last executing test programs: 25m40.963555485s ago: executing program 32 (id=148): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 25m39.678431097s ago: executing program 33 (id=168): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="000000004e470000cb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100"], 0x50) 25m23.039145593s ago: executing program 34 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc"], 0x5c}}, 0x0) 25m11.773069149s ago: executing program 35 (id=452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfffd, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000a1", @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 24m43.365805743s ago: executing program 36 (id=789): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xffffffffffffffcd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64], 0x0) 24m8.476375935s ago: executing program 37 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) setreuid(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000340)={0x11, 0x8, 0x80, 0x0, 0x9, 0x200}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000300)='c', 0x1) getsockopt$inet_opts(r5, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0xc00) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000000000)) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r8, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r7, &(0x7f0000000340)="40149c03f2eb", &(0x7f0000001580)=""/223}, 0x20) 23m53.629508548s ago: executing program 38 (id=1323): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x2f, {0x2, 0x0, 0xf, 0x1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x6942, 0xf001, 0x8, 0x1}, 0x40, [0xfffff801, 0xf, 0x3, 0x2, 0x400, 0x9, 0x5, 0x0, 0xb, 0x8, 0x5, 0x6, 0x3, 0x2, 0x5, 0x4, 0x17c6, 0x1, 0x6, 0xffff0000, 0x7, 0x6, 0x10, 0x9, 0x800, 0x7, 0xf, 0x101, 0xc8a, 0x86f2, 0x0, 0x7, 0x5, 0x200, 0xe5b2, 0x0, 0xb, 0x1, 0x7fff, 0x2de, 0x7fffffff, 0x60000, 0x1ff, 0x8, 0x9f9, 0x9, 0x2000000, 0x1, 0x401, 0x200000, 0xfffffffb, 0xfff, 0x200, 0x9, 0x4, 0xfffe00, 0x7, 0x7ff, 0x5, 0x1, 0x6, 0x32cf88e, 0x6, 0x6], [0x5, 0xb4, 0x46, 0x4, 0x200, 0x80000001, 0x80000000, 0x5, 0x3, 0x0, 0x4c3e, 0x8, 0xe4a, 0x9, 0x9, 0x2, 0x101, 0x8, 0x7, 0x101, 0x9, 0x1, 0x8, 0xeb6b, 0x8, 0xe, 0xfffffff7, 0xfffffffb, 0x7ff, 0xfffffff8, 0x2, 0xd, 0x3, 0x10, 0x4, 0x0, 0x8, 0x3, 0x9, 0x3, 0xd, 0x4, 0xfffffffb, 0x5, 0x7ff, 0x8, 0x7ff, 0x8, 0xfffffffc, 0x0, 0x3, 0xb5bc, 0xee2, 0x100, 0x7, 0x7, 0x9, 0x3, 0x4, 0xfcd8, 0x4, 0x9, 0x800, 0x9], [0x7, 0x3ff, 0x7, 0xe2, 0xc, 0x9, 0x3, 0x21b, 0x0, 0x5, 0x4, 0x9, 0x6d74e7fd, 0x7, 0xffffffff, 0x10001, 0xaa, 0x400, 0x80000001, 0xffff, 0x4, 0x6, 0x10, 0xc, 0xc47, 0x0, 0x0, 0x2, 0x4eff, 0xffffff00, 0x10100000, 0xc, 0x9, 0x1e, 0x2, 0x2, 0x3, 0x9, 0x0, 0x5, 0x2, 0xd819, 0xffffffff, 0x1, 0xa00, 0xffff, 0x4, 0x1, 0x6, 0x6, 0x9b, 0x0, 0x5f0d, 0x3f15, 0x5, 0x9, 0x3, 0x2, 0x12f, 0xffffffc0, 0x5, 0x299f, 0x0, 0xd], [0x2, 0x5a1, 0x7, 0x3, 0x8, 0x12, 0x4, 0x2, 0x5, 0x292e, 0x6205, 0x6, 0x1, 0x4, 0xffff, 0x5, 0x81, 0x0, 0x10000, 0x0, 0x7, 0x5, 0x3ff, 0x4, 0x2, 0x74, 0x173, 0xffffffff, 0x8, 0x9, 0xff, 0x2, 0x0, 0x1c00, 0x0, 0x80, 0x0, 0x401, 0xfffff800, 0x10, 0x2cf, 0x6, 0xe5ee, 0x1, 0x8, 0x48, 0x8, 0x6, 0x5, 0x2, 0x401, 0x3, 0x8, 0xad91, 0xffffff5f, 0xf, 0x1, 0x1, 0x4, 0xa6, 0xba, 0x8, 0x5, 0xd]}, 0x45c) 21m15.803277003s ago: executing program 39 (id=2543): signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xed]}, 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@grpid}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@delalloc}, {@stripe={'stripe', 0x3d, 0xb75}}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x180) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000200000f400040000000000000020"], 0x1c, 0x3) 19m43.103029175s ago: executing program 40 (id=3107): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") 19m40.556211027s ago: executing program 41 (id=3115): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe21, 0x0, @remote, 0x9}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000b40)=ANY=[@ANYBLOB="0180c20000002059249b37906ddd600000000008110000000000000000000000ffff0a010100ff02000000000000000000000000000140020e2200089078ab089708360de6ddad257a4bc9a12d27569d67e2c9a3f97361bd4250d8c4c94e53c16192ecd4ba9b6fac9779784596c139d36142b36fd3d030e8ba074f963911eba9cb4b71f74e3ad6259d5867268373fceb4f93ee8f386c9fe990598e1aed7e2ba86a5aec4c9170554901febf70021a6f37fffbf426d93cc1a5e6e373bd6e299462d2e94b47e1b17f798b0e8aa2204aa6feba5b287d855dedfaeeae4abd1b3be293fd6022aae2f3f95b1a8dac4f251d0c"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x4004180, &(0x7f0000001dc0), 0x0, 0x0, 0x0, &(0x7f0000002e40)="5bac1c1964309cfab61034352b2954b9213548679bacc91d9a014f3a54a8016da9f8f52ece6bc6a803cbd8cca137c2db485291558b2e7129a3e3cacb3e5bdc425466f8b2e92947908e569c2aa166ccfb09746e5c1566660cbcc20987922b9f3b2f0373b2df8fbddd08cd79bb740eeae8c3fc3ce38f7549285ce2de97ca14ca3f87") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x1d97f7a3b80b9ca8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xc}, {0x0, 0x2}, {0x18, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="faffffffffffffffdf250f000000080006000c0000000d00060034000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000005) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000002d2233ab5f8a5b99618502e6551a97481217fee0b914d4a1e6714454b342ee187495628d45ba2f90bf9f1d1deea1a94140ccfaa26dc932a36ae33de528d14443348b92516b4ad045", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff0400"/28], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x6, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/20, 0x14}, {&(0x7f0000000700)=""/107, 0x6b}, {&(0x7f0000000780)=""/162, 0xa2}, {&(0x7f0000000840)=""/168, 0xa8}], &(0x7f0000000980)=[0x2, 0x4], 0x5}, 0x20) bind$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796124bd7000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="49939b24678380c8f5c34f2c745c365ead0846c60e4519778055b4805c5a4ec31a967f70cff0961171e1bd6a83fc02104fb1c879c574271111537f559b2078ecd80045442f3ef84dec2a5b115f3fa13b370243b7615994ff963296e2082c4a48c6acffba56f9d86d757f33e8df86c8f507c92989ed8dbf7b3ee900a107cbba85d8376cf60aa00163e3417c3f0bc3ddaa93593273973543c957df66b1df80a220e39b7e0e9420f0a61dc5b0c71952f3fa392aa9007a17f852760babedafeedf119ecef6d476ee845f0415054819586cee856c801f154576c18a8e40eb02a0fc4fed3e8faf474c25551f0f799ee445c96d4fac50c2"], 0x1c}}, 0x4000054) 17m37.393646555s ago: executing program 42 (id=3870): fsopen(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c000280050001fc840000002c00018014000300fe80000000000000000000000000002f140004000000000000000000000000000000000114ea018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980080002"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 16m46.61131763s ago: executing program 43 (id=4257): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) 16m12.786159499s ago: executing program 44 (id=4289): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="02050b070e00000029bd70000000000005000600000000000a004e2400000000fc01fcffffff000000ff800000000001600000000000000002000100ffffff7eb10001010000000005000500fe00000002"], 0x70}}, 0x484) 15m47.422100151s ago: executing program 45 (id=4430): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406d04900940000102030109028e000301ffc010080b0002010130070904000000010130000a2401102a0007000000132403ffe20506060203"], 0x0) 15m37.069016874s ago: executing program 46 (id=4459): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x500}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 13m53.651806789s ago: executing program 1 (id=5259): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 13m53.61263962s ago: executing program 47 (id=5259): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 13m51.918912722s ago: executing program 48 (id=5277): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$midi(0x0, 0x58, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x18, 0x98, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [@ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @midi_out_jack={0x7, 0x24, 0x3, 0x2, 0x88, 0x0, [], 0x4f}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x6, 0x80}], [{{0x9, 0x5, 0x5, 0xb, 0x20, 0xf, 0xd7, 0x2, {0x9, 0x25, 0x1, 0x5, "3d1813da06"}}}, {{0x9, 0x5, 0x8c, 0x2, 0x20, 0x6d, 0x7, 0x80, {0x5, 0x25, 0x1, 0x1, "05"}}}]}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000022c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r2 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="587dfd", 0x3, 0xfffffffffffffffb) request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r2) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 13m37.069616305s ago: executing program 49 (id=5360): pipe2(&(0x7f0000001cc0), 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x14}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) syz_io_uring_complete(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{0x0}], 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$eJzs3U9oHFUYAPBvO5vdpFCTg1AUhNGboKGNeNBTQkmhmIvK4p+DuNhUJYmFLC6mh2zjRTwKHtWLNw967FkERbx58GoFqYoH7a1gcWR3ZrOz2c02Fba1+Psdhi/vvW/f93aHZDLJvn11OTbOz8SF69evxexsJarLZ5bjRiUWIom+yzGqNqYNALg33Miy+DPLHTGl0j0sTLcsAGCKej//Xz9Rann360njs8r0awIApqv4/X9u0pjZwzouTqUkAGDKRu7/PzLUXRv+U3+19F8BAMC96vmXXn5mZS3iuTSdjdh6r91oN+LpQf/KhXgzNmM9TsV83IzILxS6h0rvePbc2uqpNE078ctCNLoZ7UbEVqfdyK8UVpJefj1Ox3wsFPnF1UaWZcnZTyIi7YmIy53e/LFVaTdm4ngx/4/HYz2WIo37R/Ijzq2tLqXFAzS2+vmdiL3BfYtu/YsxH9+/FhdjM85HN7d/WbO2uns6Tc9ka0P57Ua9Ny536B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTfQv7+99kg/17FhfH9Pf2x8nzi/2B9vL9gbJ6Fln2xzuPN95PYmh/oIP787Qb1Th2d5cOAAAAAAAAAAAAAAAAAAAA/xmtnVo0NzfXt1s7lzbKQWe7tXMsIrotb337+VdzMTrmFkG1mKPUlRZNlzaaWdIfnCVDY4og6U7eb/nsyn7F5TH1/VWMLaOedx2LcRWeePjnjwYtDyX9R/57MCaJ8QtMDpRRDrbuy0u6nSdqP1i6xZirWZYdlr77ymhWVCKqt//CTQ5mu8/qN9feeOCJ1skney1fZrlHH5t/4eqHn/620dzszhy9V7C23bqZbTSLr8efbIcHSen8qUQeVMpnQnVS+t5wSzP54fcXH/zgu6PNnpVb3h4zJsmX88XBrloedMs80DU3bq6ZMSf/FIKTHy83r+z+9OtRs0rfJGzUAQAAAAAAAAAAAAAAAAAAd0TpveKF4s2+M5Oynnp2+pUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ0z+Pz/UrA30nKU4K9OjHbV17dbEbW7vUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7n/gkAAP//YA9qrg==") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) 13m35.143572962s ago: executing program 50 (id=5368): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0xa) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x340000c0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="611228000000000061131400003f0000bf1000000000000025000200091bb0ff3d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 13m20.57990832s ago: executing program 51 (id=5409): syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x40, 0x800}, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x8, 0x4200) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) ioctl$TIOCGICOUNT(r0, 0x5409, 0x0) 13m14.941642868s ago: executing program 52 (id=5455): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80) userfaultfd(0x801) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x30}}, 0x10) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 13m13.23331859s ago: executing program 53 (id=5468): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010207, 0x0, 0xc}]}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) modify_ldt$write2(0x11, &(0x7f0000000580)={0x3ff, 0x20000800, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000300)=0x455e, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000040)=0xfffffffe, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) dup2(r7, r0) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13m12.848559779s ago: executing program 1 (id=5457): syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x1018ed8, &(0x7f0000000040)={[{@sysvgroups}, {@noblock_validity}, {@nogrpid}, {@debug}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb}}, {@noauto_da_alloc}]}, 0x6, 0x62b, &(0x7f0000001140)="$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") r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000012c0), 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 13m12.599681255s ago: executing program 1 (id=5472): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs_dir/trace\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 13m12.578803836s ago: executing program 1 (id=5474): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r1, 0xfff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x80, 0xe5976e533d4f073e, 0x5c8e, 0x64}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x46}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x2, 0x0, 0x3, 0x1, 0x2002, 0x2}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/17, 0x11}, 0x400}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000080)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) pipe2(&(0x7f0000000040), 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000080)=@unlock_all, 0xb) 13m12.246395194s ago: executing program 1 (id=5478): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$9p(r0, &(0x7f0000004700), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) mkdir(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0xfffffffffffffffe) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000600)={0x0, 0xe, 0x73, 0x1}) 13m11.98729861s ago: executing program 1 (id=5479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000006c0000000000ff02000000000000000000000000000100000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 13m11.898434712s ago: executing program 54 (id=5479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000006c0000000000ff02000000000000000000000000000100000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 9m51.970618372s ago: executing program 5 (id=6731): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000002000000000ff02000000000000000000000000000100000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 9m51.727822648s ago: executing program 5 (id=6733): syz_usb_connect(0x3, 0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002d9993b20e5130100842501020301090244000105072000090458c000a5"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000000000001e0000000c00018008000100", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x2, 'nr0\x00', {0x400}, 0x8}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x5, r4, 0x4}, 0xc) 9m49.401375836s ago: executing program 5 (id=6756): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 9m48.512075067s ago: executing program 5 (id=6765): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10040, &(0x7f0000000200), 0xfe, 0x26f, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18181, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, 0x0, 0x0) dup2(r5, r4) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) 9m47.323800396s ago: executing program 5 (id=6774): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60000000004d060100000000000000000000000000000000fe80000000000000ff000000000000aa04004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2"], 0x0) 9m46.927588126s ago: executing program 5 (id=6780): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 9m46.914497867s ago: executing program 55 (id=6780): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 7m42.71151136s ago: executing program 8 (id=7804): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40800, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x10046, 0x0) epoll_create1(0x80000) r1 = eventfd2(0x74a6, 0x0) writev(r1, &(0x7f0000001780)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000070c0)={&(0x7f0000006200)={0x50, 0xffffffffffffffda, 0x9, {0x7, 0x2d, 0x1, 0x6000040, 0x1, 0x2005, 0x8, 0x8, 0x0, 0x0, 0x10, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f0000060003000100"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 7m41.476042521s ago: executing program 8 (id=7815): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0xa) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x340000c0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 7m40.217438272s ago: executing program 8 (id=7823): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000085000000a0", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f809ffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r3, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) syz_emit_ethernet(0x50, &(0x7f0000000500)=ANY=[@ANYBLOB="33330000000100112233445586dd60000000001a0040fe800000000000000000000000000001ff0200000000000000000000000000013b02010031"], 0x0) 7m40.158051313s ago: executing program 8 (id=7824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x8005) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x101) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x7}, 0x1c) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040), 0x0) write$binfmt_elf64(r4, &(0x7f0000000300)=ANY=[], 0xfffffdcf) connect$unix(r4, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs_dir/trace\x00', 0x0, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002980)={{0x0, 0x3c02e9a9, 0x6, 0x7fffffff, 0x8000000000000001, 0x6, 0x7ff, 0xe0, 0xfffffff7, 0x1, 0x3, 0x6, 0x7, 0x8, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000003980)={{r5, 0x1001, 0x401, 0x6, 0x7, 0x100000001, 0x4b6, 0x72, 0x7, 0x9932, 0x7ff, 0x6, 0x1, 0xcb61, 0xce96}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x43, &(0x7f0000000200)=0x7, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) 7m38.847003685s ago: executing program 8 (id=7834): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000085000000a000000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f809ffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r3, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) syz_emit_ethernet(0x50, &(0x7f0000000500)=ANY=[@ANYBLOB="33330000000100112233445586dd60000000001a0040fe800000000000000000000000000001ff0200000000000000000000000000013b02010031"], 0x0) 7m38.696017659s ago: executing program 8 (id=7838): add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="bdf98c", 0x3, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x6, 0xf1, 0xfffff01c}, {0x6, 0x6, 0xfe, 0x1057c}]}, 0x10) add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="bdf98c", 0x3, 0xfffffffffffffffe) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x6, 0xf1, 0xfffff01c}, {0x6, 0x6, 0xfe, 0x1057c}]}, 0x10) (async) 7m38.695939839s ago: executing program 56 (id=7838): add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="bdf98c", 0x3, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x6, 0xf1, 0xfffff01c}, {0x6, 0x6, 0xfe, 0x1057c}]}, 0x10) add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="bdf98c", 0x3, 0xfffffffffffffffe) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x6, 0xf1, 0xfffff01c}, {0x6, 0x6, 0xfe, 0x1057c}]}, 0x10) (async) 7m26.047803009s ago: executing program 9 (id=7930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000180)={0x7, 0x0, [{0x40000001, 0xfffffffb, 0x2, 0x40, 0x3, 0x1, 0x3}, {0xc0000001, 0x6, 0x1, 0x7fff, 0x4, 0x9, 0x3a6a}, {0xc0000001, 0x8, 0x3, 0x3, 0x1, 0x6, 0x50}, {0xb, 0x7f, 0x5, 0xffff56ca, 0x5, 0x6, 0x1}, {0xb, 0x3, 0x4, 0x5, 0x7, 0x4d11f0b, 0x6}, {0x40000001, 0x9, 0x0, 0x6, 0x0, 0x1, 0x1}, {0x1, 0x480000, 0x6, 0x9, 0x180, 0x4000, 0x9}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0xffffffffffffffff, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x480, 0x348, 0x348, 0x0, 0x240, 0x240, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@socket0={{0x20}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@loopback, @multicast2, 0xff, 0xff000000, 'veth1\x00', 'wg1\x00', {}, {0xff}, 0x6, 0x1, 0x16}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0xffff, 0xc2], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @local, 0xffffffff, 0xffffff00, 'pimreg1\x00', 'ip6gre0\x00', {}, {0xff}, 0x21, 0x1, 0x10}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xff, 0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, 0xffffffff, 0xff, 'veth1_to_bond\x00', 'veth1_to_bridge\x00', {}, {}, 0x11, 0x2, 0x40}, 0x0, 0xd8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@set={{0x40}, {{0x1, [0x5, 0x1, 0x1, 0x4, 0x2, 0x4], 0x1, 0x4}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffff, 0x5, @empty, 0x4e24}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2e}, @local, 0x0, 0xff, 'batadv_slave_1\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x0, 0x0, 0x4c}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x1, @dev={0xac, 0x14, 0x14, 0x29}, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) 7m24.656023793s ago: executing program 9 (id=7938): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x5a, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100b}, @flat=@handle={0x73682a85, 0x100, 0x2}, @flat=@handle={0x73682a85, 0x1001, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @register_looper, @free_buffer], 0x0, 0x0, 0x0}) 7m24.632193644s ago: executing program 9 (id=7940): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x3, 0x27b, &(0x7f0000000640)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r1, @ANYBLOB="14000200ff230000000000000000000200000001140006000000000006"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000480)=ANY=[@ANYBLOB="12011001000000401e0400304000010203010902860003018052575297a702ab170776a00e080b0101010a207600de11240806420000000000000300010003000c2403fd0405a80406f9ff2209040100008a0e7f71be9963780101022000090501094000050420d63949010909020009040200000102200009040201010102200009058209ff03090402082501023c0a0210fe04000000000000000000000000000000008335cd23323c21f335081d082dcbbe85e63f41725c373d58c9514f9698df7f46158d6e8bb82528c551a9"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xfb, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x7, 0x30, 0xe, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "ed0f"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x100, 0x3, 0x4}, {0x6, 0x24, 0x1a, 0xa225, 0x15}, [@acm={0x4, 0x24, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x9, 0x1c, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @dmm={0x7, 0x24, 0x14, 0x6, 0xffff}, @country_functional={0xc, 0x24, 0x7, 0xa8, 0x0, [0x8, 0x0, 0x5]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0xe, 0xfb}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x7f, 0x6}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x5, 0xb, 0xf5, 0x40, 0x9}, 0x13, &(0x7f0000000600)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x52, 0x5, 0x5, 0x81b1, 0x1}]}, 0x4, [{0x75, &(0x7f00000008c0)=@string={0x75, 0x3, "e32fe421535157f117ba393ccdcdf5d445f7e8560b27a33162101dbb7e391f62095423ed2e7897a537fd7266e5c9549a1a09242530d051f7f2e3f80ce179340fd43844a09cafe448bac63752c0d6aff67a2ac5186902d208dc67d995618ea84274b64d0c2944475f85ace6b5113fa37be62988"}}, {0xb6, &(0x7f0000000940)=@string={0xb6, 0x3, "2d2e4a4ffd2a382e28c9d6618992004a79c066cf093d97e6adf400942bfd6949490a477610a41eb1368eaf2a6291846cf5b8bbed29e9cfc7ffd02f8bf8c7c1f5771dae593605d0fa59fd4add0fcfbe80effead636261d9428f4f5e7bc0abe29439a4c0ad9d70a988aedebb91bc5bc625cf5f47bd780fa20b31c746b1b8e85e0622dc8c998fb294255a42b1bd64a2566b63b60653588a356a9934d80adc2f80b6abb07aee9208c23632a60710d4befb424f659366"}}, {0x49, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x445}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 7m21.189553228s ago: executing program 9 (id=7961): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4d1, &(0x7f0000000bc0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4d1, &(0x7f0000000bc0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, 0x0}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, 0x0}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000080000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fallocate(r2, 0x0, 0x1, 0x8ffff) (async) fallocate(r2, 0x0, 0x1, 0x8ffff) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x4000) io_setup(0x8, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x40) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x40) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.