last executing test programs: 3m0.962386098s ago: executing program 32 (id=135): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m56.899541599s ago: executing program 33 (id=138): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000d80)={0x7, 0x9, 0x665, 0xf9b, 0x0, "72c38ba9cf5f5ce0"}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001ec0)={{'\x00', 0x2}, {0x2}, 0x140, 0x0, 0x0, &(0x7f0000000180)='./mysys\x00', &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0/file0\x00', &(0x7f0000000440)="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", 0x195, 0x0, &(0x7f0000000dc0)={0x2, 0x10bb, {0x413364647bb150ce, 0xc, 0x1000, "d4e7857590a7eaaed626d81f35b11e3fa9f1aa355c05fee8d07b91f5b1ec4cd71a0e053aec647e4d22b79101e74cf61bc6f5669d408757dea90f802085af38ed5236f40b9ac844aae181f094232dd0eab4be7a19764ce60210eced178329206fa2c20ba516e2928e3bbe60b92977275e1aec44ef46270fb59c4156d408d85333eb4746e11726163fb9a6ca3b00317c2b7d532285f3bc4233ab6a3d077ef7802f2512b845794ab89eef40ec5ba73394b20b3107dfa838643b4b0a0d7a80f658bdd344a3889dcc2a7324312b1913b92c890d06d87818efa131c4382a199f884b28b3eb31ba63a2c7b1915626e82190e0e58cdcabf0d86e7975d371a3982bd4627921e672aa7700bfc10d44ba7386306fa89073441e28af154f24ee6c5ffbba161a1652625345bd4b0ee4c30fce7a48a99e0fac171d60072c212f9c95733873734cf5ecb379d8aa8e98da6a4bf2ab2478d369e415f5b55a94b1963a02f1541f2a00eaab241c37b9715b9252dc3cbdcbf2ee6e323c2ae8e9a7f2296437246b87d85396a33d16409c08bf890771f128805c4ecfe948c4decc453fd65c07791d18066d91571c48fe9c04f7fddfe7a908a3fe2055e00278515e86d88be6debab3a6f2a089a3ed8497d096201a769afffb47feadb5e2b60ed6c4ba8ba29ca263496258944c9432bbb4263aaf15318c528cc2c89ecafc24fafd68f524da26c1b1b478b897231225a6690dde416725e3e262e03a2adf9edb97db4376749ef2e0184ab63044677d9b30207d5dd585e3de187bf9185fa3fe3c5ff90de5a0b42ff980c89ead377e02d6f89582340419172283094f2d867af0ab89ed0f66f6897d5aaf6d92234dbbef5aa59da0086ad76f5938a2735fd4f294e0802135a142d724488e2909a30dfc736d298f6637c9a9ba661e7162a29e48fc417e9d987ab1cf0a27f7a0616daf85c4f5e28d227726c1c7f12aa7ee03ba2b0c719394e49f14e4ebf66bd22812a0e26185195be4ecc196ec9f0831da050c8cce9333aba6863262704aa2d74e7ae9f5fbc4ce35ec0473326cd8a294c58dd5e86e1a2678f75ae51953390a4a0cf2edb082419d45b606e565c78269e4482bc3c82af1cddfcd482a4c74a063d9bb9e0d6f8327786406b79aa5ca0bf4d2763f3e4b40f5b320c2ae210eb0fd7ea0c621cb4bd4b8a001c0bf76f7da171a11a984391429f3ae670ef80876bdb04d586cc84f6ced9a238aadd1743b43f1e1dfdc3bb3c1000d8354b2ef2c5944cf55f3b98e752755e8263e6d448605e6f2c2d6d2a8b2ba1491cd30bc8866653e2e9e92e5ae978bfc761a282b31551b1afcd31c1935d7949ab9aa3c22d40d60c3b8464ad2eeed655028a94c06403266c127b436c51680d31f8c6e0202d61626ce100b8f0a2d9bb0cae4d4d0b4651039d3617322339d49d33dc0a39a7a2cdad039e6f5bb9a331f2d05b718c27cef58c501fc41ae482d48cdb3fb93fbcb8f92cb43823510d6e8b467b5af889e75ed62a0e6749baad76853f02691fd3c1e925937472d55572a0a8bd27efbaada5a72c4539a0389406864ebc86fcfb608f7e59a9db98bcc93c940a74b39d05cbc45505f2d59a0132e9297a8ee4784766700216f661b5c3b971021a2305c302e00b2887510385c4a4e0b18317463b4e234230df8b5fe66ba61830a26b5900c265065c0a27d88c138edbf6b2988378663298f22bad276ca6a653f67f0c6ee40564b458dab7dbafc5ab9aaa6e18246d149deee481756ae4f50bed9d313f441481bd539cc7fd18cec826d32a87698f248816d4b65341a61cb02d58fe3220dc81f4dc512a0eda1c1648de3bf555f2b9e984bfd6290d343bb6ccf6ac0e90fa953cc5677e88d257e6b4bb40f16e37583fbe95b2f24a74fd3eb884bea25c15d4fb4f4c7e94092c4c60feac21be4fff3faeca473a234408b188ca54d963256156d0a0c146d0fdd4a611f227015bf8d08d23d07af29056f9cd4cdbd7acecca0072b15c0e87c1e9ac63a71102eb1d64e6ce3261050f0aed396260db6fc106fd664052d04b6a2f49a05d2cd197863e5bd1e50a83f7335486d365f2ed519a5b60ed816225a1010fa035dfec357aa47a0f329f0d37195093a71e7f04c0fef14471fce366b6d0fb723754efe48712622668c8d27850e79d85e9f32bdff2b7e671cc934730e0c70ad9ea0804f1734e71c0a6777bcc7735c709a2000b15a07af5fd2adbbaf5347e5513d94f7946a70a3958141bc2f36c2ce594dfeb3f38f77dbbe3db1944067d0ba0f9434e123355faa7f886f949b0f588f41161b62feac05a65c4e032df8b10567ef918d058d15cd5395c37a24c8689d08dffca1a98ee3553346fe73f5be82c6a52417671082486967513720902dbd12fd070e78d20e67c66759bc6221ebded1eaab627327312996f665755a9ed3d5e30dae888f38be5e9aad42a38d09582005fbb985a89b90004103ac3c5ffc1f9b98c210326a69785afeefba684324862101724791b0821f4c965efa2c799332eb4da233c41b2b4d6502d3aa2c8d411e33ac5fde99001dba7f38193ed345516bf97235ffcf5972f719819a2784fb2d66fd1ebea1fd459dbbadb5c15906b43001809d26d49a55eaa6e4bb2e7c699436fd7751980825cdd040e011e40d67b34a8688e93d0574c94f43ee37343a62aa7c5dbb5d1da1e103bd246239e966b1ad2ecc91fd02c98065d0c1f9e438147ed3247894bf15f16d212015da9765492a73f6f0a8ddf5cacc663bfc0a93548d13946f452284fc3e99d33ee1f929e24c59af5c0e8f52731febee8bb3d6762d29bc8bc8a8e0e9501c8bd2f058e1ceaf6ccfac60475fcf2f0028217d694d7a10d04d448b11e08315e1abf9a4db8989b0c609d5264a9671f2211a28d690d549a7ced1907ec036a1f096cdc9eef867dd65b9684bddea5da7e1a84bcf604c9099ddd04cab5c74c60a8330032c57364fc3c83b1badeb00d79227f813e435eacb9cc90879d4ea9b6f8f544a4ae85332170add9508f7bcbb0cf12af6a8588bcf6b5f7901d79b265992f997dca5f5196678d6543fa1d96744d017cdb8c1e2b5172c1299bc136d5c8114774f405e77f93b319c7ab9563b025a3a631863f02015b08cb555a2fbbeb35ec062ec8affae89705cb512dcfca8307e9db1c6125afcd1eae79f86305086a70e13f74105acf17ba0812a0cf0a4e0543146e9c94dbe3560d4ad1415ade0c56be20e05f4466839a4c5d2b5cc47f1de714924dd8b23597d070ca2f1e26c282ac0051b811d55944259ff26ccaf1d296f6453a4434f782606884d92151f094772a3feef58606750e65f608d94461a2f49cbf70c881bb59a6ca5b2353e7e307e3f340d024ad9b9a9960382812997f6820d06d5e811c318667535b935ebb40a234a15ef686bcfc3f7c6120a07859d4c46290620cbc8f9663518ec32e812fed83acf3f64628eb9cafd5f9d62cced6ba070436fdc1e3a4ce995481ddef66019e44d8c397aacd36c3e30c061f6c271c2bc5546453c47fe6861544ff178a891f075877905ebdbbb53a71617203424d00638de7f52380b15c1c26a7db27585b93e8bc4c858e9f05bda366ede4a3a6c125e4020d7b614c004cfc1aca335ae592742dfdc602394cd201b24f7985f0136843d3b1b853850578fa0084420f52f7654f56ba9f118443df560db4a165e691b4181efb6a7b903ce1e598988cd50addb9d64935ebb5bab7b216ac7ae3f472f3be5048706a589cb7ff46bf4e17f26d9cb29f8688700ce3d77d9a891e2546d9d969ba41d56013472974a131a935712a2a4e555eaf8a39dcd2a4ff8fc938d4e3bf6b04e198526cf17f68987cdaf334a68ff96f6e5755bdfde6c738496d2e97b35e8d4f622db0948466bd6ca1496bb90cd563b729a587c9fd835deda0d576db56a4efcd0914eeebdd603a973148acb2f4d46be8d19a53a0166b05a551f3a64b9e311007394c6c623934d09becb57848ed6f0c1b559ffd4367677ad8fcf6f361391646c043e870cdfc14593327621c88246a1bcb58ec2c3944b4799944dfabfc077598244994bfe235e2d06421e10abeb0c7e31ef62b4218ac808c265c1c22d932362a7e45571d0047f890645c344b64be9201e522db1c7aba54c9c4aff363b7f4ca57a4721d7eb547281c751ce976ba100b2b6a4eb8ffaff23cbf7b16401f3b8a036eaff8534c39aaa56460493693940847a74e1cd58ba33d261d0433163b3b6cb92968c78f27c31c8f02f8bea0b07a3b0219ddf196cf0f9b0b13a99c1dba8c69852f388b9c35f9c6ba02f45102544a09d7d4dd40b608e531f65bc747174282efc3ab25ffd5d14171fa1fc44eb675843b0442be4c0200041cf66b947ef8bb87b5048b37e0a9f44107e75df0ee31e61afbc2254e18bb78df7bb7d983b488d42fca717a7f5930d15fc9f61085cffcbac344630980e0862a3e713ba083cb1fc5ae6571edc710f3a6a364accd8831265f7dbec4aa486c1b69564d19fa52b3c5ba4b7816e5e5a6eb2ea170334eda58e202c6af6a09be5f013f02f9267e1a29be5f6d4bd4233a65a9348fdcd4224803a3251a0933d9b7d5e408f6f15ccc00db3d2b0687c697efbe773e285b2c7ccc425b0898c81f58afe1379c0b9a9a198c16e3f79a5394bc5ba361aa16390fac5552d19ed4b6a7da8de805c602cc7ba992bd99d7480974ecb665a3130a54aa9ec8923a5be902d923097d4593cf38392269216d5e38e2b843a4ebfca6846aca630ceddaa1c85d18cba4dd7863f1c465d4fed6551d4cbfdb8f3e6307a7563fa65f1adc514bd8f4365a4c09bcd0e7bacfab627966484904646a42cd4cf8536351d79d394368b31d619d43670e470e1adf75ba8f348798940594ee30ecd9657aa65d21b4c05deea583e23ec1c3146355e9dc93b9f4ee0a3c479e53531ee364f5d98aaffb347d00253ef31965a7c1d110690a7e64367c574023a22f1ee2f440ef81b128451691d9a899abbabadaf1e88d14f11ccfb6030d632fc3cacd6fece323b70f26758d9e17957f0f0b149301ac42e88ab2a5720d18d82547d2e1244f70a820dbf2c9412def8fa0c2f98bf146503071aed1eecd65b8923c41fa98a508a04e3b31e119d1e7893afc96454bbafc419f8e740f1a98670b4d8c51474103623aabd75a25f13aaf272494b8cfe47bece94c8b7d96321ed42bac9f5c4a21eafe52e1da83ea18feea834d4722a644dd511559dee64685f4cb1dc798998ded6b5f4ee568c063ec754f735ac943bda9b9bc552d442a11ba98e0186020033b6fa312de69667f9c9064b8227d45c87ee97d4d64a0965d55bfc0e2d2721306141d0c5b267ddde14b94b3b43b2bfa7c1e4a8849316ae9d474fe0f6219f08e8f52a5e97c621bdbff4a0ed27cb2677cde22dbfc72e609a1c138e4c4eae9fbc8b964b44922ee7075309e55ca9c065cb1dd2dc6ea1b30cd7431a72ff457b5a627907170ca29918cad4df12ce7563dd7eaec332224a0a33a67c758d5116c3b2df74839a6e5c125513be3d6d0b97d1db3281a395d17062ea6556a17cfd872a89c114b1e6307863183eb540fc08df7e704dfa8d99fb5ba368c1443a5577727cd3b90fc0ea2fb61bbefccdbd41137bd2826834d66f6515d23b4ba6796b909b20f5ed9f7b6b5510febfb7c6f0672f661d45eba7c1ce8308addae14d8f8f2e8bdcc96d78895cbe1d0b0b6782396991883f0341f566d12540a75f5f38860702c4c5830b0e8acfb13edb3d7c80b89354bee17add2bd5115ba5cd25bf87fa93eecdca8fa05c02131cf6168cf8441cc6d51d51028eee21f1c762a334", 0xae, "394c4d221dc29fee0ec10bb3b0ab28e9c76cdc1de005f41e24b5c72a2b6b67dca1da72ff4c95d9bb5a9931f07d45a498e3cd6733901aa2cf26cdcb882141ddbfe8948ddc245330afafb6d9c87be5f72483368edb802495f1ad71fb957b6b332bd32dd36469a2346ca317e9865f861ce055d873ef062b9d1e637b9af4cf14a53cbf67c88430ab477da9e7a588c08fb1ed068c15820e6a41799ec22923a4c677902911557221e73bb049df7e6837cb"}, 0x1f, "ef1e7ed6bfb03c98ddd731cf73a8facbeb99b64264b98dd9d33d871a2efeec"}, 0x10e6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000800)={0x0, 0x0}) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000880)={0x0, 0xffff, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000000140)={0x100004, 0x8, 0x80000, {r3}}, 0x20) syz_clone3(&(0x7f0000000b80)={0x22100000, &(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00), {0x26}, &(0x7f0000000a40)=""/95, 0x5f, &(0x7f0000000ac0)=""/77, &(0x7f0000000b40)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5, {r0}}, 0x58) r5 = gettid() r6 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) r8 = openat$cgroup(r0, &(0x7f0000000cc0)='syz1\x00', 0x200002, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x9, 0xf9, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000040)={[0xb, 0xc, 0x6, 0xfffffffffffffffd, 0x100008, 0x6, 0x4, 0x2, 0x8, 0x7, 0xffffffffffffffff, 0xfffffffffffffffd, 0x81, 0x100000000, 0x4, 0x4], 0x1ffe, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff9, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000740)=[@text16={0x10, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_clone3(&(0x7f0000000d00)={0x202120180, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680), {0x41}, &(0x7f00000006c0)=""/52, 0x34, &(0x7f0000000780)=""/90, &(0x7f0000000c80)=[r1, r2, r4, 0xffffffffffffffff, r5, r6, r7], 0x7, {r8}}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) 2m39.482946032s ago: executing program 34 (id=176): unshare(0x60040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x4) write(r0, 0x0, 0x0) unshare(0x64000600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e24, @broadcast}}) 2m37.114652101s ago: executing program 35 (id=196): ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000084) syz_usb_connect$uac3(0x3, 0x8b, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000300000020532b2400400001020301090279000301051005080b0100012330060904000000010130000a2401061500001000000b240d02a10104000007000904010000010230000904010101010230000905010900047c040e0a252501800000090900090402000001023000090402010101"], &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}], [{@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$(\'(-\\]/#{'}}]}, 0x1, 0x504, &(0x7f0000000c40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x100000000, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0) utime(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x7e7c, &(0x7f0000000000)={0x0, 0x62e7, 0x40, 0x1, 0x1e8}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x6, 0x2010, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setresgid(0xee00, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) setregid(0x0, r6) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, 0xfffffffffffffffc, 0x8800) 2m19.253801006s ago: executing program 36 (id=236): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) 2m11.790135301s ago: executing program 37 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0x2}, {0x80}, {0x3, 0x0, 0x3}, {0x6, 0x0, 0xff, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000440)={&(0x7f0000000000)=""/35, 0x2, 0x23}, &(0x7f0000002740)={0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000300)=ANY=[], 0xc1, 0x151f, &(0x7f000000d180)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000140)=[{0x48, 0xfd, 0x0, 0x40}, {0x28, 0x2, 0x4f, 0xfffff037}, {0x2, 0xe, 0xfe, 0x4}]}, 0x10) signalfd(r3, &(0x7f0000000300)={[0x7fff]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000340)={0x0, 0x1fd, 0x7f, 0x0, 0xd}) 2m6.881518024s ago: executing program 38 (id=277): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xd, 0xf3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000200)={0x40, 0xf, 0x6, {0x6, 0x11, "110041c9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0x13, 0x84, {0x84, 0x1, "c24aa27661aaf322a632fc77cd8badadd424ce1015b50467def835f5ed67d530f9941e5e7de3bd32894998a418021810fa6c62db83e5f7cffacf98a60973488e4ca7893d9a87b9d6b957aa8346c3294386fb1a45f10585db530b9bb2d5148e63e5f5795241a9226802ad60345bca4d7fb64d8c8cdb54b152a8f042455d3a849816b8"}}, &(0x7f0000000140)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "c198ddb42fbb20256acfa9714ec5aa4985b485240dde1825d206888cfe011fd55be9096bc2f93d365b01ae123fd44dcfe69aed8b5dddefb48fea5344a9b3f0624ec6c5f590e8e8ba4e9954d014ffe346b4f53a8b171b62a9e2c8dd18"}}, &(0x7f00000001c0)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0xa0eb, 0xf, 0x8000, [0xc0, 0x3f0f, 0xf, 0x7f800f]}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf9, 0x18, 0x6, 0x29, "b63d7650", "b68f6aeb"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x2, 0x10, 0x2, 0xa1, 0x1ff, 0x9}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x12, 0xa8, "db84a7808b37f9e268db559a6ba5b0958cee8d097b846e21715a633e41a5703a4377821fd875dae805fbfe0bd4e5c2978fd6e7d80e73ed27fa406ec72c05856572a53c4775b60be89fd030aae200cb90e400aee313fea8475a5f6a7ba819525e6ed80f8a905cc7ca657d3ecccc85afba27164ec5be8406bd24ad2dd0b6e4a5c3b9fc688c8e4f59a550d75917f05a0f87dbc52ec8b75c3785cfbfa553d80b4192205481ddb0f0b4f6"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x58, 0x8}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x4c}, &(0x7f0000000540)={0x40, 0xb, 0x2, "32cb"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, 'aV'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x37e9}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x7}}) 1m51.478612037s ago: executing program 39 (id=313): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_clone3(&(0x7f0000000640)={0x29c0080, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000100), {0x1d}, &(0x7f0000000500)=""/144, 0x90, &(0x7f0000000280)=""/60, &(0x7f00000000c0)=[r2, r2], 0x2, {r1}}, 0x58) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1m41.194141893s ago: executing program 40 (id=413): connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socket$inet6(0xa, 0x3, 0xff) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000840)="1ca6fae6df80a5ab139abf930a5934fc36e94bf2b5d43fe51fe76a6ff34cac50a3f7a9", 0x23}], 0x1, 0x0, 0x3075}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001a00)='O', 0x1}], 0x1}}], 0x2, 0x440c5) 1m36.628074796s ago: executing program 41 (id=428): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r2, 0x401, 0x70bd2d, 0x25dfdbfa, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x40) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) r3 = syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x2089, 0x3000}, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r4 = socket(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r4, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x2c34}], 0x1, 0x4020, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x31, r0, 0x1004000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x0, 0xb37, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x188}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1beb, 0x80000, 0x1000002, 0x141, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8a, 0x4000, 0xffffffff, 0x301, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x1, 0xc5, 0x0, r6}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 1m34.826183921s ago: executing program 42 (id=375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 1m31.609464721s ago: executing program 43 (id=394): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000300)={0x0, &(0x7f0000000680)=[@set_irq_handler={0xc8, 0x20, {0xbf, 0x2}}, @nested_load_code={0x12e, 0x5f, {0x0, "66ba6100ec66baf80cb85ca5d284ef66bafc0cedc4a23d9b9900500000c4c1a554761766b833018ee8c482cd3b5700c4e2192cadf5ffffff41691b2b7300006742a6c4c16815f7"}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xff, 0x5, 0x7, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4008, 0x9, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x58, 0x7, 0xfffffffffffffff3, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0xe000, 0xc7d6}}, @nested_load_code={0x12e, 0x6b, {0x4, "c4a22dcf6000c42231a948612666440ffaaf007000000f01dfc744240006000000c7442402150b0000c7442406000000000f011c2466bad00466ed66ba4000ed0f01d166ba4100b03eeec462bd2b901a6c0000"}}, @rdmsr={0x66, 0x18, {0x358}}, @uexit={0x0, 0x18, 0x5}, @nested_load_code={0x12e, 0x57, {0x2, "0f1912f30fc2aa000000000365450f01c2440fea9d00900000b8010000000f01c1b8010000000f01d90f017cc6008fe95098ab05000000c4c251aec84479a1"}}, @in_dx={0x69, 0x20, {0xe0e, 0x1}}], 0x271}) 1m21.308080917s ago: executing program 44 (id=431): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x15, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xa, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f00000001c0)=""/149, 0x95, 0x1000306) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x15, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xa, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) pread64(r2, &(0x7f00000001c0)=""/149, 0x95, 0x1000306) (async) 57.343355374s ago: executing program 6 (id=623): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000a77000/0x2000)=nil, 0x2000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000180), 0x6e, 0x0}, 0x102) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x400}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000022c0)) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044010}, 0x48040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="61128c0000000f0061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) 