYRESDEC=r5, @ANYRES8], 0x0) 3.900994495s ago: executing program 5 (id=181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000100)='exfat\x00', 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="2ef30faab981050000b80133000082000000000f300f20e035004000000f22e00f20e035010000000f22e00f20d835080000000f22d8c74424000c0000000f788649000000c7442406000000000f011c24650f017871660feb8c380060000066ed66baa100ec", 0x66}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.850467126s ago: executing program 5 (id=182): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}]}, 0x1, 0x249, &(0x7f0000000bc0)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000480)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-7,shortname=win95,shortname=win95,sys_immutable,shortname=winnt,shortname=winnt,uni_xlate=1,check=normal,codepage=862,iocharset=cp932,nonumtail=0,rodir\x00\x00`\x00\x00\x00\x00\x00et=cp936,shortname=win95,utf8=0,\x00'], 0x2, 0x289, &(0x7f00000001c0)="$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") mount$overlay(0x0, 0x0, 0x0, 0x4, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1, 0xb9) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000e6ffdf00000100000000000e10bda4dbe64e3e1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/372], 0x1bc}}, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff}) listen(0xffffffffffffffff, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) renameat2(r0, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000680)='./file1\x00', 0x2) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f0000000280)={0x9, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 3.536517177s ago: executing program 5 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdb0c12462a2ecb}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x184, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff2b1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa77}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1f9}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40081}, 0x400c0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r1, @ANYBLOB="09000000000000000000140000000c0003800800010008000000580007"], 0x19c}}, 0x0) 3.47717645s ago: executing program 5 (id=184): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f0000000300)={0x0, 0x1e, 0x2}, &(0x7f00000005c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="09000000020000000800", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32, @ANYBLOB="00000085390000000000000000000000000000000000002000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1103, r1}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004f30300000007fd17e5ffff0804040000000000", 0x36}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty=0xffa4}, 0xc) 3.455170295s ago: executing program 5 (id=185): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x80000000, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x80000000, 0x4) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) r2 = socket$inet6(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) (async) write(r2, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x200) (async) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x200) syz_usb_disconnect(r3) syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x550c, &(0x7f0000000000)=0x8006) sendmmsg(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000ad06f7ffffff0000"], 0x18}}], 0x1, 0x40) syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 2.130694992s ago: executing program 0 (id=186): r0 = syz_open_procfs$userns(0x0, &(0x7f00000020c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x26, &(0x7f0000000000)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) syz_usb_connect$uac3(0x0, 0x98, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000000835121482400001020301090286000301034407080b0002010130010904000000010130000a2401022200ff070100132403040000010305030000008100096af04021240c03"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c100000000000224e0000", 0x58}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(r0, 0x0) 1.907315282s ago: executing program 2 (id=188): time(&(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xa0100, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x3) write$UHID_INPUT(r0, 0x0, 0x0) 1.902662153s ago: executing program 33 (id=91): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/159, 0x9f}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (fail_nth: 9) 1.884793697s ago: executing program 2 (id=190): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x0) setpriority(0x0, 0x0, 0x2a14b58) (async) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) keyctl$set_reqkey_keyring(0xe, 0x2) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00', @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) kcmp(r2, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) unshare(0x2040400) preadv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES16=r5, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$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") socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) (async) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) setreuid(0x0, 0x0) 1.672772575s ago: executing program 2 (id=191): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x6, &(0x7f00000018c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000180)="7419325c0e084fca02a4bdb3d601d577594b6fc2be4002911176e746fb481993c851e50d7084e8017c967bb5e7ef2feb84b4", 0x32}, {&(0x7f0000000600)="042233c081da4475d59ad17490884a2847bd269159ccf8eed28aed7399b3138c2decaa2ba1724c3cd1ac59c21fe7265fc76abb934447db575ea1fa84595188c3c3feb22bbffac45f3dcfb22dca4fb29e43fe836154365ffc502055dd910d28082e08656236cb68a4e8b84c5abf5269d4baf89d58da410417d118f8dd8ffc4d522f9f160ce8eca03ec07ac97868a1fc4ea1f5841c0ffc2c5598669f973b0e92be50ee2d46f01137d396db834260e28a797c714af563f97dfc6c8c52719b1fcc9cbcf7050a47f8c0a7d0589df8618cbc0103a677f6adf740697134cd01dd7e13f485c640251f0033959430e02d3d068ecb", 0xf0}, {&(0x7f0000000700)="c1894d15609d2ad71e8f7abcadfe93ef2a2c3d1b89cfe5d360b4f6d1fb5cd3ff028e8f30325ac9a9a1e6d02e9e52cf283c69cde695cc4f0ca8f0e13dc037a88efb41a3a172d0930d8971ef5123d473846400370f6cd8", 0x56}, {&(0x7f0000000780)="c0a27a1144bb24db7350447409ed0f3aa8504a495987c97735fda52d929e6478fd53d5ecef9ed9b38446552c065ec69f13fc75bf918cf3aea114c1a18747e5585af899aeff3a8a87ba46ed8da87fb1847ace1c57587029f637d7747f1e8d0a34ddfd2df60f915f3727fc7d6bcd01dfed030480f908ca6a72175b6c5a2e8016039c4ce7ec5e3de1e481f0c4ab7f805d8d4618", 0x92}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="b466c61dd32f739d5fb41db194c42397fb09e0f71ff0ecfae346b99121599c87a7b01e07dd8f3d693a449d762c38acbcef921d931b5ef139436a49ed419d344ed25aa209d26b26b979e55573b393ce2be809498e49d710bef14028bdc288e5b33435ebbd38c8a8ecb49d581e917eda225d164612c478", 0x76}, {&(0x7f0000001f80)="f7fb363d8fb8d01e91ad2eb6a21ebcd5dc99aefd84afc683fdddc340c833d24054146eb3b40ef40fec7535e704a5ff40891ec0e8c8b07d14dea3470fa33788b376837a54915ab22b3802321dd21bd7cff76de14fc8f4070939d4c283ca294cacd0be0894fa27045eaae016f09b0947b6bde3144e264b71d9552ae8857c00fe30695fa59f1ed41f53ded9afb72866e669113a3f5531508de62e527a47128d78572e7c", 0xa2}, {&(0x7f0000002040)="ff83f68476493fdb35003554fd1fa56a00cf0f0e894cdd7d7ceb62724f1df85b78642ae6a19d51aede8777269e947843095cff7e71a0ff9d4fc53e6436dbec620c8b18ca2c19da83389513da33ac362440143d5a1af23b4161059af37f9e8b0c7a9ba33a35f403735656a888bc381ebce7ce91de275618ba2bf299a6d142944956b6df0454953920c33fc38915ef2ea4234d4fc1543cb82dbe", 0x99}, {&(0x7f0000002100)="0e7a58075e9721f516c1887d93a5ef093838686a0c9ea03facb8b0801669e934c94e9d39f460d2f16d959fb080bfbc7e434e141b6080a8d004cd8b0bf371d711c6a5286454a5b9490499f82d93ba929e5b34541d9c94defba60f243d89183c2e7526ba7da25ef7bd7349c6eb093d60d77ad3cf6f69b433697a871daab320b613db3a673991f599e8c7fa82377e2b3919c1142bb341ad40fb18bdc55624784976ee06de2db9", 0xa5}, {&(0x7f00000021c0)="9b45d0733baf7a5c15cb9f0ff90895f8c24c09c77d1bdbcc6b5505d3ace8c45b61f78178aa9c4a3769acd638c96a2ec0ce5052f4ac9ac1f175fed5520bb92933e7fac23e74a4d8ee1985d563753ec029939d6c49dfb57fec47d777145858823a7f8c05611a730833c39ff9322abcad6708db398b45359ceb4076c8203b2a2f4e6d625ace3dec4683e2c6d34d00775eafb4ad5dd382c114d0ecf703230f6f6d1e06ecd2310a34fbf6d2af6dd9e269835d90133c30b647311519afc5afd0c8cce12dc4e13f14", 0xc5}], 0xa, 0x0, 0x0, 0x8800}}, {{&(0x7f0000002380)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002900)=[{&(0x7f0000002400)="6a2326f269dd9a272a61b2ab6a4ac4d14c778235af9598be613200d3958b19abd0e52b3d8d8983b644372fbba0ed153fe2575deb92ddf6b25d659f93ef8d0b4201273ec7b270d9ec11c006a2bbf74ea73e75fe630d0e9a5561084f9cf450cf5d20ff317c24c05f85ee41deaf0a379bd4e7971204b3080fca05e7e2ee8d09ec42", 0x80}, {&(0x7f0000002480)="dff28fb3987dfcb82896b29c2dbace6766b46688d14fac74cdcdf7e25b0b4e90e2eebe59235f32afefcc0857a5851d85c1d69218c5770f2a04df7bb245edce2112464a29c01b9b27705f30c15abf19909de5d909712ab6cc70035e9a1e1991d0d5a6516a4e811ad24d7107789ade44f8a9fe8dd9f8aefee20f569d056020a793aff434526df42a2e771b9863e10c751698ca7ba33f508eb55865b44f5dc97a0a3dc84df0", 0xa4}, {&(0x7f0000002540)="ce94b1903228cf0e6f4479bbfea970c1da8db25d605e05ce619b4b6958ca82ccce54c659079260acda5f7ec64b13534b51fb3ca4be482a75f4299c26d0ae811549fcdcf0698d237623aac59baf65641cfb9d71cfd3e0a45ad3c17e0f1eda6915e1ea8386cb384b349dc0babffb089d51a8a1edf11394af337903b1eccf34", 0x7e}, {&(0x7f00000025c0)="defc8dc533ae00fb2aa3df3457f9b23d691900f05268c4912a99c5ab9d9bda8468c4080f4fb137add6923291013730f47ff29ab04e60203303a6189da96b5de1891d6b667657a5d706729191e016a255fc7dbf75dbf4ad81e4ef8170a0cbfbfe5a6d0651b3bef32a54c4c5214971173a9ee4399e4fb3", 0x76}, {&(0x7f0000002640)="93c04d52ad29701edcc245629af930526fde67a093c24e966093bdf60a0f22c85423ccc3971f4686257edd5872f50617a96a496798794096b3dad971b5879e443c18ee757405f6bb4600", 0x4a}, {&(0x7f00000026c0)="acaba3be35e531e181e8de88f69b39724eb4b0334951f39d93d79c8a870fb5380246659f75c27c4008a8d1778fc9cd5f8afc503093ab0cc8a4f364983b99520aad9786124b42313df6246b2fccebe532e07c20eb02652299d86248a1b4d4d7e97ac94433a88fb1857dc91272b04b7d6f5616a06645cb0ffdf0588a328fc76a1cc787e8692ee9ec56df2baf8000c672c4e787c5c4cbb5f113c6912204d565faf87a6e58760747e7b0f6ffded61f4b3e81e006709fed853ce5988799cfa6945e", 0xbf}, {&(0x7f0000002780)="66249d3278097999747d76e05ef46acfd7a3d92ce8bb650fbf9ed92d9c3b03b821562e1b7ac17a2f9d232bdffeff06a5fb4cfbd83d91c7f05b2e16bce5e7cc2069bfe0583e042a5e5c70955d3f86caea73f1af02f8b0b0169a6ebb1f6a48e1932e6c32f2c2b577218af9ebe61583999d91cef73f44480f5c6f2a7f212a793ae97a177ba7fe57199f2f095683c3c8fed633ade3fac34787f3015b98590e5c568a42bb9b68c93e9575d31774947931bd3b47545183f8c666684d983de996b10d16d15f614e6861a692457c4523769e95cb38d539639174cdbe273d45", 0xdb}, {&(0x7f0000002880)="c0122aa4f822afa4512faa22f527cdbf89a4071d22a5e2c1355fc4e7e56ffd752fb698a231eebd6dd9177a337ff4f47e9d47817fc2479dd5eb03b7dfe4ed3803cb70416935b9438a11618d7f13b42149bde7a8a3c6cee775c0d49ca475de9df12a5b69c16e454955cc65d595cd6670236817", 0x72}], 0x8, &(0x7f0000002980)=ANY=[@ANYBLOB="1c000000000000000100000002000000128ef5c6f8610f1ff4b14dfdb3efa3b54a951b74a281f07bb60c40f0258e2c34fd6b2a8218a9325bf4422eb987425cc5ddb7424dc524a5909b35a0960b4d91b938057e6a47cf2dc4230770d841f0a1d85cf32333b5ed689660baef3265bee78dcd2ea42c60dc3996efc9d47b74d26809dca74ff88a6b4503aeababcec1525e09fdd2f07b022e20c18f89fecf36c451a53b415ca88cb6cfdbad93323f36e8cfd052ed5d1a958f925e3626bcecb7d20e69cb9bd1f19ecb0e2aaac018e9a944b91aa318ceec3061f66838372eefb23d1bc8339dd8878eb7ac8d52af42a44464d05078caf09e6f7ce3c0bd83cd7b60eff95ee43b07b3e4bc794362b3e1caf9c6061f77255f858d6e9b15f2322902d78a0f4e934505dc9c8de1", @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r4], 0x58, 0x85}}, {{&(0x7f0000002b80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c00)="86fee2e5353609e9dec8d8c4ce7591279a3a43c7a613449205fd8f0369bbfd6c920fb96d7729a4a483e6dcf6a7cc958077ce4376a7bb0aaf388282a9bb075e45c726bbac64261d80d5ffcb5313df66daa01e753233bba36ed36f9e16a3c3f2f25e0cd40dde85bd70130cd36b969f589ef10075cd4e3f0f00bf42b8d6976c4141895c836d5fb291853e1d53ebaf1e61c34ca32e0f843c83bbed", 0x99}, {&(0x7f0000002cc0)="b2647be8fa88b1e6dc38485570eaf8fa49", 0x11}], 0x2, &(0x7f0000002dc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78, 0x4000}}], 0x3, 0x804) clock_getres(0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00') capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x1000, 0x6, 0x7}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000504fcff", 0x58}], 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f00000003c0)={[{@noload}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@noinit_itable}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x631, &(0x7f0000001940)="$eJzs3c1vVFUbAPDn3k6/3/edQt6ouJBGYyBRWlrAEGMC3bgiBD92riotBBkooTVaJLFNcGNi3LgwceVC/C+UxK0Lty7cuDIkxBgWYlDG3Jk7ZTrt9Hs6pf39kmnvmTNzzrlNnzlnzpxzJ4A9azD7kUYciIhrSUSxLq8QeeZg9XH3/7h5PrslUS6/9XsSNz9O5urLSvLf/fmT/ylG8lMasb9jab3Tszcuj5dKk9fz9PDMlWvD07M3jly6Mn5x8uLk1dFXRk+eOH7i5MjRTZ1fXvXf2Y8zt977oPjp2Xe++ephMvLtL2eTOB2P8gdk59X43O5N1Zz9zQajXPVgUUYacXKTZe8UfxZr/ycV3dk/RFJoZ4tYjzQiTkVEZ0Q8HcXoiMfBWoxP3mhr44CWKidR6aMGy8Dek0TTrEs9+YvEUj0tbROwHWrjgNp7++XeBy+VtnJIAmyTe2PVubpq7HdGRC3+C9W5weipzA303U/q53kqc32bm5mryur48Yezt7JbNJmHA1pjbr42y93Y/yeV2ByI6nuAvvvpovgfy0cBaf45wZuNBa9x8nywIS3+YfvMzUfEM3n/3xVrjv80j91a/L+7wfrFPwAAAAAAAGydO2MR8fJy6//ShfU/Xcus/+mPiNNbUP/qn/+ld/ODZAuqA+rcG4t4bdn1vwtrfAc68tR/K+sBOpMLl0qTRyPifxFxODq7s/RIQ7n1K4SPfLb/y2b116//y25Z/bW1gHlJdwsNa4kmxmfGN3veQMS9+YhnK+t/D+b3LF7/k/X/yTL9fxbf19ZYx/4Xb59rlrd6/AOtUv464tCy/f/j4Xay8vU5hivjgeHaqGCp5z76/Ltm9Yt/aJ+s/+9bOf67k/rr9Uyvr/yuiDg2Wyg3y9/o+L8rebujVn7mw/GZmesjEV3JmaX3j66vzbBb1eKhFi9Z/B9+YeX5v4Xxf10c9kbE3BrrfOpR/6/N8vT/0D5Z/E+s3P8XF/f/6z8YvT3wfbP6z62p/z9e6dMP5/eY/4N6S6/HsdYAbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJl0bEfyJJhxaO03RoKKI/Iv4ffWlpanrmpQtT71+dyPIq3/+f1r7pt1hNJ7Xv/x+oS482pI9FxL6I+KKjt5IeOj9Vmmj3yQMAAAAAAAAAAAAAAAAAAMAO0V/Z81/ubtz/n/mto92tA1qukP8W77D3FDb8zHL3ljYE2HYbj3/gSTa/rvjvbGlbgO3XPP4fPCxXNNz9+vMtbxOwPYz/Ye/aYPz7uAB2Af0/7FVrnNPraXU7gHbQ/wMAAAAAwK6y7+Cdn5OImHu1t3LLdOV5vW1tGdBqabsbALSNNbywdxWm2t0CoF1s6AeShaO/Gjf7VzRf/Z+0pkEAAAAAAAAAAAAAwBKHDjTf/29vAOxuK+//t7YfdrMV9v8vF/wuFwC7SPOv/tD3w27nPT6wWm9v/z8AAAAAAAAAAAAA7AA9Ny6Pl0qT16dnn7yDUzujGes7mBvfXDnl7p1wFosPHrWm5M6I2BknuAUHWbCVSpPlcsTqD65dgqONbW7vyxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDYvwEAAP//9HcgKQ==") syz_open_procfs(0x0, &(0x7f0000000280)='auxv\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) mount$binderfs(0x0, 0x0, &(0x7f0000000300), 0x3917848, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) chdir(&(0x7f00000001c0)='./file1\x00') sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_getevents(r7, 0x3, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.369919003s ago: executing program 5 (id=192): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000600)="cde009aa19100000d4", 0x9, 0x20000800, &(0x7f00000021c0)={0x2, 0x4e26, @multicast1}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x37}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810320000000000905820208"], 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/241, 0xf1}, {&(0x7f0000000000)=""/8, 0x8}], 0x2) 1.33616568s ago: executing program 6 (id=189): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x259, &(0x7f0000002440)="$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") r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7ffc0001}]}) clock_settime(0xb8ac63b3c6bc7313, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f786dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000401, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe) syz_io_uring_setup(0xf03, &(0x7f00000001c0)={0x0, 0xea17, 0x80000, 0x1, 0x3}, &(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000280)) r9 = userfaultfd(0x80801) syz_fuse_handle_req(r3, &(0x7f00000026c0)="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", 0x2000, &(0x7f00000052c0)={&(0x7f00000046c0)={0x50, 0x0, 0x3, {0x7, 0x2d, 0x8001, 0x4000, 0x10, 0x3915, 0xe152, 0x2896, 0x0, 0x0, 0x1, 0x400000}}, &(0x7f0000004740)={0x18, 0xffffffffffffffda, 0x9, {0xe297}}, &(0x7f0000004780)={0x18, 0x0, 0xc4f, {0x3}}, &(0x7f00000047c0)={0x18, 0x0, 0xa5, {0x7ff}}, &(0x7f0000004800)={0x18, 0xfffffffffffffffe, 0x0, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(r9, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f000008d000/0x4000)=nil) timer_create(0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x9, 0x2001) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 1.327401432s ago: executing program 2 (id=193): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000000eda64ae451fb14649f1db54148a1eee87901e4ec5f0bac1e81f8851ee5f64400c46ff045f483042d52a600cbbfec83e585dd778ff1e26fc0127adc452cf5cca61af1f07ce813d58e0b628f62e75f828087a19bd5b17d88d476e1b886773948a2db5b8d7b98b1e49a332d5959b70b"], &(0x7f0000000640)=""/204, 0x1a, 0xcc, 0x1}, 0x28) r1 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r6 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(0x0, 0x0, 0x0, 0x0, r6) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r7, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=-'], 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="3801000010000100feffffbf0001000000000000000000000000000000000000fc000000000000000000000000000000000103944e230005000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000002300)={'nat\x00', 0x0, 0x3, 0x1000, [0x2, 0x80000000, 0x1, 0x7, 0x6, 0x6], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000001300)=""/4096}, &(0x7f0000002380)=0x78) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f00000023c0)={{r0}, "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"}) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/228, 0xe4) syz_emit_ethernet(0xd5, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a600000001fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3feb3b25c5f5c39b592a67b2bfb589983a6b3356dcef212fbedde0f5cb4aae776acea461b2a6d693c8415e1997d18009c11bdda07fd698b43af3"], 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000300)=0x8) 1.20504876s ago: executing program 6 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdb0c12462a2ecb}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x184, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff2b1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa77}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1f9}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40081}, 