\x00\x00\x00\t \x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="537becbe9fc138f2f3d1a1ef7c35830f11991a2e460869a96ea32871", @ANYRES64=0x0], 0x20) 7m20.776021438s ago: executing program 9 (id=7963): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000480)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001"], 0x1c, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) setresuid(0xee00, 0xee01, 0xee01) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042bbd70866f3232399c804cf93427b5f3a300ffdbdf2530000000060036000000000006003640360000000600360007000000060036003b0000000600360028000000"], 0x3c}}, 0x20008000) 7m19.839328841s ago: executing program 9 (id=7975): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX], 0xc1, 0x1527, &(0x7f0000001980)="$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") open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x34}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000400)="0f208066b9800000c00f326635000800000f30f30f1ee43e64660f2e3a670fb3ab0c00000066b93e0300000f32a26e003e663e262282079e0f0db1396a66b9800000c00f326635000100000f30", 0x4d}], 0x1, 0x15, &(0x7f0000000680)=[@cr4={0x1, 0x352221}], 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(0x0, 0x0) r7 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000200db04b79391d1d142c446c9dfd5c0aa04010000000000000000000500000a14000000f9"], 0x28}}, 0x24040020) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) socket(0x10, 0x3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x1, 0x4000010, r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 7m19.838535541s ago: executing program 57 (id=7975): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX], 0xc1, 0x1527, &(0x7f0000001980)="$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") open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x34}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000400)="0f208066b9800000c00f326635000800000f30f30f1ee43e64660f2e3a670fb3ab0c00000066b93e0300000f32a26e003e663e262282079e0f0db1396a66b9800000c00f326635000100000f30", 0x4d}], 0x1, 0x15, &(0x7f0000000680)=[@cr4={0x1, 0x352221}], 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(0x0, 0x0) r7 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000200db04b79391d1d142c446c9dfd5c0aa04010000000000000000000500000a14000000f9"], 0x28}}, 0x24040020) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) socket(0x10, 0x3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x1, 0x4000010, r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 7m1.595287568s ago: executing program 7 (id=8121): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x35c487fb5553c37a}, @flat=@weak_binder={0x70742a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x1001, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7m1.490541391s ago: executing program 7 (id=8124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x70742a85, 0x1001, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7m0.995706383s ago: executing program 7 (id=8125): openat(0xffffffffffffff9c, 0x0, 0x40800, 0x10) writev(0xffffffffffffffff, &(0x7f0000001780), 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x6700000000000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f0000060003000100"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 7m0.918642535s ago: executing program 7 (id=8127): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x78) (async) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x78) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x0, 0x50f, &(0x7f0000000dc0)="$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") prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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") open(&(0x7f0000000100)='./file1\x00', 0x14b042, 0x8c) (async) open(&(0x7f0000000100)='./file1\x00', 0x14b042, 0x8c) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) (async) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x7e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x3, 0x4002) (async) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x3, 0x4002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) (async) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) 6m57.772080992s ago: executing program 7 (id=8149): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000004c0)="f11f315c11008ebe3ef93c03d8a0f01009d760e2467d6e1d3a1e42e704ab9e326b3e5fd5ee8c437b72ab8085be80441ff9fed05527b627921a9620af0161b3fc67b2d7ca4ffae67e116f2078e8c0a73e44f015dfefb865493a92360165403b534b42db2f15935d51399e020fdb", 0x6d) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x19, "b0bfac0000000003000018bfff4000"}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000011}) r2 = syz_open_pts(r0, 0x200) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xff) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)) 6m57.591954626s ago: executing program 7 (id=8150): openat(0xffffffffffffff9c, 0x0, 0x40800, 0x10) writev(0xffffffffffffffff, &(0x7f0000001780), 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x6700000000000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f0000060003000100"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 6m57.547344058s ago: executing program 58 (id=8150): openat(0xffffffffffffff9c, 0x0, 0x40800, 0x10) writev(0xffffffffffffffff, &(0x7f0000001780), 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x6700000000000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f0000060003000100"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 5.542300875s ago: executing program 4 (id=9923): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001000)=0x2, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66, 0x0, 0x2f}]}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42042, 0xdea1a290e97695ad) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) pwritev2(r2, &(0x7f00000000c0), 0x0, 0x7ff, 0x7d, 0x5) r5 = fsmount(r2, 0x1, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x408, 0x0) 5.280764271s ago: executing program 0 (id=9925): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc', 0x9) 5.217712043s ago: executing program 0 (id=9926): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0xa, @private1, 0x8}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.217228863s ago: executing program 2 (id=9927): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) socket$nl_route(0x10, 0x3, 0x0) 5.151997644s ago: executing program 4 (id=9928): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005140)=@newtfilter={0x30, 0x2c, 0xd27, 0x11, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) keyctl$set_reqkey_keyring(0xe, 0x3) rt_tgsigqueueinfo(r0, 0x0, 0x33, &(0x7f0000000240)={0x15, 0x3, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffc}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x448, 0x73}}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1800000, 0x14}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.151792834s ago: executing program 2 (id=9929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005140)=@newtfilter={0x30, 0x2c, 0xd27, 0x11, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) keyctl$set_reqkey_keyring(0xe, 0x3) rt_tgsigqueueinfo(0x0, 0x0, 0x33, &(0x7f0000000240)={0x15, 0x3, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') readlinkat(r6, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, r8, 0x1, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffc}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) 4.309181065s ago: executing program 0 (id=9932): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$9p(r0, &(0x7f0000004700), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) (fail_nth: 27) mkdir(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0], 0x3, 0x23d, &(0x7f0000000300)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0xfffffffffffffffe) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000600)={0x0, 0xe, 0x73, 0x1}) 4.147761699s ago: executing program 2 (id=9933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) clock_gettime(0xfffffffffffffff6, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf2509000000050033000100000008003400c56dffff08002b00000001000500330002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x82, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2b53, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7, 0x40, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x6, 0x9, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x8, 0x9, {0x8, 0x25, 0x1, 0x0, 0x0, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4f8, 0xd6, 0x80, 0x9, {0x8, 0x25, 0x1, 0x82, 0x30, 0x8, 0x9}}}}}}}}]}}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200acfe18445b796ea643ee1c1875274f7b9bdfa86448557b1c2bf153edc0721acd42a11e487ce3df60b6b4a0af78a1b4d34e1d3e15fc13328fbf87129735a39bd77670e9b69af385856cc2d683fb8a52ed7a32db4967eb85eeeb226233"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0)={[{@gid}, {@utf8}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@utf8}, {@namecase}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") r6 = socket$unix(0x1, 0x1, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xce, &(0x7f0000000500), &(0x7f0000000540)=0x4) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x2, 0x0) 3.319774999s ago: executing program 0 (id=9935): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40c82, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0xed8}}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x800000100000000}}, {@norecovery}, {@resgid}]}, 0xff, 0x466, &(0x7f0000000b80)="$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") pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1f, 0xffffff01, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)={[{@test_dummy_encryption}, {@dioread_nolock}]}, 0x2, 0xbce, &(0x7f0000001000)="$eJzs3M9rHNcdAPDvjFZryVa7ciml7qUqpdhQupZcZGpTqFxceumh0F4LFvLKCK1/IKk4knVYJf9ASHIO5BJIYhJyiM++xCTXXBL7mpBDwATFSiCERGH2h7S2tLJs72oU+/OBt/vevJl93+8Ou/Me7GwAz6yR7CGNOBIR55KIUnN7GhHFem0gotbYb211eeqb1eWpJNbX//NlEklE3Ftdnmq9VtJ8PtRsDETER39P4hcvbB13fnFpdrJarcw128cXLl45Pr+49KeZi5MXKhcql8ZO/mX8xPjJ0VPjXcv1208nbnz9u39+Xvvuze+vf/Xy60lMxFCzrz2PbhmJkY33pF0hIia7PVhO+pr5tOeZFB5yUNrjoAAA6Chtm8P9KkrRF5uTt1K8/3GuwQEAAABdsd4XsQ4AAAA85RLrfwAAAHjKtX4HcG91eapV8v1Fwt66eyYihhv5rzVLo6cQtfrzQPRHxMF7SbTf1po0DntiIxHx2Z1T72QlenQf8k5qKxHx6+3Of1LPf7h+F/fW/NOIGO3C+CMPtH9K+U90Yfy88wfg2XTzTONCtvX6l27Mf2Kb619hm2vX48j7+tea/61tmf9t5t/XYf73712Oce2NV6926svy/+uNf7zdKtn42fMTJfUI7q5E/KawXf7JRv5Jh/zP7XKM0g9XK5368s5//bWIo7F9/i3Jzv9PdHx6ploZbTxuO8bKh+NvdRo/7/yz83+wQ/6t/3/qdP6v7HKM/509++6WjXc2qzvnn35RTP5brxWbW56bXFiYG4soJv/auv3EzrG09mm9Rpb/sd/v/PnfLv/sO6HW1l5prgmyfZ9/YMy/Xb/2Xqd4Wuu/PM//+Q7nvz3/Dwpbz/+LuxzjD7deOtapr339m5Vs/NZaGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa0ogYiiQtb9TTtFyOOBQRv4yDafXy/MIfpy///9L5rC9iOPrTwYgYjYhSo51Mz1QrY/X6ZvvEA+0/R8ThiHilNFhvl6cuV8/nnTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbDkXEUCRpOSLSiFgrpWm5nHdUAAAAQNcN398s5hUHAAAA0DvDeQcAAAAA9Jz1PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD12+Lc3bycRUTs9WC+ZYrOvP9fIgF5LH+uoia7HAey9vrwDAHJTyDsAIDePuMY3XYCnUPKQ/oGOPQe6HgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+9fRIzdvJxFROz1YL5lis68/18iAXkvzDgDITd9OnYW9iwPYez7i8OyyxgeSh/QPbO5Tu7/nQM9iAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaqXJC1HRLG5rVyO+FlEDEd/Mj1TrYxGxM8j4pNS/4GsPbZx9EBucQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBd84tLs5PVamUuq6TRrGxsUdmsJI13rLZf4lF5wkox9kUYe1O5FY94VN7fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5GF+cWl2slqtzM3nHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQt/nFpdnJarUy18NK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfHwMAAP//GNEJCQ==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) setpriority(0x2, 0x0, 0xd2f4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.104085384s ago: executing program 4 (id=9938): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc', 0x9) 2.87510241s ago: executing program 4 (id=9941): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x44080, 0x0) unshare(0x42000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') read$ptp(r2, &(0x7f00000010c0)=""/133, 0x85) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="0004000e80"], 0x2c}, 0x1, 0x0, 0x0, 0x44801}, 0x8840) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)={0x80, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x40032}}}}, [@NL80211_ATTR_TX_RATES={0x58, 0x10d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff, 0x95, 0x9f5, 0x2, 0x2, 0xfff7, 0xa927]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x5, 0xc, 0xb, 0x18, 0x3a513074e4d669b4, 0x16, 0x3, 0x48, 0x6c, 0x16]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0x6c, 0x3, 0x24, 0x36, 0x30, 0x2, 0x6c, 0x16, 0x4, 0x2, 0x9, 0x48, 0x24, 0x60, 0x4, 0x4, 0x30, 0x36, 0x12, 0x60, 0x30, 0x16, 0xb, 0x24, 0x36, 0x36, 0x2, 0x1b]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040065}, 0x4008000) socket$inet6_udp(0xa, 0x2, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x33080108}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x20000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(r9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r10, 0xffffffffffffffff, 0x60000000}, 0xc) write$P9_RUNLINKAT(r1, &(0x7f0000000180)={0x7, 0x4d, 0x2}, 0x7) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000400)={0x1, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000480)=@generic, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/18, 0x12}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/23, 0x17}, {&(0x7f0000000d80)=""/60, 0x3c}], 0x6, &(0x7f0000000e40)=""/185, 0xb9}, 0x40012060) 2.003916321s ago: executing program 2 (id=9944): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005140)=@newtfilter={0x30, 0x2c, 0xd27, 0x11, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) keyctl$set_reqkey_keyring(0xe, 0x3) rt_tgsigqueueinfo(r0, 0x0, 0x33, &(0x7f0000000240)={0x15, 0x3, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffc}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x448, 0x73}}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1800000, 0x14}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.907553203s ago: executing program 3 (id=9945): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfc}], 0x0, 0x0, 0x0}) 1.841658295s ago: executing program 3 (id=9946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="e1", 0x1, 0x200080c1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x8000) sendto$inet6(r0, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e) (fail_nth: 1) 1.775981337s ago: executing program 6 (id=9947): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10040, &(0x7f0000000200), 0xfe, 0x26f, &(0x7f00000002c0)="$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") (async) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x800, 0x20, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) getdents64(r0, &(0x7f0000000940)=""/229, 0xe5) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x100000029) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) inotify_rm_watch(r3, 0x0) (async) r4 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}, @wr_drn={0x68, 0x20, {0x0, 0x1}}], 0x40}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000140)={0x10001}) (async) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000001a40)={[{@gid}, {@dmask={'dmask', 0x3d, 0x7}}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@namecase}, {@utf8}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x80000000}}]}, 0x1, 0x154a, &(0x7f0000000400)="$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") (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_kvm_assert_syzos_kvm_exit$x86(r7, 0x6) (async) syz_kvm_assert_syzos_uexit$x86(r5, r7, 0xffffffffffffffff) 1.772757097s ago: executing program 6 (id=9948): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='\n', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.565506232s ago: executing program 6 (id=9949): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='\n', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.344776067s ago: executing program 6 (id=9950): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.', 0xa) 1.311972558s ago: executing program 0 (id=9951): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.', 0xa) 1.311786648s ago: executing program 4 (id=9952): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) socket$nl_route(0x10, 0x3, 0x0) 1.310434638s ago: executing program 6 (id=9953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x8000000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 870.622998ms ago: executing program 2 (id=9954): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 819.96236ms ago: executing program 3 (id=9955): r0 = socket(0x10, 0x3, 0xfa26) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) clock_nanosleep(0x2d8cc440f83be85b, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r1, &(0x7f0000000040)='lo\x00', 0x100, &(0x7f00000000c0)={@_ha_fsid={[0x65, 0x10]}, {0x2, 0x8, 0x4, 0x2}}, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) ioctl$KDENABIO(r6, 0x4b36) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000280)={'veth1_to_bond\x00', {0x2, 0x4e22, @loopback}}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = open$dir(&(0x7f0000000200)='./file0\x00', 0x432400, 0x8) openat(r8, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r9, 0x0, 0x59b, 0x4000, &(0x7f0000000940)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f00000006c0)="9c01bd6f9a6028c80d7364240f0700000000000000c565f0c7ac65dd4a0fadceb6c65dcb07f2421e69087e0f0700000000000000722709c46bef17c4cb9aed9fb1c342179ea3496361ccedfdb9ace43b54fa7516c64f6a4aa330b0870715169d054a78e0f38089ca5dfd878405265d5fc19365633436571ad49c85f8024a7a85a30c9094b986548e876736175d0c1e7cf4eb7ba63055ddf1b750f9a870161c6cfcde0d78700f3426f563dea457197237337448e430c6f90f8275cd4fb4ac203c9694d88e9b583829e8697aacf38ebfc7ec26f20061cfd8f676cbcaabd3efb063b8a637232c04263241b54d5d3c", &(0x7f0000001a40)="2c5b483103067e8a9bd26ffbe3489cf5aa50b1367c3de2b1d1cdc219274a5a514f852161bc4015e7564b08584290c5", 0x1}, 0x22) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff}}}, 0x24}}, 0x0) 720.763242ms ago: executing program 4 (id=9956): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='\n', 0x1) 687.530803ms ago: executing program 3 (id=9957): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfc}], 0x0, 0x0, 0x0}) 636.312664ms ago: executing program 3 (id=9958): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0xfc}], 0x0, 0x0, 0x0}) (fail_nth: 5) 119.141277ms ago: executing program 2 (id=9959): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='\n', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 57.085768ms ago: executing program 3 (id=9960): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write(r0, &(0x7f0000000080)='4', 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x0, 0x58, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x18, 0x98, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [@ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @midi_out_jack={0x7, 0x24, 0x3, 0x2, 0x88, 0x0, [], 0x4f}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x6, 0x80}], [{{0x9, 0x5, 0x5, 0xb, 0x20, 0xf, 0xd7, 0x2, {0x9, 