56.369127788s ago: executing program 6 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone3(&(0x7f0000000700)={0x1522a900, 0x0, 0x0, 0xfffffffffffffffd, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x58) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_read_part_table(0x5dd, &(0x7f0000000000)="$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") 56.365324068s ago: executing program 6 (id=629): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000680), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000140)={&(0x7f00000007c0), 0x10, &(0x7f00000005c0)={&(0x7f00000002c0)=@can={{0x2}, 0x5, 0x3, 0x0, 0x0, "9dc72295efd895df"}, 0x10}, 0x1, 0x0, 0x0, 0x40095}, 0x48811) (async) r5 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) flock(r5, 0x2) (async) socket$inet6(0xa, 0x3, 0xff) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async, rerun: 32) listen(r7, 0x5a) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) (async) sendmmsg$inet(r8, 0x0, 0x0, 0x440c5) 52.892295784s ago: executing program 45 (id=650): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="02043c0001000000010e0200c52cf7c20675e005b02f0800eb2b2ff0dadb897c6b112002faffffff3066090cb600c5471d130aaf14c85443b705ca7952ad90e59066321a54e7df30", 0x48, 0x4040025, 0x0, 0x1600) 46.63702963s ago: executing program 7 (id=675): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffe39}]}) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) 46.417339365s ago: executing program 7 (id=676): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4) syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0xfa, 0x10617, &(0x7f0000010a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1e9) fallocate(r1, 0x10, 0x1, 0x8000) r2 = open(&(0x7f0000000300)='./file1\x00', 0x18e97e, 0x13e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x82) pidfd_send_signal(r3, 0x1a, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x76d800, 0x3, 0x81, 0xffffffff, 0x5}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100060808004149004001040800", 0x58}], 0x1) sendfile(r2, r2, 0x0, 0x10000006) 45.577175916s ago: executing program 7 (id=683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000140)={0xcc00000000000000, 0x50000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000680)={0x953, 0xe94, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)) 45.215092125s ago: executing program 7 (id=684): exit(0xffff) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0x21) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000000c0)=0x7d, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f020000"], 0x78) close(r2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 44.365729276s ago: executing program 7 (id=692): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8000) ppoll(&(0x7f0000000880)=[{r0, 0x308a}], 0x1, &(0x7f00000008c0)={0x0, 0x989680}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0xc0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone3(&(0x7f0000000700)={0x1522a900, 0x0, 0x0, 0xfffffffffffffffd, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) syz_read_part_table(0x5dd, &(0x7f0000000000)="$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") ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000780)={{0xd000, 0x3000, 0x10, 0x1, 0x5, 0x0, 0x3, 0x1, 0x6, 0x80, 0xf8, 0x6}, {0x3ff8, 0x4000, 0x1, 0x5, 0x4e, 0x3, 0xd, 0x9, 0x2, 0x8, 0x2, 0x2}, {0x6000, 0x3000, 0xe, 0x8, 0x81, 0x4, 0xdf, 0x7, 0x5, 0x3, 0x0, 0x2}, {0xd000, 0x3ff8, 0xe, 0x3, 0xd, 0x8, 0xfe, 0x6, 0xff, 0xff, 0x0, 0x8}, {0x30000, 0xfec00000, 0x9, 0x8, 0x9, 0x7, 0x6, 0x7, 0x7, 0x5, 0x1, 0x9}, {0xffe, 0x70000, 0x7, 0xf, 0x7, 0x7f, 0x3, 0x6, 0x6, 0x6, 0x24}, {0xeeec5ffb, 0xdddd0000, 0x8, 0x4, 0x6, 0x85, 0x64, 0x3, 0x9, 0x2, 0x3, 0x2}, {0x1000, 0xffe, 0xf, 0x4, 0x40, 0x6, 0x5, 0x3c, 0x32, 0x0, 0x4, 0x4}, {0xfec00000, 0x5}, {0xeeee8000, 0x2}, 0x0, 0x0, 0x26000, 0x400000, 0x1, 0x4500, 0x4000, [0x10, 0x6, 0x7fff, 0x3]}) 44.289540538s ago: executing program 7 (id=693): r0 = socket(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x1) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x0, 0xb, 0x0, 0x3, 0x29, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x0, 0x7800, 0x0, 0x9}}) 41.228472274s ago: executing program 46 (id=629): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000680), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000140)={&(0x7f00000007c0), 0x10, &(0x7f00000005c0)={&(0x7f00000002c0)=@can={{0x2}, 0x5, 0x3, 0x0, 0x0, "9dc72295efd895df"}, 0x10}, 0x1, 0x0, 0x0, 0x40095}, 0x48811) (async) r5 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) flock(r5, 0x2) (async) socket$inet6(0xa, 0x3, 0xff) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async, rerun: 32) listen(r7, 0x5a) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) (async) sendmmsg$inet(r8, 0x0, 0x0, 0x440c5) 38.321589906s ago: executing program 4 (id=751): r0 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001a80)=""/192, 0xc0}], 0x1}, 0xffffffff}], 0x1, 0x40000120, 0x0) 38.321393766s ago: executing program 4 (id=752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x2000000002, 0x4, 0x81, 0x9c2, 0x5, 0x1006, 0xc, 0x6, 0x8000, 0x1], 0x1000, 0xc2302}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.223791899s ago: executing program 4 (id=753): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x7}}, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x4c, 0x0, 0x3}, 0x28) 38.212494729s ago: executing program 4 (id=754): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 37.656015163s ago: executing program 4 (id=756): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="8000e86503000013", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000180000000000000029000000", @ANYRES32=r0], 0x30}, 0x4004000) 37.239820343s ago: executing program 4 (id=764): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e203020312031") 36.97665163s ago: executing program 47 (id=764): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e203020312031") 35.489482937s ago: executing program 3 (id=783): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0xffffffffffffffff) syz_open_pts(r1, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={0x0}, 0x18) 35.266327542s ago: executing program 3 (id=784): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x1000401) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x101000, 0x0) getdents64(r3, 0x0, 0x0) 34.988531649s ago: executing program 3 (id=788): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000440)={0x20, 0x5, 0xd, "07eccb39332f8c578658960139"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xf, 0x80, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x401, 0xffff, 0x2, 0x40}, {0x6, 0x24, 0x1a, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x4, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x80, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x6, 0x5}}}}}}}]}}, 0xfffffffffffffffd) ioctl$EVIOCGMASK(r2, 0x5b16, 0x0) 31.849585177s ago: executing program 3 (id=801): r0 = io_uring_setup(0x10db, &(0x7f0000000900)={0x0, 0x1786, 0x800, 0x1, 0xd3}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x25, &(0x7f00000008c0)={0x0, 0x0, 0x1, 0x3}, 0x1) 31.849334237s ago: executing program 3 (id=802): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001d40)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x9, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/177}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) 31.239125943s ago: executing program 3 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x12f) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x10b842, 0x0) sendfile(r1, r1, 0x0, 0x1000000201005) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="22000000030000000000001503570100010000"], 0x22) 30.429462153s ago: executing program 2 (id=812): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x9c28}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pipe(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dvmrp0\x00'}) 29.630898203s ago: executing program 2 (id=814): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000000)=[{r1, 0xa}], 0x1, 0xa1) dup3(r1, r0, 0x0) 29.540378965s ago: executing program 2 (id=815): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002301000034020000170000004c0006800c0003000123456789abcdef3c0004"], 0x60}}, 0x0) 29.429522308s ago: executing program 2 (id=816): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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") getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setxattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='overlay\x00', 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 29.253078052s ago: executing program 48 (id=693): r0 = socket(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x1) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x0, 0xb, 0x0, 0x3, 0x29, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x0, 0x7800, 0x0, 0x9}}) 28.94366176s ago: executing program 2 (id=822): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4080) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 28.557342189s ago: executing program 2 (id=825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.485061751s ago: executing program 49 (id=825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.493524505s ago: executing program 5 (id=853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 25.493360576s ago: executing program 5 (id=854): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x1, 0x561, &(0x7f0000000a00)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 25.200302233s ago: executing program 5 (id=855): r0 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0x8) readv(r1, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/4084, 0xff4}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d7985ad56808387a44610c2b0890de328bb3eeae9fbd6da1b50153ad6d1cf108b7eca8880293643bc836ee65f5c5b0515a61825e38a579129d67bee7e6330e87c8f63064fa1abb7b3af74c16b90b450e781e2243d84bd8191f589ecd2f50cc9b8e07f76ea782d8cecdf9ec"}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 22.121520299s ago: executing program 5 (id=880): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x80001, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x8, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc5c, 0x8, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x1000, 0x3, 0x1e9, 0x0, r0}}], 0x1, &(0x7f0000000500)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0x404, 0x8004, 0x0, 0x0}}, 0x0) 21.796321328s ago: executing program 5 (id=887): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001d40)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x9, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/177}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) 21.572558133s ago: executing program 5 (id=890): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) 16.023948052s ago: executing program 50 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x12f) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x10b842, 0x0) sendfile(r1, r1, 0x0, 0x1000000201005) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="22000000030000000000001503570100010000"], 0x22) 6.562169007s ago: executing program 51 (id=890): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) 4.081684008s ago: executing program 0 (id=1082): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1004, 0x6}, {0x1004}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="ca"]}]}}]}]}]}}]}, 0x64}}, 0x0) 2.765543561s ago: executing program 0 (id=1087): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x201, 0x5, {}, {}, {}, 0x1, @can={{}, 0x3, 0x4, 0x0, 0x0, "140400"}}, 0x48}}, 0x0) 2.765406861s ago: executing program 0 (id=1088): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}], 0x1) 2.741321122s ago: executing program 0 (id=1089): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.807771895s ago: executing program 0 (id=1097): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 1.351064856s ago: executing program 9 (id=1103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x6}) 1.335221087s ago: executing program 6 (id=1053): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000380), 0x200000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.300740647s ago: executing program 9 (id=1106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="014000000000000000000f00000024000780080001"], 0x38}}, 0x0) 1.300346658s ago: executing program 9 (id=1107): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/133, 0x85}], 0x1, &(0x7f0000000200)=""/146, 0x92}, 0x4}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000340)=""/46, 0x2e}], 0x1, 0x0, 0xfffffffffffffe60}, 0xfbd}], 0x2, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/41, 0x29, 0x10003, 0x0, 0x0) shutdown(r0, 0x2) 1.249359339s ago: executing program 1 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000003c0)="b73f0da6d05b38ca9cbbce709c72aa728fc8e537ff02cb691d35e2a5a0cad47127f2b5950b319ccd6509031e021bdf5585f6ca53d7c3827aadddc690493fa1eb806a1b40ad52f66beceeb0fb286427cecf34afd699bd7e52115a73bdd9211eed68ac4b2ba56c77ac0ba3fbb8edab4ca3410350bc04fa27e0eb13db3e45e6c2ed4b", 0x81) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x6738, 0x13500, 0xffffffff, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) sendfile(r3, r4, 0x0, 0x20000023896) 1.249284709s ago: executing program 6 (id=1110): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.121987212s ago: executing program 1 (id=1111): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc010000190001000000000000000000ac141420000000000000000000000000fc01000000000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="660f00000000000003001000000000000000000000000000feffffffffffffff040000000000000006000000000000000000000000000000000000000000000008000000000000000100000000000000000000000000000000000000000000000000000000000000000000020000000004010500ac1414aa000000000000000000000000000004d23c00000002000000fe8000000000000000000000000000bb0435000001010700030000004c00000000010000e0000002000000000000000000000000000004d63c00000002"], 0x1bc}}, 0x20000000) 1.121834162s ago: executing program 1 (id=1112): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000) openat(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) 1.103722162s ago: executing program 9 (id=1113): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303030302c646973636172642c6e616d65636173653d312c646d61736b3d30303030303030303030303030303030303030303137372c6572726f72733d636f6e74696e75652c6572726f72733d72656d6f756e742d726f2c696f636861727365743d63703835372c666d61736b3d30303030303030303030303030303030303030303037352c6e616ddfd6e54c2c0660332f65636173653d312c7569643d30c2b91554c3f3acc83e1a833b2042125a299807", @ANYRES16, @ANYBLOB="00050000000000000000d0948ce941236bf6138dd56792dda3ece25a51743067f74f3ceacc7c6dce58aa904fd44c5979ccd05d29"], 0x1, 0x1550, &(0x7f0000000940)="$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") read(r0, &(0x7f00000002c0)=""/153, 0x99) 820.80845ms ago: executing program 9 (id=1115): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x105c87, 0x800, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 653.512514ms ago: executing program 8 (id=1117): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x4, 0xf, 0x1}}, 0x30) writev(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000100)="f19b4cfeaddd0a9327aac595a43dcc7a85", 0x11}], 0x1) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3) 653.397124ms ago: executing program 8 (id=1118): r0 = socket(0x2b, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sh\x00', 0x30, 0x660f577c, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000440)={{0x84, @rand_addr=0x64010101, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) 650.149914ms ago: executing program 8 (id=1119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a48000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080c000980080002800400"], 0x70}}, 0x0) 633.328134ms ago: executing program 8 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_gettime(0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000019c0)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x96}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xd, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40) 510.152207ms ago: executing program 8 (id=1121): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x80) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="02000000010005000000000002000000", @ANYRES32, @ANYBLOB="0400060000000000100004000000000020000700"], 0x2c, 0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x3) 467.622728ms ago: executing program 0 (id=1122): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 467.165998ms ago: executing program 8 (id=1123): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/133, 0x85}], 0x1, &(0x7f0000000200)=""/146, 0x92}, 0x4}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000340)=""/46, 0x2e}], 0x1, 0x0, 0xfffffffffffffe60}, 0xfbd}], 0x2, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/41, 0x29, 0x10003, 0x0, 0x0) shutdown(r0, 0x2) 314.445422ms ago: executing program 6 (id=1124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) 303.700432ms ago: executing program 1 (id=1125): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) write(r0, &(0x7f0000000700)="ffffffffffff00aabbccddee080045000028000100004011f8cbd0000001e00101011000100000", 0x27) 303.578752ms ago: executing program 9 (id=1126): syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) 136.79µs ago: executing program 1 (id=1127): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x10080) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r2}, 0x14) 0s ago: executing program 1 (id=1128): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@mss, @timestamp, @window={0x3, 0x62f3, 0x1}, @mss, @sack_perm, @mss={0x2, 0x6}, @timestamp, @sack_perm], 0x8) sendmsg(r0, &(0x7f0000008500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="c8", 0x1}], 0x1}, 0x4000800) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) kernel console output (not intermixed with test programs): ? do_filp_open+0x420/0x420 [ 197.307057][ T3146] do_filp_open+0x1ee/0x420 [ 197.311574][ T3146] ? __cfi_do_filp_open+0x10/0x10 [ 197.316620][ T3146] ? alloc_fd+0x4c1/0x570 [ 197.320977][ T3146] do_sys_openat2+0x15e/0x820 [ 197.325670][ T3146] ? __se_sys_futex+0x136/0x310 [ 197.330528][ T3146] ? do_sys_open+0xe0/0xe0 [ 197.334952][ T3146] ? __this_cpu_preempt_check+0x13/0x20 [ 197.340503][ T3146] ? xfd_validate_state+0x70/0x150 [ 197.345626][ T3146] __x64_sys_openat+0x136/0x160 [ 197.350499][ T3146] x64_sys_call+0x783/0x9a0 [ 197.355023][ T3146] do_syscall_64+0x4c/0xa0 [ 197.359458][ T3146] ? clear_bhb_loop+0x30/0x80 [ 197.364140][ T3146] ? clear_bhb_loop+0x30/0x80 [ 197.368821][ T3146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.374724][ T3146] RIP: 0033:0x7f8d6cf9e199 [ 197.379161][ T3146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.398779][ T3146] RSP: 002b:00007f8d6ddc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 197.407207][ T3146] RAX: ffffffffffffffda RBX: 00007f8d6d225fa0 RCX: 00007f8d6cf9e199 [ 197.415196][ T3146] RDX: 0000000000020d42 RSI: 000020000000c380 RDI: ffffffffffffff9c [ 197.423294][ T3146] RBP: 00007f8d6d0358e0 R08: 0000000000000000 R09: 0000000000000000 [ 197.431287][ T3146] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 197.439275][ T3146] R13: 00007f8d6d226038 R14: 00007f8d6d225fa0 R15: 00007ffd64c638b8 [ 197.447261][ T3146] [ 198.162274][ T3169] ./dev/sda1: Can't open blockdev [ 198.313719][ T321] usb 6-1: USB disconnect, device number 6 [ 198.334856][ T1492] udevd[1492]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:10.