0x400c0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r1, @ANYBLOB="09000000000000000000140000000c0003800800010008000000580007"], 0x19c}}, 0x0) 1.171467887s ago: executing program 6 (id=195): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r1, &(0x7f0000000000)='\n%]}-\x00', 0x101002, &(0x7f0000000200)={@align=0x5, {0x1, 0x1, 0xfffffff9, 0x1}}, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x5}) pipe(&(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.138470455s ago: executing program 1 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0xc6fffffd) io_submit(0x0, 0x1, &(0x7f0000001d00)=[0x0]) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x2282, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 1.019060801s ago: executing program 2 (id=197): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000005220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000009500000000000000000000000000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000005220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000009500000000000000000000000000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000ebfffffffffff9ffffff77bb19f80e850000b141abe5323121c2"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x6fa6c04eee5c85fd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1, 0xc, &(0x7f0000000e40)=ANY=[@ANYRES8=r2, @ANYRESOCT, @ANYRESOCT=r5, @ANYRES64=r0, @ANYRESOCT=r3, @ANYRESDEC=r0, @ANYRESHEX=r4, @ANYRESHEX=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r7 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) (async) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000004c0)=0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100786672"], 0x44}}, 0x0) recvmmsg(r7, &(0x7f0000001f80)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=""/23, 0x17}, 0x4}, {{&(0x7f0000000100)=@nl, 0x80, &(0x7f0000000b80)=[{&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000d80)=""/151, 0x97}, {&(0x7f0000000800)=""/91, 0x5b}, {&(0x7f0000000ac0)=""/68, 0x44}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000010c0)=""/194, 0xc2}, {&(0x7f0000001ec0)=""/176, 0xb0}], 0x9, &(0x7f0000000c80)=""/218, 0xda}, 0x1}, {{&(0x7f0000000500)=@hci, 0x80, &(0x7f0000001480)=[{&(0x7f0000000680)=""/124, 0x7c}, {&(0x7f0000000880)=""/181, 0xb5}, {&(0x7f0000000a80)=""/15, 0xf}, {&(0x7f00000011c0)=""/249, 0xf9}, {&(0x7f00000012c0)=""/216, 0xd8}, {&(0x7f00000013c0)=""/157, 0x9d}], 0x6, &(0x7f0000001500)=""/79, 0x4f}, 0x8}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001580)=""/184, 0xb8}, {&(0x7f0000001640)=""/45, 0x2d}, {&(0x7f0000001680)=""/222, 0xde}, {&(0x7f0000001780)=""/187, 0xbb}, {&(0x7f0000001840)=""/198, 0xc6}, {&(0x7f0000001940)=""/200, 0xc8}, {&(0x7f0000001a40)=""/140, 0x8c}], 0x7}, 0xc0}, {{&(0x7f0000001b80)=@nfc_llcp, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/18, 0x12}], 0x1, &(0x7f0000001c80)=""/79, 0x4f}, 0x4}], 0x5, 0x10002, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x51, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x51, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000040)={0xfff, 0x5, 0xdffffffd, 0xba, 0x7, "040008000020f2fa50af00", 0x7, 0x80203}) (async) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000040)={0xfff, 0x5, 0xdffffffd, 0xba, 0x7, "040008000020f2fa50af00", 0x7, 0x80203}) recvfrom$inet_nvme(r7, &(0x7f0000000fc0)=""/239, 0xef, 0x2081, 0x0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000180)=0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 1.018891221s ago: executing program 2 (id=198): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000000)={[{@debug}, {@journal_async_commit}, {@sb={'sb', 0x3d, 0xffffffffffffc17a}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inlinecrypt}, {}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@sb}, {@jqfmt_vfsold}, {@usrjquota}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000640), 0x1003}, 0x38) 732.147396ms ago: executing program 1 (id=199): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept$inet6(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) rename(0x0, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x157) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0x40000, 0x2e74ae842b4b5c61, 0x9287e6c063481df, 0xfec00000], 0x80000000, 0x2287f401e9d82f89}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x2, 0x0, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) truncate(0x0, 0x20fdfffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00009b3000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f000020c000/0x400000)=nil) 342.697573ms ago: executing program 1 (id=200): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x1, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000500), 0xfa0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='Mid', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 233.028178ms ago: executing program 1 (id=201): ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x10) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) 202.846275ms ago: executing program 6 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000019c0)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)="717c1df080ca9067429436f3e8adc06af751b4b2651d7ce801137e92c37dcf9ec8433dfd3deb52a0b536d85a27d3551223ccc757a0aef0ae7be95e39df3d3d298d8ccd2d788f92537938f7ac85daae5974baceede4d9", 0x56}, {&(0x7f0000000380)="eedefda72049cc74855152a9a7b57e397501787503debcd58385aac8e9314901cff655d51937f1324463e993030ec9607d3cfe773536a70d5a805d31ec72869f4dd33d8426825737f3e4f703454a6a3e2628b0f0658b77026876ea0fb5a54508fdfe5deb495d16f69e35bbcc9494f6a3e5e67294ed71e3", 0x77}], 0x2, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r2, r2, r2]}}], 0x68, 0xc801}}, {{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000d00)="105d3a0682dbb5c5cdab99ee9624a65aaed0a8614a4cba62b8e5e749bdc3d7a6b588a6b4e94d37ee841bf78af601a65d05078cb8e30a1cd4eb15be851f537536c2691af5d74faf24c641c6fc208f4580f3ec19e35cba8cf991d1f80116a256a33873dea83ef29ed1b50aea807c6f1a8e377401f2a4f98e467adefb917783c694750f5962e62d4e95fb5267f9eb98b5a90d662ec7c8e016c24d8c9a4a3dad539c0c1dfcab00d95b6af5928ec7a5fa0adf5cf96203e651bca258680cd9f0a914b566f83614201554d3cd4ca416f0942b7d1b0992f355840f16755634bf217809f34c935a129032912cd69039", 0xeb}, {&(0x7f0000000ac0)="5d64e37fabeb8f9ac4c3ab74a2d07f79c05e596f7f8f4df5f291d60eeef68f78d7447b789fce3d76c3628638a3eaa3488ac4d797d1bbdfdc0f383256ad2a86ba00c3f9563ddd8d44740a43963ec4524da1554db48376161de95a1214a34b524ccc05c915e352ed84d589d21fb681ca0e731f12a56408c15a62ad435d457e53694bfd59b7ac53aab667a2b071df6e", 0x8e}, {&(0x7f0000000640)="03c08076d0e8f9cea77d6b8a3d1040f56016caa23e6fd69ee4a484cca15fc27a48c9a21b93057b9a06659f502cf1b87e9b3c45a4c40700000044e4efa861f7767daf7ef36c972a59de61ac547993cc87eb6b2b5de3ba437e3187393359b7ef01fd5107de9cc815672b8d9c753ba1beeb203d3c7abc4349cf34c3597cb9fc5a3d106067e1d038bfdfebc9e7d5084154ff044e201226615388aa7b93baa931e4bc9120cb896fe054965646989c224dd851f4aa27377eb873c597159ce3e52d5699da1a4793", 0xc4}, {&(0x7f0000000f00)="6d95f63d8f09bf85a2015f02433c06006e5faa0eac75a9495c9b1bfb92aa4244b0f91a7ec0c338711306bad19f1fbfa54631109da5e845ec1f47d0622eb82100951665f88060a2b1a9e3bb14f9169254a2514deecd90338af930a05bde92e6fd26ab4e97b13f5449e0f085817718ff3312ceaeb21e9b936b40b07ea7af25e586dece41e810c17aa4a387b2f282f438c32ac24837ddc24aba5dafdbf53c2da2d78d862aa2cc38dc62031c652da249a2356b0d4ca6706822efba07ae547bbd1a932aa702412a100186006c96a0e1a5ecbda7fcd56fad833d0b4c385adb05cebabc3bf02f946b97d933bc3347264e096ac6939f8052bfc9", 0xf6}, {&(0x7f0000001000)="7662352700f70e3ea5db3085d8e90cc5209a1572827fcae1ee1166571e41348694a658908ab6e4fbffd62ed540eab8a3bf82484a28", 0x35}, {&(0x7f0000001040)="a9e4b3346ad09e9fdacf9ae7626c4c40916fbdf141f562e9ca48aabd99aeb48f5cbb5f0360bc9b13adc90cd19c6efb617b41f60282f62bc00e51b5afb15f33a23d9ce3c32f5b5ddbd4450a908e8d5567d1f026bc12e826c55340b139dbfb75c00f46d04574a4fa508e174cb7469fad65fb41c2f83c1cba39edfdd0e8cd03b0c68316a37a11b35501d259dbf104d0dbd955b09530343fbac076e68a64b4ef7140542ebd42ed0957c4def9da", 0xab}], 0x6}}, {{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001200)="7060ef160f20cbfbd8db897c15698ec6dfdb63f23d38bd98d5435553bcf8457b8332a1b818ca517d1533f1aa4ff4389e5adec1aa577ca027370722f43cf437449fe32827795d67edcff449f46e232d7dd68564a41b74d50024a81011cdc0a46e", 0x60}, {&(0x7f0000001280)="bf0c9ef9747e8f1b49869a4b69c2e55e9d73af0d49d79cdc5a0b8aee6caccc53c7dc09e460f1f50f2dbcbb5da7fba16e6495a5e5295034d487776f950f02fe076d96b56f695adc918b2507c630e7264edd0ba310624a9a41feb3e90e522bc615ebda48db63cecb2a5c151bc8e2", 0x6d}], 0x2, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, r2, r1, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x34, 0x1, 0x1, [r1, r2, r1, r2, r2, r1, r2, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0xd8}}, {{&(0x7f00000014c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540), 0x0, &(0x7f0000001840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x20, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x150, 0x40024}}], 0x4, 0x8080) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0x80000000, 0x4) r4 = fsopen(&(0x7f0000000180)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0x8, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c02000024c73f685f59c9b058e52abd47d8cd0ad7a91ca5252f248fd4cad5e9cc66d1b29714dea4f07d323ed5f7b51dd1cf74ec83ea45efa72126661f90fb45101e0afdcfd665a16a8d03a5c0b5fe4f9cdf030bb3f9352300000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x11}, 0x4840) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x814, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) faccessat(0xffffffffffffffff, 0x0, 0x0) close_range(r6, r4, 0x0) r7 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=203): socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 22.471934][ T359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12'. [ 22.489589][ T354] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 22.505965][ T354] FAULT_INJECTION: forcing a failure. [ 22.505965][ T354] name failslab, interval 1, probability 0, space 0, times 1 [ 22.509712][ T361] loop2: detected capacity change from 0 to 512 [ 22.519553][ T354] CPU: 0 PID: 354 Comm: syz.3.10 Not tainted syzkaller #0 [ 22.532076][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 22.542132][ T354] Call Trace: [ 22.545396][ T354] [ 22.548307][ T354] __dump_stack+0x21/0x30 [ 22.552619][ T354] dump_stack_lvl+0x110/0x170 [ 22.557282][ T354] ? show_regs_print_info+0x20/0x20 [ 22.562520][ T354] dump_stack+0x15/0x20 [ 22.566668][ T354] should_fail+0x3ab/0x500 [ 22.571061][ T354] __should_failslab+0xa4/0xe0 [ 22.575825][ T354] should_failslab+0x9/0x20 [ 22.580307][ T354] slab_pre_alloc_hook+0x39/0xd0 [ 22.585222][ T354] ? exfat_alloc_inode+0x1b/0x60 [ 22.590138][ T354] kmem_cache_alloc+0x44/0x260 [ 22.594902][ T354] ? exfat_fill_super+0x2d20/0x2d20 [ 22.600080][ T354] exfat_alloc_inode+0x1b/0x60 [ 22.604830][ T354] ? exfat_fill_super+0x2d20/0x2d20 [ 22.610003][ T354] new_inode_pseudo+0x62/0x210 [ 22.614743][ T354] new_inode+0x28/0x1e0 [ 22.618873][ T354] exfat_build_inode+0x176/0x1200 [ 22.623873][ T354] ? exfat_free_dentry_set+0x23c/0x2b0 [ 22.629316][ T354] ? exfat_free_dentry_set+0x23c/0x2b0 [ 22.634753][ T354] exfat_lookup+0xbf5/0x14b0 [ 22.639320][ T354] ? exfat_utf8_d_cmp+0x3e0/0x3e0 [ 22.644326][ T354] ? inode_permission+0x1c3/0x4a0 [ 22.649327][ T354] ? fsuidgid_has_mapping+0x272/0x330 [ 22.654688][ T354] ? exfat_utf8_d_cmp+0x3e0/0x3e0 [ 22.659690][ T354] path_openat+0x1436/0x2f80 [ 22.664260][ T354] ? do_filp_open+0x400/0x400 [ 22.668911][ T354] do_filp_open+0x1df/0x400 [ 22.672264][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.673391][ T354] ? vfs_tmpfile+0x2d0/0x2d0 [ 22.685392][ T354] do_sys_openat2+0x15e/0x7f0 [ 22.690052][ T354] ? fput_many+0x15a/0x1a0 [ 22.694443][ T354] ? do_sys_open+0xe0/0xe0 [ 22.698833][ T354] ? fput+0x1a/0x20 [ 22.702637][ T354] ? ksys_write+0x1fa/0x260 [ 22.707112][ T354] ? __ia32_sys_read+0x90/0x90 [ 22.711848][ T354] __x64_sys_openat+0x136/0x160 [ 22.716672][ T354] x64_sys_call+0x219/0x9a0 [ 22.721150][ T354] do_syscall_64+0x4c/0xa0 [ 22.725540][ T354] ? clear_bhb_loop+0x50/0xa0 [ 22.730198][ T354] ? clear_bhb_loop+0x50/0xa0 [ 22.734850][ T354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 22.740717][ T354] RIP: 0033:0x7f2709b4b159 [ 22.745105][ T354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 22.764686][ T354] RSP: 002b:00007f27085a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 22.773090][ T354] RAX: ffffffffffffffda RBX: 00007f2709dd2fa0 RCX: 00007f2709b4b159 [ 22.781048][ T354] RDX: 0000000000109142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 22.788998][ T354] RBP: 00007f27085a4090 R08: 0000000000000000 R09: 0000000000000000 [ 22.796947][ T354] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 22.804897][ T354] R13: 00007f2709dd3038 R14: 00007f2709dd2fa0 R15: 00007ffe3c2674c8 [ 22.812852][ T354] [ 22.851144][ T361] EXT4-fs (loop2): Unrecognized mount option "smackfshat=ext4" or missing value [ 22.861988][ T363] netlink: 'syz.3.14': attribute type 19 has an invalid length. [ 22.952170][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 22.962369][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.972116][ T26] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 22.972323][ T290] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 22.981886][ T26] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.142167][ T335] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.155164][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.162873][ T39] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 23.173715][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.184649][ T26] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 23.193821][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.203565][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.211544][ T26] usb 2-1: Product: syz [ 23.215933][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 23.222133][ T290] usb 5-1: Using ep0 maxpacket: 32 [ 23.228924][ T26] usb 2-1: Manufacturer: syz [ 23.238614][ T26] usb 2-1: SerialNumber: syz [ 23.282861][ T26] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 23.294232][ T26] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 23.304983][ T26] usbserial_generic 2-1:1.0: generic converter detected [ 23.312910][ T26] usb 2-1: generic converter now attached to ttyUSB0 [ 23.322746][ T39] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 23.331774][ T39] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 23.340047][ T39] usb 1-1: Manufacturer: syz [ 23.345293][ T39] usb 1-1: config 0 descriptor?? [ 23.352331][ T290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.363334][ T290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.373112][ T290] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 23.382240][ T290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.390651][ T290] usb 5-1: config 0 descriptor?? [ 23.422166][ T335] usb 4-1: device descriptor read/64, error -71 [ 23.433034][ T290] hub 5-1:0.0: USB hub found [ 23.500596][ T20] usb 2-1: USB disconnect, device number 2 [ 23.501680][ T307] netlink: 636 bytes leftover after parsing attributes in process `syz.1.2'. [ 23.507528][ T20] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 23.523719][ T20] usbserial_generic 2-1:1.0: device disconnected [ 23.554131][ T60] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 23.564995][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.575876][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.585609][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 23.633828][ T357] loop2: detected capacity change from 0 to 7 [ 23.672185][ T60] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 23.681272][ T60] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 23.689364][ T60] usb 3-1: Manufacturer: syz [ 23.692144][ T290] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 23.700420][ T60] usb 3-1: config 0 descriptor?? [ 23.802189][ T290] usbhid 5-1:0.0: can't add hid device: -71 [ 23.808176][ T290] usbhid: probe of 5-1:0.0 failed with error -71 [ 23.814642][ T335] usb 4-1: device descriptor read/64, error -71 [ 23.820865][ T350] loop0: detected capacity change from 0 to 512 [ 23.843581][ T290] usb 5-1: USB disconnect, device number 2 [ 23.867623][ T350] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.9: iget: bad i_size value: 38620345925642 [ 23.881909][ T350] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.9: couldn't read orphan inode 15 (err -117) [ 23.893944][ T350] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 24.029632][ T344] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 24.042544][ T344] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 24.055244][ T344] EXT4-fs (loop0): This should not happen!! Data will be lost [ 24.055244][ T344] [ 24.065100][ T344] EXT4-fs (loop0): Total free blocks count 0 [ 24.071193][ T344] EXT4-fs (loop0): Free/Dirty block details [ 24.079335][ T344] EXT4-fs (loop0): free_blocks=0 [ 24.082109][ T335] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.084548][ T344] EXT4-fs (loop0): dirty_blocks=16016 [ 24.097279][ T344] EXT4-fs (loop0): Block reservation details [ 24.103460][ T344] EXT4-fs (loop0): i_reserved_data_blocks=16016 [ 24.117097][ T344] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 24.129862][ T344] EXT4-fs (loop0): This should not happen!! Data will be lost [ 24.129862][ T344] [ 24.157208][ T370] FAULT_INJECTION: forcing a failure. [ 24.157208][ T370] name failslab, interval 1, probability 0, space 0, times 0 [ 24.159781][ T361] loop2: detected capacity change from 0 to 512 [ 24.186459][ T30] kauditd_printk_skb: 446 callbacks suppressed [ 24.186472][ T30] audit: type=1326 audit(1790724395.755:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=360 comm="syz.2.13" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb7a6611fc7 code=0x7ffc0000 [ 24.191816][ T370] CPU: 1 PID: 370 Comm: syz.1.15 Not tainted syzkaller #0 [ 24.224180][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.234218][ T370] Call Trace: [ 24.237485][ T370] [ 24.240399][ T370] __dump_stack+0x21/0x30 [ 24.244712][ T370] dump_stack_lvl+0x110/0x170 [ 24.249370][ T370] ? show_regs_print_info+0x20/0x20 [ 24.254551][ T370] dump_stack+0x15/0x20 [ 24.258685][ T370] should_fail+0x3ab/0x500 [ 24.263083][ T370] __should_failslab+0xa4/0xe0 [ 24.267832][ T370] should_failslab+0x9/0x20 [ 24.272319][ T370] slab_pre_alloc_hook+0x39/0xd0 [ 24.277239][ T370] ? __alloc_skb+0xe4/0x730 [ 24.281720][ T370] kmem_cache_alloc+0x44/0x260 [ 24.286468][ T370] __alloc_skb+0xe4/0x730 [ 24.290779][ T370] audit_log_start+0x407/0x8a0 [ 24.295523][ T370] ? audit_serial+0x30/0x30 [ 24.300010][ T370] ? slow_avc_audit+0x240/0x240 [ 24.304864][ T370] common_lsm_audit+0xd2/0x1670 [ 24.309699][ T370] ? avc_audit_pre_callback+0x290/0x290 [ 24.315228][ T370] ? debug_smp_processor_id+0x17/0x20 [ 24.320584][ T370] ? call_rcu+0x5af/0xf60 [ 24.324898][ T370] ? ipv6_skb_to_auditdata+0xdd0/0xdd0 [ 24.330339][ T370] ? rcu_gp_kthread_wake+0x90/0x90 [ 24.335431][ T370] slow_avc_audit+0x1c4/0x240 [ 24.340089][ T370] ? avc_get_hash_stats+0x180/0x180 [ 24.345267][ T370] ? avc_denied+0x133/0x1b0 [ 24.349752][ T370] avc_has_extended_perms+0x943/0xed0 [ 24.355107][ T370] ? avc_flush+0x2b0/0x2b0 [ 24.359503][ T370] ? kasan_set_track+0x5b/0x70 [ 24.364267][ T370] ? __kasan_slab_free+0x11/0x20 [ 24.369187][ T370] ? slab_free_freelist_hook+0xc2/0x190 [ 24.374712][ T370] ? kmem_cache_free+0x100/0x320 [ 24.379632][ T370] ? putname+0x111/0x160 [ 24.383861][ T370] ? do_sys_openat2+0x6df/0x7f0 [ 24.388698][ T370] ? _kstrtoull+0x3bb/0x4c0 [ 24.393180][ T370] ? kstrtouint_from_user+0x1c4/0x220 [ 24.398533][ T370] ? kstrtol_from_user+0x2a0/0x2a0 [ 24.403629][ T370] ? ioctl_has_perm+0x1b8/0x4f0 [ 24.408473][ T370] ioctl_has_perm+0x3ab/0x4f0 [ 24.413133][ T370] ? security_file_permission+0x79/0xa0 [ 24.418733][ T370] ? has_cap_mac_admin+0x370/0x370 [ 24.423843][ T370] ? vfs_write+0xc72/0xfd0 [ 24.428251][ T370] selinux_file_ioctl+0x3ad/0x4c0 [ 24.433269][ T370] ? selinux_file_alloc_security+0x120/0x120 [ 24.439240][ T370] ? mutex_unlock+0x8f/0x230 [ 24.443819][ T370] ? __mutex_lock_slowpath+0x10/0x10 [ 24.449095][ T370] ? __fget_files+0x2e1/0x340 [ 24.453754][ T370] security_file_ioctl+0x74/0xa0 [ 24.458681][ T370] __se_sys_ioctl+0x53/0x1a0 [ 24.463257][ T370] __x64_sys_ioctl+0x7b/0x90 [ 24.467834][ T370] x64_sys_call+0x2f/0x9a0 [ 24.472233][ T370] do_syscall_64+0x4c/0xa0 [ 24.476634][ T370] ? clear_bhb_loop+0x50/0xa0 [ 24.481293][ T370] ? clear_bhb_loop+0x50/0xa0 [ 24.485952][ T370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 24.491829][ T370] RIP: 0033:0x7f8bcdbd5159 [ 24.496241][ T370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.515842][ T370] RSP: 002b:00007f8bcc62e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 24.524246][ T370] RAX: ffffffffffffffda RBX: 00007f8bcde5cfa0 RCX: 00007f8bcdbd5159 [ 24.532205][ T370] RDX: 0000200000001200 RSI: 0000000040046210 RDI: 0000000000000003 [ 24.540179][ T370] RBP: 00007f8bcc62e090 R08: 0000000000000000 R09: 0000000000000000 [ 24.548133][ T370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 24.556083][ T370] R13: 00007f8bcde5d038 R14: 00007f8bcde5cfa0 R15: 00007ffcb58f64d8 [ 24.564041][ T370] [ 24.567918][ T370] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 24.569772][ T39] usbhid 1-1:0.0: can't add hid device: -71 [ 24.581803][ T372] loop4: detected capacity change from 0 to 512 [ 24.588233][ T370] audit: out of memory in audit_log_start [ 24.594629][ T30] audit: type=1326 audit(1790724395.775:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=360 comm="syz.2.13" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb7a66143ca code=0x7ffc0000 [ 24.597045][ T39] usbhid: probe of 1-1:0.0 failed with error -71 [ 24.625972][ T30] audit: type=1326 audit(1790724396.135:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=349 comm="syz.0.9" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe24d8e498e code=0x7ffc0000 [ 24.652678][ T39] usb 1-1: USB disconnect, device number 2 [ 24.660723][ T361] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.13: iget: bad i_size value: 38620345925642 [ 24.662182][ T372] EXT4-fs error (device loop4): ext4_get_journal_inode:5178: comm syz.4.16: inode #196608: comm syz.4.16: iget: illegal inode # [ 24.680778][ T375] Zero length message leads to an empty skb [ 24.692742][ T361] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.13: couldn't read orphan inode 15 (err -117) [ 24.712146][ T335] usb 4-1: device descriptor read/64, error -71 [ 24.721082][ T372] EXT4-fs (loop4): Remounting filesystem read-only [ 24.727806][ T372] EXT4-fs (loop4): no journal found [ 24.733226][ T372] EXT4-fs (loop4): can't get journal size [ 24.734640][ T30] audit: type=1326 audit(1790724396.315:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=349 comm="syz.0.9" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe24d8e498e code=0x7ffc0000 [ 24.739687][ T372] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 24.763614][ T361] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 24.773907][ T372] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 24.785692][ T30] audit: type=1326 audit(1790724396.365:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=360 comm="syz.2.13" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7a65d398e code=0x7ffc0000 [ 24.791938][ T372] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,usrjquota="oldalloc,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 24.842391][ T30] audit: type=1326 audit(1790724396.415:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=360 comm="syz.2.13" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb7a6611597 code=0x7ffc0000 [ 24.867798][ T30] audit: type=1326 audit(1790724396.415:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=360 comm="syz.2.13" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7a65d398e code=0x7ffc0000 [ 24.894480][ T30] audit: type=1326 audit(1790724396.415:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=360 comm="syz.2.13" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7a6612deb code=0x7ffc0000 [ 25.020399][ T344] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 25.033094][ T344] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 25.045899][ T344] EXT4-fs (loop2): This should not happen!! Data will be lost [ 25.045899][ T344] [ 25.055612][ T344] EXT4-fs (loop2): Total free blocks count 0 [ 25.061595][ T344] EXT4-fs (loop2): Free/Dirty block details [ 25.067516][ T344] EXT4-fs (loop2): free_blocks=0 [ 25.072538][ T344] EXT4-fs (loop2): dirty_blocks=16000 [ 25.077892][ T344] EXT4-fs (loop2): Block reservation details [ 25.083873][ T344] EXT4-fs (loop2): i_reserved_data_blocks=16000 [ 25.096594][ T344] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 25.109296][ T344] EXT4-fs (loop2): This should not happen!! Data will be lost [ 25.109296][ T344] [ 25.122277][ T335] usb 4-1: device descriptor read/64, error -71 [ 25.162439][ T39] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 25.182183][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 25.188100][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 25.195587][ T60] usb 3-1: USB disconnect, device number 2 [ 25.244827][ T381] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 25.252171][ T335] usb usb4-port1: attempt power cycle [ 25.253466][ T381] EXT4-fs (loop0): orphan cleanup on readonly fs [ 25.264852][ T381] EXT4-fs warning (device loop0): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 25.279573][ T381] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 25.286715][ T381] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.19: bg 0: block 15: invalid block bitmap [ 25.299207][ T381] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 25.308404][ T381] EXT4-fs (loop0): 1 truncate cleaned up [ 25.314164][ T381] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 25.334830][ T381] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #16: comm syz.0.19: corrupted xattr block 31 [ 25.346670][ T381] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 25.355713][ T381] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #16: comm syz.0.19: corrupted xattr block 31 [ 25.367463][ T381] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 25.392119][ T26] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 25.522154][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.532353][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 25.541216][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 25.552225][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.573572][ T387] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 25.586780][ T387] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.598609][ T387] FAULT_INJECTION: forcing a failure. [ 25.598609][ T387] name failslab, interval 1, probability 0, space 0, times 0 [ 25.611204][ T387] CPU: 0 PID: 387 Comm: syz.0.21 Not tainted syzkaller #0 [ 25.618303][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.628338][ T387] Call Trace: [ 25.631594][ T387] [ 25.634505][ T387] __dump_stack+0x21/0x30 [ 25.638815][ T387] dump_stack_lvl+0x110/0x170 [ 25.643473][ T387] ? show_regs_print_info+0x20/0x20 [ 25.648660][ T387] dump_stack+0x15/0x20 [ 25.652796][ T387] should_fail+0x3ab/0x500 [ 25.657216][ T387] __should_failslab+0xa4/0xe0 [ 25.661966][ T387] should_failslab+0x9/0x20 [ 25.666450][ T387] slab_pre_alloc_hook+0x39/0xd0 [ 25.671374][ T387] ? getname_flags+0xba/0x510 [ 25.676026][ T387] kmem_cache_alloc+0x44/0x260 [ 25.680793][ T387] getname_flags+0xba/0x510 [ 25.685272][ T387] user_path_at_empty+0x2f/0x1c0 [ 25.690186][ T387] __se_sys_mount+0x2eb/0x390 [ 25.694857][ T387] ? __x64_sys_mount+0xd0/0xd0 [ 25.699629][ T387] __x64_sys_mount+0xbf/0xd0 [ 25.704215][ T387] x64_sys_call+0x6bf/0x9a0 [ 25.708700][ T387] do_syscall_64+0x4c/0xa0 [ 25.712199][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.713125][ T387] ? clear_bhb_loop+0x50/0xa0 [ 25.722275][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.726808][ T387] ? clear_bhb_loop+0x50/0xa0 [ 25.735943][ T39] usb 2-1: Product: syz [ 25.739507][ T387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.743856][ T39] usb 2-1: Manufacturer: syz [ 25.749510][ T387] RIP: 0033:0x7fe24d9253ca [ 25.749527][ T387] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.749540][ T387] RSP: 002b:00007fe24c37ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 25.754424][ T39] usb 2-1: SerialNumber: syz [ 25.758501][ T387] RAX: ffffffffffffffda RBX: 00007fe24c37cee0 RCX: 00007fe24d9253ca [ 25.799077][ T387] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 25.807028][ T387] RBP: 0000200000000f40 R08: 00007fe24c37cee0 R09: 0000000001a8a439 [ 25.812660][ T39] hub 2-1:1.0: bad descriptor, ignoring hub [ 25.814979][ T387] R10: 0000000001a8a439 R11: 0000000000000246 R12: 0000200000000f00 [ 25.820986][ T39] hub: probe of 2-1:1.0 failed with error -5 [ 25.828822][ T387] R13: 00007fe24c37cea0 R14: 0000000000000000 R15: 000020000001dcc0 [ 25.828840][ T387] [ 25.829701][ T335] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 25.864037][ T39] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 25.892997][ T395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.26'. [ 25.972140][ T26] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 25.982106][ T26] usb 5-1: can't read configurations, error -71 [ 26.112687][ T397] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 26.119918][ T397] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 26.128499][ T397] F2FS-fs (loop3): Unrecognized mount option "0xffffffffffffffffÿÿ" or missing value [ 26.162273][ T60] usb 2-1: USB disconnect, device number 3 [ 26.292086][ T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.342647][ T335] usb 4-1: device not accepting address 4, error -71 [ 26.401970][ T598] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 26.460685][ T598] incfs: Can't find or create .incomplete dir in . [ 26.467917][ T598] incfs: mount failed -28 [ 26.490860][ T589] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 26.582562][ T605] FAULT_INJECTION: forcing a failure. [ 26.582562][ T605] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 26.596484][ T605] CPU: 0 PID: 605 Comm: syz.1.32 Not tainted syzkaller #0 [ 26.603610][ T605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.613670][ T605] Call Trace: [ 26.616951][ T605] [ 26.619878][ T605] __dump_stack+0x21/0x30 [ 26.624210][ T605] dump_stack_lvl+0x110/0x170 [ 26.628890][ T605] ? show_regs_print_info+0x20/0x20 [ 26.634092][ T605] ? slab_post_alloc_hook+0x4f/0x2b0 [ 26.639382][ T605] ? kvm_vm_ioctl_create_vcpu+0x10e/0x880 [ 26.645102][ T605] ? kvm_vm_ioctl+0x654/0xb00 [ 26.649780][ T605] ? __se_sys_ioctl+0x121/0x1a0 [ 26.654635][ T605] ? x64_sys_call+0x2f/0x9a0 [ 26.659227][ T605] ? do_syscall_64+0x4c/0xa0 [ 26.663816][ T605] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.669886][ T605] dump_stack+0x15/0x20 [ 26.674041][ T605] should_fail+0x3ab/0x500 [ 26.678469][ T605] should_fail_alloc_page+0x55/0x80 [ 26.683672][ T605] prepare_alloc_pages+0x13f/0x590 [ 26.688788][ T605] ? __alloc_pages_bulk+0xab0/0xab0 [ 26.693988][ T605] __alloc_pages+0x11d/0x460 [ 26.698585][ T605] ? prep_new_page+0x110/0x110 [ 26.703355][ T605] ? kvm_vm_ioctl_create_vcpu+0x10e/0x880 [ 26.709079][ T605] ? kmem_cache_alloc+0xf7/0x260 [ 26.714019][ T605] kvm_vm_ioctl_create_vcpu+0x12b/0x880 [ 26.719603][ T605] ? kstrtouint_from_user+0x1c4/0x220 [ 26.724994][ T605] kvm_vm_ioctl+0x654/0xb00 [ 26.729506][ T605] ? kvm_device_release+0x210/0x210 [ 26.734707][ T605] ? ioctl_has_perm+0x1b8/0x4f0 [ 26.739549][ T605] ? memcpy+0x56/0x70 [ 26.743529][ T605] ? ioctl_has_perm+0x414/0x4f0 [ 26.748386][ T605] ? security_file_permission+0x79/0xa0 [ 26.753937][ T605] ? has_cap_mac_admin+0x370/0x370 [ 26.759048][ T605] ? vfs_write+0xc72/0xfd0 [ 26.763563][ T605] ? selinux_file_ioctl+0x3ad/0x4c0 [ 26.768769][ T605] ? selinux_file_alloc_security+0x120/0x120 [ 26.774754][ T605] ? mutex_unlock+0x8f/0x230 [ 26.779349][ T605] ? __mutex_lock_slowpath+0x10/0x10 [ 26.784969][ T605] ? __fget_files+0x2e1/0x340 [ 26.789658][ T605] ? security_file_ioctl+0x84/0xa0 [ 26.794781][ T605] ? kvm_device_release+0x210/0x210 [ 26.800004][ T605] __se_sys_ioctl+0x121/0x1a0 [ 26.804688][ T605] __x64_sys_ioctl+0x7b/0x90 [ 26.809287][ T605] x64_sys_call+0x2f/0x9a0 [ 26.813704][ T605] do_syscall_64+0x4c/0xa0 [ 26.818121][ T605] ? clear_bhb_loop+0x50/0xa0 [ 26.822800][ T605] ? clear_bhb_loop+0x50/0xa0 [ 26.827483][ T605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.833375][ T605] RIP: 0033:0x7f8bcdbd5159 [ 26.837796][ T605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.857410][ T605] RSP: 002b:00007f8bcc62e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.865830][ T605] RAX: ffffffffffffffda RBX: 00007f8bcde5cfa0 RCX: 00007f8bcdbd5159 [ 26.873810][ T605] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 26.881794][ T605] RBP: 00007f8bcc62e090 R08: 0000000000000000 R09: 0000000000000000 [ 26.889768][ T605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.897734][ T605] R13: 00007f8bcde5d038 R14: 00007f8bcde5cfa0 R15: 00007ffcb58f64d8 [ 26.905709][ T605] [ 26.981436][ T616] set_capacity_and_notify: 4 callbacks suppressed [ 26.981450][ T616] loop1: detected capacity change from 0 to 512 [ 27.022186][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.035537][ T616] EXT4-fs (loop1): Unrecognized mount option "smackfshat=ext4" or missing value [ 27.045801][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.341760][ T20] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 27.350965][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 27.364313][ T20] usb 3-1: SerialNumber: syz [ 27.652868][ T20] usb 3-1: 0:2 : does not exist [ 27.663599][ T20] usb 3-1: USB disconnect, device number 3 [ 27.679890][ T290] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.707676][ T638] loop0: detected capacity change from 0 to 40427 [ 27.743948][ T638] F2FS-fs (loop0): invalid crc value [ 27.750390][ T638] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.773514][ T638] F2FS-fs (loop0): Start checkpoint disabled! [ 27.780214][ T638] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 27.808917][ T495] attempt to access beyond end of device [ 27.808917][ T495] loop0: rw=2049, want=40976, limit=40427 [ 27.882481][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.892138][ T335] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 27.992144][ T335] usb 4-1: Using ep0 maxpacket: 32 [ 28.042229][ T290] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 28.053201][ T290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.064412][ T290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.074493][ T290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 28.112293][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.133202][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.143919][ T335] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.153390][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.162758][ T290] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 28.174980][ T335] usb 4-1: config 0 descriptor?? [ 28.179964][ T290] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 28.188473][ T290] usb 2-1: Manufacturer: syz [ 28.193192][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.201699][ T290] usb 2-1: config 0 descriptor?? [ 28.219631][ T642] loop0: detected capacity change from 0 to 131072 [ 28.227017][ T335] hub 4-1:0.0: USB hub found [ 28.249548][ T659] loop4: detected capacity change from 0 to 2048 [ 28.350700][ T659] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.361512][ T659] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.379392][ T659] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 28.454507][ T667] loop4: detected capacity change from 0 to 2048 [ 28.473393][ T667] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.484181][ T667] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.502216][ T335] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 28.510124][ T20] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 28.612162][ T335] usbhid 4-1:0.0: can't add hid device: -71 [ 28.618120][ T335] usbhid: probe of 4-1:0.0 failed with error -71 [ 28.653566][ T335] usb 4-1: USB disconnect, device number 5 [ 28.659468][ T616] loop1: detected capacity change from 0 to 512 [ 28.668825][ T616] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.33: iget: bad i_size value: 38620345925642 [ 28.681507][ T616] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.33: couldn't read orphan inode 15 (err -117) [ 28.693464][ T616] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 28.832107][ T355] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 28.834227][ T495] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:94: bg 0: block 5: invalid block bitmap [ 28.852461][ T495] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 28.864882][ T495] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.864882][ T495] [ 28.874570][ T495] EXT4-fs (loop1): Total free blocks count 0 [ 28.880546][ T495] EXT4-fs (loop1): Free/Dirty block details [ 28.886439][ T495] EXT4-fs (loop1): free_blocks=0 [ 28.891361][ T495] EXT4-fs (loop1): dirty_blocks=16000 [ 28.896750][ T495] EXT4-fs (loop1): Block reservation details [ 28.902729][ T495] EXT4-fs (loop1): i_reserved_data_blocks=16000 [ 28.914639][ T495] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 28.927367][ T495] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.927367][ T495] [ 28.965842][ T675] loop3: detected capacity change from 0 to 2048 [ 28.972415][ T290] usbhid 2-1:0.0: can't add hid device: -71 [ 28.978355][ T290] usbhid: probe of 2-1:0.0 failed with error -71 [ 28.992756][ T290] usb 2-1: USB disconnect, device number 4 [ 29.043063][ T675] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.053826][ T675] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.069687][ T675] FAULT_INJECTION: forcing a failure. [ 29.069687][ T675] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.082858][ T675] CPU: 0 PID: 675 Comm: syz.3.48 Not tainted syzkaller #0 [ 29.082960][ T355] usb 5-1: Using ep0 maxpacket: 32 [ 29.089971][ T675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.105084][ T675] Call Trace: [ 29.108365][ T675] [ 29.111274][ T675] __dump_stack+0x21/0x30 [ 29.115602][ T675] dump_stack_lvl+0x110/0x170 [ 29.120255][ T675] ? show_regs_print_info+0x20/0x20 [ 29.125430][ T675] ? vfs_write+0xc72/0xfd0 [ 29.129823][ T675] dump_stack+0x15/0x20 [ 29.133970][ T675] should_fail+0x3ab/0x500 [ 29.138359][ T675] should_fail_usercopy+0x1a/0x20 [ 29.143361][ T675] _copy_from_user+0x20/0xd0 [ 29.147939][ T675] __sys_bpf+0x258/0x7d0 [ 29.152156][ T675] ? bpf_link_show_fdinfo+0x330/0x330 [ 29.157501][ T675] ? debug_smp_processor_id+0x17/0x20 [ 29.162845][ T675] __x64_sys_bpf+0x7c/0x90 [ 29.167233][ T675] x64_sys_call+0x4b9/0x9a0 [ 29.171721][ T675] do_syscall_64+0x4c/0xa0 [ 29.176108][ T675] ? clear_bhb_loop+0x50/0xa0 [ 29.180765][ T675] ? clear_bhb_loop+0x50/0xa0 [ 29.185429][ T675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.191299][ T675] RIP: 0033:0x7f2709b4b159 [ 29.195689][ T675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.215271][ T675] RSP: 002b:00007f27085a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 29.223665][ T675] RAX: ffffffffffffffda RBX: 00007f2709dd2fa0 RCX: 00007f2709b4b159 [ 29.231617][ T675] RDX: 0000000000000020 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 29.239565][ T675] RBP: 00007f27085a4090 R08: 0000000000000000 R09: 0000000000000000 [ 29.247511][ T675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.255457][ T675] R13: 00007f2709dd3038 R14: 00007f2709dd2fa0 R15: 00007ffe3c2674c8 [ 29.263407][ T675] [ 29.312350][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.325939][ T30] kauditd_printk_skb: 507 callbacks suppressed [ 29.325952][ T30] audit: type=1326 audit(1790724400.895:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=615 comm="syz.1.33" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8bcdb9598e code=0x7ffc0000 [ 29.356725][ T60] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.364386][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.374478][ T355] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 29.383883][ T355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.392571][ T355] usb 5-1: config 0 descriptor?? [ 29.426580][ T30] audit: type=1326 audit(1790724400.995:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=615 comm="syz.1.33" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8bcdbd5159 code=0x7ffc0000 [ 29.482180][ T20] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 29.491238][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 29.512163][ T20] usb 1-1: Product: syz [ 29.516359][ T20] usb 1-1: Manufacturer: syz [ 29.531113][ T20] usb 1-1: SerialNumber: syz [ 29.544028][ T20] usb 1-1: config 0 descriptor?? [ 29.604235][ T689] loop1: detected capacity change from 0 to 512 [ 29.642091][ T60] usb 3-1: device descriptor read/64, error -71 [ 29.783901][ T30] audit: type=1400 audit(1790724401.355:1036): avc: denied { getopt } for pid=641 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.784720][ T26] usb 1-1: USB disconnect, device number 3 [ 29.903022][ T355] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 29.910041][ T355] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 29.917312][ T355] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 29.924945][ T355] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 29.932305][ T355] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 29.939224][ T355] savu 0003:1E7D:2D5A.0001: unbalanced collection at end of report description [ 29.948893][ T355] savu 0003:1E7D:2D5A.0001: parse failed [ 29.954794][ T355] savu: probe of 0003:1E7D:2D5A.0001 failed with error -22 [ 30.052122][ T60] usb 3-1: device descriptor read/64, error -71 [ 30.233244][ T671] UDC core: couldn't find an available UDC or it's busy: -16 [ 30.238590][ T699] FAULT_INJECTION: forcing a failure. [ 30.238590][ T699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 30.240699][ T671] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.253995][ T699] CPU: 1 PID: 699 Comm: syz.3.55 Not tainted syzkaller #0 [ 30.268162][ T699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.278200][ T699] Call Trace: [ 30.281460][ T699] [ 30.284370][ T699] __dump_stack+0x21/0x30 [ 30.288680][ T699] dump_stack_lvl+0x110/0x170 [ 30.293331][ T699] ? show_regs_print_info+0x20/0x20 [ 30.298506][ T699] dump_stack+0x15/0x20 [ 30.302728][ T699] should_fail+0x3ab/0x500 [ 30.307139][ T699] should_fail_usercopy+0x1a/0x20 [ 30.312157][ T699] _copy_to_user+0x20/0x90 [ 30.316555][ T699] simple_read_from_buffer+0xe9/0x160 [ 30.321904][ T699] proc_fail_nth_read+0x1a6/0x220 [ 30.326922][ T699] ? proc_fault_inject_write+0x310/0x310 [ 30.332533][ T699] ? security_file_permission+0x83/0xa0 [ 30.338063][ T699] ? proc_fault_inject_write+0x310/0x310 [ 30.343675][ T699] vfs_read+0x28c/0xc20 [ 30.347809][ T699] ? kernel_read+0x1f0/0x1f0 [ 30.352376][ T699] ? __kasan_check_write+0x14/0x20 [ 30.357465][ T699] ? mutex_lock+0x9b/0x1c0 [ 30.361867][ T699] ? wait_for_completion_killable_timeout+0x10/0x10 [ 30.366925][ T30] audit: type=1400 audit(1790724401.905:1037): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 30.368447][ T699] ? __fget_files+0x2e1/0x340 [ 30.368468][ T699] ? __fdget_pos+0x2d2/0x380 [ 30.368480][ T699] ? ksys_read+0x70/0x260 [ 30.368494][ T699] ksys_read+0x14a/0x260 [ 30.368506][ T699] ? vfs_write+0xfd0/0xfd0 [ 30.368518][ T699] ? __kasan_check_write+0x14/0x20 [ 30.368535][ T699] __x64_sys_read+0x7b/0x90 [ 30.368550][ T699] x64_sys_call+0x96d/0x9a0 [ 30.368564][ T699] do_syscall_64+0x4c/0xa0 [ 30.368579][ T699] ? clear_bhb_loop+0x50/0xa0 [ 30.368595][ T699] ? clear_bhb_loop+0x50/0xa0 [ 30.438353][ T699] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.444250][ T699] RIP: 0033:0x7f2709b0b98e [ 30.448663][ T699] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 30.468271][ T699] RSP: 002b:00007f27085a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 30.476685][ T699] RAX: ffffffffffffffda RBX: 00007f27085a46c0 RCX: 00007f2709b0b98e [ 30.484638][ T699] RDX: 000000000000000f RSI: 00007f27085a40a0 RDI: 0000000000000003 [ 30.492588][ T699] RBP: 00007f27085a4090 R08: 0000000000000000 R09: 0000000000000000 [ 30.500564][ T699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.508511][ T699] R13: 00007f2709dd3038 R14: 00007f2709dd2fa0 R15: 00007ffe3c2674c8 [ 30.516462][ T699] [ 30.519674][ T60] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.544040][ T705] loop0: detected capacity change from 0 to 512 [ 30.562518][ T707] loop1: detected capacity change from 0 to 4096 [ 30.628540][ T707] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 30.638278][ T707] EXT4-fs (loop1): Test dummy encryption mode enabled [ 30.645453][ T707] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 30.657192][ T707] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 30.683417][ T30] audit: type=1400 audit(1790724402.255:1038): avc: denied { mount } for pid=706 comm="syz.1.57" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.693622][ T707] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 30.723560][ T30] audit: type=1400 audit(1790724402.295:1039): avc: denied { setattr } for pid=706 comm="syz.1.57" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.732462][ T707] overlayfs: invalid origin (0000) [ 30.745874][ T30] audit: type=1400 audit(1790724402.295:1040): avc: denied { mounton } for pid=706 comm="syz.1.57" path="/7/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.773742][ T30] audit: type=1400 audit(1790724402.295:1041): avc: denied { write } for pid=706 comm="syz.1.57" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.795144][ T30] audit: type=1400 audit(1790724402.295:1042): avc: denied { add_name } for pid=706 comm="syz.1.57" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.815192][ T60] usb 3-1: device descriptor read/64, error -71 [ 30.818550][ T30] audit: type=1400 audit(1790724402.295:1043): avc: denied { setattr } for pid=706 comm="syz.1.57" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.821457][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.962780][ T715] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 30.972768][ T715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e01c, mo2=0002] [ 30.981034][ T715] EXT4-fs (loop1): orphan cleanup on readonly fs [ 30.987429][ T715] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.60: bad orphan inode 3 [ 30.997365][ T715] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,noblock_validity,discard,jqfmt=vfsold,data=writeback,errors=continue. Quota mode: none. [ 31.092101][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 31.212139][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.232146][ T60] usb 3-1: device descriptor read/64, error -71 [ 31.238490][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.252123][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 31.261161][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.271492][ T26] usb 4-1: config 0 descriptor?? [ 31.312616][ T26] hub 4-1:0.0: USB hub found [ 31.352189][ T60] usb usb3-port1: attempt power cycle [ 31.532309][ T723] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 31.541910][ T723] EXT4-fs (loop0): orphan cleanup on readonly fs [ 31.548932][ T723] EXT4-fs warning (device loop0): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 31.568303][ T355] usb 5-1: USB disconnect, device number 5 [ 31.601763][ T723] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 31.610761][ T723] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.62: bg 0: block 15: invalid block bitmap [ 31.625252][ T723] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 31.627009][ T26] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 31.634520][ T723] EXT4-fs (loop0): 1 truncate cleaned up [ 31.647875][ T723] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.677183][ T723] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #16: comm syz.0.62: corrupted xattr block 31 [ 31.678625][ T729] input: syz0 as /devices/virtual/input/input5 [ 31.689007][ T723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 31.704154][ T723] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #16: comm syz.0.62: corrupted xattr block 31 [ 31.716021][ T723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 31.752131][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 31.758128][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 31.764556][ T60] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 31.787937][ T734] capability: warning: `syz.0.65' uses deprecated v2 capabilities in a way that may be insecure [ 31.804103][ T26] usb 4-1: USB disconnect, device number 6 [ 31.942144][ T60] usb 3-1: device descriptor read/8, error -71 [ 31.982992][ T740] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 32.003669][ T740] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=809331571 (51797220544 ns) > initial count (51741723648 ns). Using initial count to start timer. [ 32.034859][ T743] set_capacity_and_notify: 4 callbacks suppressed [ 32.034872][ T743] loop2: detected capacity change from 0 to 1024 [ 32.103523][ T743] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 32.125111][ T743] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 32.142635][ T743] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.152132][ T60] usb 3-1: device descriptor read/8, error -71 [ 32.185991][ T743] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,jqfmt=vfsv1,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 32.217835][ T743] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.282537][ T745] loop3: detected capacity change from 0 to 512 [ 32.418203][ T758] loop3: detected capacity change from 0 to 1024 [ 32.482465][ T755] loop2: detected capacity change from 0 to 40427 [ 32.573009][ T755] F2FS-fs (loop2): fault_injection options not supported [ 32.589017][ T755] F2FS-fs (loop2): invalid crc value [ 32.612500][ T755] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.647332][ T755] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 32.653058][ T753] loop1: detected capacity change from 0 to 131072 [ 32.666491][ T753] F2FS-fs (loop1): invalid crc value [ 32.695269][ T753] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.725590][ T753] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 32.759442][ T772] loop0: detected capacity change from 0 to 256 [ 32.775149][ T772] exfat: Deprecated parameter 'utf8' [ 32.780553][ T772] exfat: Deprecated parameter 'utf8' [ 32.785990][ T772] exfat: Deprecated parameter 'utf8' [ 32.799754][ T772] exfat: Deprecated parameter 'namecase' [ 32.803974][ T776] FAULT_INJECTION: forcing a failure. [ 32.803974][ T776] name failslab, interval 1, probability 0, space 0, times 0 [ 32.820077][ T776] CPU: 0 PID: 776 Comm: syz.2.78 Not tainted syzkaller #0 [ 32.827197][ T776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.837240][ T776] Call Trace: [ 32.840509][ T776] [ 32.843436][ T776] __dump_stack+0x21/0x30 [ 32.847765][ T776] dump_stack_lvl+0x110/0x170 [ 32.852436][ T776] ? show_regs_print_info+0x20/0x20 [ 32.857629][ T776] dump_stack+0x15/0x20 [ 32.861775][ T776] should_fail+0x3ab/0x500 [ 32.866183][ T776] __should_failslab+0xa4/0xe0 [ 32.870943][ T776] should_failslab+0x9/0x20 [ 32.875440][ T776] slab_pre_alloc_hook+0x39/0xd0 [ 32.880375][ T776] __kmalloc+0x6d/0x2c0 [ 32.884225][ T772] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 32.884525][ T776] ? __se_sys_memfd_create+0xf2/0x3c0 [ 32.901819][ T776] ? strnlen_user+0x13b/0x1c0 [ 32.906498][ T776] __se_sys_memfd_create+0xf2/0x3c0 [ 32.911695][ T776] __x64_sys_memfd_create+0x5b/0x70 [ 32.916890][ T776] x64_sys_call+0x473/0x9a0 [ 32.921397][ T776] do_syscall_64+0x4c/0xa0 [ 32.925813][ T776] ? clear_bhb_loop+0x50/0xa0 [ 32.930486][ T776] ? clear_bhb_loop+0x50/0xa0 [ 32.935154][ T776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.941040][ T776] RIP: 0033:0x7fb7a6613159 [ 32.945448][ T776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.965045][ T776] RSP: 002b:00007fb7a506be08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 32.973456][ T776] RAX: ffffffffffffffda RBX: 0000000000001533 RCX: 00007fb7a6613159 [ 32.981425][ T776] RDX: 00007fb7a506bee0 RSI: 0000000000000000 RDI: 00007fb7a66aa24b [ 32.989389][ T776] RBP: 0000200000006800 R08: 00000000ffffffff R09: 0000000000000000 [ 32.997352][ T776] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000240 [ 33.005301][ T776] R13: 00007fb7a506bee0 R14: 00007fb7a506bea0 R15: 0000200000000400 [ 33.013253][ T776] [ 33.202740][ T788] : renamed from bond_slave_0 [ 33.262264][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.367285][ T796] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 33.426880][ T798] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 33.434871][ T798] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 33.531807][ T800] netlink: 140 bytes leftover after parsing attributes in process `syz.3.86'. [ 33.540776][ T800] netlink: 'syz.3.86': attribute type 4 has an invalid length. [ 33.555414][ T802] FAULT_INJECTION: forcing a failure. [ 33.555414][ T802] name failslab, interval 1, probability 0, space 0, times 0 [ 33.562148][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 33.568447][ T802] CPU: 0 PID: 802 Comm: syz.4.87 Not tainted syzkaller #0 [ 33.580262][ T802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.590296][ T802] Call Trace: [ 33.593573][ T802] [ 33.596503][ T802] __dump_stack+0x21/0x30 [ 33.600815][ T802] dump_stack_lvl+0x110/0x170 [ 33.605468][ T802] ? show_regs_print_info+0x20/0x20 [ 33.610643][ T802] dump_stack+0x15/0x20 [ 33.614813][ T802] should_fail+0x3ab/0x500 [ 33.619211][ T802] __should_failslab+0xa4/0xe0 [ 33.623954][ T802] should_failslab+0x9/0x20 [ 33.628440][ T802] slab_pre_alloc_hook+0x39/0xd0 [ 33.633358][ T802] ? __alloc_file+0x28/0x2a0 [ 33.637929][ T802] kmem_cache_alloc+0x44/0x260 [ 33.642671][ T802] __alloc_file+0x28/0x2a0 [ 33.647074][ T802] alloc_empty_file+0x97/0x180 [ 33.651895][ T802] path_openat+0xf4/0x2f80 [ 33.656305][ T802] ? __stack_depot_save+0x34/0x480 [ 33.661400][ T802] ? __kasan_slab_alloc+0xc9/0xe0 [ 33.666402][ T802] ? __kasan_slab_alloc+0xb7/0xe0 [ 33.671403][ T802] ? slab_post_alloc_hook+0x4f/0x2b0 [ 33.676670][ T802] ? kmem_cache_alloc+0xf7/0x260 [ 33.681586][ T802] ? getname_flags+0xba/0x510 [ 33.686253][ T802] ? getname+0x19/0x20 [ 33.690296][ T802] ? do_sys_openat2+0xeb/0x7f0 [ 33.692334][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.695036][ T802] ? __x64_sys_openat+0x136/0x160 [ 33.695055][ T802] ? x64_sys_call+0x219/0x9a0 [ 33.695071][ T802] ? do_syscall_64+0x4c/0xa0 [ 33.705966][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.710877][ T802] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.710901][ T802] ? do_filp_open+0x400/0x400 [ 33.716786][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.720108][ T802] do_filp_open+0x1df/0x400 [ 33.720129][ T802] ? vfs_tmpfile+0x2d0/0x2d0 [ 33.730063][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.735849][ T802] do_sys_openat2+0x15e/0x7f0 [ 33.735868][ T802] ? blkcg_maybe_throttle_current+0x1e0/0xa00 [ 33.735886][ T802] ? do_sys_open+0xe0/0xe0 [ 33.744072][ T26] usb 2-1: config 0 descriptor?? [ 33.749518][ T802] ? __blkcg_punt_bio_submit+0x170/0x170 [ 33.749542][ T802] __x64_sys_openat+0x136/0x160 [ 33.793251][ T26] hub 2-1:0.0: USB hub found [ 33.796911][ T802] x64_sys_call+0x219/0x9a0 [ 33.796933][ T802] do_syscall_64+0x4c/0xa0 [ 33.810347][ T802] ? clear_bhb_loop+0x50/0xa0 [ 33.814999][ T802] ? clear_bhb_loop+0x50/0xa0 [ 33.819657][ T802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.825526][ T802] RIP: 0033:0x7f6a95ced159 [ 33.829931][ T802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.842101][ T789] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 33.849513][ T802] RSP: 002b:00007f6a94746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 33.849535][ T802] RAX: ffffffffffffffda RBX: 00007f6a95f74fa0 RCX: 00007f6a95ced159 [ 33.873299][ T802] RDX: 0000000000000041 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 33.881251][ T802] RBP: 00007f6a94746090 R08: 0000000000000000 R09: 0000000000000000 [ 33.889198][ T802] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 33.897148][ T802] R13: 00007f6a95f75038 R14: 00007f6a95f74fa0 R15: 00007fffe79fb9b8 [ 33.905098][ T802] [ 33.942587][ T808] mmap: syz.2.90 (808) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 33.955510][ T811] netlink: 72 bytes leftover after parsing attributes in process `syz.2.90'. [ 33.964644][ T813] loop2: detected capacity change from 0 to 512 [ 34.112511][ T26] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 34.203450][ T823] FAULT_INJECTION: forcing a failure. [ 34.203450][ T823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.212165][ T789] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.227874][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 34.234170][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 34.236548][ T823] CPU: 0 PID: 823 Comm: syz.0.93 Not tainted syzkaller #0 [ 34.247578][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.253137][ T789] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.257625][ T823] Call Trace: [ 34.257632][ T823] [ 34.257638][ T823] __dump_stack+0x21/0x30 [ 34.280943][ T823] dump_stack_lvl+0x110/0x170 [ 34.284067][ T26] usb 2-1: USB disconnect, device number 5 [ 34.285615][ T823] ? show_regs_print_info+0x20/0x20 [ 34.296584][ T823] dump_stack+0x15/0x20 [ 34.298966][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 34.300733][ T823] should_fail+0x3ab/0x500 [ 34.300755][ T823] should_fail_usercopy+0x1a/0x20 [ 34.316008][ T789] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 34.316706][ T823] _copy_to_user+0x20/0x90 [ 34.330116][ T823] simple_read_from_buffer+0xe9/0x160 [ 34.335451][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.335486][ T823] proc_fail_nth_read+0x1a6/0x220 [ 34.348439][ T823] ? proc_fault_inject_write+0x310/0x310 [ 34.354086][ T823] ? security_file_permission+0x83/0xa0 [ 34.359633][ T823] ? proc_fault_inject_write+0x310/0x310 [ 34.362722][ T789] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 34.365263][ T823] vfs_read+0x28c/0xc20 [ 34.365282][ T823] ? kernel_read+0x1f0/0x1f0 [ 34.379396][ T789] usb 4-1: no configuration chosen from 1 choice [ 34.382687][ T823] ? __kasan_check_write+0x14/0x20 [ 34.382712][ T823] ? mutex_lock+0x9b/0x1c0 [ 34.382728][ T823] ? wait_for_completion_killable_timeout+0x10/0x10 [ 34.382746][ T823] ? __fget_files+0x2e1/0x340 [ 34.410276][ T823] ? __fdget_pos+0x2d2/0x380 [ 34.414874][ T823] ? ksys_read+0x70/0x260 [ 34.419207][ T823] ksys_read+0x14a/0x260 [ 34.423447][ T823] ? vfs_write+0xfd0/0xfd0 [ 34.427852][ T823] ? debug_smp_processor_id+0x17/0x20 [ 34.433208][ T823] __x64_sys_read+0x7b/0x90 [ 34.437691][ T823] x64_sys_call+0x96d/0x9a0 [ 34.442177][ T823] do_syscall_64+0x4c/0xa0 [ 34.446573][ T823] ? clear_bhb_loop+0x50/0xa0 [ 34.451233][ T823] ? clear_bhb_loop+0x50/0xa0 [ 34.455887][ T823] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.461761][ T823] RIP: 0033:0x7fe24d8e498e [ 34.466155][ T823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 34.485740][ T823] RSP: 002b:00007fe24c37cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.494133][ T823] RAX: ffffffffffffffda RBX: 00007fe24c37d6c0 RCX: 00007fe24d8e498e [ 34.502090][ T823] RDX: 000000000000000f RSI: 00007fe24c37d0a0 RDI: 0000000000000004 [ 34.510040][ T823] RBP: 00007fe24c37d090 R08: 0000000000000000 R09: 0000000000000000 [ 34.517992][ T823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.525952][ T823] R13: 00007fe24dbac038 R14: 00007fe24dbabfa0 R15: 00007ffe8b318328 [ 34.533908][ T823] [ 34.889282][ T830] loop1: detected capacity change from 0 to 512 [ 34.954878][ T830] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 34.969829][ T830] EXT4-fs (loop1): orphan cleanup on readonly fs [ 34.978111][ T830] __quota_error: 30 callbacks suppressed [ 34.978124][ T830] Quota error (device loop1): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 34.995696][ T830] EXT4-fs warning (device loop1): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.010604][ T830] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 35.017831][ T830] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.95: bg 0: block 15: invalid block bitmap [ 35.030276][ T830] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 35.039515][ T830] EXT4-fs (loop1): 1 truncate cleaned up [ 35.045401][ T830] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 35.122211][ T837] netlink: 140 bytes leftover after parsing attributes in process `syz.0.98'. [ 35.131768][ T837] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 35.141176][ T30] audit: type=1326 audit(1790724406.705:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.2.99" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6613159 code=0x7ffc0000 [ 35.175148][ T839] loop2: detected capacity change from 0 to 512 [ 35.203144][ T839] EXT4-fs (loop2): Unrecognized mount option "smackfshat=ext4" or missing value [ 35.216791][ T30] audit: type=1326 audit(1790724406.745:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.2.99" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6613159 code=0x7ffc0000 [ 35.226304][ T841] loop1: detected capacity change from 0 to 4096 [ 35.241851][ T30] audit: type=1326 audit(1790724406.745:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.2.99" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6613159 code=0x7ffc0000 [ 35.273603][ T30] audit: type=1326 audit(1790724406.745:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.2.99" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6613159 code=0x7ffc0000 [ 35.298462][ T845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 35.302885][ T30] audit: type=1326 audit(1790724406.745:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.2.99" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7a6613159 code=0x7ffc0000 [ 35.331842][ T30] audit: type=1326 audit(1790724406.745:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.2.99" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6613159 code=0x7ffc0000 [ 35.356476][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 35.365042][ T841] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 35.376591][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.386702][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 35.395461][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.403514][ T30] audit: type=1326 audit(1790724406.745:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.2.99" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6613159 code=0x7ffc0000 [ 35.403966][ T841] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 35.428682][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.445464][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.453703][ T30] audit: type=1326 audit(1790724406.745:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.2.99" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6613159 code=0x7ffc0000 [ 35.478652][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.486870][ T492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.495223][ T30] audit: type=1326 audit(1790724406.745:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.2.99" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6613159 code=0x7ffc0000 [ 35.642500][ T848] exfat: Deprecated parameter 'namecase' [ 35.648302][ T848] exfat: Deprecated parameter 'namecase' [ 35.672551][ T364] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.682408][ T848] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 35.705040][ T285] exFAT-fs (loop1): invalid start cluster (4278190088) [ 35.740658][ T850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.103'. [ 35.927966][ T857] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 35.936488][ T857] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.943330][ T857] EXT4-fs warning (device loop0): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.958275][ T857] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 35.965692][ T857] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.106: bg 0: block 15: invalid block bitmap [ 35.978285][ T857] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 35.987497][ T857] EXT4-fs (loop0): 1 truncate cleaned up [ 35.993477][ T857] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.052159][ T364] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 36.063753][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.074850][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.084605][ T364] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 36.182137][ T364] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 36.191395][ T364] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 36.192310][ T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.200252][ T364] usb 3-1: Manufacturer: syz [ 36.214908][ T364] usb 3-1: config 0 descriptor?? [ 36.341695][ T869] netlink: 140 bytes leftover after parsing attributes in process `syz.0.110'. [ 36.351383][ T869] netlink: 'syz.0.110': attribute type 4 has an invalid length. [ 36.486654][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 36.630792][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.671511][ T879] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 36.681673][ T879] FAT-fs (loop0): Filesystem has been set read-only [ 36.688398][ T879] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 36.751692][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.031556][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 37.104035][ T839] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.99: iget: bad i_size value: 38620345925642 [ 37.129402][ T884] set_capacity_and_notify: 5 callbacks suppressed [ 37.129434][ T884] loop3: detected capacity change from 0 to 512 [ 37.154203][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.176021][ T839] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.99: couldn't read orphan inode 15 (err -117) [ 37.209630][ T60] usb 4-1: USB disconnect, device number 7 [ 37.236861][ T26] usb 2-1: config 0 descriptor?? [ 37.348423][ T839] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.372663][ T26] hub 2-1:0.0: USB hub found [ 37.592204][ T886] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 37.632199][ T26] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 37.702158][ T39] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 37.713197][ T492] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 37.732206][ T364] usbhid 3-1:0.0: can't add hid device: -71 [ 37.737179][ T492] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.737179][ T492] [ 37.738153][ T364] usbhid: probe of 3-1:0.0 failed with error -71 [ 37.748084][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 37.770429][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 37.776866][ T364] usb 3-1: USB disconnect, device number 8 [ 37.777329][ T492] EXT4-fs (loop2): Total free blocks count 0 [ 37.789006][ T492] EXT4-fs (loop2): Free/Dirty block details [ 37.795031][ T492] EXT4-fs (loop2): free_blocks=0 [ 37.800047][ T492] EXT4-fs (loop2): dirty_blocks=6344 [ 37.820253][ T492] EXT4-fs (loop2): Block reservation details [ 37.830347][ T492] EXT4-fs (loop2): i_reserved_data_blocks=6344 [ 37.843146][ T26] usb 2-1: USB disconnect, device number 6 [ 37.869784][ T492] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 37.909570][ T492] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.909570][ T492] [ 37.956282][ T890] loop3: detected capacity change from 0 to 131072 [ 37.972741][ T890] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 37.981430][ T890] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.989713][ T890] F2FS-fs (loop3): Unrecognized mount option "|" or missing value [ 38.039235][ T895] loop3: detected capacity change from 0 to 512 [ 38.115898][ T895] EXT4-fs (loop3): can't mount with commit=7, fs mounted w/o journal [ 38.127488][ T897] loop1: detected capacity change from 0 to 512 [ 38.132124][ T39] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 38.151465][ T39] usb 1-1: can't read configurations, error -71 [ 38.172564][ T897] EXT4-fs (loop1): Ignoring removed bh option [ 38.178672][ T897] EXT4-fs (loop1): Ignoring removed orlov option [ 38.185474][ T897] EXT4-fs (loop1): Unrecognized mount option "resgid=0x000000000000ee002appraise_type=imasig" or missing value [ 38.275131][ T901] loop1: detected capacity change from 0 to 512 [ 38.310692][ T903] netlink: 140 bytes leftover after parsing attributes in process `syz.3.121'. [ 38.319953][ T903] netlink: 'syz.3.121': attribute type 4 has an invalid length. [ 38.335626][ T901] EXT4-fs (loop1): Unrecognized mount option "euid<00000000000000000000" or missing value [ 38.530926][ T911] loop2: detected capacity change from 0 to 256 [ 38.536488][ T909] loop1: detected capacity change from 0 to 16 [ 38.583165][ T911] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 38.585151][ T914] loop0: detected capacity change from 0 to 4096 [ 38.602470][ T909] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x375f67f0, 0x7bbbea8c expected [ 38.603210][ T365] udevd[365]: incorrect erofs checksum on /dev/loop1 [ 38.632828][ T914] EXT4-fs (loop0): Test dummy encryption mode enabled [ 38.642208][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 38.644049][ T914] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 38.659575][ T914] EXT4-fs (loop0): Unrecognized mount option "appraise" or missing value [ 38.673243][ T909] loop1: detected capacity change from 0 to 16 [ 38.680215][ T909] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x375f67f0, 0x7bbbea8c expected [ 38.692861][ T365] udevd[365]: incorrect erofs checksum on /dev/loop1 [ 38.697434][ T911] 9pnet: Insufficient options for proto=fd [ 38.783037][ T909] loop1: detected capacity change from 0 to 16 [ 38.814056][ T909] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x375f67f0, 0x7bbbea8c expected [ 38.829149][ T365] udevd[365]: incorrect erofs checksum on /dev/loop1 [ 39.362273][ T888] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 39.762238][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.787603][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.818804][ T924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.126'. [ 39.830483][ T26] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 39.843804][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.858400][ T926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=926 comm=syz.0.127 [ 39.892167][ T26] usb 4-1: config 0 descriptor?? [ 39.911418][ T929] UDC core: couldn't find an available UDC or it's busy: -16 [ 39.921274][ T929] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.062115][ T30] kauditd_printk_skb: 281 callbacks suppressed [ 40.062132][ T30] audit: type=1326 audit(1790724411.625:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=925 comm="syz.0.127" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24d924159 code=0x7ffc0000 [ 40.094524][ T30] audit: type=1326 audit(1790724411.625:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=925 comm="syz.0.127" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24d924159 code=0x7ffc0000 [ 40.162124][ T60] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 40.172246][ T888] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 40.189088][ T888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.202563][ T888] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 40.373493][ T26] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 40.388495][ T26] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 40.396216][ T888] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 40.409584][ T888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.417986][ T30] audit: type=1400 audit(1790724411.985:1364): avc: denied { read write } for pid=932 comm="syz.0.129" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 40.444508][ T26] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 40.456259][ T888] usb 3-1: Product: syz [ 40.463696][ T26] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 40.468983][ T30] audit: type=1400 audit(1790724411.985:1365): avc: denied { open } for pid=932 comm="syz.0.129" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 40.472304][ T888] usb 3-1: Manufacturer: syz [ 40.512115][ T26] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 40.522679][ T26] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 40.541726][ T888] usb 3-1: SerialNumber: syz [ 40.550620][ T888] usb 3-1: config 0 descriptor?? [ 40.582175][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.592293][ T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.603542][ T60] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 40.621866][ T888] usb-storage 3-1:0.0: USB Mass Storage device detected [ 40.652180][ T26] playstation 0003:054C:0DF2.0002: Invalid reportID received, expected 9 got 0 [ 40.661329][ T26] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 40.677408][ T888] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 40.702276][ T60] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 