0x25, 0x1, 0x5, "3d1813da06"}}}, {{0x9, 0x5, 0x8c, 0x2, 0x20, 0x6d, 0x7, 0x80, {0x5, 0x25, 0x1, 0x1, "05"}}}]}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000fc0)=[@register_looper], 0x0, 0x0, 0x0}) 54.394298ms ago: executing program 6 (id=9961): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x44080, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x2, 0x1000, 0x20, 0x0, 0x2000, 0x0, 0x0}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x4, 0x2, 0x1}) 0s ago: executing program 0 (id=9962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000003000000ef05000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0x2248, r1}, 0x38) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704001d3fcb91beb4c211c50000160000850000000300000085000000500000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8033, &(0x7f0000000000)={[{@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4ff, &(0x7f00000000c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd2d, 0x25dfdbfd, {0x2, 0x18, 0x40, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0xbb, 0x6, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x800) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, r5, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) kernel console output (not intermixed with test programs): utes in process `syz.4.9416'. [ 1490.100962][T27508] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1490.151219][T27922] overlayfs: overlapping lowerdir path [ 1490.255324][ T9364] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.293632][ T9364] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1490.370902][ T9364] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1490.387176][ T318] usb-storage 4-1:0.127: USB Mass Storage device detected [ 1490.397245][T27908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9416'. [ 1490.402751][ T9364] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.406562][ T318] usb-storage 4-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1492.055300][ T9364] usb 7-1: config 0 descriptor?? [ 1492.111388][T27931] loop3: detected capacity change from 0 to 128 [ 1492.121290][ T318] usb 4-1: USB disconnect, device number 49 [ 1492.631567][ T9364] playstation 0003:054C:0DF2.0052: unknown main item tag 0x0 [ 1492.698202][ T9364] playstation 0003:054C:0DF2.0052: unknown main item tag 0x0 [ 1492.715922][ T9364] playstation 0003:054C:0DF2.0052: unknown main item tag 0x0 [ 1492.723367][ T9364] playstation 0003:054C:0DF2.0052: unknown main item tag 0x0 [ 1492.799762][ T9364] playstation 0003:054C:0DF2.0052: unknown main item tag 0x0 [ 1492.884088][T27944] loop3: detected capacity change from 0 to 40427 [ 1492.892539][ T9364] playstation 0003:054C:0DF2.0052: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 1492.914610][T27944] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1492.922623][T27944] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1492.931957][T27944] F2FS-fs (loop3): invalid crc value [ 1492.939591][T27944] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1492.976601][T27944] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1493.001771][T27944] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1493.055802][ T9364] playstation 0003:054C:0DF2.0052: Invalid byte count transferred, expected 20 got 0 [ 1493.077279][ T9364] playstation 0003:054C:0DF2.0052: Failed to retrieve DualSense pairing info: -22 [ 1493.086707][ T9364] playstation 0003:054C:0DF2.0052: Failed to get MAC address from DualSense [ 1493.095706][ T9364] playstation 0003:054C:0DF2.0052: Failed to create dualsense. [ 1493.107393][T27962] loop0: detected capacity change from 0 to 512 [ 1493.115817][ T9364] playstation: probe of 0003:054C:0DF2.0052 failed with error -22 [ 1493.141587][T27962] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1493.454237][T27972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9430'. [ 1493.690904][ T8538] android_work: sent uevent USB_STATE=DISCONNECTED [ 1493.697837][ T8538] usb 1-1: USB disconnect, device number 88 [ 1494.657119][T27985] overlayfs: failed to resolve './file1/file0': -2 [ 1494.717296][T27748] usb 7-1: USB disconnect, device number 77 [ 1494.753966][T27995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9437'. [ 1494.763470][T27992] loop3: detected capacity change from 0 to 1024 [ 1494.832841][T27998] loop4: detected capacity change from 0 to 512 [ 1494.841469][T27992] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 1494.904433][T27992] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.3.9435: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1494.935292][T27992] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 1494.944935][T28006] loop0: detected capacity change from 0 to 512 [ 1494.945258][T27992] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #2: comm syz.3.9435: Deleting old file: nlink 1, error=-117 [ 1494.957012][T27992] 9pnet: Insufficient options for proto=fd [ 1494.984127][ T9364] android_work: did not send uevent (0 0 0000000000000000) [ 1495.026407][T28006] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1495.094087][T28006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9441'. [ 1495.205038][T27748] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 1495.238101][T28018] 9pnet: Insufficient options for proto=fd [ 1495.337116][T27998] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1495.345405][T27998] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1495.535083][T27748] usb 7-1: not running at top speed; connect to a high speed hub [ 1495.606660][ T20] android_work: did not send uevent (0 0 0000000000000000) [ 1495.645105][T27748] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 214, changing to 4 [ 1495.665099][T27748] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1272, setting to 1023 [ 1495.835069][T27748] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1495.844166][T27748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.860721][T27748] usb 7-1: Product: syz [ 1495.864930][T27748] usb 7-1: Manufacturer: syz [ 1495.869870][T27748] usb 7-1: SerialNumber: syz [ 1495.948557][T28030] loop3: detected capacity change from 0 to 512 [ 1495.980122][T28030] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1496.000482][T28030] FAULT_INJECTION: forcing a failure. [ 1496.000482][T28030] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.024582][T28030] CPU: 0 PID: 28030 Comm: syz.3.9448 Tainted: G W syzkaller #0 [ 1496.033576][T28030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1496.043737][T28030] Call Trace: [ 1496.047051][T28030] [ 1496.050061][T28030] __dump_stack+0x21/0x30 [ 1496.054422][T28030] dump_stack_lvl+0x110/0x170 [ 1496.059130][T28030] ? show_regs_print_info+0x20/0x20 [ 1496.064362][T28030] ? proc_fail_nth_write+0x180/0x200 [ 1496.069681][T28030] ? security_file_permission+0x79/0xa0 [ 1496.075255][T28030] dump_stack+0x15/0x20 [ 1496.079433][T28030] should_fail+0x3ab/0x500 [ 1496.083881][T28030] __should_failslab+0xa4/0xe0 [ 1496.088670][T28030] should_failslab+0x9/0x20 [ 1496.093392][T28030] slab_pre_alloc_hook+0x39/0xd0 [ 1496.098361][T28030] ? getname_flags+0xba/0x510 [ 1496.103061][T28030] kmem_cache_alloc+0x44/0x260 [ 1496.107851][T28030] ? __kasan_check_write+0x14/0x20 [ 1496.112994][T28030] getname_flags+0xba/0x510 [ 1496.117520][T28030] user_path_at_empty+0x2f/0x1c0 [ 1496.122572][T28030] path_getxattr+0xad/0x200 [ 1496.127101][T28030] ? setxattr+0x360/0x360 [ 1496.131472][T28030] __x64_sys_lgetxattr+0x9e/0xb0 [ 1496.136441][T28030] x64_sys_call+0xd0/0x9a0 [ 1496.140969][T28030] do_syscall_64+0x4c/0xa0 [ 1496.145419][T28030] ? clear_bhb_loop+0x50/0xa0 [ 1496.150133][T28030] ? clear_bhb_loop+0x50/0xa0 [ 1496.154835][T28030] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1496.160751][T28030] RIP: 0033:0x7f2e206b6e99 [ 1496.165195][T28030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1496.185177][T28030] RSP: 002b:00007f2e1f110028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 1496.193710][T28030] RAX: ffffffffffffffda RBX: 00007f2e2093efa0 RCX: 00007f2e206b6e99 [ 1496.201715][T28030] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000240 [ 1496.209905][T28030] RBP: 00007f2e1f110090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.217905][T28030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.225911][T28030] R13: 00007f2e2093f038 R14: 00007f2e2093efa0 R15: 00007ffdb240c088 [ 1496.231811][T28025] loop2: detected capacity change from 0 to 131072 [ 1496.233917][T28030] [ 1496.250430][T28025] F2FS-fs (loop2): invalid crc value [ 1496.260260][T28025] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1496.281098][T28025] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 1496.288451][T28025] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1496.291769][T28038] loop0: detected capacity change from 0 to 512 [ 1496.376239][T28041] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1496.425846][T28038] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1496.438067][T28025] kvm [28024]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0xc1 data 0xe50000000000 [ 1496.440147][T27748] usb 7-1: USB disconnect, device number 78 [ 1496.448682][T28025] kvm [28024]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0xc2 data 0xe50000000000 [ 1496.481862][T28025] kvm [28024]: vcpu6, guest rIP: 0x9139 ignored wrmsr: 0x11e data 0xe500be702111 [ 1496.511352][T28048] netlink: 'syz.3.9452': attribute type 1 has an invalid length. [ 1496.512361][T28025] kvm [28024]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0x186 data 0xe50000000000 [ 1496.564460][T28025] kvm [28024]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0x187 data 0xe50000000000 [ 1496.601796][T28054] loop4: detected capacity change from 0 to 512 [ 1496.637062][T28054] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1496.718735][T28057] loop3: detected capacity change from 0 to 512 [ 1496.767535][T28057] EXT4-fs (loop3): Unrecognized mount option "dont_measure" or missing value [ 1496.980007][T28054] FAULT_INJECTION: forcing a failure. [ 1496.980007][T28054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1496.993424][T28054] CPU: 0 PID: 28054 Comm: syz.4.9453 Tainted: G W syzkaller #0 [ 1497.002316][T28054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1497.012429][T28054] Call Trace: [ 1497.015724][T28054] [ 1497.018656][T28054] __dump_stack+0x21/0x30 [ 1497.023046][T28054] dump_stack_lvl+0x110/0x170 [ 1497.027724][T28054] ? show_regs_print_info+0x20/0x20 [ 1497.033005][T28054] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1497.039070][T28054] dump_stack+0x15/0x20 [ 1497.043224][T28054] should_fail+0x3ab/0x500 [ 1497.047645][T28054] should_fail_usercopy+0x1a/0x20 [ 1497.052669][T28054] strncpy_from_user+0x24/0x2d0 [ 1497.057611][T28054] getxattr+0xf5/0x410 [ 1497.061680][T28054] ? path_getxattr+0x200/0x200 [ 1497.066542][T28054] ? user_path_at_empty+0x162/0x1c0 [ 1497.071740][T28054] path_getxattr+0x10a/0x200 [ 1497.076427][T28054] ? setxattr+0x360/0x360 [ 1497.080752][T28054] __x64_sys_lgetxattr+0x9e/0xb0 [ 1497.085875][T28054] x64_sys_call+0xd0/0x9a0 [ 1497.090290][T28054] do_syscall_64+0x4c/0xa0 [ 1497.094703][T28054] ? clear_bhb_loop+0x50/0xa0 [ 1497.099389][T28054] ? clear_bhb_loop+0x50/0xa0 [ 1497.104071][T28054] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1497.109961][T28054] RIP: 0033:0x7fa374766e99 [ 1497.114380][T28054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.133986][T28054] RSP: 002b:00007fa3731c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 1497.142398][T28054] RAX: ffffffffffffffda RBX: 00007fa3749eefa0 RCX: 00007fa374766e99 [ 1497.150368][T28054] RDX: 0000200000000300 RSI: 0000200000000200 RDI: 0000200000000240 [ 1497.158339][T28054] RBP: 00007fa3731c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.166311][T28054] R10: 00000000000000bb R11: 0000000000000246 R12: 0000000000000001 [ 1497.174282][T28054] R13: 00007fa3749ef038 R14: 00007fa3749eefa0 R15: 00007fffe5bd0cf8 [ 1497.182257][T28054] [ 1497.424259][T28071] loop3: detected capacity change from 0 to 512 [ 1497.426506][T28070] 9pnet: Insufficient options for proto=fd [ 1497.437471][T27748] android_work: did not send uevent (0 0 0000000000000000) [ 1497.477274][T28071] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1497.665259][T28071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9460'. [ 1498.592032][T28106] loop3: detected capacity change from 0 to 512 [ 1498.768927][T28106] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1499.006381][T28106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9473'. [ 1499.442092][T28121] device syzkaller0 entered promiscuous mode [ 1499.825471][T28131] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 1499.837989][T28133] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1499.853041][T28131] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.3.9479: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1501.052449][ T9364] android_work: did not send uevent (0 0 0000000000000000) [ 1501.060984][T28131] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 1501.076806][T28131] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #2: comm syz.3.9479: Deleting old file: nlink 1, error=-117 [ 1501.173431][T28152] xt_hashlimit: size too large, truncated to 1048576 [ 1502.309768][T28188] set_capacity_and_notify: 3 callbacks suppressed [ 1502.309788][T28188] loop3: detected capacity change from 0 to 512 [ 1502.365082][T26128] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1502.401425][T28188] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1502.428099][T28198] loop0: detected capacity change from 0 to 1024 [ 1502.446999][T28198] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 1502.487531][T28198] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.0.9501: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1502.508355][T28198] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 1502.517803][T28198] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.9501: Deleting old file: nlink 1, error=-117 [ 1502.564997][T27508] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1502.625063][T26128] usb 5-1: Using ep0 maxpacket: 16 [ 1502.785145][T28210] FAULT_INJECTION: forcing a failure. [ 1502.785145][T28210] name fail_page_alloc, interval 1, probability 100, space 0, times 0 [ 1502.798833][T28210] CPU: 1 PID: 28210 Comm: syz.3.9504 Tainted: G W syzkaller #0 [ 1502.807704][T28210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1502.817770][T28210] Call Trace: [ 1502.821062][T28210] [ 1502.824007][T28210] __dump_stack+0x21/0x30 [ 1502.828352][T28210] dump_stack_lvl+0x110/0x170 [ 1502.833046][T28210] ? show_regs_print_info+0x20/0x20 [ 1502.838259][T28210] dump_stack+0x15/0x20 [ 1502.842426][T28210] should_fail+0x3ab/0x500 [ 1502.846855][T28210] should_fail_alloc_page+0x55/0x80 [ 1502.852068][T28210] prepare_alloc_pages+0x13f/0x590 [ 1502.857198][T28210] ? __alloc_pages_bulk+0xab0/0xab0 [ 1502.862410][T28210] __alloc_pages+0x11d/0x460 [ 1502.867016][T28210] ? prep_new_page+0x110/0x110 [ 1502.871793][T28210] ? __mod_node_page_state+0x9e/0xd0 [ 1502.877090][T28210] kmalloc_order+0x4c/0x160 [ 1502.881692][T28210] kmalloc_order_trace+0x18/0xb0 [ 1502.886642][T28210] __kmalloc+0x199/0x2c0 [ 1502.890903][T28210] kvmalloc_node+0x211/0x320 [ 1502.895509][T28210] ? vm_mmap+0xb0/0xb0 [ 1502.899593][T28210] io_sqe_buffer_register+0x158/0x14b0 [ 1502.905070][T28210] ? __kasan_check_write+0x14/0x20 [ 1502.910203][T28210] ? _copy_from_user+0x95/0xd0 [ 1502.914975][T28210] io_sqe_buffers_register+0x509/0x920 [ 1502.920449][T28210] ? io_sq_thread+0x1190/0x1190 [ 1502.925312][T28210] ? mutex_lock+0x9b/0x1c0 [ 1502.929746][T28210] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1502.936349][T28210] ? __kasan_check_read+0x11/0x20 [ 1502.941406][T28210] __se_sys_io_uring_register+0x486/0xf40 [ 1502.947143][T28210] __x64_sys_io_uring_register+0x9b/0xb0 [ 1502.952792][T28210] x64_sys_call+0x537/0x9a0 [ 1502.957310][T28210] do_syscall_64+0x4c/0xa0 [ 1502.961742][T28210] ? clear_bhb_loop+0x50/0xa0 [ 1502.966427][T28210] ? clear_bhb_loop+0x50/0xa0 [ 1502.971116][T28210] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1502.977021][T28210] RIP: 0033:0x7f2e206b6e99 [ 1502.981449][T28210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.001066][T28210] RSP: 002b:00007f2e1f0ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1503.009639][T28210] RAX: ffffffffffffffda RBX: 00007f2e2093f180 RCX: 00007f2e206b6e99 [ 1503.017639][T28210] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000007 [ 1503.025633][T28210] RBP: 00007f2e1f0ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.033707][T28210] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 1503.041689][T28210] R13: 00007f2e2093f218 R14: 00007f2e2093f180 R15: 00007ffdb240c088 [ 1503.049768][T28210] [ 1503.215309][T27508] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 1503.256123][T27508] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.394281][T27508] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1503.475139][T27508] usb 3-1: config 0 has no interface number 0 [ 1503.499733][T28207] loop0: detected capacity change from 0 to 40427 [ 1503.503930][T26128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1503.512903][T26128] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.00 [ 1503.523988][T26128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.536754][T26128] usb 5-1: config 0 descriptor?? [ 1503.545606][T28207] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1503.553707][T28207] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1503.633937][T28207] F2FS-fs (loop0): invalid crc value [ 1503.641707][T28207] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1503.679571][T28207] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1503.686797][T28207] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1505.051754][T27508] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1505.061062][T27508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.069113][T27508] usb 3-1: Product: syz [ 1505.073296][T27508] usb 3-1: Manufacturer: syz [ 1505.077932][T27508] usb 3-1: SerialNumber: syz [ 1505.083763][T27508] usb 3-1: config 0 descriptor?? [ 1506.076946][T27508] usb 3-1: can't set config #0, error -71 [ 1506.295781][T27508] usb 3-1: USB disconnect, device number 92 [ 1506.435353][T28235] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1506.474668][T28235] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1506.487632][T28248] kvm [28246]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc1 data 0xfffffc00 [ 1506.506890][T28248] kvm [28246]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc2 data 0xfffffc00 [ 1506.519288][T28248] kvm [28246]: vcpu0, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0xfffffc00 [ 1506.531844][T28248] kvm [28246]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0x186 data 0xfffffc00 [ 1506.541596][T28248] kvm [28246]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0x187 data 0xfffffc00 [ 1506.577770][T28256] loop2: detected capacity change from 0 to 512 [ 1506.585043][T26128] usbhid 5-1:0.0: can't add hid device: -71 [ 1506.591021][T26128] usbhid: probe of 5-1:0.0 failed with error -71 [ 1506.625109][T26128] usb 5-1: USB disconnect, device number 55 [ 1506.767380][T28259] kernel profiling enabled (shift: 5) [ 1507.338358][T28269] loop4: detected capacity change from 0 to 512 [ 1507.388539][T28263] loop2: detected capacity change from 0 to 40427 [ 1507.444884][T28263] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1507.453779][T28263] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1507.474205][T28263] F2FS-fs (loop2): invalid crc value [ 1507.492727][T28271] binder: BINDER_SET_CONTEXT_MGR already set [ 1507.498894][T28271] binder: 28270:28271 ioctl 4018620d 200000000100 returned -16 [ 1507.518064][T28271] binder: 28270:28271 unknown command 0 [ 1507.524076][T28271] binder: 28270:28271 ioctl c0306201 2000000004c0 returned -22 [ 1507.534694][T28263] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1507.582694][T28263] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1507.583655][T28269] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1507.592481][T28263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1507.764030][T28269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9515'. [ 1508.185004][ T318] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1508.249481][T28295] loop2: detected capacity change from 0 to 40427 [ 1508.269102][T28295] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1508.283280][T28295] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1508.302984][T28295] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1508.358512][T28295] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1508.375426][T28295] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1508.434985][ T318] usb 7-1: Using ep0 maxpacket: 32 [ 1508.555076][ T318] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 33, using maximum allowed: 30 [ 1508.575028][ T318] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1508.605029][ T318] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1508.611693][ T318] usb 7-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 1508.635045][ T318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.653316][ T318] usb 7-1: config 0 descriptor?? [ 1508.745894][T28290] loop3: detected capacity change from 0 to 131072 [ 1508.770293][T28290] F2FS-fs (loop3): invalid crc value [ 