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.387830][ T3179] loop5: detected capacity change from 0 to 4096 [ 198.395749][ T3179] ext4: Unknown parameter 'fowner>00000000000000000000' [ 198.505995][ T3167] syz.7.624 (3167) used greatest stack depth: 19080 bytes left [ 198.597527][ T28] audit: type=1400 audit(1791403583.465:2672): avc: denied { watch_reads } for pid=3197 comm="syz.9.627" path="/25" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 198.634858][ T3198] loop9: detected capacity change from 0 to 512 [ 198.673615][ T3198] loop9: detected capacity change from 0 to 4096 [ 198.695155][ T3198] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.706828][ T3198] EXT4-fs (loop9): Test dummy encryption mode enabled [ 198.721625][ T3198] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 198.731055][ T3198] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 198.888399][ T3202] incfs: Options parsing error. -22 [ 198.893693][ T3202] incfs: mount failed -22 [ 199.264669][ T3208] loop5: detected capacity change from 0 to 256 [ 199.279638][ T321] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 199.350378][ T2651] EXT4-fs (loop9): unmounting filesystem. [ 199.351790][ T3208] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 199.398402][ T3211] xt_hashlimit: size too large, truncated to 1048576 [ 199.514454][ T321] usb 8-1: Using ep0 maxpacket: 32 [ 199.521129][ T321] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.531781][ T321] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 199.542856][ T321] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.552703][ T321] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.563734][ T321] usb 8-1: config 1 interface 1 has no altsetting 0 [ 199.580852][ T321] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.612967][ T321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.656994][ T321] usb 8-1: Product: syz [ 199.678591][ T321] usb 8-1: Manufacturer: syz [ 199.728867][ T321] usb 8-1: SerialNumber: syz [ 199.734063][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 199.969723][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 199.978100][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.137165][ T24] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 200.244235][ T3196] loop7: detected capacity change from 0 to 4096 [ 200.256074][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.385397][ T24] usb 4-1: Product: syz [ 200.390231][ T24] usb 4-1: Manufacturer: syz [ 200.401233][ T3196] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 200.411590][ T24] usb 4-1: SerialNumber: syz [ 200.441175][ T321] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 200.459754][ T321] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 200.489535][ T321] usb 8-1: USB disconnect, device number 5 [ 200.499268][ T1491] udevd[1491]: setting mode of /dev/snd/controlC0 to 020660 failed: No such file or directory [ 200.511399][ T1491] udevd[1491]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 200.522587][ T310] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 200.638151][ T3218] random: crng reseeded on system resumption [ 200.661870][ T3218] xt_hashlimit: size too large, truncated to 1048576 [ 200.719169][ T3227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.638'. [ 200.729453][ T310] usb 10-1: unable to get BOS descriptor or descriptor too short [ 200.741369][ T310] usb 10-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 200.759885][ T310] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.768898][ T310] usb 10-1: Product: syz [ 200.773383][ T310] usb 10-1: Manufacturer: syz [ 200.778068][ T310] usb 10-1: SerialNumber: syz [ 200.782993][ T3227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.793988][ T3227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.853741][ T28] audit: type=1400 audit(1791403585.725:2673): avc: granted { setsecparam } for pid=3217 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 200.971451][ T2435] EXT4-fs (loop7): unmounting filesystem. [ 200.998908][ T28] audit: type=1400 audit(1791403585.865:2674): avc: denied { getopt } for pid=3229 comm="syz.7.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 201.028963][ T310] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 201.123023][ T310] snd-usb-audio: probe of 10-1:1.0 failed with error -71 [ 201.139720][ T3235] loop5: detected capacity change from 0 to 4096 [ 201.155419][ T3235] ext4: Unknown parameter 'fowner>00000000000000000000' [ 201.165119][ T1470] udevd[1470]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 201.189866][ T310] usb 10-1: USB disconnect, device number 6 [ 201.571718][ T3250] loop9: detected capacity change from 0 to 512 [ 201.591214][ T28] audit: type=1400 audit(1791403586.465:2675): avc: denied { mount } for pid=3249 comm="syz.9.644" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 201.614684][ T28] audit: type=1400 audit(1791403586.465:2676): avc: denied { unmount } for pid=2651 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 201.693058][ T3261] loop9: detected capacity change from 0 to 4096 [ 201.709498][ T3261] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.725491][ T3261] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 201.774844][ T2651] EXT4-fs error (device loop9): ext4_lookup:1858: inode #17: comm syz-executor: iget: bogus i_mode (70755) [ 201.786750][ T2651] EXT4-fs error (device loop9): ext4_lookup:1858: inode #17: comm syz-executor: iget: bogus i_mode (70755) [ 201.822374][ T308] tipc: Left network mode [ 201.828852][ T2651] EXT4-fs (loop9): unmounting filesystem. [ 201.945696][ T3266] loop5: detected capacity change from 0 to 512 [ 201.992402][ T3266] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 202.022376][ T2423] EXT4-fs (loop5): unmounting filesystem. [ 202.093225][ T3280] loop7: detected capacity change from 0 to 512 [ 202.100156][ T3280] EXT4-fs (loop7): Test dummy encryption mode enabled [ 202.118253][ T3280] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #11: comm syz.7.654: casefold flag without casefold feature [ 202.124799][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.153380][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.160316][ T3280] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.654: couldn't read orphan inode 11 (err -117) [ 202.163940][ T3273] device bridge_slave_0 entered promiscuous mode [ 202.189161][ T3280] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 202.203605][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.210895][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.219079][ T3273] device bridge_slave_1 entered promiscuous mode [ 202.306991][ T28] audit: type=1400 audit(1791403587.155:2677): avc: denied { accept } for pid=3276 comm="syz.5.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.401801][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.408886][ T3273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.416217][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.423269][ T3273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.462127][ T28] audit: type=1400 audit(1791403587.335:2678): avc: denied { mount } for pid=3279 comm="syz.7.654" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 202.483856][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.492707][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.503268][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.517234][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.528595][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.548767][ T308] device veth1_macvtap left promiscuous mode [ 202.555837][ T308] device veth0_vlan left promiscuous mode [ 202.889948][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.915460][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.034829][ T3273] device veth0_vlan entered promiscuous mode [ 203.061156][ T3273] device veth1_macvtap entered promiscuous mode [ 203.178059][ T3295] xt_hashlimit: size too large, truncated to 1048576 [ 203.461140][ T2435] EXT4-fs (loop7): unmounting filesystem. [ 203.467023][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.500414][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.540106][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.559873][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.589128][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.609526][ T3289] loop1: detected capacity change from 0 to 40427 [ 203.610001][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.640812][ T3289] F2FS-fs (loop1): invalid crc value [ 203.643662][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.670503][ T3289] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.684896][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.700094][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.721080][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.738835][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.779629][ T2802] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 203.800111][ T3298] loop7: detected capacity change from 0 to 40427 [ 203.814286][ T3298] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 203.823644][ T3289] F2FS-fs (loop1): Start checkpoint disabled! [ 203.830344][ T3298] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 203.847498][ T3289] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 203.854954][ T3298] F2FS-fs (loop7): Unrecognized mount option "ÿÿÿÿ" or missing value [ 203.876042][ T3289] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 204.010688][ T2802] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 204.027853][ T2802] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 204.041440][ T2802] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 204.051959][ T2802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.268612][ T2802] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 204.308614][ T2802] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input10 [ 204.361002][ T2802] input: failed to attach handler kbd to device input10, error: -5 [ 204.463329][ T2802] usb 6-1: USB disconnect, device number 7 [ 204.509710][ T2657] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 204.711097][ T2657] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 204.719374][ T2657] usb 2-1: config 0 has no interface number 0 [ 204.740620][ T2657] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 204.783371][ T2657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.793325][ T2657] usb 2-1: Product: syz [ 204.797567][ T2657] usb 2-1: Manufacturer: syz [ 204.797743][ T3307] loop7: detected capacity change from 0 to 256 [ 204.802206][ T2657] usb 2-1: SerialNumber: syz [ 204.806258][ T2657] usb 2-1: config 0 descriptor?? [ 204.825091][ T3307] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.847817][ T28] audit: type=1400 audit(1791403589.715:2679): avc: denied { listen } for pid=3309 comm="syz.5.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.884256][ T28] audit: type=1400 audit(1791403589.735:2680): avc: denied { accept } for pid=3309 comm="syz.5.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.910456][ T3307] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 204.924106][ T3314] loop5: detected capacity change from 0 to 4096 [ 204.934966][ T3307] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 204.956329][ T3314] ext4: Unknown parameter 'fowner>00000000000000000000' [ 204.973363][ T28] audit: type=1400 audit(1791403589.845:2681): avc: denied { rename } for pid=3306 comm="syz.7.658" name="file0" dev="loop7" ino=1048894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.039044][ T28] audit: type=1400 audit(1791403589.885:2682): avc: denied { reparent } for pid=3306 comm="syz.7.658" name="file0" dev="loop7" ino=1048894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.439930][ T3289] syz.1.660: attempt to access beyond end of device [ 205.439930][ T3289] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 205.455006][ T3289] syz.1.660: attempt to access beyond end of device [ 205.455006][ T3289] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 205.493570][ T24] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 205.969771][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 206.064874][ T3354] loop5: detected capacity change from 0 to 256 [ 206.082940][ T3354] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 206.189656][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 206.242269][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 206.391650][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.410086][ T2657] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 206.459772][ T2657] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 206.497921][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 206.580393][ T2657] asix: probe of 2-1:0.251 failed with error -71 [ 206.626970][ T318] kworker/u4:4: attempt to access beyond end of device [ 206.626970][ T318] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 206.653722][ T3227] Restarting kernel threads ... done. [ 206.842595][ T2642] usb 4-1: USB disconnect, device number 8 [ 206.848350][ T24] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 206.857843][ T2657] usb 2-1: USB disconnect, device number 5 [ 206.890458][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.969871][ T24] usb 8-1: config 0 descriptor?? [ 207.415274][ T24] hid (null): report_id 0 is invalid [ 207.447742][ T24] hid-led 0003:0FC5:B080.000B: report_id 0 is invalid [ 207.541844][ T24] hid-led 0003:0FC5:B080.000B: item 0 0 1 8 parsing failed [ 207.637798][ T24] hid-led: probe of 0003:0FC5:B080.000B failed with error -22 [ 207.663886][ T24] usb 8-1: USB disconnect, device number 6 [ 207.738883][ T3366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3366 comm=syz.1.671 [ 207.765679][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.774885][ T3370] device bridge_slave_0 left promiscuous mode [ 207.781501][ T3370] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.790063][ T3370] device bridge_slave_1 left promiscuous mode [ 207.796212][ T3370] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.826651][ T3370] loop3: detected capacity change from 0 to 512 [ 207.849244][ T3370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.673: inode #1: comm syz.3.673: iget: illegal inode # [ 207.862693][ T3370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.673: error while reading EA inode 1 err=-117 [ 207.875074][ T3370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.673: inode #1: comm syz.3.673: iget: illegal inode # [ 207.891391][ T3370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.673: error while reading EA inode 1 err=-117 [ 207.903957][ T3370] EXT4-fs (loop3): 1 orphan inode deleted [ 207.909875][ T3370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 207.959678][ T3370] loop3: detected capacity change from 512 to 0 [ 207.979634][ T2657] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 207.991242][ T2499] EXT4-fs (loop3): unmounting filesystem. [ 208.170704][ T2657] usb 6-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 208.189615][ T2657] usb 6-1: config 1 interface 0 has no altsetting 0 [ 208.201586][ T2657] usb 6-1: string descriptor 0 read error: -22 [ 208.207798][ T2657] usb 6-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 208.217098][ T2657] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.230759][ T3368] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 208.309632][ T2642] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 208.489687][ T2642] usb 4-1: Using ep0 maxpacket: 32 [ 208.508732][ T2642] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 208.529954][ T2642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.559622][ T2642] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 208.579611][ T2642] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 208.588669][ T2642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.630045][ T2642] usb 4-1: config 0 descriptor?? [ 208.732935][ T3387] netlink: 'syz.1.679': attribute type 9 has an invalid length. [ 208.861270][ T2657] cypress 0003:04B4:ED81.000C: unknown main item tag 0x5 [ 208.878742][ T2657] cypress 0003:04B4:ED81.000C: unknown main item tag 0x0 [ 208.884207][ T3380] loop7: detected capacity change from 0 to 131072 [ 208.888673][ T2657] cypress 0003:04B4:ED81.000C: unknown main item tag 0x1 [ 208.915222][ T3380] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945) [ 208.929804][ T2657] cypress 0003:04B4:ED81.000C: unknown global tag 0xc [ 208.936613][ T2657] cypress 0003:04B4:ED81.000C: item 0 0 1 12 parsing failed [ 208.938450][ T3380] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 208.955153][ T2657] cypress 0003:04B4:ED81.000C: parse failed [ 208.961792][ T2657] cypress: probe of 0003:04B4:ED81.000C failed with error -22 [ 208.970395][ T3395] loop1: detected capacity change from 0 to 4096 [ 208.977289][ T3380] F2FS-fs (loop7): invalid crc value [ 208.987119][ T3395] ext4: Unknown parameter 'fowner>00000000000000000000' [ 209.017875][ T3380] F2FS-fs (loop7): Found nat_bits in checkpoint [ 209.042612][ T2642] hid (null): report_id 0 is invalid [ 209.050308][ T2642] hid-led 0003:0FC5:B080.000D: report_id 0 is invalid [ 209.057103][ T2642] hid-led 0003:0FC5:B080.000D: item 0 0 1 8 parsing failed [ 209.101519][ T2642] hid-led: probe of 0003:0FC5:B080.000D failed with error -22 [ 209.119435][ T3380] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 