40.711361][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 40.722102][ T26] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 40.730830][ T26] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 40.744077][ T60] usb 2-1: SerialNumber: syz [ 40.770942][ T26] playstation: probe of 0003:054C:0DF2.0002 failed with error -22 [ 40.793737][ T60] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 40.800844][ T60] usb-storage 2-1:1.0: USB Mass Storage device detected [ 40.842397][ T60] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 40.853609][ T30] audit: type=1400 audit(1790724412.425:1366): avc: denied { write } for pid=906 comm="syz.3.122" path="socket:[18041]" dev="sockfs" ino=18041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.859405][ T26] usb 4-1: USB disconnect, device number 8 [ 40.944086][ T943] fido_id[943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 40.993302][ T364] usb 2-1: USB disconnect, device number 7 [ 41.419259][ T948] netlink: 140 bytes leftover after parsing attributes in process `syz.3.132'. [ 41.428794][ T948] netlink: 'syz.3.132': attribute type 4 has an invalid length. [ 41.471789][ T953] EXT4-fs (loop3): Mount option "dioread_nolock" incompatible with ext3 [ 41.557911][ T30] audit: type=1400 audit(1790724413.125:1367): avc: denied { write } for pid=958 comm="syz.1.137" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.632326][ T30] audit: type=1400 audit(1790724413.205:1368): avc: denied { write } for pid=958 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 41.697295][ T960] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 41.711185][ T30] audit: type=1400 audit(1790724413.275:1369): avc: denied { read write } for pid=958 comm="syz.1.137" name="file1" dev="loop1" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.767468][ T30] audit: type=1400 audit(1790724413.275:1370): avc: denied { open } for pid=958 comm="syz.1.137" path="/23/file1/file1" dev="loop1" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.084715][ T957] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 42.093432][ T957] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.102314][ T957] F2FS-fs (loop0): invalid crc value [ 42.122798][ T957] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.158896][ T957] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 42.166101][ T957] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 42.199519][ T290] usb 3-1: USB disconnect, device number 9 [ 42.216543][ T30] audit: type=1400 audit(1790724413.785:1371): avc: denied { write } for pid=956 comm="syz.0.136" path="/41/file1/bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.487893][ T976] set_capacity_and_notify: 3 callbacks suppressed [ 42.487913][ T976] loop1: detected capacity change from 0 to 512 [ 42.610379][ T976] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 42.623540][ T976] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.732149][ T972] loop3: detected capacity change from 0 to 40427 [ 42.771548][ T981] FAULT_INJECTION: forcing a failure. [ 42.771548][ T981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.784690][ T981] CPU: 1 PID: 981 Comm: syz.1.143 Not tainted syzkaller #0 [ 42.791893][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.801942][ T981] Call Trace: [ 42.805215][ T981] [ 42.808140][ T981] __dump_stack+0x21/0x30 [ 42.812473][ T981] dump_stack_lvl+0x110/0x170 [ 42.817149][ T981] ? show_regs_print_info+0x20/0x20 [ 42.822346][ T981] dump_stack+0x15/0x20 [ 42.826495][ T981] should_fail+0x3ab/0x500 [ 42.830908][ T981] should_fail_usercopy+0x1a/0x20 [ 42.835933][ T981] _copy_to_user+0x20/0x90 [ 42.840347][ T981] simple_read_from_buffer+0xe9/0x160 [ 42.845718][ T981] proc_fail_nth_read+0x1a6/0x220 [ 42.850742][ T981] ? proc_fault_inject_write+0x310/0x310 [ 42.856378][ T981] ? security_file_permission+0x83/0xa0 [ 42.861923][ T981] ? proc_fault_inject_write+0x310/0x310 [ 42.867555][ T981] vfs_read+0x28c/0xc20 [ 42.871709][ T981] ? kernel_read+0x1f0/0x1f0 [ 42.876300][ T981] ? __kasan_check_write+0x14/0x20 [ 42.881413][ T981] ? mutex_lock+0x9b/0x1c0 [ 42.885841][ T981] ? wait_for_completion_killable_timeout+0x10/0x10 [ 42.892434][ T981] ? __fget_files+0x2e1/0x340 [ 42.897111][ T981] ? __fdget_pos+0x2d2/0x380 [ 42.901692][ T981] ? ksys_read+0x70/0x260 [ 42.906016][ T981] ksys_read+0x14a/0x260 [ 42.910255][ T981] ? vfs_write+0xfd0/0xfd0 [ 42.914677][ T981] ? fput_many+0x15a/0x1a0 [ 42.919093][ T981] ? debug_smp_processor_id+0x17/0x20 [ 42.924465][ T981] __x64_sys_read+0x7b/0x90 [ 42.928966][ T981] x64_sys_call+0x96d/0x9a0 [ 42.933467][ T981] do_syscall_64+0x4c/0xa0 [ 42.937880][ T981] ? clear_bhb_loop+0x50/0xa0 [ 42.942558][ T981] ? clear_bhb_loop+0x50/0xa0 [ 42.947233][ T981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 42.953126][ T981] RIP: 0033:0x7f8bcdb9598e [ 42.957535][ T981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 42.977136][ T981] RSP: 002b:00007f8bcc62dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.985548][ T981] RAX: ffffffffffffffda RBX: 00007f8bcc62e6c0 RCX: 00007f8bcdb9598e [ 42.993516][ T981] RDX: 000000000000000f RSI: 00007f8bcc62e0a0 RDI: 0000000000000004 [ 43.001484][ T981] RBP: 00007f8bcc62e090 R08: 0000000000000000 R09: 0000000000000000 [ 43.009450][ T981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.017413][ T981] R13: 00007f8bcde5d038 R14: 00007f8bcde5cfa0 R15: 00007ffcb58f64d8 [ 43.025386][ T981] [ 43.042039][ T972] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 43.054335][ T972] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 43.069218][ T985] loop1: detected capacity change from 0 to 256 [ 43.077190][ T972] F2FS-fs (loop3): invalid crc value [ 43.133900][ T972] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 43.160457][ T994] FAULT_INJECTION: forcing a failure. [ 43.160457][ T994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 43.223003][ T994] CPU: 0 PID: 994 Comm: syz.2.147 Not tainted syzkaller #0 [ 43.230228][ T994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.240285][ T994] Call Trace: [ 43.243562][ T994] [ 43.246492][ T994] __dump_stack+0x21/0x30 [ 43.250828][ T994] dump_stack_lvl+0x110/0x170 [ 43.255506][ T994] ? show_regs_print_info+0x20/0x20 [ 43.260708][ T994] dump_stack+0x15/0x20 [ 43.264865][ T994] should_fail+0x3ab/0x500 [ 43.269284][ T994] should_fail_alloc_page+0x55/0x80 [ 43.274480][ T994] prepare_alloc_pages+0x13f/0x590 [ 43.279585][ T994] ? __alloc_pages_bulk+0xab0/0xab0 [ 43.284783][ T994] __alloc_pages+0x11d/0x460 [ 43.289369][ T994] ? prep_new_page+0x110/0x110 [ 43.294127][ T994] ? __alloc_pages+0x1a2/0x460 [ 43.298885][ T994] __pmd_alloc+0x9f/0x4b0 [ 43.303211][ T994] ? __kasan_check_write+0x14/0x20 [ 43.308319][ T994] ? _raw_spin_lock+0x94/0xf0 [ 43.312990][ T994] ? _raw_spin_trylock_bh+0x150/0x150 [ 43.318353][ T994] ? __pud_alloc+0x1a0/0x1a0 [ 43.322945][ T994] ? _raw_spin_unlock+0x4d/0x70 [ 43.327795][ T994] ? __pud_alloc+0x17f/0x1a0 [ 43.332385][ T994] do_handle_mm_fault+0xb74/0x1e30 [ 43.337499][ T994] ? stack_trace_save+0xf0/0xf0 [ 43.342347][ T994] ? arch_stack_walk+0xee/0x140 [ 43.347201][ T994] ? numa_migrate_prep+0xd0/0xd0 [ 43.352146][ T994] ? __find_vma+0x30/0x150 [ 43.356567][ T994] do_user_addr_fault+0x808/0x11c0 [ 43.361675][ T994] ? slab_free_freelist_hook+0xc2/0x190 [ 43.367210][ T994] ? kmem_cache_free+0x100/0x320 [ 43.372130][ T994] ? putname+0x111/0x160 [ 43.376360][ T994] ? do_kern_addr_fault+0x80/0x80 [ 43.381370][ T994] ? avc_has_perm_noaudit+0x30a/0x490 [ 43.386731][ T994] ? avc_has_perm+0x163/0x250 [ 43.391392][ T994] ? proc_fail_nth_read+0x220/0x220 [ 43.396574][ T994] exc_page_fault+0x51/0xb0 [ 43.401060][ T994] asm_exc_page_fault+0x27/0x30 [ 43.405894][ T994] RIP: 0010:__get_user_4+0x1c/0x30 [ 43.410992][ T994] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 43.430588][ T994] RSP: 0018:ffffc9000a55fd38 EFLAGS: 00050206 [ 43.436643][ T994] RAX: 00002000000000c0 RBX: ffffc9000a55fdb0 RCX: 0000000000000000 [ 43.444599][ T994] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffc9000a55fdc8 [ 43.452550][ T994] RBP: ffffc9000a55fe60 R08: ffffc9000a55fdc7 R09: ffffc9000a55fdb0 [ 43.460500][ T994] R10: dffffc0000000000 R11: fffff520014abfb9 R12: ffff888117ed4000 [ 43.468454][ T994] R13: 1ffff920014abfac R14: 0000000000000107 R15: 0000000000000014 [ 43.476419][ T994] ? packet_getsockopt+0x121/0x900 [ 43.481530][ T994] ? packet_setsockopt+0x1af0/0x1af0 [ 43.486795][ T994] ? __fget_files+0x2e1/0x340 [ 43.491455][ T994] ? security_socket_getsockopt+0x82/0xa0 [ 43.497153][ T994] ? packet_setsockopt+0x1af0/0x1af0 [ 43.502422][ T994] __sys_getsockopt+0x207/0x400 [ 43.507260][ T994] __x64_sys_getsockopt+0xbf/0xd0 [ 43.512263][ T994] x64_sys_call+0x6db/0x9a0 [ 43.516748][ T994] do_syscall_64+0x4c/0xa0 [ 43.521144][ T994] ? clear_bhb_loop+0x50/0xa0 [ 43.525807][ T994] ? clear_bhb_loop+0x50/0xa0 [ 43.530462][ T994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.536334][ T994] RIP: 0033:0x7fb7a6613159 [ 43.540734][ T994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.560320][ T994] RSP: 002b:00007fb7a506c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 43.568715][ T994] RAX: ffffffffffffffda RBX: 00007fb7a689afa0 RCX: 00007fb7a6613159 [ 43.576668][ T994] RDX: 0000000000000014 RSI: 0000000000000107 RDI: 0000000000000003 [ 43.584627][ T994] RBP: 00007fb7a506c090 R08: 00002000000000c0 R09: 0000000000000000 [ 43.592583][ T994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.600535][ T994] R13: 00007fb7a689b038 R14: 00007fb7a689afa0 R15: 00007ffd440d6478 [ 43.608492][ T994] [ 43.626190][ T972] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 43.637502][ T972] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 43.670446][ T286] attempt to access beyond end of device [ 43.670446][ T286] loop3: rw=524288, want=45072, limit=40427 [ 43.682967][ T286] attempt to access beyond end of device [ 43.682967][ T286] loop3: rw=0, want=45072, limit=40427 [ 43.720572][ T1010] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2870834618 (5741669236 ns) > initial count (396924862 ns). Using initial count to start timer. [ 43.738181][ T687] attempt to access beyond end of device [ 43.738181][ T687] loop3: rw=2049, want=45112, limit=40427 [ 43.826676][ T1018] loop2: detected capacity change from 0 to 512 [ 43.836921][ T1018] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.896769][ T286] syz-executor (286) used greatest stack depth: 22024 bytes left [ 43.952109][ T290] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 43.998994][ T1024] loop2: detected capacity change from 0 to 512 [ 44.014459][ T1024] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.031753][ T1024] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.049229][ T1024] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.159: bg 0: block 384: padding at end of block bitmap is not set [ 44.064137][ T1024] EXT4-fs (loop2): Remounting filesystem read-only [ 44.070725][ T1024] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 44.081153][ T1024] EXT4-fs (loop2): Remounting filesystem read-only [ 44.088308][ T1024] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.159: attempt to clear invalid blocks 983260 len 1 [ 44.101961][ T1024] EXT4-fs (loop2): Remounting filesystem read-only [ 44.108885][ T1024] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.159: Invalid inode table block 0 in block_group 0 [ 44.121902][ T1024] EXT4-fs (loop2): Remounting filesystem read-only [ 44.128838][ T1024] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 44.138570][ T1024] EXT4-fs (loop2): Remounting filesystem read-only [ 44.145291][ T1024] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 44.154120][ T1024] EXT4-fs (loop2): Remounting filesystem read-only [ 44.160644][ T1024] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.159: Invalid inode table block 0 in block_group 0 [ 44.173264][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.173586][ T1024] EXT4-fs (loop2): Remounting filesystem read-only [ 44.182491][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.186955][ T1024] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 44.203307][ T290] usb 2-1: Using ep0 maxpacket: 32 [ 44.204967][ T1025] device bridge_slave_0 entered promiscuous mode [ 44.208658][ T1024] EXT4-fs (loop2): Remounting filesystem read-only [ 44.221319][ T1024] EXT4-fs error (device loop2): ext4_truncate:4317: inode #11: comm syz.2.159: mark_inode_dirty error [ 44.227448][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.232551][ T1024] EXT4-fs (loop2): Remounting filesystem read-only [ 44.245848][ T1024] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 44.253374][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.255022][ T1024] EXT4-fs (loop2): Remounting filesystem read-only [ 44.268269][ T1024] EXT4-fs (loop2): 1 truncate cleaned up [ 44.270724][ T1025] device bridge_slave_1 entered promiscuous mode [ 44.274019][ T1024] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 44.332204][ T290] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.348181][ T290] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.378933][ T1034] loop2: detected capacity change from 0 to 2048 [ 44.400264][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.407346][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.414628][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.421649][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.448480][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.457683][ T552] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.458344][ T1034] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.477086][ T1034] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.482860][ T552] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.515658][ T290] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 44.522690][ T1034] fs-verity: sha512 using implementation "sha512-avx2" [ 44.532105][ T290] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 44.540478][ T290] usb 2-1: Product: syz [ 44.544690][ T290] usb 2-1: Manufacturer: syz [ 44.572409][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.582624][ T290] hub 2-1:4.0: USB hub found [ 44.588249][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.595320][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.605542][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.613957][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.620987][ T552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.644547][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.652912][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.671941][ T1025] device veth0_vlan entered promiscuous mode [ 44.679925][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.694527][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.704146][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.714951][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.723400][ T495] device bridge_slave_1 left promiscuous mode [ 44.729587][ T495] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.741086][ T495] device bridge_slave_0 left promiscuous mode [ 44.747946][ T495] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.760944][ T495] device veth1_macvtap left promiscuous mode [ 44.777089][ T495] device veth0_vlan left promiscuous mode [ 44.802128][ T290] hub 2-1:4.0: 2 ports detected [ 44.822144][ T290] hub 2-1:4.0: insufficient power available to use all downstream ports [ 44.883063][ T1047] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 44.921184][ T1025] device veth1_macvtap entered promiscuous mode [ 44.933732][ T1046] device veth1_to_bond entered promiscuous mode [ 44.940502][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.953758][ T1042] device veth1_to_bond left promiscuous mode [ 44.964004][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.982988][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.014972][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.028648][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.117892][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 45.117906][ T30] audit: type=1400 audit(1790724416.685:1408): avc: denied { create } for pid=1053 comm="syz.5.