1508.796078][T28290] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1508.825826][T28290] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 1508.832881][T28290] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1508.895001][T27508] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1508.909046][T28290] kvm [28289]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0xc1 data 0xe50000000000 [ 1508.919204][T28290] kvm [28289]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0xc2 data 0xe50000000000 [ 1508.932192][T28290] kvm [28289]: vcpu6, guest rIP: 0x9139 ignored wrmsr: 0x11e data 0xe500be702111 [ 1508.944863][T28290] kvm [28289]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0x186 data 0xe50000000000 [ 1508.944977][T26128] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1508.955312][T28290] kvm [28289]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0x187 data 0xe50000000000 [ 1508.975269][ T8538] android_work: sent uevent USB_STATE=CONNECTED [ 1508.994913][T28324] loop4: detected capacity change from 0 to 40427 [ 1509.013205][T28324] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1509.021450][T28324] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1509.030864][T28324] F2FS-fs (loop4): invalid crc value [ 1509.039021][T28324] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1509.072161][T28324] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1509.079366][T28324] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1509.129005][ T318] wacom 0003:056A:0301.0053: unknown main item tag 0x6 [ 1509.136040][ T318] wacom 0003:056A:0301.0053: ignoring exceeding usage max [ 1509.144816][ T318] wacom 0003:056A:0301.0053: Unknown device_type for 'HID 056a:0301'. Assuming pen. [ 1509.156529][ T318] wacom 0003:056A:0301.0053: hidraw0: USB HID v0.81 Device [HID 056a:0301] on usb-dummy_hcd.6-1/input0 [ 1509.168377][ T318] input: Wacom Bamboo One M Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0301.0053/input/input29 [ 1509.261045][T27508] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 1509.269405][T27508] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.285111][T26128] usb 1-1: string descriptor 0 read error: -71 [ 1509.291667][T26128] usb 1-1: Dual-Role OTG device on HNP port [ 1509.307519][T27508] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1509.316671][T27508] usb 3-1: config 0 has no interface number 0 [ 1509.323113][ T9384] android_work: sent uevent USB_STATE=DISCONNECTED [ 1509.325403][T26128] usb 1-1: can't set HNP mode: -71 [ 1509.334372][T28293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9526'. [ 1509.341662][T28334] loop3: detected capacity change from 0 to 512 [ 1509.344885][T28293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9526'. [ 1509.363542][ T9384] usb 7-1: USB disconnect, device number 79 [ 1509.377260][T28334] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1509.476568][T28340] loop0: detected capacity change from 0 to 512 [ 1509.488134][T28340] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1509.498224][T27508] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1509.505447][T28340] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.9539: invalid indirect mapped block 32768 (level 2) [ 1509.507636][T27508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.521119][T28340] EXT4-fs (loop0): Remounting filesystem read-only [ 1509.529185][T27508] usb 3-1: Product: syz [ 1509.536400][T28340] EXT4-fs (loop0): 1 orphan inode deleted [ 1509.540032][T27508] usb 3-1: Manufacturer: syz [ 1509.545540][T28340] EXT4-fs (loop0): 1 truncate cleaned up [ 1509.545561][T28340] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,nobarrier,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,discard,. Quota mode: none. [ 1509.574241][T27508] usb 3-1: SerialNumber: syz [ 1509.583202][T27508] usb 3-1: config 0 descriptor?? [ 1509.583419][T28340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9539'. [ 1509.625730][T27508] usb-storage 3-1:0.127: USB Mass Storage device detected [ 1509.640743][T27508] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1509.736114][T27508] android_work: did not send uevent (0 0 0000000000000000) [ 1509.899815][T27508] usb 3-1: USB disconnect, device number 93 [ 1510.081291][T28365] input: syz0 as /devices/virtual/input/input32 [ 1510.088600][T28365] input: failed to attach handler leds to device input32, error: -6 [ 1510.848261][T28380] loop0: detected capacity change from 0 to 16 [ 1510.867644][T28380] erofs: (device loop0): mounted with root inode @ nid 36. [ 1510.887693][T28380] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 1510.897191][T28380] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1510.906403][T28380] attempt to access beyond end of device [ 1510.906403][T28380] loop0: rw=524288, want=136, limit=16 [ 1510.917895][T28380] attempt to access beyond end of device [ 1510.917895][T28380] loop0: rw=524288, want=88, limit=16 [ 1511.060738][T28384] loop2: detected capacity change from 0 to 40427 [ 1511.149589][T28384] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1511.157846][T28384] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1511.167682][T28384] F2FS-fs (loop2): invalid crc value [ 1511.175659][T28384] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1511.212713][T28384] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1511.219856][T28384] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1511.336704][T28393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28393 comm=syz.4.9555 [ 1512.212250][T26437] android_work: did not send uevent (0 0 0000000000000000) [ 1512.251088][T28414] device vlan2 entered promiscuous mode [ 1512.388207][T28428] FAULT_INJECTION: forcing a failure. [ 1512.388207][T28428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.404919][T28428] CPU: 1 PID: 28428 Comm: syz.0.9568 Tainted: G W syzkaller #0 [ 1512.413952][T28428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1512.424044][T28428] Call Trace: [ 1512.427354][T28428] [ 1512.430385][T28428] __dump_stack+0x21/0x30 [ 1512.434732][T28428] dump_stack_lvl+0x110/0x170 [ 1512.439433][T28428] ? show_regs_print_info+0x20/0x20 [ 1512.444656][T28428] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1512.450136][T28428] ? _raw_spin_lock+0xf0/0xf0 [ 1512.454961][T28428] dump_stack+0x15/0x20 [ 1512.459155][T28428] should_fail+0x3ab/0x500 [ 1512.463594][T28428] should_fail_usercopy+0x1a/0x20 [ 1512.468630][T28428] _copy_from_user+0x20/0xd0 [ 1512.473246][T28428] binder_ioctl_write_read+0x14e/0x6700 [ 1512.478812][T28428] ? 0xffffffffa0028780 [ 1512.482974][T28428] ? is_bpf_text_address+0x177/0x190 [ 1512.488273][T28428] ? __kernel_text_address+0xa0/0x100 [ 1512.493658][T28428] ? unwind_get_return_address+0x4d/0x90 [ 1512.499307][T28428] ? stack_trace_save+0xf0/0xf0 [ 1512.504181][T28428] ? arch_stack_walk+0xee/0x140 [ 1512.509146][T28428] ? binder_has_work_ilocked+0x3e0/0x3e0 [ 1512.514810][T28428] ? avc_has_extended_perms+0x869/0xed0 [ 1512.520377][T28428] ? memcpy+0x56/0x70 [ 1512.524388][T28428] ? avc_has_extended_perms+0x9d5/0xed0 [ 1512.529960][T28428] ? avc_flush+0x2b0/0x2b0 [ 1512.534407][T28428] ? kasan_set_track+0x5b/0x70 [ 1512.539203][T28428] ? __kasan_check_write+0x14/0x20 [ 1512.544444][T28428] ? _raw_spin_lock+0x94/0xf0 [ 1512.549244][T28428] ? _raw_spin_trylock_bh+0x150/0x150 [ 1512.554650][T28428] ? _raw_spin_unlock+0x4d/0x70 [ 1512.559534][T28428] binder_ioctl+0x36c/0x1df0 [ 1512.564155][T28428] ? ioctl_has_perm+0x1b8/0x4f0 [ 1512.569123][T28428] ? binder_poll+0x2d0/0x2d0 [ 1512.573744][T28428] ? security_file_permission+0x79/0xa0 [ 1512.579327][T28428] ? has_cap_mac_admin+0x370/0x370 [ 1512.584555][T28428] ? vfs_write+0xc72/0xfd0 [ 1512.589007][T28428] ? selinux_file_ioctl+0x3ad/0x4c0 [ 1512.594238][T28428] ? selinux_file_alloc_security+0x120/0x120 [ 1512.600248][T28428] ? mutex_unlock+0x8f/0x230 [ 1512.605213][T28428] ? __mutex_lock_slowpath+0x10/0x10 [ 1512.610515][T28428] ? __fget_files+0x2e1/0x340 [ 1512.615223][T28428] ? security_file_ioctl+0x84/0xa0 [ 1512.620367][T28428] ? binder_poll+0x2d0/0x2d0 [ 1512.624988][T28428] __se_sys_ioctl+0x121/0x1a0 [ 1512.629699][T28428] __x64_sys_ioctl+0x7b/0x90 [ 1512.634323][T28428] x64_sys_call+0x2f/0x9a0 [ 1512.638769][T28428] do_syscall_64+0x4c/0xa0 [ 1512.643218][T28428] ? clear_bhb_loop+0x50/0xa0 [ 1512.647925][T28428] ? clear_bhb_loop+0x50/0xa0 [ 1512.652635][T28428] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1512.658571][T28428] RIP: 0033:0x7f8cc1877e99 [ 1512.663020][T28428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1512.682916][T28428] RSP: 002b:00007f8cc02d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1512.691360][T28428] RAX: ffffffffffffffda RBX: 00007f8cc1afffa0 RCX: 00007f8cc1877e99 [ 1512.699359][T28428] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1512.707357][T28428] RBP: 00007f8cc02d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.715349][T28428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.723338][T28428] R13: 00007f8cc1b00038 R14: 00007f8cc1afffa0 R15: 00007ffc541d7fa8 [ 1512.731435][T28428] [ 1512.738101][T28428] binder: 28426:28428 ioctl c0306201 2000000001c0 returned -14 [ 1514.106687][T28444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28444 comm=syz.0.9572 [ 1514.171525][T28453] loop3: detected capacity change from 0 to 16 [ 1514.198841][T28453] erofs: (device loop3): mounted with root inode @ nid 36. [ 1514.211831][T26128] android_work: did not send uevent (0 0 0000000000000000) [ 1514.323764][T28461] loop2: detected capacity change from 0 to 512 [ 1514.428848][T28461] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1514.517394][T28471] FAULT_INJECTION: forcing a failure. [ 1514.517394][T28471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1514.540735][T27508] android_work: did not send uevent (0 0 0000000000000000) [ 1514.559923][T28471] CPU: 0 PID: 28471 Comm: syz.6.9582 Tainted: G W syzkaller #0 [ 1514.576292][T28471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1514.586447][T28471] Call Trace: [ 1514.586460][T28471] [ 1514.586467][T28471] __dump_stack+0x21/0x30 [ 1514.586493][T28471] dump_stack_lvl+0x110/0x170 [ 1514.586510][T28471] ? show_regs_print_info+0x20/0x20 [ 1514.586527][T28471] ? format_decode+0x1bb/0x1520 [ 1514.586548][T28471] dump_stack+0x15/0x20 [ 1514.586565][T28471] should_fail+0x3ab/0x500 [ 1514.586593][T28471] should_fail_usercopy+0x1a/0x20 [ 1514.586611][T28471] _copy_from_user+0x20/0xd0 [ 1514.586630][T28471] kstrtouint_from_user+0xd3/0x220 [ 1514.586648][T28471] ? kstrtol_from_user+0x2a0/0x2a0 [ 1514.640440][T28471] ? 0xffffffff81000000 [ 1514.644604][T28471] ? _copy_to_user+0x78/0x90 [ 1514.649293][T28471] ? simple_read_from_buffer+0x10f/0x160 [ 1514.654925][T28471] proc_fail_nth_write+0x8b/0x200 [ 1514.659980][T28471] ? proc_fail_nth_read+0x220/0x220 [ 1514.665176][T28471] ? security_file_permission+0x79/0xa0 [ 1514.670722][T28471] ? security_file_permission+0x83/0xa0 [ 1514.676267][T28471] ? proc_fail_nth_read+0x220/0x220 [ 1514.681467][T28471] vfs_write+0x404/0xfd0 [ 1514.685754][T28471] ? file_end_write+0x1b0/0x1b0 [ 1514.690691][T28471] ? __kasan_check_write+0x14/0x20 [ 1514.695800][T28471] ? mutex_lock+0x9b/0x1c0 [ 1514.700219][T28471] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1514.706814][T28471] ? __fget_files+0x2e1/0x340 [ 1514.711488][T28471] ? __fdget_pos+0x2d2/0x380 [ 1514.716076][T28471] ? ksys_write+0x70/0x260 [ 1514.720494][T28471] ksys_write+0x14a/0x260 [ 1514.724820][T28471] ? __ia32_sys_read+0x90/0x90 [ 1514.729589][T28471] ? debug_smp_processor_id+0x17/0x20 [ 1514.734960][T28471] __x64_sys_write+0x7b/0x90 [ 1514.739547][T28471] x64_sys_call+0x8ef/0x9a0 [ 1514.744066][T28471] do_syscall_64+0x4c/0xa0 [ 1514.748481][T28471] ? clear_bhb_loop+0x50/0xa0 [ 1514.753153][T28471] ? clear_bhb_loop+0x50/0xa0 [ 1514.757828][T28471] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1514.763726][T28471] RIP: 0033:0x7f2bdbc446ce [ 1514.768239][T28471] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1514.788024][T28471] RSP: 002b:00007f2bda6bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1514.796454][T28471] RAX: ffffffffffffffda RBX: 00007f2bda6bc6c0 RCX: 00007f2bdbc446ce [ 1514.804519][T28471] RDX: 0000000000000001 RSI: 00007f2bda6bc0a0 RDI: 0000000000000004 [ 1514.812575][T28471] RBP: 00007f2bda6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.820545][T28471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.828516][T28471] R13: 00007f2bdbf0c128 R14: 00007f2bdbf0c090 R15: 00007ffe9735a768 [ 1514.836513][T28471] [ 1514.867245][T28480] device vlan2 entered promiscuous mode [ 1514.892072][T28482] loop2: detected capacity change from 0 to 128 [ 1514.924461][T28482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1514.945130][T28482] ext4 filesystem being mounted at /361/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1515.005040][ T9384] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1515.080422][T28494] loop3: detected capacity change from 0 to 16 [ 1515.166226][T28494] erofs: (device loop3): mounted with root inode @ nid 36. [ 1515.186505][T28494] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 1515.199108][T28494] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1515.209741][T28494] attempt to access beyond end of device [ 1515.209741][T28494] loop3: rw=524288, want=136, limit=16 [ 1515.223796][T28494] attempt to access beyond end of device [ 1515.223796][T28494] loop3: rw=524288, want=88, limit=16 [ 1515.256963][T28499] loop0: detected capacity change from 0 to 1024 [ 1515.287146][T28499] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 1515.334214][T28499] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.0.9593: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1515.362503][T28499] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 1515.371876][T28499] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.9593: Deleting old file: nlink 1, error=-117 [ 1515.698000][T28514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9598'. [ 1515.718043][T28514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9598'. [ 1515.915072][T27748] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1516.030112][T28524] loop3: detected capacity change from 0 to 512 [ 1516.053213][T28524] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1516.063029][T28524] EXT4-fs (loop3): Unrecognized mount option "euid=00000000000000000000" or missing value [ 1516.074321][ T9364] android_work: did not send uevent (0 0 0000000000000000) [ 1516.123254][T28524] loop3: detected capacity change from 0 to 256 [ 1516.159106][T28532] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9606'. [ 1516.211382][T28540] binder_alloc: 28539: binder_alloc_buf size 72057594037928032 failed, no address space [ 1516.221362][T28540] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1516.285113][T27748] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.295452][T27748] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1516.345094][ T9384] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1516.356331][ T9384] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 1516.367833][ T9384] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1516.374505][ T9384] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1516.384058][ T9384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.465095][T27748] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1516.474343][T27748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.482981][T27748] usb 3-1: Product: syz [ 1516.487433][T27748] usb 3-1: Manufacturer: syz [ 1516.492041][T27748] usb 3-1: SerialNumber: syz [ 1516.824056][ T9364] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1516.832147][ T9384] usb 5-1: config 0 descriptor?? [ 1516.838039][ T9366] android_work: did not send uevent (0 0 0000000000000000) [ 1516.847147][T28560] loop0: detected capacity change from 0 to 512 [ 1516.858835][T27748] usb 3-1: cannot find UAC_HEADER [ 1516.864011][T28476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1516.884286][T27748] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1516.900175][T27748] usb 3-1: USB disconnect, device number 94 [ 1516.910644][T28563] FAULT_INJECTION: forcing a failure. [ 1516.910644][T28563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1516.924320][T28563] CPU: 0 PID: 28563 Comm: syz.6.9619 Tainted: G W syzkaller #0 [ 1516.933198][T28563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1516.943277][T28563] Call Trace: [ 1516.946567][T28563] [ 1516.949513][T28563] __dump_stack+0x21/0x30 [ 1516.949526][T28560] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1516.953885][T28563] dump_stack_lvl+0x110/0x170 [ 1516.969860][T28563] ? show_regs_print_info+0x20/0x20 [ 1516.975176][T28563] dump_stack+0x15/0x20 [ 1516.979366][T28563] should_fail+0x3ab/0x500 [ 1516.983811][T28563] should_fail_usercopy+0x1a/0x20 [ 1516.988869][T28563] _copy_to_user+0x20/0x90 [ 1516.993316][T28563] simple_read_from_buffer+0xe9/0x160 [ 1516.993378][T28560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9617'. [ 1516.998712][T28563] proc_fail_nth_read+0x1a6/0x220 [ 1516.998739][T28563] ? proc_fault_inject_write+0x310/0x310 [ 1517.018778][T28563] ? security_file_permission+0x83/0xa0 [ 1517.024346][T28563] ? proc_fault_inject_write+0x310/0x310 [ 1517.029985][T28563] vfs_read+0x28c/0xc20 [ 1517.034141][T28563] ? kernel_read+0x1f0/0x1f0 [ 1517.038746][T28563] ? __kasan_check_write+0x14/0x20 [ 1517.043866][T28563] ? mutex_lock+0x9b/0x1c0 [ 1517.048275][T28563] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1517.054885][T28563] ? __fget_files+0x2e1/0x340 [ 1517.059596][T28563] ? __fdget_pos+0x2d2/0x380 [ 1517.064226][T28563] ? ksys_read+0x70/0x260 [ 1517.068563][T28563] ksys_read+0x14a/0x260 [ 1517.072804][T28563] ? vfs_write+0xfd0/0xfd0 [ 1517.077209][T28563] ? debug_smp_processor_id+0x17/0x20 [ 1517.082735][T28563] __x64_sys_read+0x7b/0x90 [ 1517.087265][T28563] x64_sys_call+0x96d/0x9a0 [ 1517.091859][T28563] do_syscall_64+0x4c/0xa0 [ 1517.096264][T28563] ? clear_bhb_loop+0x50/0xa0 [ 1517.100932][T28563] ? clear_bhb_loop+0x50/0xa0 [ 1517.105624][T28563] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1517.111593][T28563] RIP: 0033:0x7f2bdbc446ce [ 1517.116026][T28563] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1517.135657][T28563] RSP: 002b:00007f2bda6bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1517.144069][T28563] RAX: ffffffffffffffda RBX: 00007f2bda6bc6c0 RCX: 00007f2bdbc446ce [ 1517.152137][T28563] RDX: 000000000000000f RSI: 00007f2bda6bc0a0 RDI: 0000000000000006 [ 1517.160113][T28563] RBP: 00007f2bda6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1517.168077][T28563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1517.176032][T28563] R13: 00007f2bdbf0c128 R14: 00007f2bdbf0c090 R15: 00007ffe9735a768 [ 1517.184019][T28563] [ 1517.195163][ T9364] usb 4-1: Using ep0 maxpacket: 16 [ 1517.694267][ T9384] kye 0003:0458:501A.0054: unknown main item tag 0x0 [ 1517.704591][ T9364] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.715853][T26437] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1517.735806][ T9384] kye 0003:0458:501A.0054: unknown main item tag 0x0 [ 1517.743214][ T9384] kye 0003:0458:501A.0054: unknown main item tag 0x0 [ 1517.749917][ T9364] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.771305][ T9364] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1517.787269][ T9384] kye 0003:0458:501A.0054: unknown main item tag 0x0 [ 1517.794204][ T9384] kye 0003:0458:501A.0054: unknown main item tag 0x0 [ 1517.845680][ T9384] kye 0003:0458:501A.0054: unknown main item tag 0x0 [ 1517.852432][ T9384] kye 0003:0458:501A.0054: unknown main item tag 0x0 [ 1517.852538][ T9364] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1517.866781][ T9364] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1517.875945][ T9364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.884286][ T9384] kye 0003:0458:501A.0054: hidraw0: USB HID v80.00 Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 1517.895666][ T9384] kye 0003:0458:501A.0054: tablet-enabling feature report not found [ 1517.904145][ T9364] usb 4-1: config 0 descriptor?? [ 1517.909340][ T9384] kye 0003:0458:501A.0054: tablet enabling failed [ 1517.916034][ T9366] android_work: did not send uevent (0 0 0000000000000000) [ 1517.925333][ T9384] usb 5-1: USB disconnect, device number 56 [ 1517.940517][T28582] fido_id[28582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1518.075004][ T9366] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1518.105564][T27748] android_work: did not send uevent (0 0 0000000000000000) [ 1518.123783][T28593] loop4: detected capacity change from 0 to 512 [ 1518.167008][T28593] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1518.199344][T28593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9630'. [ 1518.345084][ T9366] usb 7-1: Using ep0 maxpacket: 16 [ 1518.465577][ T9366] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.483912][ T9366] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.506594][ T9364] hid (null): unknown global tag 0x58 [ 1518.512213][ T9366] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1518.527316][ T9364] hid (null): unknown global tag 0xd [ 1518.533306][ T9364] hid (null): unknown global tag 0xc [ 1518.545426][ T9364] hid (null): invalid report_size -2094628929 [ 1518.559841][ T9366] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1518.568596][ T9366] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1518.582735][T28603] loop0: detected capacity change from 