209.126618][ T3380] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 209.144687][ T3380] F2FS-fs (loop7): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 209.252353][ T2642] usb 4-1: USB disconnect, device number 9 [ 209.296119][ T3368] loop5: detected capacity change from 0 to 40427 [ 209.313235][ T3368] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 209.327350][ T3368] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 209.336842][ T3368] F2FS-fs (loop5): invalid crc value [ 209.342454][ T3368] F2FS-fs (loop5): invalid crc value [ 209.347812][ T3368] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 209.530370][ T2642] usb 6-1: USB disconnect, device number 8 [ 209.833902][ T3418] loop3: detected capacity change from 0 to 2048 [ 209.871711][ T3418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 209.883083][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 209.883097][ T28] audit: type=1400 audit(1791403594.755:2684): avc: denied { mounton } for pid=3417 comm="syz.3.686" path="/47/file0/proc" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 209.916188][ T3418] type: 4063891131 invalid [ 209.929847][ T28] audit: type=1400 audit(1791403594.785:2685): avc: denied { read write } for pid=3417 comm="syz.3.686" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 209.966873][ T28] audit: type=1400 audit(1791403594.785:2686): avc: denied { open } for pid=3417 comm="syz.3.686" path="/47/file0/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 210.000857][ T28] audit: type=1400 audit(1791403594.785:2687): avc: denied { ioctl } for pid=3417 comm="syz.3.686" path="/47/file0/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 210.026906][ T2499] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 210.046040][ T2499] EXT4-fs (loop3): unmounting filesystem. [ 210.077190][ T3424] netlink: 68 bytes leftover after parsing attributes in process `syz.5.688'. [ 210.103820][ T3429] loop5: detected capacity change from 0 to 512 [ 210.127879][ T3429] EXT4-fs: Ignoring removed nobh option [ 210.141458][ T3429] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 210.150908][ T3429] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.689: attempt to clear invalid blocks 1 len 1 [ 210.164003][ T3429] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 210.178928][ T3429] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.689: invalid indirect mapped block 1819239214 (level 0) [ 210.193014][ T3429] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.689: invalid indirect mapped block 1819239214 (level 1) [ 210.207450][ T3429] EXT4-fs (loop5): 1 truncate cleaned up [ 210.214365][ T3429] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 210.225876][ T3429] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.689: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 210.252966][ T2423] EXT4-fs (loop5): unmounting filesystem. [ 210.276014][ T3436] loop5: detected capacity change from 0 to 1024 [ 210.285596][ T3436] EXT4-fs: Ignoring removed bh option [ 210.303717][ T3436] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 210.329971][ T2423] EXT4-fs (loop5): unmounting filesystem. [ 210.378168][ T28] audit: type=1400 audit(1791403595.245:2688): avc: denied { mounton } for pid=3439 comm="syz.5.691" path="/proc/197/task" dev="proc" ino=33796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 210.759681][ T2657] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 210.869618][ T2802] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 210.959650][ T2657] usb 6-1: Using ep0 maxpacket: 32 [ 210.970320][ T2657] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 210.999643][ T2657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.022268][ T2657] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 211.022427][ T28] audit: type=1400 audit(1791403595.895:2689): avc: denied { bind } for pid=3451 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.049725][ T2657] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 211.064946][ T2802] usb 2-1: Using ep0 maxpacket: 32 [ 211.071147][ T3452] netlink: 36 bytes leftover after parsing attributes in process `syz.3.696'. [ 211.081177][ T2802] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 211.090217][ T28] audit: type=1400 audit(1791403595.945:2690): avc: denied { setopt } for pid=3451 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.094857][ T2657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.130050][ T3452] binder: 3451:3452 ioctl c0306201 200000000640 returned -22 [ 211.137500][ T2802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.139931][ T28] audit: type=1400 audit(1791403595.975:2691): avc: denied { ioctl } for pid=3451 comm="syz.3.696" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 211.160219][ T2802] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 211.200227][ T2802] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 211.220668][ T2802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.242764][ T2657] usb 6-1: config 0 descriptor?? [ 211.260738][ T2802] usb 2-1: config 0 descriptor?? [ 211.278800][ T28] audit: type=1400 audit(1791403596.145:2692): avc: denied { setopt } for pid=3458 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.463363][ T3464] loop3: detected capacity change from 0 to 1024 [ 211.473598][ T3464] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.505530][ T3464] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 211.531721][ T3464] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.701: Freeing blocks not in datazone - block = 0, count = 4096 [ 211.559923][ T3464] EXT4-fs (loop3): Remounting filesystem read-only [ 211.566597][ T3464] EXT4-fs (loop3): 1 orphan inode deleted [ 211.589645][ T3464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 211.630023][ T2499] EXT4-fs (loop3): unmounting filesystem. [ 211.672409][ T2802] hid (null): report_id 0 is invalid [ 211.680687][ T2802] hid-led 0003:0FC5:B080.000E: report_id 0 is invalid [ 211.687507][ T2802] hid-led 0003:0FC5:B080.000E: item 0 0 1 8 parsing failed [ 211.696008][ T2802] hid-led: probe of 0003:0FC5:B080.000E failed with error -22 [ 211.851902][ T2657] hid (null): report_id 0 is invalid [ 211.861551][ T2657] hid-led 0003:0FC5:B080.000F: report_id 0 is invalid [ 211.868358][ T2657] hid-led 0003:0FC5:B080.000F: item 0 0 1 8 parsing failed [ 211.876442][ T2657] hid-led: probe of 0003:0FC5:B080.000F failed with error -22 [ 211.922786][ T310] usb 2-1: USB disconnect, device number 6 [ 212.066675][ T2642] usb 6-1: USB disconnect, device number 9 [ 212.550543][ T28] audit: type=1400 audit(1791403597.425:2693): avc: denied { connect } for pid=3474 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.859637][ T2802] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 213.051137][ T2802] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 213.083227][ T2802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.114398][ T2802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.143690][ T2802] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 213.190392][ T2802] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 213.209697][ T2802] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 213.226483][ T2802] usb 4-1: Manufacturer: syz [ 213.243666][ T2802] usb 4-1: config 0 descriptor?? [ 213.261519][ T3495] FAULT_INJECTION: forcing a failure. [ 213.261519][ T3495] name failslab, interval 1, probability 0, space 0, times 0 [ 213.289624][ T3495] CPU: 0 PID: 3495 Comm: syz.1.711 Not tainted syzkaller #0 [ 213.296948][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.307021][ T3495] Call Trace: [ 213.310315][ T3495] [ 213.313248][ T3495] __dump_stack+0x21/0x24 [ 213.317602][ T3495] dump_stack_lvl+0x110/0x170 [ 213.322318][ T3495] ? __cfi_dump_stack_lvl+0x8/0x8 [ 213.327351][ T3495] ? xas_nomem+0x6b/0x1f0 [ 213.331694][ T3495] dump_stack+0x15/0x24 [ 213.335866][ T3495] should_fail_ex+0x3bf/0x510 [ 213.340552][ T3495] __should_failslab+0xac/0xf0 [ 213.345332][ T3495] should_failslab+0x9/0x20 [ 213.349845][ T3495] slab_pre_alloc_hook+0x30/0x1d0 [ 213.354887][ T3495] ? __kasan_check_write+0x14/0x20 [ 213.360008][ T3495] ? _raw_spin_lock+0x94/0xf0 [ 213.364710][ T3495] kmem_cache_alloc_lru+0x49/0x280 [ 213.369834][ T3495] ? iget_locked+0x1dc/0x840 [ 213.374440][ T3495] iget_locked+0x1dc/0x840 [ 213.378868][ T3495] kernfs_get_inode+0x4b/0x6e0 [ 213.383649][ T3495] ? __cfi_kernfs_set_super+0x10/0x10 [ 213.389048][ T3495] kernfs_get_tree+0x4f1/0x790 [ 213.393839][ T3495] sysfs_get_tree+0x40/0x100 [ 213.398491][ T3495] vfs_get_tree+0x9a/0x270 [ 213.402932][ T3495] do_new_mount+0x251/0xb40 [ 213.407482][ T3495] ? security_capable+0x99/0xc0 [ 213.412351][ T3495] path_mount+0x640/0xfd0 [ 213.416702][ T3495] __se_sys_mount+0x320/0x390 [ 213.421393][ T3495] ? __this_cpu_preempt_check+0x13/0x20 [ 213.426960][ T3495] ? __x64_sys_mount+0xd0/0xd0 [ 213.431814][ T3495] ? __kasan_check_write+0x14/0x20 [ 213.436942][ T3495] ? fpregs_restore_userregs+0x128/0x260 [ 213.442584][ T3495] __x64_sys_mount+0xbf/0xd0 [ 213.447180][ T3495] x64_sys_call+0x65d/0x9a0 [ 213.451696][ T3495] do_syscall_64+0x4c/0xa0 [ 213.456125][ T3495] ? clear_bhb_loop+0x30/0x80 [ 213.460818][ T3495] ? clear_bhb_loop+0x30/0x80 [ 213.465503][ T3495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.471402][ T3495] RIP: 0033:0x7f47be79e199 [ 213.475828][ T3495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.495446][ T3495] RSP: 002b:00007f47bf61b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.503870][ T3495] RAX: ffffffffffffffda RBX: 00007f47bea25fa0 RCX: 00007f47be79e199 [ 213.511836][ T3495] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 213.519801][ T3495] RBP: 00007f47be8358e0 R08: 0000000000000000 R09: 0000000000000000 [ 213.527797][ T3495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.535759][ T3495] R13: 00007f47bea26038 R14: 00007f47bea25fa0 R15: 00007fff16dd32a8 [ 213.543725][ T3495] [ 213.687285][ T3502] FAULT_INJECTION: forcing a failure. [ 213.687285][ T3502] name fail_futex, interval 1, probability 0, space 0, times 1 [ 213.716737][ T3502] CPU: 1 PID: 3502 Comm: syz.5.715 Not tainted syzkaller #0 [ 213.724066][ T3502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.734137][ T3502] Call Trace: [ 213.737427][ T3502] [ 213.740362][ T3502] __dump_stack+0x21/0x24 [ 213.744715][ T3502] dump_stack_lvl+0x110/0x170 [ 213.749408][ T3502] ? __cfi_dump_stack_lvl+0x8/0x8 [ 213.754444][ T3502] dump_stack+0x15/0x24 [ 213.758613][ T3502] should_fail_ex+0x3bf/0x510 [ 213.763302][ T3502] should_fail+0xb/0x10 [ 213.767468][ T3502] get_futex_key+0x143/0xb10 [ 213.772075][ T3502] ? rwsem_write_trylock+0x136/0x300 [ 213.777372][ T3502] ? clear_nonspinnable+0x60/0x60 [ 213.782413][ T3502] ? __cfi_get_futex_key+0x10/0x10 [ 213.787538][ T3502] ? kasan_save_alloc_info+0x1f/0x30 [ 213.792830][ T3502] futex_wake+0x150/0x8e0 [ 213.797170][ T3502] ? __kasan_check_write+0x14/0x20 [ 213.802300][ T3502] ? key_put+0xa3/0xc0 [ 213.806386][ T3502] ? keyctl_restrict_keyring+0x1d2/0x230 [ 213.812030][ T3502] ? __cfi_futex_wake+0x10/0x10 [ 213.816894][ T3502] ? vfs_writev+0x464/0x5f0 [ 213.821409][ T3502] ? __se_sys_keyctl+0x7ec/0xe10 [ 213.826359][ T3502] do_futex+0x2bf/0x430 [ 213.830536][ T3502] ? __cfi_do_futex+0x10/0x10 [ 213.835222][ T3502] __se_sys_futex+0x136/0x310 [ 213.839906][ T3502] ? __x64_sys_futex+0x100/0x100 [ 213.844849][ T3502] ? xfd_validate_state+0x70/0x150 [ 213.849974][ T3502] __x64_sys_futex+0xe5/0x100 [ 213.854662][ T3502] x64_sys_call+0x7ec/0x9a0 [ 213.859176][ T3502] do_syscall_64+0x4c/0xa0 [ 213.863611][ T3502] ? clear_bhb_loop+0x30/0x80 [ 213.868300][ T3502] ? clear_bhb_loop+0x30/0x80 [ 213.872995][ T3502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.878903][ T3502] RIP: 0033:0x7fad9439e199 [ 213.883332][ T3502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.902955][ T3502] RSP: 002b:00007fad952980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 213.911393][ T3502] RAX: ffffffffffffffda RBX: 00007fad94625fa8 RCX: 00007fad9439e199 [ 213.919384][ T3502] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fad94625fac [ 213.927379][ T3502] RBP: 00007fad94625fa0 R08: 0026d20699771bb8 R09: 0000000000000000 [ 213.935369][ T3502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.943359][ T3502] R13: 00007fad94626038 R14: 00007ffd14fb34c0 R15: 00007ffd14fb35a8 [ 213.951351][ T3502] [ 213.957483][ T2802] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 213.967570][ T2802] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 213.976534][ T2802] appleir 0003:05AC:8243.0010: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 213.997617][ T308] tipc: Disabling bearer [ 214.003676][ T308] tipc: Left network mode [ 214.015857][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.029640][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.031099][ T3509] loop1: detected capacity change from 0 to 4096 [ 214.056653][ T3509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 214.069150][ T3509] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.717: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 214.070006][ T3503] device bridge_slave_0 entered promiscuous mode [ 214.102107][ T3509] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.717: directory missing '..' [ 214.115219][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.129619][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.141909][ T3503] device bridge_slave_1 entered promiscuous mode [ 214.179050][ T3273] EXT4-fs (loop1): unmounting filesystem. [ 214.268517][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.275629][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.282935][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.289981][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.310913][ T3528] loop5: detected capacity change from 0 to 256 [ 214.373709][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.381974][ T1792] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.389301][ T1792] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.403462][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.411734][ T1792] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.418794][ T1792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.426260][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.434751][ T1792] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.441837][ T1792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.462367][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.473216][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.495479][ T3503] device veth0_vlan entered promiscuous mode [ 214.504228][ T2657] usb 4-1: USB disconnect, device number 10 [ 214.520790][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.529507][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.537690][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.545638][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.563566][ T3503] device veth1_macvtap entered promiscuous mode [ 214.571126][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.593266][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.603051][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.622965][ T308] device veth1_macvtap left promiscuous mode [ 214.629866][ T2802] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 214.633460][ T308] device veth0_vlan left promiscuous mode [ 214.658380][ T3534] loop4: detected capacity change from 0 to 512 [ 214.688902][ T3534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 214.714184][ T3503] EXT4-fs (loop4): unmounting filesystem. [ 214.769716][ T3543] xt_hashlimit: size too large, truncated to 1048576 [ 214.819709][ T2802] usb 6-1: Using ep0 maxpacket: 8 [ 214.825966][ T2802] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 214.840041][ T2802] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.856363][ T2802] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.872644][ T2802] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.891233][ T2802] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.914398][ T2802] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 214.932209][ T2802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.053207][ T3550] loop4: detected capacity change from 0 to 512 [ 215.083801][ T3550] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.099288][ T3550] __quota_error: 1 callbacks suppressed [ 215.099303][ T3550] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 215.127584][ T3550] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 215.152178][ T3550] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 215.162879][ T3550] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.732: bad orphan inode 14 [ 215.189719][ T3550] ext4_test_bit(bit=13, block=18) = 1 [ 215.199788][ T3550] is_bad_inode(inode)=0 [ 215.203964][ T3550] NEXT_ORPHAN(inode)=0 [ 215.208024][ T3550] max_ino=32 [ 215.239763][ T3550] i_nlink=1 [ 215.242935][ T3550] EXT4-fs (loop4): 1 truncate cleaned up [ 215.248576][ T3550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 215.265040][ T28] audit: type=1326 audit(1791403600.135:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.1.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be79e199 code=0x7ffc0000 [ 215.306368][ T3503] EXT4-fs (loop4): unmounting filesystem. [ 215.315671][ T28] audit: type=1326 audit(1791403600.165:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.1.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f47be79e199 code=0x7ffc0000 [ 215.367186][ T28] audit: type=1326 audit(1791403600.165:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.1.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be79e199 code=0x7ffc0000 [ 215.398046][ T3561] loop3: detected capacity change from 0 to 40427 [ 215.402255][ T3573] loop4: detected capacity change from 0 to 256 [ 215.405291][ T28] audit: type=1326 audit(1791403600.165:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.1.