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.218905][ T30] audit: type=1400 audit(1790724416.725:1409): avc: denied { sys_module } for pid=1053 comm="syz.5.158" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.258430][ T1052] loop0: detected capacity change from 0 to 40427 [ 45.314732][ T1052] F2FS-fs (loop0): Unrecognized mount option "00000000000000000000004nodiscard" or missing value [ 45.336073][ T30] audit: type=1400 audit(1790724416.905:1410): avc: denied { create } for pid=1051 comm="syz.0.166" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.461802][ T30] audit: type=1400 audit(1790724417.025:1411): avc: denied { unlink } for pid=287 comm="syz-executor" name="file1" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.514957][ T30] audit: type=1326 audit(1790724417.085:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.150" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcdbd5159 code=0x7ffc0000 [ 45.562107][ T30] audit: type=1326 audit(1790724417.085:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.150" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcdbd5159 code=0x7ffc0000 [ 45.637608][ T30] audit: type=1326 audit(1790724417.085:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.150" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcdbd5159 code=0x7ffc0000 [ 45.695564][ T1065] loop0: detected capacity change from 0 to 512 [ 45.732126][ T30] audit: type=1326 audit(1790724417.085:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.150" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcdbd5159 code=0x7ffc0000 [ 45.767117][ T30] audit: type=1326 audit(1790724417.085:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.150" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8bcdbd5159 code=0x7ffc0000 [ 45.792125][ T1049] syz.2.165 (1049) used greatest stack depth: 20872 bytes left [ 45.812784][ T30] audit: type=1326 audit(1790724417.085:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.150" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcdbd5159 code=0x7ffc0000 [ 45.824619][ T1072] netlink: 140 bytes leftover after parsing attributes in process `syz.2.170'. [ 45.849419][ T1071] device ip6erspan0 entered promiscuous mode [ 45.856600][ T1072] netlink: 'syz.2.170': attribute type 4 has an invalid length. [ 45.932683][ T1065] EXT4-fs (loop0): Unrecognized mount option "smackfshat=ext4" or missing value [ 45.936997][ T1079] FAULT_INJECTION: forcing a failure. [ 45.936997][ T1079] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 45.960446][ T1081] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.972124][ T290] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 45.973400][ T1081] VFS: file-max limit 0 reached [ 45.978558][ T290] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 45.994781][ T1079] CPU: 0 PID: 1079 Comm: syz.2.174 Not tainted syzkaller #0 [ 46.002077][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.012138][ T1079] Call Trace: [ 46.015417][ T1079] [ 46.018347][ T1079] __dump_stack+0x21/0x30 [ 46.022678][ T1079] dump_stack_lvl+0x110/0x170 [ 46.027356][ T1079] ? show_regs_print_info+0x20/0x20 [ 46.032553][ T1079] ? nla_put+0x142/0x1f0 [ 46.036794][ T1079] ? fib_info_hashfn+0x200/0x200 [ 46.041816][ T1079] ? memcpy+0x56/0x70 [ 46.045799][ T1079] dump_stack+0x15/0x20 [ 46.049950][ T1079] should_fail+0x3ab/0x500 [ 46.054366][ T1079] should_fail_alloc_page+0x55/0x80 [ 46.059574][ T1079] prepare_alloc_pages+0x13f/0x590 [ 46.064694][ T1079] ? __alloc_pages_bulk+0xab0/0xab0 [ 46.069895][ T1079] ? unwind_get_return_address+0x4d/0x90 [ 46.075548][ T1079] __alloc_pages+0x11d/0x460 [ 46.080138][ T1079] ? prep_new_page+0x110/0x110 [ 46.084909][ T1079] ? fib_nexthop_info+0x53b/0x780 [ 46.089950][ T1079] wp_page_copy+0x1e9/0x1890 [ 46.094544][ T1079] ? insert_page_into_pte_locked+0x310/0x310 [ 46.100524][ T1079] ? _raw_spin_lock+0x94/0xf0 [ 46.105202][ T1079] ? _raw_spin_trylock_bh+0x150/0x150 [ 46.110575][ T1079] ? vm_normal_page+0x1dd/0x1f0 [ 46.115426][ T1079] do_wp_page+0x9e1/0xc90 [ 46.119759][ T1079] handle_pte_fault+0x824/0x2770 [ 46.124697][ T1079] ? selinux_socket_sock_rcv_skb+0x30f/0x880 [ 46.130675][ T1079] ? fault_around_bytes_set+0xc0/0xc0 [ 46.136050][ T1079] do_handle_mm_fault+0x1b3b/0x1e30 [ 46.141250][ T1079] ? numa_migrate_prep+0xd0/0xd0 [ 46.146191][ T1079] ? __find_vma+0x30/0x150 [ 46.150619][ T1079] do_user_addr_fault+0x808/0x11c0 [ 46.155745][ T1079] ? do_kern_addr_fault+0x80/0x80 [ 46.160771][ T1079] ? netlink_sendmsg+0xb80/0xb80 [ 46.165710][ T1079] exc_page_fault+0x51/0xb0 [ 46.170218][ T1079] asm_exc_page_fault+0x27/0x30 [ 46.175068][ T1079] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 46.180790][ T1079] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 46.200486][ T1079] RSP: 0018:ffffc90002bef8d8 EFLAGS: 00050202 [ 46.206557][ T1079] RAX: 0000000000000020 RBX: 0000000000000002 RCX: 0000200000002ef0 [ 46.214528][ T1079] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 46.222499][ T1079] RBP: ffffc90002befa70 R08: 0000000000000000 R09: ffffc90002bef680 [ 46.230472][ T1079] R10: dffffc0000000000 R11: fffff5200057deb4 R12: dffffc0000000000 [ 46.238442][ T1079] R13: 0000200000002ec0 R14: 0000000000000000 R15: ffffc90002befd70 [ 46.246423][ T1079] ? ____sys_recvmsg+0x38d/0x5b0 [ 46.251364][ T1079] ? __sys_recvmsg_sock+0x50/0x50 [ 46.256398][ T1079] ? import_iovec+0x7c/0xb0 [ 46.260903][ T1079] ___sys_recvmsg+0x213/0x5c0 [ 46.265585][ T1079] ? _kstrtoull+0x3bb/0x4c0 [ 46.270092][ T1079] ? __sys_recvmsg+0x280/0x280 [ 46.274853][ T1079] ? kstrtouint_from_user+0x1c4/0x220 [ 46.280229][ T1079] ? __fdget+0x1a1/0x230 [ 46.284465][ T1079] ? do_recvmmsg+0x195/0x7d0 [ 46.289052][ T1079] do_recvmmsg+0x360/0x7d0 [ 46.293465][ T1079] ? __sys_recvmmsg+0x290/0x290 [ 46.298318][ T1079] ? get_timespec64+0x116/0x1b0 [ 46.303173][ T1079] ? timespec64_add_safe+0x1f0/0x1f0 [ 46.308465][ T1079] ? fput_many+0x15a/0x1a0 [ 46.312884][ T1079] __x64_sys_recvmmsg+0x1b4/0x250 [ 46.317908][ T1079] ? do_recvmmsg+0x7d0/0x7d0 [ 46.322496][ T1079] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 46.328567][ T1079] x64_sys_call+0x297/0x9a0 [ 46.333074][ T1079] do_syscall_64+0x4c/0xa0 [ 46.337491][ T1079] ? clear_bhb_loop+0x50/0xa0 [ 46.342172][ T1079] ? clear_bhb_loop+0x50/0xa0 [ 46.346849][ T1079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.352748][ T1079] RIP: 0033:0x7fb7a6613159 [ 46.357160][ T1079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.376766][ T1079] RSP: 002b:00007fb7a506c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 46.385177][ T1079] RAX: ffffffffffffffda RBX: 00007fb7a689afa0 RCX: 00007fb7a6613159 [ 46.393146][ T1079] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 46.401115][ T1079] RBP: 00007fb7a506c090 R08: 00002000000001c0 R09: 0000000000000000 [ 46.409086][ T1079] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 46.417056][ T1079] R13: 00007fb7a689b038 R14: 00007fb7a689afa0 R15: 00007ffd440d6478 [ 46.425031][ T1079] [ 46.493006][ T1085] loop2: detected capacity change from 0 to 4096 [ 46.514030][ T1085] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 46.536379][ T1085] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 46.742094][ T335] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 46.833058][ T1091] loop5: detected capacity change from 0 to 1024 [ 46.865676][ T1094] UDC core: couldn't find an available UDC or it's busy: -16 [ 46.873772][ T1094] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 46.881281][ T1091] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 46.891418][ T1091] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 46.902426][ T1091] EXT4-fs error (device loop5): ext4_get_journal_inode:5178: inode #5: comm syz.5.180: unexpected bad inode w/o EXT4_IGET_BAD [ 46.915619][ T1091] EXT4-fs (loop5): no journal found [ 46.920817][ T1091] EXT4-fs (loop5): can't get journal size [ 46.927359][ T1091] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 46.962109][ T20] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 47.092308][ T789] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 47.102213][ T335] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 47.122402][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.133672][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.145243][ T335] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 47.163525][ T1103] EXT4-fs (loop5): Test dummy encryption mode enabled [ 47.177205][ T1103] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: none. [ 47.194270][ T1103] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.214261][ T1103] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 47.225137][ T1103] xt_hashlimit: size too large, truncated to 1048576 [ 47.232200][ T335] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 47.241435][ T335] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 47.249881][ T335] usb 1-1: Manufacturer: syz [ 47.263228][ T335] usb 1-1: config 0 descriptor?? [ 47.322155][ T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.337790][ T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 47.356554][ T20] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.375356][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.392115][ T789] usb 2-1: device descriptor read/64, error -71 [ 47.395609][ T20] usb 3-1: config 0 descriptor?? [ 47.494327][ T1107] netlink: 140 bytes leftover after parsing attributes in process `syz.5.183'. [ 47.503349][ T1107] netlink: 'syz.5.183': attribute type 4 has an invalid length. [ 47.525379][ T1109] netlink: 'syz.5.184': attribute type 4 has an invalid length. [ 47.544558][ T1111] netlink: 'syz.5.185': attribute type 12 has an invalid length. [ 47.552519][ T1112] netlink: 'syz.5.185': attribute type 12 has an invalid length. [ 47.649596][ T364] usb 3-1: USB disconnect, device number 10 [ 47.739892][ T1064] set_capacity_and_notify: 1 callbacks suppressed [ 47.739908][ T1064] loop0: detected capacity change from 0 to 512 [ 47.792122][ T789] usb 2-1: device descriptor read/64, error -71 [ 47.833082][ T1064] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.168: iget: bad i_size value: 38620345925642 [ 47.852238][ T1064] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.168: couldn't read orphan inode 15 (err -117) [ 47.882248][ T1064] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.022147][ T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 48.062176][ T789] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 48.071530][ T1087] loop2: detected capacity change from 0 to 131072 [ 48.104616][ T1087] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 48.116373][ T1087] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 48.133890][ T1087] F2FS-fs (loop2): Unrecognized mount option "0177777777777777777777701777777777777777777777ÿÿ" or missing value [ 48.237164][ T552] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:148: bg 0: block 5: invalid block bitmap [ 48.255404][ T552] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 48.268081][ T552] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.268081][ T552] [ 48.278038][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 48.283562][ T552] EXT4-fs (loop0): Total free blocks count 0 [ 48.289545][ T552] EXT4-fs (loop0): Free/Dirty block details [ 48.295661][ T552] EXT4-fs (loop0): free_blocks=0 [ 48.300596][ T552] EXT4-fs (loop0): dirty_blocks=16000 [ 48.306213][ T552] EXT4-fs (loop0): Block reservation details [ 48.312300][ T552] EXT4-fs (loop0): i_reserved_data_blocks=16000 [ 48.352128][ T789] usb 2-1: device descriptor read/64, error -71 [ 48.392139][ T335] usbhid 1-1:0.0: can't add hid device: -71 [ 48.398154][ T335] usbhid: probe of 1-1:0.0 failed with error -71 [ 48.414331][ T335] usb 1-1: USB disconnect, device number 6 [ 48.452569][ T60] usb 6-1: unable to get BOS descriptor or descriptor too short [ 48.542159][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 48.553808][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 48.563767][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 48.575011][ T60] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 48.585155][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 48.595559][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 110, changing to 7 [ 48.606846][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 25974, setting to 1024 [ 48.762185][ T789] usb 2-1: device descriptor read/64, error -71 [ 48.812127][ T60] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 48.821238][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.829436][ T60] usb 6-1: Product: syz [ 48.835245][ T60] usb 6-1: Manufacturer: syz [ 48.839843][ T60] usb 6-1: SerialNumber: syz [ 48.848385][ T60] usb 6-1: config 0 descriptor?? [ 48.863314][ T552] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 48.876447][ T552] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.876447][ T552] [ 48.886215][ T1111] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 48.989315][ T1116] loop2: detected capacity change from 0 to 4096 [ 49.007978][ T1116] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 49.028219][ T1116] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 49.037452][ T789] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 49.103401][ T335] usb 6-1: USB disconnect, device number 2 [ 49.188790][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.192671][ T1124] loop2: detected capacity change from 0 to 256 [ 49.196833][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.209589][ T1125] device bridge_slave_0 entered promiscuous mode [ 49.218561][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.225693][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.232126][ T789] usb 2-1: device descriptor read/8, error -71 [ 49.233767][ T1125] device bridge_slave_1 entered promiscuous mode [ 49.254544][ T1124] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.304005][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.311060][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.318344][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.325373][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.333000][ T60] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.346086][ T1133] loop2: detected capacity change from 0 to 1024 [ 49.358223][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.365910][ T552] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.373811][ T1133] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 49.384731][ T1133] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 49.394448][ T1133] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.191: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 49.412417][ T1133] EXT4-fs (loop2): no journal found [ 49.417619][ T1133] EXT4-fs (loop2): can't get journal size [ 49.423700][ T552] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.431371][ T1133] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noblock_validity,max_dir_size_kb=0x0000000000000008,noinit_itable,quota,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 49.453802][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.462035][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.469075][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.476621][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.484990][ T1133] EXT4-fs error (device loop2): __ext4_iget:4950: inode #15: block 1803188595: comm syz.2.191: invalid block [ 49.485090][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.503580][ T552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.511143][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.519352][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.543152][ T1125] device veth0_vlan entered promiscuous mode [ 49.556350][ T1125] device veth1_macvtap entered promiscuous mode [ 49.579379][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.588309][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.597062][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.605288][ T789] usb 2-1: device descriptor read/8, error -71 [ 49.605597][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.612210][ T60] usb 1-1: Using ep0 maxpacket: 8 [ 49.625022][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.632514][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.640078][ T552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.663539][ T1139] loop6: detected capacity change from 0 to 128 [ 49.692115][ T1139] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 49.705466][ T1139] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.750655][ T1142] xt_hashlimit: size too large, truncated to 1048576 [ 49.799513][ T1146] netlink: 140 bytes leftover after parsing attributes in process `syz.6.194'. [ 49.809163][ T1146] netlink: 'syz.6.194': attribute type 4 has an invalid length. [ 49.922224][ T60] usb 1-1: unable to get BOS descriptor or descriptor too short [ 49.970058][ T288] ------------[ cut here ]------------ [ 49.976285][ T288] WARNING: CPU: 0 PID: 288 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 49.986953][ T288] Modules linked in: [ 49.990907][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 49.998607][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.008916][ T288] RIP: 0010:drop_nlink+0xc5/0x110 [ 50.012159][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.030947][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.039881][ T288] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 07 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8b 88 b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 50.039898][ T288] RSP: 0018:ffffc90000a07b50 EFLAGS: 00010293 [ 50.039912][ T288] RAX: ffffffff81b748e5 RBX: ffff888131f10440 RCX: ffff88811f52bc00 [ 50.039924][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.039933][ T288] RBP: ffffc90000a07b78 R08: 0000000000000003 R09: 0000000000000004 [ 50.039943][ T288] R10: dffffc0000000000 R11: fffff52000140f58 R12: dffffc0000000000 [ 50.039955][ T288] R13: 1ffff110263e2091 R14: ffff888131f10488 R15: 0000000000000000 [ 50.039966][ T288] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 50.039981][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.059777][ T26] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 50.073790][ T288] CR2: 00007f8bcc60dd58 CR3: 000000012581c000 CR4: 00000000003526b0 [ 50.137028][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.137211][ T495] device bridge_slave_1 left promiscuous mode [ 50.145180][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.154726][ T495] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.159659][ T288] Call Trace: [ 50.172297][ T288] [ 50.175237][ T288] shmem_rmdir+0x5b/0x90 [ 50.179476][ T288] vfs_rmdir+0x1ae/0x450 [ 50.184012][ T288] incfs_kill_sb+0xfe/0x210 [ 50.188570][ T288] deactivate_locked_super+0xa0/0x100 [ 50.188727][ T495] device bridge_slave_0 left promiscuous mode [ 50.194535][ T288] deactivate_super+0xaf/0xe0 [ 50.205238][ T288] cleanup_mnt+0x44f/0x500 [ 50.209702][ T288] __cleanup_mnt+0x19/0x20 [ 50.214575][ T288] task_work_run+0x127/0x190 [ 50.220335][ T288] do_exit+0xb70/0x29a0 [ 50.220538][ T495] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.224740][ T288] ? put_task_struct+0x90/0x90 [ 50.236486][ T288] ? __fdget_pos+0x1f7/0x380 [ 50.241124][ T288] ? ksys_write+0x1eb/0x260 [ 50.245987][ T288] do_group_exit+0x149/0x310 [ 50.250822][ T288] __x64_sys_exit_group+0x3f/0x40 [ 50.256749][ T495] device veth1_macvtap left promiscuous mode [ 50.262191][ T60] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 50.263040][ T495] device veth0_vlan left promiscuous mode [ 50.275901][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.278470][ T288] x64_sys_call+0x832/0x9a0 [ 50.290275][ T288] do_syscall_64+0x4c/0xa0 [ 50.291151][ T60] usb 1-1: Product: syz [ 50.295008][ T288] ? clear_bhb_loop+0x50/0xa0 [ 50.303878][ T288] ? clear_bhb_loop+0x50/0xa0 [ 50.309219][ T60] usb 1-1: Manufacturer: syz [ 50.314013][ T60] usb 1-1: SerialNumber: syz [ 50.319809][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.333099][ T288] RIP: 0033:0x7fb7a6613159 [ 50.338109][ T288] Code: Unable to access opcode bytes at RIP 0x7fb7a661312f. [ 50.345576][ T30] kauditd_printk_skb: 1193 callbacks suppressed [ 50.345587][ T30] audit: type=1400 audit(1790724421.915:2611): avc: denied { getopt } for pid=1158 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.374557][ T288] RSP: 002b:00007ffd440d44e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 50.402201][ T288] RAX: ffffffffffffffda RBX: 