0 to 512 [ 1518.584176][ T9366] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.598651][ T9366] usb 7-1: config 0 descriptor?? [ 1518.642293][T28603] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1518.651492][T28603] FAT-fs (loop0): Filesystem has been set read-only [ 1518.705880][ T8538] usb 4-1: USB disconnect, device number 50 [ 1519.074640][ T9366] hid (null): unknown global tag 0xe [ 1519.081561][ T9366] hid (null): invalid report_count 2118565370 [ 1519.090810][ T9366] hid (null): global environment stack underflow [ 1519.097297][ T9366] hid (null): unknown global tag 0xd [ 1519.143701][ T9366] hid (null): unknown global tag 0xc [ 1519.149355][ T9366] hid (null): unknown global tag 0x7b [ 1519.279649][ T8538] usb 7-1: USB disconnect, device number 80 [ 1519.704773][T28624] loop4: detected capacity change from 0 to 512 [ 1519.831145][T28624] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1519.986875][T28638] loop0: detected capacity change from 0 to 1024 [ 1520.037964][T28638] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1520.045445][T28638] EXT4-fs (loop0): Ignoring removed orlov option [ 1520.128606][T28638] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 1520.135251][T28638] EXT4-fs (loop0): mount failed [ 1520.288672][T28624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9641'. [ 1520.631012][T28656] fuse: Bad value for 'group_id' [ 1520.835037][ T8538] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1520.865167][T27748] android_work: sent uevent USB_STATE=CONNECTED [ 1520.932842][T28665] loop0: detected capacity change from 0 to 512 [ 1520.953303][T28667] loop4: detected capacity change from 0 to 512 [ 1520.972688][T28665] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1520.995324][T28665] fs-verity (loop0, inode 15): fs-verity keyring is empty, rejecting signed file! [ 1521.005550][T28667] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1521.039656][T28667] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,journal_dev=0x0000000000000003,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 1521.407288][T28684] device veth0 entered promiscuous mode [ 1521.455556][T28684] device vlan2 entered promiscuous mode [ 1521.545121][ T8538] usb 1-1: Dual-Role OTG device on HNP port [ 1521.565030][ T8538] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 5.15 [ 1521.578327][ T8538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.615166][ T318] android_work: sent uevent USB_STATE=CONFIGURED [ 1521.685567][ T8538] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1521.769498][T28692] loop4: detected capacity change from 0 to 512 [ 1521.785691][T28692] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1522.264980][ T8538] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1522.315929][T28692] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,barrier=0x000000000000000d,delalloc,stripe=0x0000000000000b75,data_err=ignore,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 1522.337527][T28692] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1522.444222][ T9384] usb 1-1: USB disconnect, device number 93 [ 1522.455776][ T9366] android_work: sent uevent USB_STATE=DISCONNECTED [ 1522.471835][T28711] loop0: detected capacity change from 0 to 256 [ 1522.625149][ T8538] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 1522.634070][ T8538] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.656117][ T8538] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1522.671913][ T8538] usb 4-1: config 0 has no interface number 0 [ 1522.845058][ T8538] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1522.854243][ T8538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.862665][ T8538] usb 4-1: Product: syz [ 1522.867095][ T8538] usb 4-1: Manufacturer: syz [ 1522.871708][ T8538] usb 4-1: SerialNumber: syz [ 1522.877315][ T8538] usb 4-1: config 0 descriptor?? [ 1522.915445][ T8538] usb-storage 4-1:0.127: USB Mass Storage device detected [ 1522.923704][ T8538] usb-storage 4-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1523.115029][ T9384] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1523.133704][ T8538] usb 4-1: USB disconnect, device number 51 [ 1523.317336][T28726] loop2: detected capacity change from 0 to 512 [ 1523.365063][ T9384] usb 5-1: Using ep0 maxpacket: 32 [ 1523.484327][ T30] audit: type=1400 audit(2000000837.373:13011): avc: denied { setopt } for pid=28730 comm="syz.0.9672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1523.505154][ T9384] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1523.513350][ T9384] usb 5-1: config 0 has no interface number 0 [ 1523.522841][ T9384] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1523.585587][T28738] loop0: detected capacity change from 0 to 512 [ 1523.680448][T28738] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1523.685116][ T9384] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1523.702212][ T9384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.895961][ T9384] usb 5-1: Product: syz [ 1523.900277][ T9384] usb 5-1: Manufacturer: syz [ 1523.906432][ T9384] usb 5-1: SerialNumber: syz [ 1524.000932][ T9384] usb 5-1: config 0 descriptor?? [ 1524.175473][ T9384] smsc75xx v1.0.0 [ 1524.465014][T26437] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1524.639172][T28760] loop3: detected capacity change from 0 to 16 [ 1524.656659][T28760] erofs: (device loop3): mounted with root inode @ nid 36. [ 1524.865017][T26437] usb 1-1: config 0 has an invalid interface number: 127 but max is 1 [ 1524.875029][ T9384] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1524.895352][T26437] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.912256][ T9384] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1524.931709][T26437] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1524.951908][T26437] usb 1-1: config 0 has no interface number 0 [ 1525.115047][T26437] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1525.134361][T26437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.144458][T26437] usb 1-1: Product: syz [ 1525.148711][T26437] usb 1-1: Manufacturer: syz [ 1525.153326][T26437] usb 1-1: SerialNumber: syz [ 1525.168398][T26437] usb 1-1: config 0 descriptor?? [ 1525.205663][T26437] usb-storage 1-1:0.127: USB Mass Storage device detected [ 1525.233541][T26437] usb-storage 1-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1525.316348][T28760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9682'. [ 1525.326514][T28760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9682'. [ 1525.445056][ T9384] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1525.450258][T28754] kvm [28753]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc1 data 0xfffffc00 [ 1525.464987][ T9384] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1525.465785][T28754] kvm [28753]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc2 data 0xfffffc00 [ 1525.484973][ T9384] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1525.488166][T28754] kvm [28753]: vcpu0, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0xfffffc00 [ 1525.509111][T28754] kvm [28753]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0x186 data 0xfffffc00 [ 1525.519235][T28754] kvm [28753]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0x187 data 0xfffffc00 [ 1525.525068][ T9384] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 1525.565098][ T9384] usb 5-1: USB disconnect, device number 57 [ 1525.611219][T28764] loop2: detected capacity change from 0 to 40427 [ 1525.642957][T28764] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1525.668278][T28764] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1525.681116][T28764] F2FS-fs (loop2): invalid crc value [ 1525.701032][T28764] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1525.749581][ T8538] usb 1-1: USB disconnect, device number 94 [ 1525.772994][T28764] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1525.780247][T28764] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1525.869455][T28784] x_tables: unsorted underflow at hook 3 [ 1526.807942][ T318] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1528.535045][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 1528.589144][T28834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9705'. [ 1528.735035][T27508] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1528.786633][T28836] FAULT_INJECTION: forcing a failure. [ 1528.786633][T28836] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.799458][T28836] CPU: 0 PID: 28836 Comm: syz.3.9706 Tainted: G W syzkaller #0 [ 1528.808333][T28836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1528.818569][T28836] Call Trace: [ 1528.821852][T28836] [ 1528.824778][T28836] __dump_stack+0x21/0x30 [ 1528.829101][T28836] dump_stack_lvl+0x110/0x170 [ 1528.833779][T28836] ? show_regs_print_info+0x20/0x20 [ 1528.838965][T28836] ? __local_bh_enable_ip+0x58/0x80 [ 1528.844154][T28836] dump_stack+0x15/0x20 [ 1528.848297][T28836] should_fail+0x3ab/0x500 [ 1528.852736][T28836] __should_failslab+0xa4/0xe0 [ 1528.857493][T28836] should_failslab+0x9/0x20 [ 1528.861990][T28836] slab_pre_alloc_hook+0x39/0xd0 [ 1528.866932][T28836] ? __alloc_skb+0xe4/0x730 [ 1528.871441][T28836] kmem_cache_alloc+0x44/0x260 [ 1528.876193][T28836] __alloc_skb+0xe4/0x730 [ 1528.880512][T28836] netlink_sendmsg+0x611/0xb80 [ 1528.885284][T28836] ? netlink_getsockopt+0x530/0x530 [ 1528.890560][T28836] ? kasan_set_track+0x4a/0x70 [ 1528.895422][T28836] ? security_socket_sendmsg+0x82/0xa0 [ 1528.901067][T28836] ? netlink_getsockopt+0x530/0x530 [ 1528.906356][T28836] ____sys_sendmsg+0x5be/0x8f0 [ 1528.911108][T28836] ? __sys_sendmsg_sock+0x40/0x40 [ 1528.916124][T28836] ? import_iovec+0x7c/0xb0 [ 1528.920629][T28836] ___sys_sendmsg+0x236/0x2e0 [ 1528.925319][T28836] ? __sys_sendmsg+0x280/0x280 [ 1528.930085][T28836] ? __fdget+0x1a1/0x230 [ 1528.934322][T28836] __x64_sys_sendmsg+0x201/0x2d0 [ 1528.939257][T28836] ? ___sys_sendmsg+0x2e0/0x2e0 [ 1528.944102][T28836] ? ksys_write+0x1fa/0x260 [ 1528.948603][T28836] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1528.954669][T28836] x64_sys_call+0x4b/0x9a0 [ 1528.959084][T28836] do_syscall_64+0x4c/0xa0 [ 1528.963495][T28836] ? clear_bhb_loop+0x50/0xa0 [ 1528.968166][T28836] ? clear_bhb_loop+0x50/0xa0 [ 1528.972840][T28836] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1528.978728][T28836] RIP: 0033:0x7f2e206b6e99 [ 1528.983148][T28836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.002881][T28836] RSP: 002b:00007f2e1f110028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1529.011306][T28836] RAX: ffffffffffffffda RBX: 00007f2e2093efa0 RCX: 00007f2e206b6e99 [ 1529.019455][T28836] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1529.027424][T28836] RBP: 00007f2e1f110090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.035400][T28836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.043386][T28836] R13: 00007f2e2093f038 R14: 00007f2e2093efa0 R15: 00007ffdb240c088 [ 1529.051363][T28836] [ 1529.055867][ T8538] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1529.205618][ T318] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1529.235135][T27508] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 1529.243418][T27508] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.253640][T27508] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1529.262602][T27508] usb 3-1: config 0 has no interface number 0 [ 1529.424175][ T318] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1529.565502][T27508] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1529.575277][T27508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.575755][ T318] usb 1-1: can't read configurations, error -71 [ 1529.595070][T27508] usb 3-1: Product: syz [ 1529.599255][T27508] usb 3-1: Manufacturer: syz [ 1529.603835][T27508] usb 3-1: SerialNumber: syz [ 1529.609306][T27508] usb 3-1: config 0 descriptor?? [ 1529.655414][ T8538] usb 5-1: not running at top speed; connect to a high speed hub [ 1529.655541][T27508] usb-storage 3-1:0.127: USB Mass Storage device detected [ 1529.690715][T27508] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1529.745149][ T8538] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 214, changing to 4 [ 1529.756856][ T8538] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1272, setting to 1023 [ 1529.880393][T28832] kvm [28831]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc1 data 0xfffffc00 [ 1529.890182][T28832] kvm [28831]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc2 data 0xfffffc00 [ 1529.902149][T28832] kvm [28831]: vcpu0, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0xfffffc00 [ 1529.913768][T28832] kvm [28831]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0x186 data 0xfffffc00 [ 1529.925082][ T8538] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1529.927869][T28832] kvm [28831]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0x187 data 0xfffffc00 [ 1529.944450][ T8538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.955897][ T8538] usb 5-1: Product: syz [ 1529.960293][ T8538] usb 5-1: Manufacturer: syz [ 1529.965602][ T8538] usb 5-1: SerialNumber: syz [ 1530.052641][ T20] usb 3-1: USB disconnect, device number 95 [ 1530.217918][T28834] loop4: detected capacity change from 0 to 256 [ 1530.245125][T26128] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1530.257980][T28834] exfat: Deprecated parameter 'utf8' [ 1530.263423][T28834] exfat: Deprecated parameter 'utf8' [ 1530.269434][T28834] exfat: Deprecated parameter 'namecase' [ 1530.308145][T28834] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1530.456374][ T8538] usb 5-1: USB disconnect, device number 58 [ 1530.485014][T26128] usb 7-1: Using ep0 maxpacket: 16 [ 1530.496279][T27508] android_work: did not send uevent (0 0 0000000000000000) [ 1530.522933][T28864] overlayfs: failed to resolve './file1': -2 [ 1530.645432][T26128] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.671890][T26128] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1530.720033][T28046] udevd[28046]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1530.763368][T26128] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1531.025169][T26128] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1531.033595][T26128] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1537.001361][T26437] android_work: did not send uevent (0 0 0000000000000000) [ 1537.031622][T26128] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.041011][T26128] usb 7-1: config 0 descriptor?? [ 1537.065133][T26128] usb 7-1: can't set config #0, error -71 [ 1537.072653][T26128] usb 7-1: USB disconnect, device number 81 [ 1538.152263][ T20] android_work: did not send uevent (0 0 0000000000000000) [ 1538.162300][T28898] overlayfs: failed to resolve './file1': -2 [ 1538.209198][T28906] device vlan2 entered promiscuous mode [ 1538.291351][T28918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9735'. [ 1538.330421][T28920] loop2: detected capacity change from 0 to 256 [ 1538.505106][T26437] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1538.704972][T27508] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1538.775092][T26437] usb 4-1: Using ep0 maxpacket: 16 [ 1538.905342][T26437] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.927737][T26437] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1538.946683][T26437] usb 4-1: New USB device found, idVendor=17ef, idProduct=6809, bcdDevice= 0.00 [ 1538.972123][T26437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.010718][T26437] usb 4-1: config 0 descriptor?? [ 1539.035140][T27508] usb 1-1: not running at top speed; connect to a high speed hub [ 1539.041298][T28926] device vlan2 entered promiscuous mode [ 1539.118078][T27508] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 214, changing to 4 [ 1539.155018][T27508] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1272, setting to 1023 [ 1539.309483][T26437] usb 4-1: USB disconnect, device number 52 [ 1539.355130][T27508] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1539.371205][T27508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.404222][T27508] usb 1-1: Product: syz [ 1539.425241][T27508] usb 1-1: Manufacturer: syz [ 1539.429913][T27508] usb 1-1: SerialNumber: syz [ 1539.544481][T28937] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1539.709134][T28918] loop0: detected capacity change from 0 to 256 [ 1539.815410][T28918] exfat: Deprecated parameter 'utf8' [ 1539.820841][T28918] exfat: Deprecated parameter 'utf8' [ 1539.831668][T28918] exfat: Deprecated parameter 'namecase' [ 1539.861986][T28918] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1540.017356][T27508] usb 1-1: USB disconnect, device number 97 [ 1540.769406][T28978] loop2: detected capacity change from 0 to 512 [ 1540.805035][T27508] android_work: did not send uevent (0 0 0000000000000000) [ 1540.817489][T28972] loop4: detected capacity change from 0 to 512 [ 1540.847425][T28978] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1540.859435][T28981] loop3: detected capacity change from 0 to 512 [ 1540.894550][T28978] EXT4-fs warning (device loop2): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 1540.914368][T28972] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1540.930078][T28981] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1540.978535][T28972] EXT4-fs warning (device loop4): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 1541.002707][T28981] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1541.296632][ T318] android_work: did not send uevent (0 0 0000000000000000) [ 1541.384978][ T20] usb 7-1: new low-speed USB device number 82 using dummy_hcd [ 1541.624980][ T20] usb 7-1: Invalid ep0 maxpacket: 16 [ 1541.775127][ T20] usb 7-1: new low-speed USB device number 83 using dummy_hcd [ 1541.849668][T29006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9763'. [ 1542.008357][T29010] loop2: detected capacity change from 0 to 512 [ 1542.108797][T29010] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1542.145064][T26437] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1542.181803][T29010] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1542.193052][T29010] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1542.210497][T29010] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1542.224742][T29010] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1542.234690][T29010] EXT4-fs (loop2): failed to initialize system zone (-117) [ 1542.242913][T29010] EXT4-fs (loop2): mount failed [ 1542.495210][T26437] usb 4-1: not running at top speed; connect to a high speed hub [ 1542.855091][T26437] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 214, changing to 4 [ 1542.866523][T26437] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1272, setting to 1023 [ 1543.007022][T29017] loop4: detected capacity change from 0 to 1024 [ 1543.046489][ T20] usb 7-1: Invalid ep0 maxpacket: 16 [ 1543.051949][ T20] usb usb7-port1: attempt power cycle [ 1543.086650][T29017] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 1543.096507][T29017] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 1543.110462][T29017] EXT4-fs (loop4): Unrecognized mount option "subj_role=barrier" or missing value [ 1543.185351][T26437] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1543.294077][T26437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.435410][T26437] usb 4-1: Product: syz [ 1543.499118][T26437] usb 4-1: Manufacturer: syz [ 1543.535756][T29021] fuse: Bad value for 'group_id' [ 1543.570556][T26437] usb 4-1: SerialNumber: syz [ 1543.805183][T29026] loop2: detected capacity change from 0 to 512 [ 1543.880091][T29026] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1543.906522][T29006] loop3: detected capacity change from 0 to 256 [ 1543.935152][T27508] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1543.955609][ T9366] android_work: sent uevent USB_STATE=CONNECTED [ 1543.978211][T29006] exfat: Deprecated parameter 'utf8' [ 1543.984268][T29006] exfat: Deprecated parameter 'utf8' [ 1544.009834][T29026] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 1544.033481][T29006] exfat: Deprecated parameter 'namecase' [ 1544.047647][T29006] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1544.822981][T29026] loop2: detected capacity change from 0 to 256 [ 1544.894583][T26437] usb 4-1: USB disconnect, device number 53 [ 1545.013211][ T9364] android_work: sent uevent USB_STATE=DISCONNECTED [ 1545.015015][ T20] usb 7-1: new full-speed USB device number 84 using dummy_hcd [ 1545.133844][T29042] loop0: detected capacity change from 0 to 512 [ 1545.155046][ T9366] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1545.163335][T27508] usb 1-1: Dual-Role OTG device on HNP port [ 1545.176677][T29042] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1545.195185][ T20] usb 7-1: not running at top speed; connect to a high speed hub [ 1545.197432][T27508] usb 1-1: can't set HNP mode: -71 [ 1545.210240][T29042] EXT4-fs (loop0): 1 truncate cleaned up [ 1545.215988][T29042] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1545.484964][ T9366] usb 3-1: Using ep0 maxpacket: 16 [ 1545.525187][ T20] usb 7-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1545.525622][T26437] android_work: did not send uevent (0 0 0000000000000000) [ 1545.551255][ T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.577949][ T20] usb 7-1: Product: syz [ 1545.591358][ T20] usb 7-1: Manufacturer: syz [ 1545.598514][ T20] usb 7-1: SerialNumber: syz [ 1545.605235][ T9366] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.617846][ T9366] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.637055][ T9366] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1545.651699][ T9366] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1545.663622][ T9366] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1545.689196][ T9366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.702333][ T9366] usb 3-1: config 0 descriptor?? [ 1546.176986][ T9366] hid (null): unknown global tag 0x58 [ 1546.186405][ T9366] hid (null): unknown global tag 0xd [ 1546.208919][ T9366] hid (null): unknown global tag 0xc [ 1546.232801][ T9366] hid (null): invalid report_size -2094628929 [ 1546.319196][ T20] usb 7-1: USB disconnect, device number 84 [ 1546.402531][T27508] usb 3-1: USB disconnect, device number 96 [ 1547.035065][T27508] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1547.065678][ T9364] android_work: sent uevent USB_STATE=CONNECTED [ 1547.270083][T26128] android_work: sent uevent USB_STATE=DISCONNECTED [ 1547.375047][T27508] usb 1-1: device descriptor read/all, error -71 [ 1550.246077][T29089] binder_alloc: 29088: binder_alloc_buf, no vma [ 1550.757907][T29105] loop0: detected capacity change from 0 to 512 [ 1550.787432][T29105] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1550.811899][T29105] EXT4-fs warning (device loop0): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 1551.047634][ T9384] android_work: did not send uevent (0 0 0000000000000000) [ 1551.455721][T17718] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1554.176562][T29127] kvm [29126]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc1 data 0xfffffc00 [ 1554.258501][T29127] kvm [29126]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc2 data 0xfffffc00 [ 1554.287859][T29127] kvm [29126]: vcpu0, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0xfffffc00 [ 1554.308435][T29127] kvm [29126]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0x186 data 0xfffffc00 [ 1554.318314][T29127] kvm [29126]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0x187 data 0xfffffc00 [ 1554.664959][T17718] usb 1-1: Using ep0 maxpacket: 32 [ 1554.785028][T17718] usb 1-1: device descriptor read/all, error -61 [ 1554.934965][T17718] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1554.935636][T29138] UDC core: couldn't find an available UDC or it's busy: -16 [ 1555.052868][T29143] kvm [29142]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc1 data 0xfffffc00 [ 1555.064675][T29143] kvm [29142]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc2 data 0xfffffc00 [ 1555.077381][T29143] kvm [29142]: vcpu0, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0xfffffc00 [ 1555.089471][T29143] kvm [29142]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0x186 data 0xfffffc00 [ 1555.100946][T29143] kvm [29142]: vcpu0, guest rIP: 0x9135 disabled perfctr wrmsr: 0x187 data 0xfffffc00 [ 1555.147723][T29146] loop4: detected capacity change from 0 to 512 [ 1555.197790][T29146] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1555.209072][T17718] usb 1-1: device descriptor read/64, error -71 [ 1555.634004][T29146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29146 comm=syz.4.9806 [ 1555.726791][T29159] loop4: detected capacity change from 0 to 512 [ 1555.817790][T17718] usb 1-1: device descriptor read/64, error -71 [ 1555.826789][T29159] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1555.834798][T29159] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1555.935115][T17718] usb usb1-port1: attempt power cycle [ 1556.016516][T29169] fuse: Bad value for 'group_id' [ 1556.055084][T26437] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1556.314526][T29176] loop2: detected capacity change from 0 to 512 [ 1556.341911][T29176] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1556.364973][T17718] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1556.384716][T29176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9816'. [ 1556.545095][T17718] usb 1-1: device descriptor read/8, error -71 [ 1556.815058][T17718] usb 1-1: device descriptor read/8, error -71 [ 1557.031452][T29187] loop3: detected capacity change from 0 to 16 [ 1557.039037][T29180] UDC core: couldn't find an available UDC or it's busy: -16 [ 1557.085056][T17718] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1557.094185][T29187] erofs: (device loop3): mounted with root inode @ nid 36. [ 1557.105304][T26437] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1557.160534][T29196] loop2: detected capacity change from 0 to 512 [ 1557.188187][T29198] loop4: detected capacity change from 0 to 512 [ 1557.207570][T29196] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1557.215069][T26437] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1557.228728][T26437] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1557.238996][T26437] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1557.248008][T17718] usb 1-1: device descriptor read/8, error -71 [ 1557.415854][T26437] usb 7-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 1557.440658][T26437] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.450814][T26437] usb 7-1: Product: syz [ 1557.456219][T26437] usb 7-1: Manufacturer: syz [ 1557.461590][T26437] usb 7-1: SerialNumber: syz [ 1557.467291][T29198] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1557.498496][T29198] EXT4-fs (loop4): Unrecognized mount option "euid=00000000000000000000" or missing value [ 1557.605818][T17718] usb 1-1: device descriptor read/8, error -71 [ 1557.621467][T29198] loop4: detected capacity change from 0 to 256 [ 1557.725166][T17718] usb usb1-port1: unable to enumerate USB device [ 1557.845453][T26437] usb 7-1: 0:1 : does not exist [ 1557.850810][T26437] usb 7-1: 0:2 : does not exist [ 1558.289897][ T9384] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1558.300471][T26437] usb 7-1: USB disconnect, device number 85 [ 1558.322602][T29219] loop3: detected capacity change from 0 to 1024 [ 1558.404152][T29219] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 1558.424100][T29219] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.3.9825: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1558.434387][T29223] loop2: detected capacity change from 0 to 512 [ 1558.444124][T29219] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 1558.459149][T29219] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #2: comm syz.3.9825: Deleting old file: nlink 1, error=-117 [ 1558.501833][T29223] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1558.515546][T29223] FAULT_INJECTION: forcing a failure. [ 1558.515546][T29223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1558.528783][T29223] CPU: 0 PID: 29223 Comm: syz.2.9826 Tainted: G W syzkaller #0 [ 1558.534978][ T9384] usb 5-1: Using ep0 maxpacket: 16 [ 1558.537654][T29223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1558.537669][T29223] Call Trace: [ 1558.537677][T29223] [ 1558.559003][T29223] __dump_stack+0x21/0x30 [ 1558.563334][T29223] dump_stack_lvl+0x110/0x170 [ 1558.568003][T29223] ? show_regs_print_info+0x20/0x20 [ 1558.573203][T29223] dump_stack+0x15/0x20 [ 1558.577382][T29223] should_fail+0x3ab/0x500 [ 1558.581814][T29223] should_fail_usercopy+0x1a/0x20 [ 1558.586990][T29223] _copy_to_user+0x20/0x90 [ 1558.591411][T29223] simple_read_from_buffer+0xe9/0x160 [ 1558.596798][T29223] proc_fail_nth_read+0x1a6/0x220 [ 1558.601839][T29223] ? proc_fault_inject_write+0x310/0x310 [ 1558.607574][T29223] ? security_file_permission+0x83/0xa0 [ 1558.613120][T29223] ? proc_fault_inject_write+0x310/0x310 [ 1558.618747][T29223] vfs_read+0x28c/0xc20 [ 1558.622895][T29223] ? kernel_read+0x1f0/0x1f0 [ 1558.627480][T29223] ? __kasan_check_write+0x14/0x20 [ 1558.632600][T29223] ? mutex_lock+0x9b/0x1c0 [ 1558.637012][T29223] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1558.643596][T29223] ? __fget_files+0x2e1/0x340 [ 1558.648350][T29223] ? __fdget_pos+0x2d2/0x380 [ 1558.652925][T29223] ? ksys_read+0x70/0x260 [ 1558.655053][ T9384] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1558.657243][T29223] ksys_read+0x14a/0x260 [ 1558.657272][T29223] ? vfs_write+0xfd0/0xfd0 [ 1558.668342][ T9384] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1558.672538][T29223] ? __kasan_check_write+0x14/0x20 [ 1558.672563][T29223] ? switch_fpu_return+0x15d/0x2c0 [ 1558.678171][ T9384] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1558.686768][T29223] __x64_sys_read+0x7b/0x90 [ 1558.686798][T29223] x64_sys_call+0x96d/0x9a0 [ 1558.686816][T29223] do_syscall_64+0x4c/0xa0 [ 1558.686833][T29223] ? clear_bhb_loop+0x50/0xa0 [ 1558.692330][ T9384] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1558.697044][T29223] ? clear_bhb_loop+0x50/0xa0 [ 1558.697070][T29223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1558.697089][T29223] RIP: 0033:0x7f2845b316ce [ 1558.710400][ T9384] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1558.714503][T29223] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1558.714522][T29223] RSP: 002b:00007f28445c9fe8 EFLAGS: 00000246 [ 1558.719265][ T9384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.723517][T29223] ORIG_RAX: 0000000000000000 [ 1558.723529][T29223] RAX: ffffffffffffffda RBX: 00007f28445ca6c0 RCX: 00007f2845b316ce [ 1558.723545][T29223] RDX: 000000000000000f RSI: 00007f28445ca0a0 RDI: 0000000000000004 [ 1558.729778][ T9384] usb 5-1: config 0 descriptor?? [ 1558.734797][T29223] RBP: 00007f28445ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.734815][T29223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1558.734827][T29223] R13: 00007f2845df9038 R14: 00007f2845df8fa0 R15: 00007ffde813bb78 [ 1558.842198][T29223] [ 1558.860208][T17718] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1558.916333][T29231] loop2: detected capacity change from 0 to 512 [ 1558.958093][T29231] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1559.013235][T29231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9827'. [ 1559.295108][T17718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1559.321745][T29228] UDC core: couldn't find an available UDC or it's busy: -16 [ 1559.336316][T17718] usb 1-1: not running at top speed; connect to a high speed hub [ 1559.425078][T17718] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.454994][T17718] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1559.470401][T17718] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1559.484627][T29250] loop2: detected capacity change from 0 to 512 [ 1559.493466][T17718] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1559.505926][T29250] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1559.520889][T29250] EXT4-fs warning (device loop2): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 1559.655010][ T8538] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1559.685099][T17718] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1559.694424][T17718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.702922][T17718] usb 1-1: Product: syz [ 1559.707701][T17718] usb 1-1: Manufacturer: syz [ 1559.713819][T17718] usb 1-1: SerialNumber: syz [ 1559.735279][T29204] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1559.884981][T27748] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1559.955024][ T8538] usb 7-1: device descriptor read/64, error -71 [ 1560.105445][T17718] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1560.122187][T17718] usb 1-1: USB disconnect, device number 106 [ 1560.215097][T27748] usb 3-1: not running at top speed; connect to a high speed hub [ 1560.298153][T27748] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 214, changing to 4 [ 1560.309416][T27748] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1272, setting to 1023 [ 1560.319699][T29257] binder: BINDER_SET_CONTEXT_MGR already set [ 1560.326633][T29257] binder: 29256:29257 ioctl 4018620d 200000004a80 returned -16 [ 1560.344965][ T8538] usb 7-1: device descriptor read/64, error -71 [ 1560.360894][T29261] device tunl0 entered promiscuous mode [ 1560.514759][T27748] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1560.746901][T27748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.755401][T27748] usb 3-1: Product: syz [ 1560.756012][T29270] loop0: detected capacity change from 0 to 512 [ 1560.759584][T27748] usb 3-1: Manufacturer: syz [ 1560.759601][T27748] usb 3-1: SerialNumber: syz [ 1560.799857][T29270] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1560.815164][ T9384] usbhid 5-1:0.0: can't add hid device: -71 [ 1560.821938][ T9384] usbhid: probe of 5-1:0.0 failed with error -71 [ 1560.834302][ T9384] usb 5-1: USB disconnect, device number 59 [ 1560.893934][T29270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9841'. [ 1560.903220][ T8538] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1561.014613][ T9366] android_work: did not send uevent (0 0 0000000000000000) [ 1561.036776][T29253] exfat: Deprecated parameter 'utf8' [ 1561.042678][T29253] exfat: Deprecated parameter 'utf8' [ 1561.060006][T29253] exfat: Deprecated parameter 'namecase' [ 1561.090646][T29253] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1561.166500][T29283] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1561.174978][ T8538] usb 7-1: device descriptor read/64, error -71 [ 1561.176855][T29283] EXT4-fs warning (device loop0): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 1561.226284][T27748] usb 3-1: USB disconnect, device number 97 [ 1561.564981][ T8538] usb 7-1: device descriptor read/64, error -71 [ 1561.634986][T26128] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1561.685104][ T8538] usb usb7-port1: attempt power cycle [ 1561.868941][T29301] device vlan2 entered promiscuous mode [ 1561.990028][T29305] set_capacity_and_notify: 2 callbacks suppressed [ 1561.990047][T29305] loop2: detected capacity change from 0 to 512 [ 1562.035080][T26128] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1562.044744][T29305] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1562.095058][ T8538] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1562.110486][T29305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9854'. [ 1562.119907][T26128] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.131263][T26128] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1562.140767][T26128] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7 [ 1562.275079][ T8538] usb 7-1: device descriptor read/8, error -71 [ 1562.315866][T26128] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1562.327730][T26128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.338013][T26128] usb 4-1: Product: syz [ 1562.342251][T26128] usb 4-1: Manufacturer: syz [ 1562.347172][T26128] usb 4-1: SerialNumber: syz [ 1562.485046][ T8538] usb 7-1: device descriptor read/8, error -71 [ 1562.497569][T29327] overlayfs: overlapping lowerdir path [ 1562.554978][ T9384] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1562.616789][T29331] loop4: detected capacity change from 0 to 512 [ 1562.625922][T26128] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1562.649641][T29331] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1562.659862][T26128] usb 4-1: USB disconnect, device number 54 [ 1562.697937][T29331] xt_hashlimit: size too large, truncated to 1048576 [ 1562.795050][ T9384] usb 3-1: Using ep0 maxpacket: 32 [ 1562.814527][T29336] fuse: Bad value for 'group_id' [ 1562.878093][T27428] udevd[27428]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1562.925110][ T9384] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1562.933398][ T9384] usb 3-1: config 0 has no interface number 0 [ 1562.939858][ T9384] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1562.995017][ T8538] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1563.095665][ T8538] usb 7-1: Using ep0 maxpacket: 32 [ 1563.118282][ T9384] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1563.134840][ T9384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.142038][T29341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9867'. [ 1563.151967][ T9384] usb 3-1: Product: syz [ 1563.152008][ T9384] usb 3-1: Manufacturer: syz [ 1563.161464][ T9384] usb 3-1: SerialNumber: syz [ 1563.169977][ T9384] usb 3-1: config 0 descriptor?? [ 1563.215537][ T9384] smsc75xx v1.0.0 [ 1563.275113][ T8538] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1563.293617][ T8538] usb 7-1: config 0 has no interface number 0 [ 1563.299990][ T8538] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1563.415069][ T9364] android_work: did not send uevent (0 0 0000000000000000) [ 1563.454991][T26437] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1563.465173][ T8538] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1563.484373][ T8538] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.492574][ T8538] usb 7-1: Product: syz [ 1563.496887][ T8538] usb 7-1: Manufacturer: syz [ 1563.501501][ T8538] usb 7-1: SerialNumber: syz [ 1563.507496][ T8538] usb 7-1: config 0 descriptor?? [ 1563.555484][ T8538] smsc75xx v1.0.0 [ 1563.725086][T26437] usb 4-1: device descriptor read/64, error -71 [ 1564.115036][T26437] usb 4-1: device descriptor read/64, error -71 [ 1564.279932][T29355] loop0: detected capacity change from 0 to 1024 [ 1564.307681][T29355] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 1564.315118][ T9384] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1564.327836][T29355] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1564.339137][ T9384] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1564.368104][T29355] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: comm syz.0.9871: lblock 0 mapped to illegal pblock 0 (length 6) [ 1564.375036][ T9384] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1564.392542][ T9384] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1564.402394][ T9384] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1564.412827][T26437] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1564.420560][ T9384] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1564.430101][ T9384] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 1564.448534][ T9384] usb 3-1: USB disconnect, device number 98 [ 1564.554098][T29364] loop0: detected capacity change from 0 to 256 [ 1564.565479][T29364] exfat: Unknown parameter 'N8KNvT?+m&uL' [ 1564.566424][T29366] UDC core: couldn't find an available UDC or it's busy: -19 [ 1564.625098][ T8538] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1564.636115][ T8538] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1564.675094][ T8538] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1564.689907][ T8538] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1564.699697][ T8538] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1564.710076][ T8538] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1564.719613][ T8538] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 1564.729666][ T8538] usb 7-1: USB disconnect, device number 89 [ 1564.735018][T26437] usb 4-1: device descriptor read/64, error -71 [ 1564.861764][T29375] Invalid argument reading file caps for ./file0 [ 1564.879480][T29377] loop2: detected capacity change from 0 to 16 [ 1564.955213][ T9366] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1564.975920][T29377] erofs: (device loop2): mounted with root inode @ nid 36. [ 1564.986175][T29377] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 1564.995466][T29377] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1565.004580][T29377] attempt to access beyond end of device [ 1565.004580][T29377] loop2: rw=524288, want=136, limit=16 [ 1565.015820][T29377] attempt to access beyond end of device [ 1565.015820][T29377] loop2: rw=524288, want=88, limit=16 [ 1565.124996][T26437] usb 4-1: device descriptor read/64, error -71 [ 1565.194969][ T9366] usb 1-1: Using ep0 maxpacket: 8 [ 1565.245061][T26437] usb usb4-port1: attempt power cycle [ 1565.315090][ T9366] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1565.332581][ T9366] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1565.352768][ T9366] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1565.359678][ T9366] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1565.374423][ T9366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.393910][ T9366] usb 1-1: config 0 descriptor?? [ 1565.655080][T26437] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1565.678931][T29395] UDC core: couldn't find an available UDC or it's busy: -16 [ 1565.825002][T26437] usb 4-1: device descriptor read/8, error -71 [ 1565.876083][ T9366] logitech 0003:046D:CA04.0058: unknown main item tag 0x0 [ 1565.883259][ T9366] logitech 0003:046D:CA04.0058: unknown main item tag 0x0 [ 1565.909465][ T9366] logitech 0003:046D:CA04.0058: unknown main item tag 0x0 [ 1565.931105][ T9366] logitech 0003:046D:CA04.0058: unknown main item tag 0x0 [ 1565.952675][ T9366] logitech 0003:046D:CA04.0058: unknown main item tag 0x0 [ 1565.974244][ T9366] logitech 0003:046D:CA04.0058: unknown main item tag 0x0 [ 1565.995757][ T9366] logitech 0003:046D:CA04.0058: unknown main item tag 0x0 [ 1566.026573][ T9366] logitech 0003:046D:CA04.0058: hidraw0: USB HID v0.40 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 1566.039852][ T9366] logitech 0003:046D:CA04.0058: no inputs found [ 1566.072731][T29397] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9885'. [ 1566.092890][ T9366] usb 1-1: USB disconnect, device number 107 [ 1566.099147][T26437] usb 4-1: device descriptor read/8, error -71 [ 1566.286523][T29404] binder: BINDER_SET_CONTEXT_MGR already set [ 1566.301741][T29404] binder: 29403:29404 ioctl 4018620d 200000004a80 returned -16 [ 1566.675073][T26437] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1566.815629][T26437] usb 4-1: Using ep0 maxpacket: 32 [ 1566.935258][T26437] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1567.000599][T26437] usb 4-1: config 0 has no interface number 0 [ 1567.092802][T26437] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1567.345323][T26437] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1567.397699][T26437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.924971][T26437] usb 4-1: Product: syz [ 1567.929211][T26437] usb 4-1: Manufacturer: syz [ 1567.933831][T26437] usb 4-1: SerialNumber: syz [ 1567.943859][T26437] usb 4-1: config 0 descriptor?? [ 1567.951891][T29419] loop0: detected capacity change from 0 to 512 [ 1567.973557][T29421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9895'. [ 1567.985551][T26437] smsc75xx v1.0.0 [ 1567.996039][T29419] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1568.038584][T29419] fs-verity (loop0, inode 15): fs-verity keyring is empty, rejecting signed file! [ 1568.111491][T29432] fuse: Bad value for 'group_id' [ 1568.335018][ T20] usb 7-1: new full-speed USB device number 90 using dummy_hcd [ 1568.404487][T29435] loop0: detected capacity change from 0 to 512 [ 1568.455836][T29435] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1568.468688][T29435] EXT4-fs warning (device loop0): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 1568.477096][T29441] FAULT_INJECTION: forcing a failure. [ 1568.477096][T29441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.492658][T29441] CPU: 1 PID: 29441 Comm: syz.2.9899 Tainted: G W syzkaller #0 [ 1568.501648][T29441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1568.511812][T29441] Call Trace: [ 1568.515108][T29441] [ 1568.518056][T29441] __dump_stack+0x21/0x30 [ 1568.522418][T29441] dump_stack_lvl+0x110/0x170 [ 1568.527206][T29441] ? show_regs_print_info+0x20/0x20 [ 1568.532484][T29441] dump_stack+0x15/0x20 [ 1568.536627][T29441] should_fail+0x3ab/0x500 [ 1568.541046][T29441] should_fail_usercopy+0x1a/0x20 [ 1568.546070][T29441] _copy_from_iter+0x220/0x10a0 [ 1568.550929][T29441] ? copy_mc_pipe_to_iter+0x7e0/0x7e0 [ 1568.556308][T29441] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1568.561845][T29441] ? __check_object_size+0x2dd/0x3b0 [ 1568.567122][T29441] netlink_sendmsg+0x72c/0xb80 [ 1568.571883][T29441] ? netlink_getsockopt+0x530/0x530 [ 1568.577065][T29441] ? kasan_set_track+0x4a/0x70 [ 1568.581825][T29441] ? security_socket_sendmsg+0x82/0xa0 [ 1568.587275][T29441] ? netlink_getsockopt+0x530/0x530 [ 1568.592458][T29441] ____sys_sendmsg+0x5be/0x8f0 [ 1568.597207][T29441] ? __sys_sendmsg_sock+0x40/0x40 [ 1568.602229][T29441] ? import_iovec+0x7c/0xb0 [ 1568.606723][T29441] ___sys_sendmsg+0x236/0x2e0 [ 1568.611489][T29441] ? __sys_sendmsg+0x280/0x280 [ 1568.616257][T29441] ? __fdget+0x1a1/0x230 [ 1568.620505][T29441] __x64_sys_sendmsg+0x201/0x2d0 [ 1568.625474][T29441] ? ___sys_sendmsg+0x2e0/0x2e0 [ 1568.630390][T29441] ? ksys_write+0x1fa/0x260 [ 1568.634922][T29441] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1568.641096][T29441] x64_sys_call+0x4b/0x9a0 [ 1568.645529][T29441] do_syscall_64+0x4c/0xa0 [ 1568.649959][T29441] ? clear_bhb_loop+0x50/0xa0 [ 1568.654647][T29441] ? clear_bhb_loop+0x50/0xa0 [ 1568.659339][T29441] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1568.665251][T29441] RIP: 0033:0x7f2845b70e99 [ 1568.669678][T29441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.689297][T29441] RSP: 002b:00007f28445ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1568.697735][T29441] RAX: ffffffffffffffda RBX: 00007f2845df8fa0 RCX: 00007f2845b70e99 [ 1568.705728][T29441] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1568.713822][T29441] RBP: 00007f28445ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.721806][T29441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.729802][T29441] R13: 00007f2845df9038 R14: 00007f2845df8fa0 R15: 00007ffde813bb78 [ 1568.737882][T29441] [ 1568.883114][T29463] loop0: detected capacity change from 0 to 512 [ 1568.889543][ T20] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1568.935163][ T20] usb 7-1: not running at top speed; connect to a high speed hub [ 1568.974310][ T9384] android_work: did not send uevent (0 0 0000000000000000) [ 1569.013430][T29463] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1569.225430][ T20] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1569.263253][ T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.299184][T29467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9905'. [ 1569.319849][ T20] usb 7-1: Product: syz [ 1569.348373][ T20] usb 7-1: Manufacturer: syz [ 1569.408268][ T20] usb 7-1: SerialNumber: syz [ 1569.506710][T26437] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1569.517739][T26437] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1569.545394][T26437] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1569.557961][T26437] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1569.568133][T26437] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1569.578622][T26437] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1569.588575][T26437] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 1569.599108][T26437] usb 4-1: USB disconnect, device number 58 [ 1570.415019][ T30] audit: type=1326 audit(2000000884.283:13012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.9908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e206b6e99 code=0x7ffc0000 [ 1570.469773][ T30] audit: type=1326 audit(2000000884.283:13013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.9908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e206b6e99 code=0x7ffc0000 [ 1570.538945][ T30] audit: type=1326 audit(2000000884.283:13014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.9908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e206b6e99 code=0x7ffc0000 [ 1570.564466][ T30] audit: type=1326 audit(2000000884.283:13015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.9908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e206776ce code=0x7ffc0000 [ 1570.570945][T29485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9911'. [ 1570.596399][ T30] audit: type=1326 audit(2000000884.283:13016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.9908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e206b6b2b code=0x7ffc0000 [ 1570.625775][ T30] audit: type=1326 audit(2000000884.283:13017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.9908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e206b6b2b code=0x7ffc0000 [ 1570.651203][ T30] audit: type=1326 audit(2000000884.303:13018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.9908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e206b6b2b code=0x7ffc0000 [ 1570.676489][ T9384] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1570.680822][ T30] audit: type=1326 audit(2000000884.303:13019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.9908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e206b6b2b code=0x7ffc0000 [ 1570.709237][ T30] audit: type=1326 audit(2000000884.593:13020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.9908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e206b6b2b code=0x7ffc0000 [ 1570.734537][ T30] audit: type=1326 audit(2000000884.613:13021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.9908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e206b6b2b code=0x7ffc0000 [ 1570.783190][T29489] UDC core: couldn't find an available UDC or it's busy: -19 [ 1570.802849][T29491] UDC core: couldn't find an available UDC or it's busy: -19 [ 1570.885009][ T8538] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1570.974987][ T9384] usb 4-1: device descriptor read/64, error -71 [ 1570.981575][T29499] loop2: detected capacity change from 0 to 512 [ 1571.049519][ T20] usb 7-1: USB disconnect, device number 90 [ 1571.205094][ T8538] usb 5-1: not running at top speed; connect to a high speed hub [ 1571.285054][T27748] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1571.292864][ T8538] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 214, changing to 4 [ 1571.303966][ T8538] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1272, setting to 1023 [ 1571.396033][ T9384] usb 4-1: device descriptor read/64, error -71 [ 1571.405073][ T20] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1571.475061][ T8538] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1571.484154][ T8538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.492425][ T8538] usb 5-1: Product: syz [ 1571.496697][ T8538] usb 5-1: Manufacturer: syz [ 1571.501312][ T8538] usb 5-1: SerialNumber: syz [ 1571.534972][T27748] usb 3-1: Using ep0 maxpacket: 8 [ 1571.674989][ T9384] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1571.700111][T26437] android_work: did not send uevent (0 0 0000000000000000) [ 1571.705093][T27748] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1571.756706][T29485] loop4: detected capacity change from 0 to 256 [ 1571.765271][ T20] usb 7-1: config index 0 descriptor too short (expected 57901, got 45) [ 1571.773805][ T20] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1571.786544][ T20] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1571.799549][ T20] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.800188][T29485] exfat: Deprecated parameter 'utf8' [ 1571.815577][ T20] usb 7-1: config 0 has no interfaces? [ 1571.815945][T29485] exfat: Deprecated parameter 'utf8' [ 1571.827119][ T20] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1571.834696][T29485] exfat: Deprecated parameter 'namecase' [ 1571.842856][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.856166][ T20] usb 7-1: config 0 descriptor?? [ 1571.893544][T29485] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1571.975190][ T9384] usb 4-1: device descriptor read/64, error -71 [ 1571.975268][T27748] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 1571.996575][T27748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.004658][T27748] usb 3-1: Product: syz [ 1572.008911][T27748] usb 3-1: Manufacturer: syz [ 1572.013565][T27748] usb 3-1: SerialNumber: syz [ 1572.071520][ T8538] usb 5-1: USB disconnect, device number 60 [ 1572.292186][T29499] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1572.301556][T29499] FAT-fs (loop2): Filesystem has been set read-only [ 1572.312987][T28046] udevd[28046]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1572.323438][T29499] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 1572.375035][ T9384] usb 4-1: device descriptor read/64, error -71 [ 1572.525153][ T9384] usb usb4-port1: attempt power cycle [ 1572.634560][ T9366] usb 7-1: USB disconnect, device number 91 [ 1572.948612][ T9384] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1572.962346][T29521] UDC core: couldn't find an available UDC or it's busy: -19 [ 1572.992912][T29525] UDC core: couldn't find an available UDC or it's busy: -19 [ 1573.035014][T27748] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1573.065164][T27748] usb 3-1: unit 2: unexpected type 0x03 [ 1573.070864][T27748] usb 3-1: unit 146 not found! [ 1573.112292][T29516] kvm [29515]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x800100000080 [ 1573.122295][T29516] kvm [29515]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1573.125152][T27748] usb 3-1: unit 4 not found! [ 1573.132050][ T9384] usb 4-1: device descriptor read/8, error -71 [ 1573.144993][T27748] usb 3-1: unit 191 not found! [ 1573.150111][T29516] kvm [29515]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x800000000000 [ 1573.196122][T27748] usb 3-1: USB disconnect, device number 99 [ 1573.414996][ T9384] usb 4-1: device descriptor read/8, error -71 [ 1573.452224][T29537] FAULT_INJECTION: forcing a failure. [ 1573.452224][T29537] name fail_page_alloc, interval 1, probability 100, space 0, times 0 [ 1573.465795][T29537] CPU: 1 PID: 29537 Comm: syz.3.9930 Tainted: G W syzkaller #0 [ 1573.474698][T29537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1573.484772][T29537] Call Trace: [ 1573.488086][T29537] [ 1573.491063][T29537] __dump_stack+0x21/0x30 [ 1573.495434][T29537] dump_stack_lvl+0x110/0x170 [ 1573.500141][T29537] ? show_regs_print_info+0x20/0x20 [ 1573.505366][T29537] ? unwind_get_return_address+0x4d/0x90 [ 1573.511046][T29537] ? stack_trace_save+0xf0/0xf0 [ 1573.515930][T29537] dump_stack+0x15/0x20 [ 1573.520115][T29537] should_fail+0x3ab/0x500 [ 1573.524588][T29537] should_fail_alloc_page+0x55/0x80 [ 1573.529935][T29537] prepare_alloc_pages+0x13f/0x590 [ 1573.535094][T29537] ? __alloc_pages_bulk+0xab0/0xab0 [ 1573.540344][T29537] __alloc_pages+0x11d/0x460 [ 1573.545004][T29537] ? prep_new_page+0x110/0x110 [ 1573.549838][T29537] shmem_alloc_and_acct_page+0x4a2/0x8d0 [ 1573.555522][T29537] ? shmem_swapin_page+0x1630/0x1630 [ 1573.560868][T29537] ? xas_load+0x2dc/0x300 [ 1573.565230][T29537] ? pagecache_get_page+0xceb/0xdd0 [ 1573.570465][T29537] ? page_cache_prev_miss+0x290/0x290 [ 1573.575862][T29537] ? arch_stack_walk+0xee/0x140 [ 1573.580753][T29537] shmem_getpage_gfp+0x127d/0x2250 [ 1573.585896][T29537] ? __kasan_kmalloc+0xd4/0x100 [ 1573.590775][T29537] ? do_splice_direct+0x1c2/0x2d0 [ 1573.595838][T29537] shmem_file_read_iter+0x2f1/0x840 [ 1573.601093][T29537] generic_file_splice_read+0x3ea/0x5f0 [ 1573.606682][T29537] ? splice_shrink_spd+0xb0/0xb0 [ 1573.611686][T29537] ? __kasan_check_read+0x11/0x20 [ 1573.616738][T29537] ? fsnotify_perm+0x269/0x5b0 [ 1573.621542][T29537] ? security_file_permission+0x83/0xa0 [ 1573.627148][T29537] ? rw_verify_area+0xa7/0x1c0 [ 1573.631946][T29537] splice_direct_to_actor+0x40f/0xb40 [ 1573.637347][T29537] ? do_splice_direct+0x2d0/0x2d0 [ 1573.642401][T29537] ? pipe_to_sendpage+0x320/0x320 [ 1573.647449][T29537] ? security_file_permission+0x83/0xa0 [ 1573.653004][T29537] ? rw_verify_area+0xa7/0x1c0 [ 1573.657765][T29537] do_splice_direct+0x1c2/0x2d0 [ 1573.662617][T29537] ? splice_direct_to_actor+0xb40/0xb40 [ 1573.668176][T29537] ? security_file_permission+0x83/0xa0 [ 1573.673723][T29537] do_sendfile+0x515/0xe20 [ 1573.678144][T29537] ? __mutex_lock_slowpath+0x10/0x10 [ 1573.683435][T29537] ? do_preadv+0x390/0x390 [ 1573.687946][T29537] ? fput_many+0x15a/0x1a0 [ 1573.692369][T29537] ? fput+0x1a/0x20 [ 1573.696172][T29537] __x64_sys_sendfile64+0x199/0x1f0 [ 1573.701366][T29537] ? __ia32_sys_read+0x90/0x90 [ 1573.706155][T29537] ? __ia32_sys_sendfile+0x190/0x190 [ 1573.711438][T29537] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1573.717533][T29537] x64_sys_call+0x88d/0x9a0 [ 1573.722051][T29537] do_syscall_64+0x4c/0xa0 [ 1573.726676][T29537] ? clear_bhb_loop+0x50/0xa0 [ 1573.731375][T29537] ? clear_bhb_loop+0x50/0xa0 [ 1573.736068][T29537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1573.741985][T29537] RIP: 0033:0x7f2e206b6e99 [ 1573.746399][T29537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.766015][T29537] RSP: 002b:00007f2e1f0ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1573.774434][T29537] RAX: ffffffffffffffda RBX: 00007f2e2093f090 RCX: 00007f2e206b6e99 [ 1573.782428][T29537] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 1573.790402][T29537] RBP: 00007f2e1f0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.798476][T29537] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.806450][T29537] R13: 00007f2e2093f128 R14: 00007f2e2093f090 R15: 00007ffdb240c088 [ 1573.814426][T29537] [ 1574.167034][T29551] FAULT_INJECTION: forcing a failure. [ 1574.167034][T29551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.180610][T29551] CPU: 1 PID: 29551 Comm: syz.0.9932 Tainted: G W syzkaller #0 [ 1574.189486][T29551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1574.199668][T29551] Call Trace: [ 1574.202964][T29551] [ 1574.205912][T29551] __dump_stack+0x21/0x30 [ 1574.210264][T29551] dump_stack_lvl+0x110/0x170 [ 1574.214949][T29551] ? show_regs_print_info+0x20/0x20 [ 1574.220161][T29551] ? io_sqe_buffer_register+0x2fe/0x14b0 [ 1574.225806][T29551] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1574.231454][T29551] dump_stack+0x15/0x20 [ 1574.235709][T29551] should_fail+0x3ab/0x500 [ 1574.240143][T29551] should_fail_usercopy+0x1a/0x20 [ 1574.245180][T29551] _copy_from_user+0x20/0xd0 [ 1574.249870][T29551] __io_register_rsrc_update+0x523/0x1750 [ 1574.255601][T29551] ? _raw_spin_unlock+0x4d/0x70 [ 1574.260474][T29551] ? io_rsrc_node_ref_zero+0x340/0x340 [ 1574.265954][T29551] ? __kasan_check_read+0x11/0x20 [ 1574.270992][T29551] ? preempt_schedule_irq+0xca/0x120 [ 1574.276299][T29551] ? __cond_resched+0xd0/0xd0 [ 1574.280987][T29551] ? __kasan_check_write+0x14/0x20 [ 1574.286114][T29551] ? _copy_from_user+0x95/0xd0 [ 1574.290899][T29551] io_register_rsrc_update+0x1aa/0x1c0 [ 1574.296373][T29551] ? sysvec_reschedule_ipi+0x78/0x80 [ 1574.301668][T29551] ? io_register_rsrc+0x1f0/0x1f0 [ 1574.306705][T29551] ? __se_sys_io_uring_register+0x227/0xf40 [ 1574.312614][T29551] __se_sys_io_uring_register+0x4a7/0xf40 [ 1574.318346][T29551] __x64_sys_io_uring_register+0x9b/0xb0 [ 1574.323989][T29551] x64_sys_call+0x537/0x9a0 [ 1574.328505][T29551] do_syscall_64+0x4c/0xa0 [ 1574.332933][T29551] ? clear_bhb_loop+0x50/0xa0 [ 1574.337620][T29551] ? clear_bhb_loop+0x50/0xa0 [ 1574.342335][T29551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1574.348240][T29551] RIP: 0033:0x7f8cc1877e99 [ 1574.352666][T29551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.372371][T29551] RSP: 002b:00007f8cc028f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1574.380803][T29551] RAX: ffffffffffffffda RBX: 00007f8cc1b00180 RCX: 00007f8cc1877e99 [ 1574.388884][T29551] RDX: 0000200000000300 RSI: 0000000000000010 RDI: 0000000000000007 [ 1574.396957][T29551] RBP: 00007f8cc028f090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.404942][T29551] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 1574.412925][T29551] R13: 00007f8cc1b00218 R14: 00007f8cc1b00180 R15: 00007ffc541d7fa8 [ 1574.420917][T29551] [ 1574.430924][T29551] loop0: detected capacity change from 0 to 128 [ 1574.529985][T29552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9933'. [ 1574.815028][ T9364] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1574.826455][T29554] overlayfs: missing 'lowerdir' [ 1574.947441][T29563] loop0: detected capacity change from 0 to 512 [ 1575.130593][T26437] android_work: did not send uevent (0 0 0000000000000000) [ 1575.169676][T29568] UDC core: couldn't find an available UDC or it's busy: -19 [ 1575.180508][T29570] UDC core: couldn't find an available UDC or it's busy: -19 [ 1575.225151][ T9364] usb 3-1: not running at top speed; connect to a high speed hub [ 1575.290586][T29563] loop0: detected capacity change from 0 to 4096 [ 1575.325275][ T9364] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 214, changing to 4 [ 1575.343053][T29563] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1575.351203][ T9364] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1272, setting to 1023 [ 1575.395485][T29563] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1575.401592][T29579] loop4: detected capacity change from 0 to 512 [ 1575.433204][T29563] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.9935: corrupted inode contents [ 1575.446982][T29563] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #15: comm syz.0.9935: mark_inode_dirty error [ 1575.461011][T29563] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.9935: corrupted inode contents [ 1575.473496][T29563] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.9935: mark_inode_dirty error [ 1575.486213][T29563] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.9935: corrupted inode contents [ 1575.499046][T29563] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.9935: mark_inode_dirty error [ 1575.510804][T29563] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.9935: corrupted inode contents [ 1575.523714][T29563] EXT4-fs error (device loop0): ext4_truncate:4317: inode #15: comm syz.0.9935: mark_inode_dirty error [ 1575.536169][T29563] EXT4-fs error (device loop0) in ext4_setattr:5676: Corrupt filesystem [ 1575.536932][T29581] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.9935: corrupted inode contents [ 1575.575449][ T9364] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1575.586639][ T9364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.602046][ T9364] usb 3-1: Product: syz [ 1575.606815][ T9364] usb 3-1: Manufacturer: syz [ 1575.612447][ T9364] usb 3-1: SerialNumber: syz [ 1575.667687][T29579] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1576.274743][ T9364] usb 3-1: USB disconnect, device number 100 [ 1576.389878][T29601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29601 comm=syz.2.9944 [ 1576.750519][T29605] loop3: detected capacity change from 0 to 40427 [ 1576.806103][T29605] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1576.832177][T29605] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1576.890274][T29618] UDC core: couldn't find an available UDC or it's busy: -19 [ 1576.897031][T29605] F2FS-fs (loop3): invalid crc value [ 1576.931212][T29605] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1576.954054][T29605] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1576.961228][T29605] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1576.969535][T29605] FAULT_INJECTION: forcing a failure. [ 1576.969535][T29605] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.982338][T29605] CPU: 0 PID: 