00007fb7a66a951b RCX: 00007fb7a6613159 [ 50.410197][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 50.432965][ T288] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fb7a66a94bb [ 50.442162][ T26] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.452303][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd440d57a0 [ 50.460285][ T288] R13: 00007fb7a66a94bb R14: 000055556e4894e8 R15: 00007ffd440d6870 [ 50.464138][ T26] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.468579][ T288] [ 50.484888][ T288] ---[ end trace 60fcfee2bf49575b ]--- [ 50.491307][ T288] ------------[ cut here ]------------ [ 50.496994][ T288] WARNING: CPU: 0 PID: 288 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 50.505077][ T288] Modules linked in: [ 50.509016][ T288] CPU: 0 PID: 288 Comm: syz-executor Tainted: G W syzkaller #0 [ 50.510602][ T26] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.519022][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.541124][ T288] RIP: 0010:drop_nlink+0xc5/0x110 [ 50.547273][ T288] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 07 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8b 88 b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 50.567122][ T288] RSP: 0018:ffffc90000a07b50 EFLAGS: 00010293 [ 50.574059][ T288] RAX: ffffffff81b748e5 RBX: ffff888131f12ab0 RCX: ffff88811f52bc00 [ 50.588483][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.597340][ T288] RBP: ffffc90000a07b78 R08: 0000000000000003 R09: 0000000000000004 [ 50.619649][ T26] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 50.632379][ T789] usb 2-1: USB disconnect, device number 8 [ 50.638231][ T288] R10: dffffc0000000000 R11: fffff52000140f58 R12: dffffc0000000000 [ 50.640422][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 50.654324][ T288] R13: 1ffff110263e255f R14: ffff888131f12af8 R15: 0000000000000000 [ 50.662451][ T26] usb 6-1: SerialNumber: syz [ 50.668721][ T288] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 50.678419][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.692082][ T288] CR2: 0000200000001b00 CR3: 000000010de2f000 CR4: 00000000003526a0 [ 50.702701][ T26] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 50.709418][ T26] usb-storage 6-1:1.0: USB Mass Storage device detected [ 50.725409][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.746677][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.755752][ T288] Call Trace: [ 50.759031][ T288] [ 50.761952][ T288] shmem_rmdir+0x5b/0x90 [ 50.766504][ T288] vfs_rmdir+0x1ae/0x450 [ 50.770751][ T288] incfs_kill_sb+0x18f/0x210 [ 50.775543][ T60] usb 1-1: 0:1 : does not exist [ 50.780772][ T60] usb 1-1: unit 5 not found! [ 50.785757][ T26] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 50.794526][ T60] usb 1-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8214 device_setup=1 to enable and report any issues to g@b4.vu [ 50.797327][ T288] deactivate_locked_super+0xa0/0x100 [ 50.814040][ T60] usb 1-1: USB disconnect, device number 7 [ 50.819323][ T288] deactivate_super+0xaf/0xe0 [ 50.827229][ T288] cleanup_mnt+0x44f/0x500 [ 50.831731][ T288] __cleanup_mnt+0x19/0x20 [ 50.836807][ T288] task_work_run+0x127/0x190 [ 50.841447][ T288] do_exit+0xb70/0x29a0 [ 50.845842][ T288] ? put_task_struct+0x90/0x90 [ 50.850712][ T288] ? __fdget_pos+0x1f7/0x380 [ 50.855558][ T288] ? ksys_write+0x1eb/0x260 [ 50.860189][ T288] do_group_exit+0x149/0x310 [ 50.865095][ T288] __x64_sys_exit_group+0x3f/0x40 [ 50.870138][ T288] x64_sys_call+0x832/0x9a0 [ 50.874828][ T288] do_syscall_64+0x4c/0xa0 [ 50.879338][ T288] ? clear_bhb_loop+0x50/0xa0 [ 50.885199][ T30] audit: type=1400 audit(1790724422.455:2612): avc: denied { mount } for pid=1169 comm="syz.6.202" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 50.889664][ T288] ? clear_bhb_loop+0x50/0xa0 [ 50.913430][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.919388][ T288] RIP: 0033:0x7fb7a6613159 [ 50.923867][ T288] Code: Unable to access opcode bytes at RIP 0x7fb7a661312f. [ 50.931256][ T288] RSP: 002b:00007ffd440d44e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 50.939915][ T288] RAX: ffffffffffffffda RBX: 00007fb7a66a951b RCX: 00007fb7a6613159 [ 50.947960][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 50.956117][ T288] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fb7a66a94bb [ 50.964200][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd440d57a0 [ 50.972311][ T288] R13: 00007fb7a66a94bb R14: 000055556e4894e8 R15: 00007ffd440d6870 [ 50.980336][ T288] [ 50.983448][ T288] ---[ end trace 60fcfee2bf49575c ]--- [ 51.032791][ T660] udevd[660]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.042448][ T288] ================================================================== [ 51.056474][ T288] BUG: KASAN: use-after-free in fast_dput+0x1e0/0x290 [ 51.063238][ T288] Read of size 4 at addr ffff88810d1bc440 by task syz-executor/288 [ 51.071110][ T288] [ 51.073414][ T288] CPU: 0 PID: 288 Comm: syz-executor Tainted: G W syzkaller #0 [ 51.082237][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.092268][ T288] Call Trace: [ 51.095525][ T288] [ 51.098437][ T288] __dump_stack+0x21/0x30 [ 51.102751][ T288] dump_stack_lvl+0x110/0x170 [ 51.107408][ T288] ? show_regs_print_info+0x20/0x20 [ 51.112588][ T288] ? load_image+0x3f0/0x3f0 [ 51.117068][ T288] ? __flush_work+0x5b0/0x6d0 [ 51.121732][ T288] print_address_description+0x7f/0x2c0 [ 51.127257][ T288] ? fast_dput+0x1e0/0x290 [ 51.131653][ T288] kasan_report+0x10f/0x150 [ 51.136136][ T288] ? fast_dput+0x1e0/0x290 [ 51.140531][ T288] __asan_report_load4_noabort+0x14/0x20 [ 51.146140][ T288] fast_dput+0x1e0/0x290 [ 51.150361][ T288] dput+0x26/0x90 [ 51.153973][ T288] incfs_free_mount_info+0x60/0x200 [ 51.159157][ T288] incfs_kill_sb+0x1af/0x210 [ 51.163729][ T288] deactivate_locked_super+0xa0/0x100 [ 51.169087][ T288] deactivate_super+0xaf/0xe0 [ 51.173745][ T288] cleanup_mnt+0x44f/0x500 [ 51.178143][ T288] __cleanup_mnt+0x19/0x20 [ 51.182538][ T288] task_work_run+0x127/0x190 [ 51.187201][ T288] do_exit+0xb70/0x29a0 [ 51.191344][ T288] ? put_task_struct+0x90/0x90 [ 51.196085][ T288] ? __fdget_pos+0x1f7/0x380 [ 51.200653][ T288] ? ksys_write+0x1eb/0x260 [ 51.205134][ T288] do_group_exit+0x149/0x310 [ 51.209702][ T288] __x64_sys_exit_group+0x3f/0x40 [ 51.214708][ T288] x64_sys_call+0x832/0x9a0 [ 51.219193][ T288] do_syscall_64+0x4c/0xa0 [ 51.223588][ T288] ? clear_bhb_loop+0x50/0xa0 [ 51.228419][ T288] ? clear_bhb_loop+0x50/0xa0 [ 51.233079][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.238952][ T288] RIP: 0033:0x7fb7a6613159 [ 51.243347][ T288] Code: Unable to access opcode bytes at RIP 0x7fb7a661312f. [ 51.250689][ T288] RSP: 002b:00007ffd440d44e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 51.259078][ T288] RAX: ffffffffffffffda RBX: 00007fb7a66a951b RCX: 00007fb7a6613159 [ 51.267030][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 51.274995][ T288] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fb7a66a94bb [ 51.282946][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd440d57a0 [ 51.290898][ T288] R13: 00007fb7a66a94bb R14: 000055556e4894e8 R15: 00007ffd440d6870 [ 51.298857][ T288] [ 51.301862][ T288] [ 51.304165][ T288] Allocated by task 1155: [ 51.308469][ T288] __kasan_slab_alloc+0xb7/0xe0 [ 51.313305][ T288] slab_post_alloc_hook+0x4f/0x2b0 [ 51.318398][ T288] kmem_cache_alloc+0xf7/0x260 [ 51.323150][ T288] __d_alloc+0x2d/0x690 [ 51.327285][ T288] d_alloc_parallel+0xe5/0x1380 [ 51.332115][ T288] __lookup_slow+0x14c/0x410 [ 51.336685][ T288] lookup_one_len+0x19d/0x2d0 [ 51.341363][ T288] incfs_lookup_dentry+0x60/0xb0 [ 51.346288][ T288] open_or_create_special_dir+0x4c/0x1f0 [ 51.351905][ T288] incfs_mount_fs+0x42f/0x890 [ 51.356562][ T288] legacy_get_tree+0xed/0x190 [ 51.361218][ T288] vfs_get_tree+0x89/0x260 [ 51.365617][ T288] do_new_mount+0x251/0xb40 [ 51.370101][ T288] path_mount+0x640/0xff0 [ 51.374412][ T288] __se_sys_mount+0x320/0x390 [ 51.379073][ T288] __x64_sys_mount+0xbf/0xd0 [ 51.383641][ T288] x64_sys_call+0x6bf/0x9a0 [ 51.388124][ T288] do_syscall_64+0x4c/0xa0 [ 51.392526][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.398402][ T288] [ 51.400706][ T288] Freed by task 13: [ 51.404488][ T288] kasan_set_track+0x4a/0x70 [ 51.409058][ T288] kasan_set_free_info+0x23/0x40 [ 51.413984][ T288] ____kasan_slab_free+0x125/0x160 [ 51.419074][ T288] __kasan_slab_free+0x11/0x20 [ 51.423813][ T288] slab_free_freelist_hook+0xc2/0x190 [ 51.429164][ T288] kmem_cache_free+0x100/0x320 [ 51.433909][ T288] __d_free+0x23/0x30 [ 51.437867][ T288] rcu_do_batch+0x4c1/0xbf0 [ 51.442352][ T288] rcu_core+0x4a3/0xef0 [ 51.446484][ T288] rcu_core_si+0x9/0x10 [ 51.450615][ T288] handle_softirqs+0x250/0x560 [ 51.455357][ T288] run_ksoftirqd+0x28/0x40 [ 51.459754][ T288] smpboot_thread_fn+0x446/0x880 [ 51.464675][ T288] kthread+0x3f5/0x4f0 [ 51.468722][ T288] ret_from_fork+0x1f/0x30 [ 51.473115][ T288] [ 51.475419][ T288] Last potentially related work creation: [ 51.481109][ T288] kasan_save_stack+0x3a/0x60 [ 51.485767][ T288] __kasan_record_aux_stack+0xd2/0x100 [ 51.491204][ T288] kasan_record_aux_stack_noalloc+0xb/0x10 [ 51.497076][ T288] call_rcu+0x10b/0xf60 [ 51.501245][ T288] dentry_free+0xbd/0x150 [ 51.505553][ T288] __dentry_kill+0x516/0x660 [ 51.510133][ T288] dentry_kill+0xc0/0x2a0 [ 51.514442][ T288] dput+0x47/0x90 [ 51.518054][ T288] incfs_free_mount_info+0x60/0x200 [ 51.523231][ T288] incfs_kill_sb+0x1af/0x210 [ 51.527797][ T288] deactivate_locked_super+0xa0/0x100 [ 51.533149][ T288] deactivate_super+0xaf/0xe0 [ 51.537805][ T288] cleanup_mnt+0x44f/0x500 [ 51.542200][ T288] __cleanup_mnt+0x19/0x20 [ 51.546592][ T288] task_work_run+0x127/0x190 [ 51.551160][ T288] do_exit+0xb70/0x29a0 [ 51.555293][ T288] do_group_exit+0x149/0x310 [ 51.559861][ T288] __x64_sys_exit_group+0x3f/0x40 [ 51.564864][ T288] x64_sys_call+0x832/0x9a0 [ 51.569346][ T288] do_syscall_64+0x4c/0xa0 [ 51.573743][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.579618][ T288] [ 51.581919][ T288] Second to last potentially related work creation: [ 51.588475][ T288] kasan_save_stack+0x3a/0x60 [ 51.593128][ T288] __kasan_record_aux_stack+0xd2/0x100 [ 51.598567][ T288] kasan_record_aux_stack_noalloc+0xb/0x10 [ 51.604351][ T288] call_rcu+0x10b/0xf60 [ 51.608489][ T288] dentry_free+0xbd/0x150 [ 51.612794][ T288] __dentry_kill+0x516/0x660 [ 51.617358][ T288] dentry_kill+0xc0/0x2a0 [ 51.621671][ T288] dput+0x47/0x90 [ 51.625279][ T288] proc_invalidate_siblings_dcache+0x2a0/0x3c0 [ 51.631410][ T288] proc_flush_pid+0x1d/0x20 [ 51.635893][ T288] release_task+0x10c9/0x1210 [ 51.640550][ T288] wait_consider_task+0x1829/0x2840 [ 51.645724][ T288] do_wait+0x267/0x9c0 [ 51.649768][ T288] kernel_wait4+0x1d1/0x2b0 [ 51.654251][ T288] __x64_sys_wait4+0x163/0x230 [ 51.658994][ T288] x64_sys_call+0xec/0x9a0 [ 51.663389][ T288] do_syscall_64+0x4c/0xa0 [ 51.667783][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.673657][ T288] [ 51.675959][ T288] The buggy address belongs to the object at ffff88810d1bc440 [ 51.675959][ T288] which belongs to the cache dentry of size 208 [ 51.689554][ T288] The buggy address is located 0 bytes inside of [ 51.689554][ T288] 208-byte region [ffff88810d1bc440, ffff88810d1bc510) [ 51.702632][ T288] The buggy address belongs to the page: [ 51.708249][ T288] page:ffffea0004346f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d1bc [ 51.718464][ T288] flags: 0x4000000000000200(slab|zone=1) [ 51.724092][ T288] raw: 4000000000000200 dead000000000100 dead000000000122 ffff8881001c5080 [ 51.732651][ T288] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 51.741206][ T288] page dumped because: kasan: bad access detected [ 51.747591][ T288] page_owner tracks the page as allocated [ 51.753278][ T288] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x12cd0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 115, ts 3528255806, free_ts 0 [ 51.770009][ T288] post_alloc_hook+0x192/0x1b0 [ 51.774756][ T288] prep_new_page+0x1c/0x110 [ 51.779238][ T288] get_page_from_freelist+0x2c3a/0x2cd0 [ 51.784761][ T288] __alloc_pages+0x1a2/0x460 [ 51.789328][ T288] new_slab+0xa0/0x4d0 [ 51.793379][ T288] ___slab_alloc+0x3ac/0x840 [ 51.797953][ T288] __slab_alloc+0x49/0x90 [ 51.802259][ T288] kmem_cache_alloc+0x138/0x260 [ 51.807089][ T288] __d_alloc+0x2d/0x690 [ 51.811220][ T288] d_alloc_parallel+0xe5/0x1380 [ 51.816050][ T288] path_openat+0x983/0x2f80 [ 51.820536][ T288] do_filp_open+0x1df/0x400 [ 51.825015][ T288] do_sys_openat2+0x15e/0x7f0 [ 51.829667][ T288] __x64_sys_openat+0x136/0x160 [ 51.834495][ T288] x64_sys_call+0x219/0x9a0 [ 51.838976][ T288] do_syscall_64+0x4c/0xa0 [ 51.843369][ T288] page_owner free stack trace missing [ 51.848712][ T288] [ 51.851015][ T288] Memory state around the buggy address: [ 51.856621][ T288] ffff88810d1bc300: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 [ 51.864658][ T288] ffff88810d1bc380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.872696][ T288] >ffff88810d1bc400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 51.880733][ T288] ^ [ 51.886861][ T288] ffff88810d1bc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.894896][ T288] ffff88810d1bc500: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 51.902928][ T288] ================================================================== [ 51.910961][ T288] Disabling lock debugging due to kernel taint [ 51.918118][ T288] ------------[ cut here ]------------ [ 51.922282][ T789] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 51.924258][ T288] WARNING: CPU: 0 PID: 288 at fs/dcache.c:769 fast_dput+0x207/0x290 [ 51.938997][ T288] Modules linked in: [ 51.942896][ T288] CPU: 0 PID: 288 Comm: syz-executor Tainted: G B W syzkaller #0 [ 51.951726][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.961777][ T288] RIP: 0010:fast_dput+0x207/0x290 [ 51.966802][ T288] Code: e8 f2 ff e9 4e fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fe ff ff 48 89 df e8 33 e8 f2 ff e9 94 fe ff ff e8 49 6b b3 ff <0f> 0b e9 13 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ec fe ff [ 51.986407][ T288] RSP: 0018:ffffc90000a07b60 EFLAGS: 00010293 [ 51.992467][ T288] RAX: ffffffff81b66627 RBX: ffff88810d1bc440 RCX: ffff88811f52bc00 [ 52.000425][ T288] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001 [ 52.008399][ T288] RBP: ffffc90000a07b88 R08: 0000000000000003 R09: 0000000000000004 [ 52.016365][ T288] R10: dffffc0000000000 R11: fffff52000140f5c R12: 00000000ffffff80 [ 52.024339][ T288] R13: dffffc0000000000 R14: ffff88810d1bc498 R15: 1ffff11021a37893 [ 52.032306][ T288] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 52.041222][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.047799][ T288] CR2: 0000200001000000 CR3: 000000000660f000 CR4: 00000000003526b0 [ 52.055770][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.063877][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.071843][ T288] Call Trace: [ 52.075122][ T288] [ 52.078041][ T288] dput+0x26/0x90 [ 52.081670][ T288] incfs_free_mount_info+0x60/0x200 [ 52.086872][ T288] incfs_kill_sb+0x1af/0x210 [ 52.091454][ T288] deactivate_locked_super+0xa0/0x100 [ 52.096823][ T288] deactivate_super+0xaf/0xe0 [ 52.101574][ T288] cleanup_mnt+0x44f/0x500 [ 52.105987][ T288] __cleanup_mnt+0x19/0x20 [ 52.110392][ T288] task_work_run+0x127/0x190 [ 52.115026][ T288] do_exit+0xb70/0x29a0 [ 52.119172][ T288] ? put_task_struct+0x90/0x90 [ 52.123945][ T288] ? __fdget_pos+0x1f7/0x380 [ 52.128522][ T288] ? ksys_write+0x1eb/0x260 [ 52.133019][ T288] do_group_exit+0x149/0x310 [ 52.137599][ T288] __x64_sys_exit_group+0x3f/0x40 [ 52.142619][ T288] x64_sys_call+0x832/0x9a0 [ 52.147109][ T288] do_syscall_64+0x4c/0xa0 [ 52.151508][ T288] ? clear_bhb_loop+0x50/0xa0 [ 52.156180][ T288] ? clear_bhb_loop+0x50/0xa0 [ 52.160843][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.166734][ T288] RIP: 0033:0x7fb7a6613159 [ 52.171132][ T288] Code: Unable to access opcode bytes at RIP 0x7fb7a661312f. [ 52.178485][ T288] RSP: 002b:00007ffd440d44e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 52.186930][ T288] RAX: ffffffffffffffda RBX: 00007fb7a66a951b RCX: 00007fb7a6613159 [ 52.194914][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 52.202891][ T288] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fb7a66a94bb [ 52.210851][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd440d57a0 [ 52.218822][ T288] R13: 00007fb7a66a94bb R14: 000055556e4894e8 R15: 00007ffd440d6870 [ 52.226798][ T288] [ 52.229803][ T288] ---[ end trace 60fcfee2bf49575d ]--- [ 52.252786][ T30] audit: type=1400 audit(1790724423.825:2613): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 52.276216][ T30] audit: type=1400 audit(1790724423.855:2614): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.298532][ T30] audit: type=1400 audit(1790724423.855:2615): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.320426][ T30] audit: type=1400 audit(1790724423.855:2616): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.341250][ T30] audit: type=1400 audit(1790724423.855:2617): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.362033][ T30] audit: type=1400 audit(1790724423.855:2618): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.385195][ T30] audit: type=1400 audit(1790724423.855:2619): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.408452][ T30] audit: type=1400 audit(1790724423.895:2620): avc: denied { read write } for pid=1174 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 52.437612][ T1172] kvm [1171]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x0 syzkaller syzkaller login: [ 52.592188][ T789] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 52.601264][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.622457][ T789] usb 2-1: config 0 descriptor?? [ 52.642596][ T290] usb 6-1: USB disconnect, device number 3 [ 52.753017][ T495] device bridge_slave_1 left promiscuous mode [ 52.759173][ T495] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.766646][ T495] device bridge_slave_0 left promiscuous mode [ 52.772781][ T495] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.780411][ T495] device veth1_macvtap left promiscuous mode [ 52.786479][ T495] device veth0_vlan left promiscuous mode [ 52.962157][ T789] usb 2-1: Cannot read MAC address [ 52.967359][ T789] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 52.976706][ T789] usb 2-1: USB disconnect, device number 9