29605 Comm: syz.3.9946 Tainted: G W syzkaller #0 [ 1576.991357][T29605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1577.001436][T29605] Call Trace: [ 1577.004735][T29605] [ 1577.007678][T29605] __dump_stack+0x21/0x30 [ 1577.012020][T29605] dump_stack_lvl+0x110/0x170 [ 1577.016703][T29605] ? show_regs_print_info+0x20/0x20 [ 1577.021916][T29605] dump_stack+0x15/0x20 [ 1577.026077][T29605] should_fail+0x3ab/0x500 [ 1577.030673][T29605] __should_failslab+0xa4/0xe0 [ 1577.035444][T29605] should_failslab+0x9/0x20 [ 1577.039954][T29605] slab_pre_alloc_hook+0x39/0xd0 [ 1577.044894][T29605] ? __alloc_skb+0xe4/0x730 [ 1577.049407][T29605] kmem_cache_alloc+0x44/0x260 [ 1577.054184][T29605] __alloc_skb+0xe4/0x730 [ 1577.058544][T29605] sk_stream_alloc_skb+0x216/0xb70 [ 1577.063662][T29605] tcp_sendmsg_locked+0xcbb/0x3330 [ 1577.068787][T29605] ? kasan_set_track+0x4a/0x70 [ 1577.073561][T29605] ? kasan_set_free_info+0x23/0x40 [ 1577.078679][T29605] ? _raw_spin_lock_irq+0xf0/0xf0 [ 1577.083848][T29605] ? lock_sock_nested+0x217/0x2a0 [ 1577.088890][T29605] ? tcp_free_fastopen_req+0x80/0x80 [ 1577.094183][T29605] ? __kasan_check_write+0x14/0x20 [ 1577.099299][T29605] ? __fget_files+0x2e1/0x340 [ 1577.103978][T29605] tcp_sendmsg+0x2f/0x50 [ 1577.108233][T29605] inet6_sendmsg+0xa5/0xc0 [ 1577.112662][T29605] __sys_sendto+0x46d/0x620 [ 1577.117168][T29605] ? __ia32_sys_getpeername+0x90/0x90 [ 1577.122548][T29605] ? __ia32_sys_read+0x90/0x90 [ 1577.127346][T29605] __x64_sys_sendto+0xe5/0x100 [ 1577.132162][T29605] x64_sys_call+0x178/0x9a0 [ 1577.136675][T29605] do_syscall_64+0x4c/0xa0 [ 1577.141092][T29605] ? clear_bhb_loop+0x50/0xa0 [ 1577.145792][T29605] ? clear_bhb_loop+0x50/0xa0 [ 1577.150466][T29605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1577.156359][T29605] RIP: 0033:0x7f2e206b6e99 [ 1577.160776][T29605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1577.180556][T29605] RSP: 002b:00007f2e1f110028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1577.188972][T29605] RAX: ffffffffffffffda RBX: 00007f2e2093efa0 RCX: 00007f2e206b6e99 [ 1577.196946][T29605] RDX: fffffffffffffd46 RSI: 0000200000000180 RDI: 0000000000000003 [ 1577.204919][T29605] RBP: 00007f2e1f110090 R08: 0000000000000000 R09: ffffffffffffff3e [ 1577.212894][T29605] R10: 0000000000004820 R11: 0000000000000246 R12: 0000000000000001 [ 1577.220863][T29605] R13: 00007f2e2093f038 R14: 00007f2e2093efa0 R15: 00007ffdb240c088 [ 1577.228833][T29605] [ 1577.573925][T29639] FAULT_INJECTION: forcing a failure. [ 1577.573925][T29639] name fail_page_alloc, interval 1, probability 100, space 0, times 0 [ 1577.597528][T29639] CPU: 1 PID: 29639 Comm: syz.3.9958 Tainted: G W syzkaller #0 [ 1577.606423][T29639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1577.616763][T29639] Call Trace: [ 1577.620133][T29639] [ 1577.623082][T29639] __dump_stack+0x21/0x30 [ 1577.627423][T29639] dump_stack_lvl+0x110/0x170 [ 1577.632108][T29639] ? show_regs_print_info+0x20/0x20 [ 1577.637310][T29639] ? __kernel_text_address+0xa0/0x100 [ 1577.642702][T29639] dump_stack+0x15/0x20 [ 1577.646882][T29639] should_fail+0x3ab/0x500 [ 1577.651328][T29639] should_fail_alloc_page+0x55/0x80 [ 1577.656548][T29639] prepare_alloc_pages+0x13f/0x590 [ 1577.661665][T29639] ? __alloc_pages_bulk+0xab0/0xab0 [ 1577.666859][T29639] ? __stack_depot_save+0x34/0x480 [ 1577.671977][T29639] ? __kasan_slab_alloc+0x69/0xe0 [ 1577.677016][T29639] __alloc_pages+0x11d/0x460 [ 1577.681603][T29639] ? prep_new_page+0x110/0x110 [ 1577.686364][T29639] ? do_syscall_64+0x4c/0xa0 [ 1577.690951][T29639] binder_update_page_range+0x80d/0x1250 [ 1577.696606][T29639] binder_alloc_new_buf+0xa7b/0x1490 [ 1577.701892][T29639] binder_transaction+0x1faa/0x67d0 [ 1577.707096][T29639] ? stack_trace_save+0xa6/0xf0 [ 1577.711948][T29639] ? binder_free_buf+0xd00/0xd00 [ 1577.716888][T29639] ? 0xffffffffa0028780 [ 1577.721037][T29639] ? is_bpf_text_address+0x177/0x190 [ 1577.726321][T29639] ? __kernel_text_address+0xa0/0x100 [ 1577.731689][T29639] ? unwind_get_return_address+0x4d/0x90 [ 1577.737410][T29639] ? stack_trace_save+0xf0/0xf0 [ 1577.742257][T29639] ? arch_stack_walk+0xee/0x140 [ 1577.747108][T29639] ? __kasan_check_write+0x14/0x20 [ 1577.752222][T29639] ? _copy_from_user+0x95/0xd0 [ 1577.756982][T29639] binder_thread_write+0xb3a/0x6fe0 [ 1577.762182][T29639] ? __stack_depot_save+0x34/0x480 [ 1577.767310][T29639] ? __kasan_slab_alloc+0xc9/0xe0 [ 1577.772331][T29639] ? __kasan_slab_alloc+0xb7/0xe0 [ 1577.777351][T29639] ? kmem_cache_alloc+0xf7/0x260 [ 1577.782285][T29639] ? proc_pident_instantiate+0x69/0x2b0 [ 1577.787830][T29639] ? avc_has_perm_noaudit+0x30a/0x490 [ 1577.793223][T29639] ? binder_ioctl_get_freezer_info+0x470/0x470 [ 1577.799380][T29639] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1577.804842][T29639] ? _raw_spin_lock+0xf0/0xf0 [ 1577.809518][T29639] ? avc_has_perm+0x163/0x250 [ 1577.814190][T29639] ? __kasan_check_write+0x14/0x20 [ 1577.819297][T29639] ? _copy_from_user+0x95/0xd0 [ 1577.824057][T29639] binder_ioctl_write_read+0x203/0x6700 [ 1577.829620][T29639] ? 0xffffffffa0028780 [ 1577.833768][T29639] ? is_bpf_text_address+0x177/0x190 [ 1577.839052][T29639] ? __kernel_text_address+0xa0/0x100 [ 1577.844421][T29639] ? unwind_get_return_address+0x4d/0x90 [ 1577.850050][T29639] ? stack_trace_save+0xf0/0xf0 [ 1577.854903][T29639] ? arch_stack_walk+0xee/0x140 [ 1577.859846][T29639] ? binder_has_work_ilocked+0x3e0/0x3e0 [ 1577.865479][T29639] ? avc_has_extended_perms+0x869/0xed0 [ 1577.871111][T29639] ? memcpy+0x56/0x70 [ 1577.875093][T29639] ? avc_has_extended_perms+0x9d5/0xed0 [ 1577.880638][T29639] ? avc_flush+0x2b0/0x2b0 [ 1577.885049][T29639] ? kasan_set_track+0x5b/0x70 [ 1577.889811][T29639] ? __kasan_check_write+0x14/0x20 [ 1577.894926][T29639] ? _raw_spin_lock+0x94/0xf0 [ 1577.899605][T29639] ? _raw_spin_trylock_bh+0x150/0x150 [ 1577.904986][T29639] ? _raw_spin_unlock+0x4d/0x70 [ 1577.909848][T29639] binder_ioctl+0x36c/0x1df0 [ 1577.914437][T29639] ? ioctl_has_perm+0x1b8/0x4f0 [ 1577.919285][T29639] ? binder_poll+0x2d0/0x2d0 [ 1577.923872][T29639] ? security_file_permission+0x79/0xa0 [ 1577.929414][T29639] ? has_cap_mac_admin+0x370/0x370 [ 1577.934521][T29639] ? vfs_write+0xc72/0xfd0 [ 1577.938936][T29639] ? selinux_file_ioctl+0x3ad/0x4c0 [ 1577.944135][T29639] ? selinux_file_alloc_security+0x120/0x120 [ 1577.950112][T29639] ? mutex_unlock+0x8f/0x230 [ 1577.954698][T29639] ? __mutex_lock_slowpath+0x10/0x10 [ 1577.959982][T29639] ? __fget_files+0x2e1/0x340 [ 1577.964663][T29639] ? security_file_ioctl+0x84/0xa0 [ 1577.969773][T29639] ? binder_poll+0x2d0/0x2d0 [ 1577.974367][T29639] __se_sys_ioctl+0x121/0x1a0 [ 1577.979065][T29639] __x64_sys_ioctl+0x7b/0x90 [ 1577.983661][T29639] x64_sys_call+0x2f/0x9a0 [ 1577.988091][T29639] do_syscall_64+0x4c/0xa0 [ 1577.992504][T29639] ? clear_bhb_loop+0x50/0xa0 [ 1577.997177][T29639] ? clear_bhb_loop+0x50/0xa0 [ 1578.001849][T29639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1578.007799][T29639] RIP: 0033:0x7f2e206b6e99 [ 1578.012413][T29639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.032033][T29639] RSP: 002b:00007f2e1f110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1578.040482][T29639] RAX: ffffffffffffffda RBX: 00007f2e2093efa0 RCX: 00007f2e206b6e99 [ 1578.048457][T29639] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1578.056428][T29639] RBP: 00007f2e1f110090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.064395][T29639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.072372][T29639] R13: 00007f2e2093f038 R14: 00007f2e2093efa0 R15: 00007ffdb240c088 [ 1578.080346][T29639] [ 1578.138635][T29639] binder_alloc: 29638: binder_alloc_buf failed for page at 0000200000ffd000 [ 1578.211592][T29647] ================================================================== [ 1578.219801][T29647] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 1578.228000][T29647] Read of size 4 at addr ffff888152dd5470 by task syz.3.9960/29647 [ 1578.235930][T29647] [ 1578.238340][T29647] CPU: 0 PID: 29647 Comm: syz.3.9960 Tainted: G W syzkaller #0 [ 1578.247294][T29647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1578.257370][T29647] Call Trace: [ 1578.260676][T29647] [ 1578.263628][T29647] __dump_stack+0x21/0x30 [ 1578.267982][T29647] dump_stack_lvl+0x110/0x170 [ 1578.272813][T29647] ? show_regs_print_info+0x20/0x20 [ 1578.278032][T29647] ? load_image+0x3f0/0x3f0 [ 1578.282706][T29647] print_address_description+0x7f/0x2c0 [ 1578.288252][T29647] ? unaccount_page_cache_page+0x6f1/0x760 [ 1578.294058][T29647] kasan_report+0x10f/0x150 [ 1578.298570][T29647] ? unaccount_page_cache_page+0x6f1/0x760 [ 1578.304431][T29647] __asan_report_load4_noabort+0x14/0x20 [ 1578.310153][T29647] unaccount_page_cache_page+0x6f1/0x760 [ 1578.315793][T29647] __delete_from_page_cache+0xbe/0x470 [ 1578.321254][T29647] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 1578.328274][T29647] ? __kasan_check_write+0x14/0x20 [ 1578.333385][T29647] ? __kasan_check_read+0x11/0x20 [ 1578.338404][T29647] ? workingset_eviction+0x402/0x9f0 [ 1578.343689][T29647] __remove_mapping+0x601/0x990 [ 1578.348544][T29647] ? remove_mapping+0xa0/0xa0 [ 1578.353221][T29647] ? __kasan_check_read+0x11/0x20 [ 1578.358241][T29647] shrink_page_list+0x2a24/0x5800 [ 1578.363268][T29647] ? shrink_page_list+0x8e1/0x5800 [ 1578.368406][T29647] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 1578.374562][T29647] ? __this_cpu_preempt_check+0x13/0x20 [ 1578.380119][T29647] ? __mod_zone_page_state+0x8e/0xd0 [ 1578.385402][T29647] ? isolate_lru_pages+0xff1/0x11f0 [ 1578.390687][T29647] ? should_run_aging+0x410/0x410 [ 1578.395710][T29647] ? cgroup_rstat_updated+0x30/0x360 [ 1578.401082][T29647] ? __this_cpu_preempt_check+0x13/0x20 [ 1578.406714][T29647] ? __count_memcg_events+0xad/0x120 [ 1578.411997][T29647] shrink_lruvec+0x1297/0x3a40 [ 1578.416850][T29647] ? sched_group_set_idle+0x600/0x600 [ 1578.422222][T29647] ? mem_cgroup_shrink_node+0x550/0x550 [ 1578.427855][T29647] ? __kasan_check_write+0x14/0x20 [ 1578.432963][T29647] ? _raw_spin_lock+0x94/0xf0 [ 1578.437638][T29647] ? _raw_spin_trylock_bh+0x150/0x150 [ 1578.443104][T29647] ? __this_cpu_preempt_check+0x13/0x20 [ 1578.448916][T29647] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 1578.454725][T29647] ? inactive_is_low+0x160/0x2f0 [ 1578.459667][T29647] ? css_next_descendant_pre+0x1e1/0x210 [ 1578.465300][T29647] ? mem_cgroup_iter+0x465/0x6c0 [ 1578.470326][T29647] shrink_node+0x11ee/0x2a40 [ 1578.475357][T29647] ? allow_direct_reclaim+0x370/0x370 [ 1578.480732][T29647] do_try_to_free_pages+0x5a7/0x1580 [ 1578.486018][T29647] ? try_to_free_pages+0xc50/0xc50 [ 1578.491134][T29647] ? propagate_protected_usage+0x84/0x250 [ 1578.496862][T29647] try_to_free_mem_cgroup_pages+0x261/0x610 [ 1578.502755][T29647] ? shrink_lruvec+0x3a40/0x3a40 [ 1578.507688][T29647] ? mutex_unlock+0x8f/0x230 [ 1578.512280][T29647] ? __kasan_check_read+0x11/0x20 [ 1578.517303][T29647] ? page_counter_set_max+0x65/0x140 [ 1578.522586][T29647] mem_cgroup_resize_max+0x309/0x3e0 [ 1578.527871][T29647] mem_cgroup_write+0x1ed/0x230 [ 1578.532722][T29647] ? mem_cgroup_reset+0x130/0x130 [ 1578.537747][T29647] ? __kasan_check_write+0x14/0x20 [ 1578.542860][T29647] ? _copy_from_iter+0x4a4/0x10a0 [ 1578.548380][T29647] ? mem_cgroup_reset+0x130/0x130 [ 1578.553426][T29647] cgroup_file_write+0x294/0x560 [ 1578.558362][T29647] ? cgroup_seqfile_stop+0xc0/0xc0 [ 1578.563470][T29647] ? mutex_lock+0x9b/0x1c0 [ 1578.567892][T29647] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1578.574487][T29647] ? __kasan_check_write+0x14/0x20 [ 1578.579599][T29647] ? cgroup_seqfile_stop+0xc0/0xc0 [ 1578.584721][T29647] kernfs_fop_write_iter+0x2bd/0x400 [ 1578.590094][T29647] vfs_write+0x831/0xfd0 [ 1578.594334][T29647] ? file_end_write+0x1b0/0x1b0 [ 1578.599185][T29647] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1578.605782][T29647] ? __fget_files+0x2e1/0x340 [ 1578.610543][T29647] ? __fdget_pos+0x2d2/0x380 [ 1578.615127][T29647] ? ksys_write+0x70/0x260 [ 1578.619541][T29647] ksys_write+0x14a/0x260 [ 1578.623868][T29647] ? __ia32_sys_read+0x90/0x90 [ 1578.628722][T29647] ? __kasan_check_write+0x14/0x20 [ 1578.633833][T29647] ? switch_fpu_return+0x15d/0x2c0 [ 1578.638948][T29647] __x64_sys_write+0x7b/0x90 [ 1578.643538][T29647] x64_sys_call+0x8ef/0x9a0 [ 1578.648043][T29647] do_syscall_64+0x4c/0xa0 [ 1578.652466][T29647] ? clear_bhb_loop+0x50/0xa0 [ 1578.657159][T29647] ? clear_bhb_loop+0x50/0xa0 [ 1578.661839][T29647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1578.667735][T29647] RIP: 0033:0x7f2e206b6e99 [ 1578.672153][T29647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.691755][T29647] RSP: 002b:00007f2e1f110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1578.700172][T29647] RAX: ffffffffffffffda RBX: 00007f2e2093efa0 RCX: 00007f2e206b6e99 [ 1578.708164][T29647] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 1578.716135][T29647] RBP: 00007f2e2074ceaf R08: 0000000000000000 R09: 0000000000000000 [ 1578.724367][T29647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1578.732333][T29647] R13: 00007f2e2093f038 R14: 00007f2e2093efa0 R15: 00007ffdb240c088 [ 1578.740307][T29647] [ 1578.743322][T29647] [ 1578.745639][T29647] Allocated by task 29305: [ 1578.750161][T29647] __kasan_kmalloc+0xd4/0x100 [ 1578.754996][T29647] __kmalloc_track_caller+0x13c/0x2c0 [ 1578.760394][T29647] __alloc_skb+0x210/0x730 [ 1578.764823][T29647] rtmsg_ifinfo_build_skb+0x75/0x180 [ 1578.770148][T29647] rtmsg_ifinfo+0x7a/0x130 [ 1578.774651][T29647] register_netdevice+0x120a/0x1490 [ 1578.779848][T29647] __ip_tunnel_create+0x2c7/0x390 [ 1578.784930][T29647] ip_tunnel_init_net+0x2be/0x730 [ 1578.790043][T29647] ipgre_init_net+0x24/0x30 [ 1578.794630][T29647] ops_init+0x2c0/0x470 [ 1578.798788][T29647] setup_net+0x331/0xa30 [ 1578.803037][T29647] copy_net_ns+0x355/0x5c0 [ 1578.807449][T29647] create_new_namespaces+0x3a8/0x660 [ 1578.812830][T29647] unshare_nsproxy_namespaces+0x120/0x170 [ 1578.818549][T29647] ksys_unshare+0x4d7/0x810 [ 1578.823091][T29647] __x64_sys_unshare+0x38/0x40 [ 1578.827878][T29647] x64_sys_call+0x442/0x9a0 [ 1578.832391][T29647] do_syscall_64+0x4c/0xa0 [ 1578.836804][T29647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1578.842694][T29647] [ 1578.845018][T29647] Freed by task 29305: [ 1578.849088][T29647] kasan_set_track+0x4a/0x70 [ 1578.853679][T29647] kasan_set_free_info+0x23/0x40 [ 1578.858700][T29647] ____kasan_slab_free+0x125/0x160 [ 1578.863808][T29647] __kasan_slab_free+0x11/0x20 [ 1578.868570][T29647] slab_free_freelist_hook+0xc2/0x190 [ 1578.873940][T29647] kfree+0xc4/0x270 [ 1578.877744][T29647] skb_release_data+0x7bd/0xa20 [ 1578.882598][T29647] consume_skb+0xab/0x1f0 [ 1578.886922][T29647] netlink_broadcast_filtered+0x118b/0x1280 [ 1578.892906][T29647] nlmsg_notify+0xe9/0x1a0 [ 1578.897319][T29647] rtmsg_ifinfo+0xea/0x130 [ 1578.901824][T29647] register_netdevice+0x120a/0x1490 [ 1578.907020][T29647] __ip_tunnel_create+0x2c7/0x390 [ 1578.912054][T29647] ip_tunnel_init_net+0x2be/0x730 [ 1578.917163][T29647] ipgre_init_net+0x24/0x30 [ 1578.921751][T29647] ops_init+0x2c0/0x470 [ 1578.925905][T29647] setup_net+0x331/0xa30 [ 1578.930143][T29647] copy_net_ns+0x355/0x5c0 [ 1578.934556][T29647] create_new_namespaces+0x3a8/0x660 [ 1578.939848][T29647] unshare_nsproxy_namespaces+0x120/0x170 [ 1578.945565][T29647] ksys_unshare+0x4d7/0x810 [ 1578.950066][T29647] __x64_sys_unshare+0x38/0x40 [ 1578.954830][T29647] x64_sys_call+0x442/0x9a0 [ 1578.959328][T29647] do_syscall_64+0x4c/0xa0 [ 1578.963742][T29647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1578.969645][T29647] [ 1578.971964][T29647] Last potentially related work creation: [ 1578.977763][T29647] kasan_save_stack+0x3a/0x60 [ 1578.982464][T29647] __kasan_record_aux_stack+0xd2/0x100 [ 1578.987921][T29647] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1578.993728][T29647] call_rcu+0x10b/0xf60 [ 1578.997892][T29647] netlink_release+0x128f/0x16d0 [ 1579.002834][T29647] sock_close+0xb8/0x200 [ 1579.007099][T29647] __fput+0x22b/0x900 [ 1579.011166][T29647] ____fput+0x15/0x20 [ 1579.015232][T29647] task_work_run+0x127/0x190 [ 1579.019823][T29647] exit_to_user_mode_loop+0xd0/0xe0 [ 1579.025102][T29647] exit_to_user_mode_prepare+0x87/0xd0 [ 1579.030827][T29647] syscall_exit_to_user_mode+0x1a/0x30 [ 1579.036281][T29647] do_syscall_64+0x58/0xa0 [ 1579.040693][T29647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1579.046585][T29647] [ 1579.048909][T29647] Second to last potentially related work creation: [ 1579.055486][T29647] kasan_save_stack+0x3a/0x60 [ 1579.060161][T29647] __kasan_record_aux_stack+0xd2/0x100 [ 1579.065702][T29647] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1579.071507][T29647] insert_work+0x51/0x310 [ 1579.076184][T29647] __queue_work+0x8e1/0xc60 [ 1579.080687][T29647] queue_work_on+0xde/0x150 [ 1579.085186][T29647] destroy_super_rcu+0xd1/0xe0 [ 1579.089957][T29647] rcu_do_batch+0x4c1/0xbf0 [ 1579.094459][T29647] rcu_core+0x4a3/0xef0 [ 1579.098703][T29647] rcu_core_si+0x9/0x10 [ 1579.102856][T29647] handle_softirqs+0x250/0x560 [ 1579.107619][T29647] __irq_exit_rcu+0x52/0xf0 [ 1579.112118][T29647] irq_exit_rcu+0x9/0x10 [ 1579.116445][T29647] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1579.122171][T29647] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1579.128147][T29647] [ 1579.130467][T29647] The buggy address belongs to the object at ffff888152dd5000 [ 1579.130467][T29647] which belongs to the cache kmalloc-2k of size 2048 [ 1579.144580][T29647] The buggy address is located 1136 bytes inside of [ 1579.144580][T29647] 2048-byte region [ffff888152dd5000, ffff888152dd5800) [ 1579.158033][T29647] The buggy address belongs to the page: [ 1579.163664][T29647] page:ffffea00054b7400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x152dd0 [ 1579.173900][T29647] head:ffffea00054b7400 order:3 compound_mapcount:0 compound_pincount:0 [ 1579.182310][T29647] flags: 0x4000000000010200(slab|head|zone=1) [ 1579.188398][T29647] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043200 [ 1579.196982][T29647] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 1579.205569][T29647] page dumped because: kasan: bad access detected [ 1579.211981][T29647] page_owner tracks the page as allocated [ 1579.217695][T29647] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 358, ts 1074125405123, free_ts 1071727016621 [ 1579.238444][T29647] post_alloc_hook+0x192/0x1b0 [ 1579.243216][T29647] prep_new_page+0x1c/0x110 [ 1579.247716][T29647] get_page_from_freelist+0x2c3a/0x2cd0 [ 1579.253261][T29647] __alloc_pages+0x1a2/0x460 [ 1579.257857][T29647] new_slab+0xa0/0x4d0 [ 1579.261925][T29647] ___slab_alloc+0x3ac/0x840 [ 1579.266512][T29647] __slab_alloc+0x49/0x90 [ 1579.270844][T29647] __kmalloc_track_caller+0x169/0x2c0 [ 1579.276392][T29647] __alloc_skb+0x210/0x730 [ 1579.280920][T29647] mld_newpack+0x143/0x9e0 [ 1579.285342][T29647] add_grec+0xee8/0x1340 [ 1579.289579][T29647] mld_send_initial_cr+0x157/0x320 [ 1579.294692][T29647] mld_dad_work+0x3a/0x4e0 [ 1579.299108][T29647] process_one_work+0x6c8/0xbb0 [ 1579.304044][T29647] worker_thread+0xaa0/0x1250 [ 1579.308720][T29647] kthread+0x3f5/0x4f0 [ 1579.312788][T29647] page last free stack trace: [ 1579.317451][T29647] free_unref_page_prepare+0x5fa/0x600 [ 1579.322905][T29647] free_unref_page+0xae/0x540 [ 1579.327579][T29647] __free_pages+0x6c/0x100 [ 1579.331996][T29647] __free_slab+0xe5/0x1e0 [ 1579.336322][T29647] __unfreeze_partials+0x15a/0x190 [ 1579.341432][T29647] put_cpu_partial+0xc6/0x120 [ 1579.346107][T29647] __slab_free+0x1d4/0x290 [ 1579.350551][T29647] ___cache_free+0x104/0x120 [ 1579.355144][T29647] qlink_free+0x4d/0x90 [ 1579.359298][T29647] qlist_free_all+0x5f/0xb0 [ 1579.363887][T29647] kasan_quarantine_reduce+0x14a/0x170 [ 1579.369344][T29647] __kasan_slab_alloc+0x2f/0xe0 [ 1579.374191][T29647] slab_post_alloc_hook+0x4f/0x2b0 [ 1579.379305][T29647] kmem_cache_alloc+0xf7/0x260 [ 1579.384069][T29647] getname_flags+0xba/0x510 [ 1579.388572][T29647] user_path_at_empty+0x2f/0x1c0 [ 1579.393512][T29647] [ 1579.395830][T29647] Memory state around the buggy address: [ 1579.401455][T29647] ffff888152dd5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1579.409599][T29647] ffff888152dd5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1579.417657][T29647] >ffff888152dd5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1579.425709][T29647] ^ [ 1579.433504][T29647] ffff888152dd5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1579.441563][T29647] ffff888152dd5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1579.449633][T29647] ================================================================== [ 1579.457795][T29647] Disabling lock debugging due to kernel taint [ 1579.528128][T29655] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9963'. [ 1579.563666][T26128] android_work: did not send uevent (0 0 0000000000000000) [ 1579.754995][ T8538] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1580.155090][ T8538] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1580.235132][ T8538] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 1580.405608][ T8538] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 1580.414861][ T8538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.422973][ T8538] usb 4-1: Product: syz [ 1580.427241][ T8538] usb 4-1: Manufacturer: syz [ 1580.431873][ T8538] usb 4-1: SerialNumber: syz [ 1580.455201][T29657] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1580.899552][ T8538] usb 4-1: USB disconnect, device number 63