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be79e199 code=0x7ffc0000 [ 215.435621][ T3561] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 215.445243][ T3561] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 215.480419][ T3561] F2FS-fs (loop3): Found nat_bits in checkpoint [ 215.498964][ T28] audit: type=1400 audit(1791403600.365:2699): avc: denied { bind } for pid=3577 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.617264][ T3561] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 215.629630][ T3561] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 215.825204][ T28] audit: type=1400 audit(1791403600.555:2700): avc: denied { mounton } for pid=3577 comm="syz.4.743" path="/9/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 215.888564][ T28] audit: type=1400 audit(1791403600.735:2701): avc: denied { create } for pid=3588 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.014921][ T2499] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 216.015084][ T2499] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 216.023208][ T2499] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 216.031313][ T2499] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 216.038974][ T2499] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 216.046951][ T2499] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 216.057633][ T2499] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 216.781740][ T3611] loop4: detected capacity change from 0 to 40427 [ 216.797988][ T3611] F2FS-fs (loop4): invalid crc value [ 216.980257][ T3611] F2FS-fs (loop4): Found nat_bits in checkpoint [ 217.053915][ T3611] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 217.099187][ T3503] syz-executor: attempt to access beyond end of device [ 217.099187][ T3503] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 217.129783][ T3503] syz-executor: attempt to access beyond end of device [ 217.129783][ T3503] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 217.352346][ T308] kworker/u4:3: attempt to access beyond end of device [ 217.352346][ T308] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 217.383248][ T2802] usb 6-1: USB disconnect, device number 10 [ 217.436953][ T3629] loop2: detected capacity change from 0 to 7 [ 217.454658][ T3627] loop5: detected capacity change from 0 to 1024 [ 217.492460][ T3627] EXT4-fs: Ignoring removed bh option [ 217.603327][ T3627] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 217.832711][ T2423] EXT4-fs (loop5): unmounting filesystem. [ 217.855191][ T3643] netlink: 964 bytes leftover after parsing attributes in process `syz.1.766'. [ 217.979683][ T3649] loop1: detected capacity change from 0 to 256 [ 218.009545][ T3649] exfat: Deprecated parameter 'utf8' [ 218.036585][ T3649] exfat: Deprecated parameter 'namecase' [ 218.066878][ T3649] exfat: Deprecated parameter 'utf8' [ 218.074302][ T3649] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 218.109632][ T310] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 218.309725][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 218.320780][ T310] usb 4-1: config 7 has an invalid interface number: 39 but max is 0 [ 218.328881][ T310] usb 4-1: config 7 has no interface number 0 [ 218.349998][ T310] usb 4-1: config 7 interface 39 has no altsetting 0 [ 218.358333][ T308] device bridge_slave_1 left promiscuous mode [ 218.364719][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.373287][ T310] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=c7.71 [ 218.393749][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.452785][ T310] usb 4-1: Product: syz [ 218.472728][ T310] usb 4-1: Manufacturer: syz [ 218.477375][ T310] usb 4-1: SerialNumber: syz [ 218.495087][ T308] device bridge_slave_0 left promiscuous mode [ 218.501451][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.515791][ T28] audit: type=1400 audit(1791403603.385:2702): avc: denied { read } for pid=3659 comm="syz.1.772" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 218.576117][ T308] device veth1_macvtap left promiscuous mode [ 218.592381][ T308] device veth0_vlan left promiscuous mode [ 218.608302][ T28] audit: type=1400 audit(1791403603.385:2703): avc: denied { open } for pid=3659 comm="syz.1.772" path="/35/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 218.748863][ T310] usb 4-1: USB disconnect, device number 11 [ 218.929507][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.945361][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state getty: ttyS0: read error: Resource temporarily unavailable [ 218.968319][ T3650] device bridge_slave_0 entered promiscuous mode [ 218.980574][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.993911][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.002954][ T3650] device bridge_slave_1 entered promiscuous mode [ 219.065506][ T3681] device veth1_to_bond entered promiscuous mode [ 219.081622][ T3681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 219.100432][ T3681] device veth1_to_bond left promiscuous mode [ 219.143672][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.157779][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.186557][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.199094][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.207440][ T1792] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.214531][ T1792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.222310][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.240006][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.250224][ T1792] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.257269][ T1792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.280197][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.640838][ T3695] using random self ethernet address [ 219.656353][ T3695] using random host ethernet address [ 219.805167][ T310] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 219.814272][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.944258][ T3650] device veth0_vlan entered promiscuous mode [ 219.972244][ T3650] device veth1_macvtap entered promiscuous mode [ 220.028775][ T3703] loop2: detected capacity change from 0 to 128 [ 220.066550][ T3703] EXT4-fs (loop2): Test dummy encryption mode enabled [ 220.091479][ T3703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 220.111608][ T3703] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.194918][ T321] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 220.277423][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.304026][ T3706] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 220.356679][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.369660][ T310] usb 6-1: Using ep0 maxpacket: 32 [ 220.376804][ T310] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 220.379704][ T321] usb 4-1: Using ep0 maxpacket: 8 [ 220.407687][ T321] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 220.410041][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.427728][ T310] usb 6-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 220.438953][ T321] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 220.450142][ T310] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 220.459655][ T321] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 220.474740][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.494894][ T310] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 220.496312][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.521379][ T321] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.527729][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.562615][ T321] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.569838][ T310] usb 6-1: Product: syz [ 220.580775][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.585006][ T310] usb 6-1: Manufacturer: syz [ 220.610453][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.618509][ T321] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.619472][ T310] usb 6-1: SerialNumber: syz [ 220.634388][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.642755][ T321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.960573][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 221.337059][ T3716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.346103][ T3716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.804738][ T3721] mmap: syz.1.793 (3721) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 221.820760][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 221.820776][ T28] audit: type=1400 audit(1791403606.695:2713): avc: denied { create } for pid=3720 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 221.860450][ T3721] FAULT_INJECTION: forcing a failure. [ 221.860450][ T3721] name failslab, interval 1, probability 0, space 0, times 0 [ 221.863756][ T3723] ip_tables: iptables: counters copy to user failed while replacing table [ 221.873327][ T3721] CPU: 1 PID: 3721 Comm: syz.1.793 Not tainted syzkaller #0 [ 221.889368][ T3721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.899438][ T3721] Call Trace: [ 221.902725][ T3721] [ 221.905665][ T3721] __dump_stack+0x21/0x24 [ 221.910014][ T3721] dump_stack_lvl+0x110/0x170 [ 221.914712][ T3721] ? __cfi_dump_stack_lvl+0x8/0x8 [ 221.919855][ T3721] dump_stack+0x15/0x24 [ 221.919911][ T28] audit: type=1326 audit(1791403606.755:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.2.794" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf9ff9e199 code=0x0 [ 221.924027][ T3721] should_fail_ex+0x3bf/0x510 [ 221.924048][ T3721] ? security_file_alloc+0x33/0x130 [ 221.958027][ T3721] __should_failslab+0xac/0xf0 [ 221.962812][ T3721] should_failslab+0x9/0x20 [ 221.967332][ T3721] kmem_cache_alloc+0x3b/0x320 [ 221.972195][ T3721] ? __alloc_file+0x28/0x2a0 [ 221.976802][ T3721] security_file_alloc+0x33/0x130 [ 221.981852][ T3721] __alloc_file+0xb5/0x2a0 [ 221.986285][ T3721] alloc_empty_file+0x97/0x180 [ 221.991061][ T3721] alloc_file+0x59/0x600 [ 221.995309][ T3721] ? _raw_spin_unlock+0x4c/0x70 [ 222.000172][ T3721] alloc_file_pseudo+0x180/0x200 [ 222.005122][ T3721] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 222.010591][ T3721] ? _raw_spin_unlock+0x4c/0x70 [ 222.015462][ T3721] ? alloc_fd+0x4c1/0x570 [ 222.019803][ T3721] sock_alloc_file+0xba/0x270 [ 222.024499][ T3721] __sys_socket+0x138/0x1a0 [ 222.029014][ T3721] __x64_sys_socket+0x7a/0x90 [ 222.033698][ T3721] x64_sys_call+0x449/0x9a0 [ 222.038208][ T3721] do_syscall_64+0x4c/0xa0 [ 222.042638][ T3721] ? clear_bhb_loop+0x30/0x80 [ 222.047324][ T3721] ? clear_bhb_loop+0x30/0x80 [ 222.052009][ T3721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.057911][ T3721] RIP: 0033:0x7f47be79fa07 [ 222.062330][ T3721] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.081944][ T3721] RSP: 002b:00007f47bf619f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 222.090374][ T3721] RAX: ffffffffffffffda RBX: 00007f47bea25fa0 RCX: 00007f47be79fa07 [ 222.098357][ T3721] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 222.106331][ T3721] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 222.114315][ T3721] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 222.122304][ T3721] R13: 00007f47bea26038 R14: 00007f47bea25fa0 R15: 00007fff16dd32a8 [ 222.130286][ T3721] [ 222.260857][ T3727] kvm [3726]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 222.659642][ T2657] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 222.693654][ T321] usb 6-1: USB disconnect, device number 11 [ 222.718740][ T3735] loop5: detected capacity change from 0 to 512 [ 222.729475][ T3735] EXT4-fs: Ignoring removed oldalloc option [ 222.735475][ T3735] EXT4-fs: quotafile must be on filesystem root [ 222.782087][ T1470] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.834901][ T3740] loop5: detected capacity change from 0 to 512 [ 222.840647][ T2657] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 222.861399][ T3740] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.872358][ T2657] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 222.878891][ T3740] EXT4-fs: dax option not supported [ 222.892628][ T2657] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 222.906797][ T6] usb 4-1: USB disconnect, device number 12 [ 222.918283][ T2657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.951244][ T28] audit: type=1400 audit(1791403613.828:2715): avc: denied { write } for pid=3743 comm="syz.3.802" name="enable" dev="tracefs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 223.019673][ T28] audit: type=1400 audit(1791403613.888:2716): avc: denied { create } for pid=3745 comm="syz.5.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.204311][ T2657] usb 2-1: USB disconnect, device number 7 [ 223.213481][ T28] audit: type=1400 audit(1791403613.918:2717): avc: denied { ioctl } for pid=3743 comm="syz.3.802" path="pid:[4026532294]" dev="nsfs" ino=4026532294 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 223.354115][ T28] audit: type=1400 audit(1791403614.178:2718): avc: denied { execute_no_trans } for pid=3745 comm="syz.5.803" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 223.653859][ T3273] cgroup: fork rejected by pids controller in /syz1 [ 223.713439][ T3757] FAULT_INJECTION: forcing a failure. [ 223.713439][ T3757] name failslab, interval 1, probability 0, space 0, times 0 [ 223.726097][ T3757] CPU: 1 PID: 3757 Comm: syz.2.807 Not tainted syzkaller #0 [ 223.733397][ T3757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 223.743463][ T3757] Call Trace: [ 223.746753][ T3757] [ 223.749685][ T3757] __dump_stack+0x21/0x24 [ 223.754031][ T3757] dump_stack_lvl+0x110/0x170 [ 223.758732][ T3757] ? __cfi_dump_stack_lvl+0x8/0x8 [ 223.763771][ T3757] dump_stack+0x15/0x24 [ 223.767943][ T3757] should_fail_ex+0x3bf/0x510 [ 223.772629][ T3757] __should_failslab+0xac/0xf0 [ 223.777407][ T3757] should_failslab+0x9/0x20 [ 223.781919][ T3757] kmem_cache_alloc_node+0x42/0x330 [ 223.787137][ T3757] ? __alloc_skb+0xe8/0x4a0 [ 223.791651][ T3757] __alloc_skb+0xe8/0x4a0 [ 223.795997][ T3757] tipc_buf_acquire+0x2b/0xe0 [ 223.800683][ T3757] tipc_named_publish+0x2fd/0x8a0 [ 223.805722][ T3757] tipc_nametbl_publish+0x191/0x2d0 [ 223.810939][ T3757] tipc_sk_publish+0x1f7/0x440 [ 223.815718][ T3757] ? tipc_sk_withdraw+0x630/0x630 [ 223.820752][ T3757] ? vfs_write+0xa51/0xd00 [ 223.825179][ T3757] tipc_sk_bind+0x230/0x310 [ 223.829703][ T3757] tipc_bind+0x79/0x270 [ 223.833883][ T3757] __sys_bind+0x33b/0x460 [ 223.838227][ T3757] ? __se_sys_futex+0x136/0x310 [ 223.843098][ T3757] ? __cfi___sys_bind+0x10/0x10 [ 223.847968][ T3757] ? fpregs_restore_userregs+0x128/0x260 [ 223.853619][ T3757] __x64_sys_bind+0x7a/0x90 [ 223.858133][ T3757] x64_sys_call+0x70c/0x9a0 [ 223.862647][ T3757] do_syscall_64+0x4c/0xa0 [ 223.867082][ T3757] ? clear_bhb_loop+0x30/0x80 [ 223.871759][ T3757] ? clear_bhb_loop+0x30/0x80 [ 223.876440][ T3757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.882338][ T3757] RIP: 0033:0x7faf9ff9e199 [ 223.886758][ T3757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.906371][ T3757] RSP: 002b:00007fafa0ee0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 223.914798][ T3757] RAX: ffffffffffffffda RBX: 00007fafa0225fa0 RCX: 00007faf9ff9e199 [ 223.922782][ T3757] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 223.930754][ T3757] RBP: 00007fafa00358e0 R08: 0000000000000000 R09: 0000000000000000 [ 223.938722][ T3757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.946683][ T3757] R13: 00007fafa0226038 R14: 00007fafa0225fa0 R15: 00007ffd5f83b348 [ 223.954645][ T3757] [ 223.957699][ T3757] tipc: Publication distribution failure [ 224.049442][ T3759] loop5: detected capacity change from 0 to 256 [ 224.211215][ T3764] loop5: detected capacity change from 0 to 1024 [ 224.285520][ T3763] netlink: 236 bytes leftover after parsing attributes in process `syz.2.810'. [ 224.340703][ T28] audit: type=1400 audit(1791403615.218:2719): avc: denied { bind } for pid=3767 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.349768][ T3764] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 224.379688][ T3764] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.400600][ T28] audit: type=1400 audit(1791403615.238:2720): avc: denied { map } for pid=3767 comm="syz.2.812" path="socket:[35228]" dev="sockfs" ino=35228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.429104][ T3764] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.811: lblock 3 mapped to illegal pblock 3 (length 1) [ 224.459500][ T3764] EXT4-fs (loop5): Remounting filesystem read-only [ 224.492668][ T3773] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm iou-wrk-3764: lblock 3 mapped to illegal pblock 3 (length 1) [ 224.507540][ T3773] EXT4-fs (loop5): Remounting filesystem read-only [ 224.540560][ T2423] EXT4-fs (loop5): unmounting filesystem. [ 224.591724][ T318] device bridge_slave_1 left promiscuous mode [ 224.597949][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.619459][ T318] device bridge_slave_0 left promiscuous mode [ 224.634030][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.670834][ T318] device veth1_macvtap left promiscuous mode [ 224.680180][ T318] device veth0_vlan left promiscuous mode [ 224.909897][ T3772] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.925364][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.945206][ T3772] device bridge_slave_0 entered promiscuous mode [ 224.960469][ T3772] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.975756][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.990497][ T3772] device bridge_slave_1 entered promiscuous mode [ 225.131161][ T3772] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.138259][ T3772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.188362][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.209275][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.229918][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.243858][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.270134][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.288499][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.295579][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.315008][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.330043][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.337102][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.338094][ T3787] loop2: detected capacity change from 0 to 512 [ 225.367397][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.378681][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.379209][ T3787] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 225.414524][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.426822][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.436453][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.444256][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.452213][ T3787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 225.461363][ T3772] device veth0_vlan entered promiscuous mode [ 225.482899][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.492971][ T3772] device veth1_macvtap entered promiscuous mode [ 225.507168][ T3787] System zones: 1-12 [ 225.520201][ T3787] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.816: bad orphan inode 131072 [ 225.531403][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.556705][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.610344][ T3787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 225.688133][ T28] audit: type=1400 audit(1791403616.558:2721): avc: denied { mounton } for pid=3798 comm="syz.1.821" path="/3/proc/8/task/9/fail-nth" dev="proc" ino=36088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 225.702755][ T3789] loop5: detected capacity change from 0 to 40427 [ 225.718182][ T3799] FAULT_INJECTION: forcing a failure. [ 225.718182][ T3799] name failslab, interval 1, probability 0, space 0, times 0 [ 225.732911][ T3787] overlayfs: upper fs needs to support d_type. [ 225.740166][ T3799] CPU: 0 PID: 3799 Comm: syz.1.821 Not tainted syzkaller #0 [ 225.747465][ T3799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 225.757533][ T3799] Call Trace: [ 225.760090][ T3789] F2FS-fs (loop5): invalid crc value [ 225.760817][ T3799] [ 225.769015][ T3799] __dump_stack+0x21/0x24 [ 225.773531][ T3799] dump_stack_lvl+0x110/0x170 [ 225.778229][ T3799] ? __cfi_dump_stack_lvl+0x8/0x8 [ 225.783274][ T3799] ? kasan_set_track+0x60/0x70 [ 225.788051][ T3799] ? kasan_set_track+0x4b/0x70 [ 225.792828][ T3799] ? kasan_save_alloc_info+0x1f/0x30 [ 225.798126][ T3799] dump_stack+0x15/0x24 [ 225.802304][ T3799] should_fail_ex+0x3bf/0x510 [ 225.807092][ T3799] __should_failslab+0xac/0xf0 [ 225.812059][ T3799] should_failslab+0x9/0x20 [ 225.816583][ T3799] __kmem_cache_alloc_node+0x3d/0x2d0 [ 225.821979][ T3799] ? mempool_init_node+0x12c/0x4b0 [ 225.827111][ T3799] ? mempool_init_node+0x12c/0x4b0 [ 225.830097][ T3650] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /10/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 225.832233][ T3799] __kmalloc_node+0xa2/0x1e0 [ 225.857648][ T3799] ? xas_start+0x31d/0x3e0 [ 225.862098][ T3799] ? __cfi_mempool_alloc_slab+0x10/0x10 [ 225.867668][ T3799] mempool_init_node+0x12c/0x4b0 [ 225.872636][ T3799] ? mutex_unlock+0x8f/0x230 [ 225.877248][ T3799] ? __cfi_mempool_free_slab+0x10/0x10 [ 225.882723][ T3799] ? __cfi_mempool_alloc_slab+0x10/0x10 [ 225.888299][ T3799] mempool_init+0x3d/0x50 [ 225.892656][ T3799] bioset_init+0x205/0x5f0 [ 225.897188][ T3799] __alloc_disk_node+0x80/0x470 [ 225.902076][ T3799] __blk_alloc_disk+0x2c/0x80 [ 225.906771][ T3799] dm_create+0x4d6/0xdb0 [ 225.911034][ T3799] ? futex_wait+0x5f1/0x900 [ 225.915554][ T3799] dev_create+0x12e/0x2c0 [ 225.919901][ T3799] ? __cfi_futex_wait+0x10/0x10 [ 225.924767][ T3799] ? __cfi_dev_create+0x10/0x10 [ 225.929632][ T3799] ? __cfi_dev_create+0x10/0x10 [ 225.934503][ T3799] ? __kasan_check_write+0x14/0x20 [ 225.939802][ T3799] dm_ctl_ioctl+0x95f/0xd00 [ 225.944328][ T3799] ? __cfi_dev_create+0x10/0x10 [ 225.949188][ T3799] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 225.954233][ T3799] ? security_file_ioctl+0x95/0xc0 [ 225.959364][ T3799] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 225.964406][ T3799] __se_sys_ioctl+0x12f/0x1b0 [ 225.969111][ T3799] __x64_sys_ioctl+0x7b/0x90 [ 225.973803][ T3799] x64_sys_call+0x58b/0x9a0 [ 225.976167][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.978318][ T3799] do_syscall_64+0x4c/0xa0 [ 225.978347][ T3799] ? clear_bhb_loop+0x30/0x80 [ 225.994406][ T3799] ? clear_bhb_loop+0x30/0x80 [ 225.995575][ T3800] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.999100][ T3799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.011986][ T3799] RIP: 0033:0x7f742559e199 [ 226.016416][ T3799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.027193][ T3800] device bridge_slave_0 entered promiscuous mode [ 226.036042][ T3799] RSP: 002b:00007f74264d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.036064][ T3799] RAX: ffffffffffffffda RBX: 00007f7425825fa0 RCX: 00007f742559e199 [ 226.036075][ T3799] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 226.036086][ T3799] RBP: 00007f74256358e0 R08: 0000000000000000 R09: 0000000000000000 [ 226.036097][ T3799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.036108][ T3799] R13: 00007f7425826038 R14: 00007f7425825fa0 R15: 00007ffda63952c8 [ 226.053669][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.059137][ T3799] [ 226.079626][ T3800] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.119493][ T3800] device bridge_slave_1 entered promiscuous mode [ 226.126306][ T3789] F2FS-fs (loop5): Found nat_bits in checkpoint [ 226.193680][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 226.198402][ T3789] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 226.302157][ T2423] syz-executor: attempt to access beyond end of device [ 226.302157][ T2423] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.366691][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.379934][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.420639][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.429270][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.450307][ T2758] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.457468][ T2758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.467058][ T3820] loop1: detected capacity change from 0 to 256 [ 226.489832][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.499478][ T3820] exfat: Deprecated parameter 'utf8' [ 226.525045][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.535078][ T3820] exfat: Deprecated parameter 'namecase' [ 226.545515][ T2758] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.552597][ T2758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.560679][ T3820] exfat: Deprecated parameter 'namecase' [ 226.566335][ T3820] exfat: Deprecated parameter 'utf8' [ 226.582105][ T3820] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 226.605493][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.613438][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.621781][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.630143][ T3827] loop5: detected capacity change from 0 to 512 [ 226.646889][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.668010][ T3827] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 226.678585][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.679740][ T3827] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.687032][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.704928][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.712973][ T3800] device veth0_vlan entered promiscuous mode [ 226.747404][ T2423] EXT4-fs (loop5): unmounting filesystem. [ 226.758200][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.780674][ T3800] device veth1_macvtap entered promiscuous mode [ 226.801445][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.808750][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.820422][ T3821] device bridge_slave_0 entered promiscuous mode [ 226.848328][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.857440][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.876863][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.886950][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.897715][ T3821] device bridge_slave_1 entered promiscuous mode [ 226.929058][ T28] audit: type=1400 audit(1791403617.798:2722): avc: denied { read } for pid=3839 comm="syz.8.818" path="socket:[35737]" dev="sockfs" ino=35737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.955937][ T1795] device bridge_slave_1 left promiscuous mode [ 226.962191][ T1795] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.970463][ T1795] device bridge_slave_0 left promiscuous mode [ 226.976664][ T1795] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.990338][ T1795] device veth1_macvtap left promiscuous mode [ 227.005487][ T1795] device veth0_vlan left promiscuous mode [ 227.047885][ T3837] kvm: pic: non byte write [ 227.224384][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.232754][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.249070][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.257774][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.277221][ T2758] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.284314][ T2758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.292153][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.331983][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.348894][ T2758] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.356006][ T2758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.371787][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.499473][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.627501][ T3821] device veth0_vlan entered promiscuous mode [ 228.358261][ T3821] device veth1_macvtap entered promiscuous mode [ 228.569028][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.729957][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.750296][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.758384][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.780152][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.787777][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.797242][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.815531][ T3872] FAULT_INJECTION: forcing a failure. [ 228.815531][ T3872] name failslab, interval 1, probability 0, space 0, times 0 [ 228.829358][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.837762][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.847668][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.856302][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.861537][ T3872] CPU: 0 PID: 3872 Comm: syz.5.844 Not tainted syzkaller #0 [ 228.871641][ T3872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 228.881700][ T3872] Call Trace: [ 228.884979][ T3872] [ 228.887908][ T3872] __dump_stack+0x21/0x24 [ 228.892250][ T3872] dump_stack_lvl+0x110/0x170 [ 228.896937][ T3872] ? __cfi_dump_stack_lvl+0x8/0x8 [ 228.901981][ T3872] dump_stack+0x15/0x24 [ 228.906162][ T3872] should_fail_ex+0x3bf/0x510 [ 228.910860][ T3872] ? posix_lock_inode+0x35e/0x34e0 [ 228.915984][ T3872] __should_failslab+0xac/0xf0 [ 228.920762][ T3872] should_failslab+0x9/0x20 [ 228.925280][ T3872] kmem_cache_alloc+0x3b/0x320 [ 228.930064][ T3872] posix_lock_inode+0x35e/0x34e0 [ 228.935019][ T3872] ? file_has_perm+0x52d/0x700 [ 228.939802][ T3872] ? match_file+0x130/0x130 [ 228.944335][ T3872] ? posix_lock_file+0x50/0x50 [ 228.949120][ T3872] ? security_file_lock+0x8a/0xb0 [ 228.954178][ T3872] fcntl_setlk+0xa38/0x1070 [ 228.958803][ T3872] ? __cfi_fcntl_setlk+0x10/0x10 [ 228.963768][ T3872] ? __cfi_avc_has_perm+0x10/0x10 [ 228.968810][ T3872] ? vfs_write+0xa51/0xd00 [ 228.973247][ T3872] ? __kasan_check_write+0x14/0x20 [ 228.978383][ T3872] do_fcntl+0x582/0x1110 [ 228.982651][ T3872] ? match_file+0x130/0x130 [ 228.987175][ T3872] ? kill_fasync+0x210/0x210 [ 228.991778][ T3872] ? __se_sys_futex+0x136/0x310 [ 228.996650][ T3872] ? security_file_fcntl+0x95/0xc0 [ 229.001787][ T3872] __se_sys_fcntl+0xdf/0x1b0 [ 229.006392][ T3872] __x64_sys_fcntl+0x7b/0x90 [ 229.010993][ T3872] x64_sys_call+0x1a9/0x9a0 [ 229.015516][ T3872] do_syscall_64+0x4c/0xa0 [ 229.020037][ T3872] ? clear_bhb_loop+0x30/0x80 [ 229.024744][ T3872] ? clear_bhb_loop+0x30/0x80 [ 229.029435][ T3872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.035338][ T3872] RIP: 0033:0x7fad9439e199 [ 229.039761][ T3872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.059375][ T3872] RSP: 002b:00007fad95298028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 229.067811][ T3872] RAX: ffffffffffffffda RBX: 00007fad94625fa0 RCX: 00007fad9439e199 [ 229.075799][ T3872] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 229.083783][ T3872] RBP: 00007fad944358e0 R08: 0000000000000000 R09: 0000000000000000 [ 229.091767][ T3872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.099762][ T3872] R13: 00007fad94626038 R14: 00007fad94625fa0 R15: 00007ffd14fb35a8 [ 229.107754][ T3872] [ 229.162441][ T3884] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 229.171885][ T3884] sch_tbf: burst 10 is lower than device lo mtu (65550) ! [ 229.291943][ T3896] loop5: detected capacity change from 0 to 512 [ 229.317829][ T3896] EXT4-fs (loop5): orphan cleanup on readonly fs [ 229.333103][ T3896] EXT4-fs warning (device loop5): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 229.347846][ T3896] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 229.378081][ T3896] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #13: comm syz.5.854: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 229.416352][ T3896] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.854: couldn't read orphan inode 13 (err -117) [ 229.442133][ T3896] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 229.453879][ T3896] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 229.486175][ T3896] EXT4-fs warning (device loop5): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 229.510103][ T3900] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 229.549727][ T3900] EXT4-fs warning (device loop5): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 229.605057][ T2423] EXT4-fs (loop5): unmounting filesystem. [ 229.667109][ T3907] loop8: detected capacity change from 0 to 256 [ 229.673724][ T1795] device bridge_slave_1 left promiscuous mode [ 229.676833][ T3907] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 229.690081][ T1795] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.712369][ T28] audit: type=1400 audit(1791403620.588:2723): avc: denied { watch watch_reads } for pid=3906 comm="syz.8.857" path=2F31312FE91F7189591E9233614B dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.737571][ T1795] device bridge_slave_0 left promiscuous mode [ 229.750565][ T1795] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.779300][ T1795] device veth1_macvtap left promiscuous mode [ 229.787835][ T3910] loop8: detected capacity change from 0 to 128 [ 229.788470][ T1795] device veth0_vlan left promiscuous mode [ 229.826167][ T28] audit: type=1400 audit(1791403620.698:2724): avc: denied { mounton } for pid=3909 comm="syz.8.858" path="/12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop8" ino=1048972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 230.259747][ T28] audit: type=1400 audit(1791403621.128:2725): avc: denied { mounton } for pid=3923 comm="syz.0.863" path="/5/file1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 230.613830][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 230.962971][ T3929] tipc: Started in network mode [ 230.967969][ T3929] tipc: Node identity 7ae2bfbf1b9c, cluster identity 4711 [ 230.975702][ T3929] tipc: Enabled bearer , priority 0 [ 230.996172][ T3929] device syzkaller0 entered promiscuous mode [ 231.010821][ T3929] tipc: Resetting bearer [ 231.036938][ T3928] tipc: Resetting bearer [ 231.082220][ T3928] tipc: Disabling bearer [ 231.324286][ T28] audit: type=1400 audit(1791403622.198:2726): avc: denied { read } for pid=3948 comm="syz.8.872" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 231.973328][ T28] audit: type=1400 audit(1791403622.848:2727): avc: denied { module_request } for pid=3956 comm="syz.0.875" kmod="rtnl-link-vrf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 232.730759][ T3963] kvm: pic: non byte write [ 232.822865][ T3978] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 232.851603][ T3978] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 233.057542][ T3987] loop0: detected capacity change from 0 to 256 [ 233.066580][ T3987] exfat: Deprecated parameter 'utf8' [ 233.095499][ T3987] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb956f73f, utbl_chksum : 0xe619d30d) [ 234.019681][ T1577] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 234.135557][ T4002] random: crng reseeded on system resumption [ 234.171259][ T4004] device syzkaller0 entered promiscuous mode [ 234.210793][ T1577] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 234.225802][ T1577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.446357][ T1577] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 234.699842][ T321] usb 2-1: USB disconnect, device number 8 [ 235.580989][ T4032] FAULT_INJECTION: forcing a failure. [ 235.580989][ T4032] name failslab, interval 1, probability 0, space 0, times 0 [ 235.593695][ T4032] CPU: 0 PID: 4032 Comm: syz.1.907 Not tainted syzkaller #0 [ 235.600998][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.611061][ T4032] Call Trace: [ 235.614342][ T4032] [ 235.617280][ T4032] __dump_stack+0x21/0x24 [ 235.621630][ T4032] dump_stack_lvl+0x110/0x170 [ 235.626324][ T4032] ? __cfi_dump_stack_lvl+0x8/0x8 [ 235.631376][ T4032] dump_stack+0x15/0x24 [ 235.635544][ T4032] should_fail_ex+0x3bf/0x510 [ 235.640229][ T4032] __should_failslab+0xac/0xf0 [ 235.645005][ T4032] should_failslab+0x9/0x20 [ 235.649520][ T4032] __kmem_cache_alloc_node+0x3d/0x2d0 [ 235.654901][ T4032] ? mpi_alloc_limb_space+0x2e/0x40 [ 235.660108][ T4032] ? mpi_resize+0x85/0x1f0 [ 235.664534][ T4032] ? mpi_alloc_limb_space+0x2e/0x40 [ 235.669743][ T4032] __kmalloc+0xa4/0x1e0 [ 235.673908][ T4032] mpi_alloc_limb_space+0x2e/0x40 [ 235.678944][ T4032] mpi_powm+0xf28/0x23a0 [ 235.683202][ T4032] ? __cfi_mpi_powm+0x10/0x10 [ 235.687894][ T4032] ? mpihelp_cmp+0xc0/0xe0 [ 235.692320][ T4032] rsa_enc+0x28f/0x3c0 [ 235.696408][ T4032] ? __cfi_rsa_enc+0x10/0x10 [ 235.701013][ T4032] ? kasan_save_alloc_info+0x1f/0x30 [ 235.706304][ T4032] ? memset+0x35/0x40 [ 235.710293][ T4032] pkcs1pad_verify+0x44f/0x600 [ 235.715069][ T4032] public_key_verify_signature+0x90f/0xd80 [ 235.720885][ T4032] ? do_syscall_64+0x4c/0xa0 [ 235.725494][ T4032] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.731575][ T4032] ? __cfi_public_key_verify_signature+0x10/0x10 [ 235.737920][ T4032] ? kasan_save_alloc_info+0x1f/0x30 [ 235.743215][ T4032] ? __kasan_kmalloc+0x95/0xb0 [ 235.747994][ T4032] x509_check_for_self_signed+0x35e/0x460 [ 235.753729][ T4032] x509_cert_parse+0x684/0x8b0 [ 235.758501][ T4032] x509_key_preparse+0x63/0x6d0 [ 235.763368][ T4032] asymmetric_key_preparse+0xaf/0x100 [ 235.768748][ T4032] key_create_or_update+0x43e/0x9f0 [ 235.773954][ T4032] ? __cfi_key_create_or_update+0x10/0x10 [ 235.779678][ T4032] ? __cfi_lookup_user_key+0x10/0x10 [ 235.784977][ T4032] ? __kasan_check_write+0x14/0x20 [ 235.790106][ T4032] __se_sys_add_key+0x34b/0x410 [ 235.794964][ T4032] ? __x64_sys_add_key+0xd0/0xd0 [ 235.799912][ T4032] ? xfd_validate_state+0x70/0x150 [ 235.805035][ T4032] ? __kasan_check_write+0x14/0x20 [ 235.810161][ T4032] ? fpregs_restore_userregs+0x128/0x260 [ 235.815802][ T4032] __x64_sys_add_key+0xbf/0xd0 [ 235.820574][ T4032] x64_sys_call+0x6aa/0x9a0 [ 235.825092][ T4032] do_syscall_64+0x4c/0xa0 [ 235.829517][ T4032] ? clear_bhb_loop+0x30/0x80 [ 235.834200][ T4032] ? clear_bhb_loop+0x30/0x80 [ 235.838888][ T4032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.844793][ T4032] RIP: 0033:0x7f742559e199 [ 235.849217][ T4032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.868921][ T4032] RSP: 002b:00007f74264d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 235.877357][ T4032] RAX: ffffffffffffffda RBX: 00007f7425825fa0 RCX: 00007f742559e199 [ 235.885347][ T4032] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 235.893329][ T4032] RBP: 00007f74256358e0 R08: 0000000020714e99 R09: 0000000000000000 [ 235.901321][ T4032] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 235.909313][ T4032] R13: 00007f7425826038 R14: 00007f7425825fa0 R15: 00007ffda63952c8 [ 235.917305][ T4032] [ 236.056646][ T4041] bridge0: port 3(vlan2) entered blocking state [ 236.072210][ T4039] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.075465][ T4041] bridge0: port 3(vlan2) entered disabled state [ 236.090415][ T4041] device vlan2 entered promiscuous mode [ 236.124678][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.148119][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.191282][ T4041] bridge0: port 3(vlan2) entered blocking state [ 236.197579][ T4041] bridge0: port 3(vlan2) entered forwarding state [ 236.220371][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 236.228930][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.259970][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 236.290003][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.315889][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.339964][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.348250][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.370819][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.452377][ T4068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 236.464266][ T4065] Disabled LAPIC found during irq injection [ 236.482828][ T4062] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.650671][ T28] audit: type=1400 audit(1791403627.528:2728): avc: denied { create } for pid=4089 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 236.671731][ T4090] FAULT_INJECTION: forcing a failure. [ 236.671731][ T4090] name fail_futex, interval 1, probability 0, space 0, times 0 [ 236.684913][ T4090] CPU: 1 PID: 4090 Comm: syz.0.932 Not tainted syzkaller #0 [ 236.692221][ T4090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 236.702284][ T4090] Call Trace: [ 236.705564][ T4090] [ 236.708491][ T4090] __dump_stack+0x21/0x24 [ 236.712838][ T4090] dump_stack_lvl+0x110/0x170 [ 236.717529][ T4090] ? __cfi_dump_stack_lvl+0x8/0x8 [ 236.722573][ T4090] ? __cfi_enqueue_task_fair+0x10/0x10 [ 236.728035][ T4090] ? __stack_depot_save+0x36/0x490 [ 236.733158][ T4090] dump_stack+0x15/0x24 [ 236.737324][ T4090] should_fail_ex+0x3bf/0x510 [ 236.742025][ T4090] should_fail+0xb/0x10 [ 236.746198][ T4090] get_futex_key+0x143/0xb10 [ 236.750807][ T4090] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 236.757502][ T4090] ? __cfi_get_futex_key+0x10/0x10 [ 236.762629][ T4090] ? probe_sched_wakeup+0x71/0x90 [ 236.767662][ T4090] ? ttwu_do_wakeup+0x468/0x490 [ 236.772521][ T4090] futex_wait_setup+0xb8/0x260 [ 236.777289][ T4090] ? __cfi_futex_wait_setup+0x10/0x10 [ 236.782671][ T4090] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 236.788500][ T4090] ? futex_setup_timer+0xb0/0xc0 [ 236.793463][ T4090] futex_wait+0x1ce/0x900 [ 236.797814][ T4090] ? __cfi_futex_wait+0x10/0x10 [ 236.802679][ T4090] ? __cfi_futex_wake+0x10/0x10 [ 236.807547][ T4090] ? __destroy_inode+0x325/0x500 [ 236.812505][ T4090] ? __cfi_sock_free_inode+0x10/0x10 [ 236.817806][ T4090] do_futex+0x2e2/0x430 [ 236.821974][ T4090] ? __cfi_do_futex+0x10/0x10 [ 236.826663][ T4090] ? _raw_spin_lock+0x94/0xf0 [ 236.831355][ T4090] __se_sys_futex+0x136/0x310 [ 236.836040][ T4090] ? __x64_sys_futex+0x100/0x100 [ 236.840982][ T4090] __x64_sys_futex+0xe5/0x100 [ 236.845665][ T4090] x64_sys_call+0x7ec/0x9a0 [ 236.850175][ T4090] do_syscall_64+0x4c/0xa0 [ 236.854608][ T4090] ? clear_bhb_loop+0x30/0x80 [ 236.859302][ T4090] ? clear_bhb_loop+0x30/0x80 [ 236.863987][ T4090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.869887][ T4090] RIP: 0033:0x7fa01a99e199 [ 236.874313][ T4090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.893930][ T4090] RSP: 002b:00007fa01b8e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.902360][ T4090] RAX: ffffffffffffffda RBX: 00007fa01ac25fa8 RCX: 00007fa01a99e199 [ 236.910344][ T4090] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa01ac25fa8 [ 236.918330][ T4090] RBP: 00007fa01ac25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 236.926398][ T4090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.934375][ T4090] R13: 00007fa01ac26038 R14: 00007ffef7a5e940 R15: 00007ffef7a5ea28 [ 236.942362][ T4090] [ 237.058417][ T4100] loop0: detected capacity change from 0 to 512 [ 237.084549][ T28] audit: type=1400 audit(1791403627.958:2729): avc: denied { mounton } for pid=4099 comm="syz.0.935" path="/tracing" dev="ramfs" ino=37519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 237.107620][ T321] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 237.129714][ T4100] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 238.523161][ T4105] netlink: 104 bytes leftover after parsing attributes in process `syz.1.930'. [ 239.398063][ T4116] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.405249][ T4116] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.414159][ T4116] device bridge_slave_0 entered promiscuous mode [ 239.423376][ T4116] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.430637][ T4116] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.439492][ T4116] device bridge_slave_1 entered promiscuous mode [ 239.589840][ T4116] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.597057][ T4116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.604495][ T4116] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.611706][ T4116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.639320][ T321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.653424][ T321] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 239.670976][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.682759][ T2758] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.692027][ T321] usb 2-1: can't read configurations, error -71 [ 239.711812][ T2758] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.739537][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.762178][ T2758] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.769260][ T2758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.818446][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.856449][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.859411][ T4127] FAULT_INJECTION: forcing a failure. [ 239.859411][ T4127] name failslab, interval 1, probability 0, space 0, times 0 [ 239.869975][ T2758] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.884235][ T2758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.925269][ T4127] CPU: 0 PID: 4127 Comm: syz.0.946 Not tainted syzkaller #0 [ 239.927360][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.932680][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 239.932693][ T4127] Call Trace: [ 239.932699][ T4127] [ 239.932705][ T4127] __dump_stack+0x21/0x24 [ 239.932737][ T4127] dump_stack_lvl+0x110/0x170 [ 239.950502][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.950610][ T4127] ? __cfi_dump_stack_lvl+0x8/0x8 [ 239.960352][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.961111][ T4127] dump_stack+0x15/0x24 [ 239.970955][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.973495][ T4127] should_fail_ex+0x3bf/0x510 [ 240.002762][ T4127] __should_failslab+0xac/0xf0 [ 240.007526][ T4127] should_failslab+0x9/0x20 [ 240.012023][ T4127] __kmem_cache_alloc_node+0x3d/0x2d0 [ 240.017387][ T4127] ? device_create+0x13a/0x300 [ 240.022142][ T4127] ? device_create+0x13a/0x300 [ 240.026897][ T4127] kmalloc_trace+0x29/0xb0 [ 240.031298][ T4127] device_create+0x13a/0x300 [ 240.035877][ T4127] ? __cfi_device_create+0x10/0x10 [ 240.040980][ T4127] ? vsnprintf+0x189d/0x1990 [ 240.045563][ T4127] bdi_register_va+0x90/0x5f0 [ 240.050235][ T4127] super_setup_bdi_name+0xf2/0x200 [ 240.055333][ T4127] ? _raw_spin_lock+0x94/0xf0 [ 240.060001][ T4127] ? __cfi_super_setup_bdi_name+0x10/0x10 [ 240.065705][ T4127] ? _raw_spin_unlock+0x4c/0x70 [ 240.070544][ T4127] ? fuse_dev_install+0x176/0x1b0 [ 240.075557][ T4127] fuse_fill_super_common+0x9f4/0x19c0 [ 240.081017][ T4127] ? up_write+0x7b/0x290 [ 240.085248][ T4127] ? register_shrinker_prepared+0xd7/0x100 [ 240.091042][ T4127] fuse_fill_super+0x6d/0x250 [ 240.095711][ T4127] get_tree_nodev+0xc4/0x170 [ 240.100292][ T4127] ? __cfi_fuse_fill_super+0x10/0x10 [ 240.105569][ T4127] fuse_get_tree+0x2e9/0x4f0 [ 240.110150][ T4127] vfs_get_tree+0x9a/0x270 [ 240.114553][ T4127] do_new_mount+0x251/0xb40 [ 240.119049][ T4127] ? security_capable+0x99/0xc0 [ 240.123961][ T4127] path_mount+0x640/0xfd0 [ 240.128282][ T4127] __se_sys_mount+0x320/0x390 [ 240.132956][ T4127] ? __this_cpu_preempt_check+0x13/0x20 [ 240.138498][ T4127] ? __x64_sys_mount+0xd0/0xd0 [ 240.143248][ T4127] ? __kasan_check_write+0x14/0x20 [ 240.148344][ T4127] ? fpregs_restore_userregs+0x128/0x260 [ 240.153969][ T4127] __x64_sys_mount+0xbf/0xd0 [ 240.158545][ T4127] x64_sys_call+0x65d/0x9a0 [ 240.163039][ T4127] do_syscall_64+0x4c/0xa0 [ 240.167446][ T4127] ? clear_bhb_loop+0x30/0x80 [ 240.172107][ T4127] ? clear_bhb_loop+0x30/0x80 [ 240.176771][ T4127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.182656][ T4127] RIP: 0033:0x7fa01a99e199 [ 240.187057][ T4127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.206648][ T4127] RSP: 002b:00007fa01b8e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 240.215046][ T4127] RAX: ffffffffffffffda RBX: 00007fa01ac25fa0 RCX: 00007fa01a99e199 [ 240.223005][ T4127] RDX: 0000200000002100 RSI: 00002000000001c0 RDI: 0000000000000000 [ 240.230970][ T4127] RBP: 00007fa01aa358e0 R08: 00002000000002c0 R09: 0000000000000000 [ 240.238956][ T4127] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 240.246936][ T4127] R13: 00007fa01ac26038 R14: 00007fa01ac25fa0 R15: 00007ffef7a5ea28 [ 240.254903][ T4127] [ 240.267280][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.290447][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.322530][ T4116] device veth0_vlan entered promiscuous mode [ 240.329186][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.337513][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.346487][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.354224][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.368618][ T4116] device veth1_macvtap entered promiscuous mode [ 240.375941][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.384523][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.395823][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.412724][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.428691][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.452318][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.468331][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.594792][ T4139] loop0: detected capacity change from 0 to 40427 [ 240.833522][ T4149] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(8) [ 241.125461][ T4149] device veth3 entered promiscuous mode [ 241.177381][ T4139] F2FS-fs (loop0): invalid crc value [ 241.223803][ T4139] F2FS-fs (loop0): Found nat_bits in checkpoint [ 241.304029][ T4161] kvm: pic: non byte write [ 241.438863][ T4139] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 241.470925][ T28] audit: type=1400 audit(1791403632.348:2730): avc: denied { mount } for pid=4167 comm="syz.1.957" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 241.507994][ T4170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.958'. [ 241.508667][ T28] audit: type=1400 audit(1791403632.378:2731): avc: denied { unmount } for pid=3772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 241.555024][ T3821] syz-executor: attempt to access beyond end of device [ 241.555024][ T3821] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 241.573202][ T4174] FAULT_INJECTION: forcing a failure. [ 241.573202][ T4174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.589712][ T4176] loop9: detected capacity change from 0 to 512 [ 241.600171][ T4176] EXT4-fs: Ignoring removed i_version option [ 241.610149][ T4176] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 241.620331][ T4174] CPU: 0 PID: 4174 Comm: syz.1.961 Not tainted syzkaller #0 [ 241.627632][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 241.637705][ T4174] Call Trace: [ 241.641012][ T4174] [ 241.643947][ T4174] __dump_stack+0x21/0x24 [ 241.648297][ T4174] dump_stack_lvl+0x110/0x170 [ 241.652989][ T4174] ? __cfi_dump_stack_lvl+0x8/0x8 [ 241.658030][ T4174] dump_stack+0x15/0x24 [ 241.662197][ T4174] should_fail_ex+0x3bf/0x510 [ 241.666883][ T4174] should_fail+0xb/0x10 [ 241.671048][ T4174] should_fail_usercopy+0x1a/0x20 [ 241.676351][ T4174] strncpy_from_user+0x24/0x2c0 [ 241.681220][ T4174] ? kmem_cache_alloc+0x166/0x320 [ 241.686266][ T4174] ? getname_flags+0xba/0x510 [ 241.690951][ T4174] getname_flags+0xf5/0x510 [ 241.695478][ T4174] getname+0x19/0x20 [ 241.699383][ T4174] __se_sys_quotactl+0x1fd/0x710 [ 241.699638][ T2657] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 241.704331][ T4174] ? __se_sys_futex+0x136/0x310 [ 241.716649][ T4174] ? __x64_sys_quotactl+0xb0/0xb0 [ 241.721705][ T4174] ? __this_cpu_preempt_check+0x13/0x20 [ 241.727268][ T4174] ? xfd_validate_state+0x70/0x150 [ 241.732399][ T4174] ? fpregs_restore_userregs+0x128/0x260 [ 241.738083][ T4174] __x64_sys_quotactl+0x9b/0xb0 [ 241.742948][ T4174] x64_sys_call+0x8da/0x9a0 [ 241.747465][ T4174] do_syscall_64+0x4c/0xa0 [ 241.751898][ T4174] ? clear_bhb_loop+0x30/0x80 [ 241.756589][ T4174] ? clear_bhb_loop+0x30/0x80 [ 241.761277][ T4174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.767177][ T4174] RIP: 0033:0x7f742559e199 [ 241.771610][ T4174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.791224][ T4174] RSP: 002b:00007f74264d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 241.799650][ T4174] RAX: ffffffffffffffda RBX: 00007f7425825fa0 RCX: 00007f742559e199 [ 241.807632][ T4174] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000802 [ 241.815620][ T4174] RBP: 00007f74256358e0 R08: 0000000000000000 R09: 0000000000000000 [ 241.823605][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.831580][ T4174] R13: 00007f7425826038 R14: 00007f7425825fa0 R15: 00007ffda63952c8 [ 241.839570][ T4174] [ 241.843002][ T4176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 241.859629][ T4176] System zones: 1-12 [ 241.876720][ T4176] EXT4-fs (loop9): orphan cleanup on readonly fs [ 241.886682][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 241.899611][ T2657] usb 9-1: Using ep0 maxpacket: 8 [ 241.900045][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 241.905790][ T2657] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 241.920146][ T4176] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.962: invalid indirect mapped block 12 (level 1) [ 241.922555][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 241.949759][ T2657] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.961319][ T4176] EXT4-fs (loop9): Remounting filesystem read-only [ 241.961348][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 241.967832][ T4176] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.962: invalid indirect mapped block 2 (level 2) [ 241.989637][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 241.999784][ T2657] usb 9-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 242.008143][ T4181] loop1: detected capacity change from 0 to 2048 [ 242.020330][ T2657] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 242.027566][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.027735][ T2657] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.037530][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.054127][ T4176] EXT4-fs (loop9): Remounting filesystem read-only [ 242.061486][ T4181] Alternate GPT is invalid, using primary GPT. [ 242.063744][ T4176] EXT4-fs (loop9): 1 truncate cleaned up [ 242.069993][ T4181] loop1: p1 p2 p3 [ 242.079452][ T28] audit: type=1400 audit(1791403632.958:2732): avc: denied { read write } for pid=4184 comm="syz.0.964" name="protocol" dev="configfs" ino=37823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 242.087964][ T4181] loop1: partition table partially beyond EOD, [ 242.102799][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.107956][ T4176] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 242.109063][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.116714][ T2657] usb 9-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 242.135123][ T4181] truncated [ 242.164083][ T2657] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 242.170386][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.183907][ T2657] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.189232][ T28] audit: type=1400 audit(1791403632.978:2733): avc: denied { open } for pid=4184 comm="syz.0.964" path="/47/config/usb_gadget/g1/functions/hid.usb0/protocol" dev="configfs" ino=37823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 242.196529][ T4189] loop0: detected capacity change from 0 to 512 [ 242.221779][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.235593][ T2657] usb 9-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 242.253934][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.265918][ T2657] usb 9-1: string descriptor 0 read error: -22 [ 242.270954][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.279674][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.279903][ T4116] EXT4-fs (loop9): unmounting filesystem. [ 242.287067][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.293541][ T2657] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 242.300261][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.320334][ T6] hid-generic 0003:0008:000E.0011: unknown main item tag 0x0 [ 242.327860][ T4181] loop1: detected capacity change from 0 to 512 [ 242.329534][ T2657] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.335051][ T6] hid-generic 0003:0008:000E.0011: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 242.350307][ T4189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 242.378678][ T4189] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.399304][ T1491] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.418565][ T4193] fido_id[4193]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 242.427360][ T4179] loop1: detected capacity change from 0 to 1024 [ 242.460436][ T4189] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 242.481471][ T1470] udevd[1470]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 242.494613][ T1491] udevd[1491]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 242.511421][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.9.968'. [ 242.520286][ T28] audit: type=1400 audit(1791403633.388:2734): avc: denied { mounton } for pid=4178 comm="syz.1.963" path="/dev/loop1p2" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 242.521228][ T4189] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 242.570163][ T4179] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 242.585939][ T4179] ext4 filesystem being mounted at /dev/loop1p2 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.597566][ T4201] FAULT_INJECTION: forcing a failure. [ 242.597566][ T4201] name failslab, interval 1, probability 0, space 0, times 0 [ 242.610429][ T4189] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.966: Failed to acquire dquot type 0 [ 242.616988][ T4179] EXT4-fs (loop1): unmounting filesystem. [ 242.645870][ T4201] CPU: 0 PID: 4201 Comm: syz.9.969 Not tainted syzkaller #0 [ 242.653191][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.663260][ T4201] Call Trace: [ 242.666549][ T4201] [ 242.669485][ T4201] __dump_stack+0x21/0x24 [ 242.673836][ T4201] dump_stack_lvl+0x110/0x170 [ 242.678532][ T4201] ? __cfi_dump_stack_lvl+0x8/0x8 [ 242.683578][ T4201] ? debug_smp_processor_id+0x17/0x20 [ 242.688795][ T2657] usb 9-1: USB disconnect, device number 4 [ 242.688963][ T4201] ? kasan_quarantine_put+0x34/0x190 [ 242.700032][ T4201] dump_stack+0x15/0x24 [ 242.704201][ T4201] should_fail_ex+0x3bf/0x510 [ 242.708895][ T4201] __should_failslab+0xac/0xf0 [ 242.713674][ T4201] should_failslab+0x9/0x20 [ 242.718542][ T4201] __kmem_cache_alloc_node+0x3d/0x2d0 [ 242.723930][ T4201] ? x509_key_preparse+0x222/0x6d0 [ 242.729068][ T4201] ? x509_key_preparse+0x222/0x6d0 [ 242.734207][ T4201] __kmalloc+0xa4/0x1e0 [ 242.738378][ T4201] x509_key_preparse+0x222/0x6d0 [ 242.743346][ T4201] asymmetric_key_preparse+0xaf/0x100 [ 242.748731][ T4201] key_create_or_update+0x43e/0x9f0 [ 242.753938][ T4201] ? __cfi_key_create_or_update+0x10/0x10 [ 242.759668][ T4201] ? __cfi_lookup_user_key+0x10/0x10 [ 242.764973][ T4201] ? __kasan_check_write+0x14/0x20 [ 242.770092][ T4201] __se_sys_add_key+0x34b/0x410 [ 242.774949][ T4201] ? __x64_sys_add_key+0xd0/0xd0 [ 242.779891][ T4201] ? xfd_validate_state+0x70/0x150 [ 242.785019][ T4201] ? __kasan_check_write+0x14/0x20 [ 242.790136][ T4201] ? fpregs_restore_userregs+0x128/0x260 [ 242.795784][ T4201] __x64_sys_add_key+0xbf/0xd0 [ 242.800563][ T4201] x64_sys_call+0x6aa/0x9a0 [ 242.805075][ T4201] do_syscall_64+0x4c/0xa0 [ 242.809498][ T4201] ? clear_bhb_loop+0x30/0x80 [ 242.814191][ T4201] ? clear_bhb_loop+0x30/0x80 [ 242.818881][ T4201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.824783][ T4201] RIP: 0033:0x7fb7d679e199 [ 242.829213][ T4201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.848839][ T4201] RSP: 002b:00007fb7d7606028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 242.857267][ T4201] RAX: ffffffffffffffda RBX: 00007fb7d6a25fa0 RCX: 00007fb7d679e199 [ 242.865254][ T4201] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 242.873231][ T4201] RBP: 00007fb7d68358e0 R08: 00000000050c3f17 R09: 0000000000000000 [ 242.881194][ T4201] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 242.889150][ T4201] R13: 00007fb7d6a26038 R14: 00007fb7d6a25fa0 R15: 00007ffd9a540758 [ 242.897113][ T4201] [ 242.908328][ T3821] EXT4-fs (loop0): unmounting filesystem. [ 243.103597][ T4217] device bridge0 entered promiscuous mode [ 243.288388][ T4220] loop8: detected capacity change from 0 to 256 [ 243.501359][ T28] audit: type=1400 audit(1791403634.378:2735): avc: denied { ioctl } for pid=4230 comm="syz.8.980" path="socket:[39004]" dev="sockfs" ino=39004 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.620451][ T4207] loop9: detected capacity change from 0 to 32768 [ 243.671039][ T4207] loop9: p1 p3 < p5 p6 > [ 243.844505][ T1492] udevd[1492]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 243.847747][ T1470] udevd[1470]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 243.855244][ T1491] udevd[1491]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 243.874879][ T1476] udevd[1476]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 243.945507][ T4248] tipc: Started in network mode [ 243.965546][ T4248] tipc: Node identity 0010000000000000002, cluster identity 1 [ 244.257047][ T4262] loop0: detected capacity change from 0 to 128 [ 244.300621][ T4262] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 244.326779][ T4262] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 244.470375][ T4272] loop0: detected capacity change from 0 to 2048 [ 244.525789][ T4272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 244.541207][ T4272] EXT4-fs error (device loop0): ext4_ext_precache:627: inode #2: comm syz.0.996: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 244.577595][ T4272] EXT4-fs (loop0): Remounting filesystem read-only [ 244.585378][ T4276] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 244.596496][ T4276] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.627826][ T3821] EXT4-fs (loop0): unmounting filesystem. [ 244.652456][ T4276] Quota error (device loop8): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 244.694557][ T4276] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 244.719688][ T4276] EXT4-fs error (device loop8): ext4_acquire_dquot:6828: comm syz.8.997: Failed to acquire dquot type 0 [ 244.764977][ T3800] EXT4-fs (loop8): unmounting filesystem. [ 245.367955][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.377341][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.389631][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.397048][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.409687][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.425335][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.434217][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.463712][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.471342][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.478794][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.490732][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.498151][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.512139][ T4323] Alternate GPT is invalid, using primary GPT. [ 245.519642][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.522516][ T4323] loop9: p1 p2 p3 [ 245.532249][ T4322] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 245.537203][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.549556][ T28] audit: type=1400 audit(1791403636.418:2736): avc: denied { read write } for pid=4321 comm="syz.0.1016" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.556070][ T4323] loop9: partition table partially beyond EOD, truncated [ 245.590860][ T3821] EXT4-fs (loop0): unmounting filesystem. [ 245.609974][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.617397][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.661283][ T19] hid-generic 0003:0008:000E.0012: unknown main item tag 0x0 [ 245.691624][ T28] audit: type=1400 audit(1791403636.428:2737): avc: denied { open } for pid=4321 comm="syz.0.1016" path="/65/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.699704][ T19] hid-generic 0003:0008:000E.0012: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 245.735482][ T4323] set_capacity_and_notify: 4 callbacks suppressed [ 245.735500][ T4323] loop9: detected capacity change from 0 to 512 [ 245.839976][ T1492] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.884942][ T4337] fido_id[4337]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.150585][ T4311] loop9: detected capacity change from 0 to 1024 [ 246.175841][ T1491] udevd[1491]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 246.188330][ T1470] udevd[1470]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 246.222839][ T4311] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 246.249693][ T4311] ext4 filesystem being mounted at /dev/loop9p2 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.284537][ T4311] EXT4-fs (loop9): unmounting filesystem. [ 246.352848][ T1470] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.378983][ T4354] fuse: Bad value for 'fd' [ 248.156835][ T4406] ./dev/sda1: Can't open blockdev [ 248.199805][ T4408] WARNING! power/level is deprecated; use power/control instead [ 248.390291][ T28] audit: type=1400 audit(1791403639.268:2738): avc: denied { create } for pid=4415 comm="syz.8.1054" name="#17" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.487420][ T28] audit: type=1400 audit(1791403639.298:2739): avc: denied { link } for pid=4415 comm="syz.8.1054" name="#17" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.518861][ T28] audit: type=1400 audit(1791403639.298:2740): avc: denied { rename } for pid=4415 comm="syz.8.1054" name="#18" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.604694][ T4437] overlayfs: failed to clone upperpath [ 248.686029][ T28] audit: type=1400 audit(1791403639.488:2741): avc: denied { remount } for pid=4434 comm="syz.1.1062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 248.957452][ T4445] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1057'. [ 249.706473][ T28] audit: type=1400 audit(1791403640.578:2742): avc: denied { mount } for pid=4469 comm="syz.9.1068" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 249.711229][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.737797][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.745953][ T4428] device bridge_slave_0 entered promiscuous mode [ 249.756739][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.779621][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.887042][ T4428] device bridge_slave_1 entered promiscuous mode [ 249.966331][ T28] audit: type=1400 audit(1791403640.838:2743): avc: denied { read } for pid=4481 comm="syz.9.1072" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.235579][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.242686][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.249989][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.257014][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.496021][ T4506] loop0: detected capacity change from 0 to 256 [ 250.539004][ T4506] exFAT-fs (loop0): invalid fs_name [ 250.548002][ T4506] exFAT-fs (loop0): failed to read boot sector [ 250.568318][ T4506] exFAT-fs (loop0): failed to recognize exfat type [ 250.575715][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.584297][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.594091][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.601960][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.073585][ T28] audit: type=1400 audit(1791403641.858:2744): avc: denied { map } for pid=4510 comm="syz.1.1081" path="socket:[38774]" dev="sockfs" ino=38774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.432266][ T28] audit: type=1400 audit(1791403641.858:2745): avc: denied { read } for pid=4510 comm="syz.1.1081" path="socket:[38774]" dev="sockfs" ino=38774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.497942][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.516899][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.541537][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.565111][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 251.597112][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.638708][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 251.947882][ T1792] device bridge_slave_1 left promiscuous mode [ 251.955211][ T1792] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.970144][ T1792] device bridge_slave_0 left promiscuous mode [ 251.976288][ T1792] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.990247][ T1792] device veth1_macvtap left promiscuous mode [ 251.998825][ T1792] device veth0_vlan left promiscuous mode [ 252.199744][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.220255][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.233283][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.245373][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.260325][ T4428] device veth0_vlan entered promiscuous mode [ 252.273246][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.338093][ T4575] overlayfs: failed to clone lowerpath [ 252.388786][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.397608][ T4577] overlayfs: failed to clone lowerpath [ 253.347567][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.363348][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.375197][ T4428] device veth1_macvtap entered promiscuous mode [ 253.396409][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.407175][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.417627][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.426093][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.472208][ T4608] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1106'. [ 253.483155][ T4609] xt_hashlimit: max too large, truncated to 1048576 [ 253.508239][ T4604] 9pnet_fd: Insufficient options for proto=fd [ 253.660111][ T3869] Bluetooth: hci0: command 0x1003 tx timeout [ 253.666954][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 253.870862][ T28] audit: type=1400 audit(1791403644.558:2746): avc: denied { shutdown } for pid=4610 comm="syz.9.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.080912][ T4640] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 254.498705][ T28] audit: type=1400 audit(1791403645.368:2747): avc: denied { bind } for pid=4661 comm="syz.1.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.803573][ T28] audit: type=1400 audit(1791403645.678:2748): avc: denied { ioctl } for pid=4672 comm="syz.8.1129" path="socket:[40009]" dev="sockfs" ino=40009 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 254.828889][ T10] ================================================================== [ 254.836964][ T10] BUG: KASAN: use-after-free in l2tp_tunnel_del_work+0xd8/0x410 [ 254.844607][ T10] Read of size 8 at addr ffff888131bf9080 by task kworker/u4:1/10 [ 254.852411][ T10] [ 254.854737][ T10] CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 254.862103][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.872163][ T10] Workqueue: l2tp l2tp_tunnel_del_work [ 254.877633][ T10] Call Trace: [ 254.880912][ T10] [ 254.883853][ T10] __dump_stack+0x21/0x24 [ 254.884246][ T4672] ------------[ cut here ]------------ [ 254.888221][ T10] dump_stack_lvl+0x110/0x170 [ 254.893725][ T4672] WARNING: CPU: 1 PID: 4672 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 254.898316][ T10] ? __cfi_dump_stack_lvl+0x8/0x8 [ 254.898338][ T10] ? __cfi__printk+0x8/0x8 [ 254.898355][ T10] ? l2tp_tunnel_del_work+0xd8/0x410 [ 254.898373][ T10] print_address_description+0x71/0x200 [ 254.908467][ T4672] Modules linked in: [ 254.913419][ T10] print_report+0x4a/0x60 [ 254.913443][ T10] kasan_report+0x122/0x150 [ 254.917846][ T4672] [ 254.917856][ T4672] CPU: 1 PID: 4672 Comm: syz.8.1129 Not tainted syzkaller #0 [ 254.923119][ T10] ? l2tp_tunnel_del_work+0xd8/0x410 [ 254.923145][ T10] __asan_report_load8_noabort+0x14/0x20 [ 254.928675][ T4672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.932544][ T10] l2tp_tunnel_del_work+0xd8/0x410 [ 254.932569][ T10] process_one_work+0x717/0xc30 [ 254.932586][ T10] worker_thread+0xa4d/0x11d0 [ 254.932606][ T10] kthread+0x281/0x320 [ 254.936909][ T4672] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 254.941390][ T10] ? __cfi_worker_thread+0x10/0x10 [ 254.941408][ T10] ? __cfi_kthread+0x10/0x10 [ 254.943719][ T4672] Code: 5d c3 e8 bc 3f d5 fc be 02 00 00 00 eb 0a e8 b0 3f d5 fc be 01 00 00 00 4c 89 f7 e8 43 03 cd fd e9 0f ff ff ff e8 99 3f d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 88 3f d5 fc 4c 89 f7 be 03 [ 254.951064][ T10] ret_from_fork+0x1f/0x30 [ 254.951088][ T10] [ 254.956340][ T4672] RSP: 0018:ffffc900024dfcb0 EFLAGS: 00010293 [ 254.961943][ T10] [ 254.961948][ T10] Allocated by task 4673: [ 254.961956][ T10] kasan_set_track+0x4b/0x70 [ 254.961973][ T10] kasan_save_alloc_info+0x1f/0x30 [ 254.972025][ T4672] [ 254.977097][ T10] __kasan_kmalloc+0x95/0xb0 [ 254.981942][ T4672] RAX: ffffffff849c2ea7 RBX: ffff888130655000 RCX: ffff88810d6e3cc0 [ 254.986572][ T10] __kmalloc+0xb4/0x1e0 [ 254.990652][ T4672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 254.996915][ T10] l2tp_session_create+0x38/0xbd0 [ 255.002022][ T4672] RBP: ffffc900024dfcd0 R08: ffff888130655083 R09: 1ffff110260caa10 [ 255.006565][ T10] pppol2tp_connect+0xbf5/0x1640 [ 255.026222][ T4672] R10: dffffc0000000000 R11: ffffed10260caa11 R12: dffffc0000000000 [ 255.030569][ T10] __sys_connect+0x3da/0x460 [ 255.033580][ T4672] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888131bf9000 [ 255.039704][ T10] __x64_sys_connect+0x7a/0x90 [ 255.039724][ T10] x64_sys_call+0x88d/0x9a0 [ 255.042035][ T4672] FS: 0000555571872500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 255.046339][ T10] do_syscall_64+0x4c/0xa0 [ 255.050925][ T4672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.056000][ T10] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.058311][ T4672] CR2: 00007f765edeb880 CR3: 00000001295c0000 CR4: 00000000003506a0 [ 255.062957][ T10] [ 255.062962][ T10] Freed by task 4673: [ 255.062970][ T10] kasan_set_track+0x4b/0x70 [ 255.070940][ T4672] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.075055][ T10] kasan_save_free_info+0x2b/0x40 [ 255.083037][ T4672] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.088002][ T10] ____kasan_slab_free+0x132/0x180 [ 255.096033][ T4672] Call Trace: [ 255.100855][ T10] __kasan_slab_free+0x11/0x20 [ 255.100875][ T10] slab_free_freelist_hook+0xc2/0x190 [ 255.108823][ T4672] [ 255.113381][ T10] __kmem_cache_free+0xb7/0x1b0 [ 255.113401][ T10] kfree+0x6f/0xf0 [ 255.121360][ T4672] pppol2tp_release+0x150/0x2b0 [ 255.126083][ T10] l2tp_session_put+0xaf/0x1a0 [ 255.130577][ T4672] sock_close+0xc9/0x220 [ 255.139460][ T10] pppol2tp_ioctl+0x748/0x960 [ 255.143880][ T4672] ? __cfi_sock_close+0x10/0x10 [ 255.150404][ T10] pppox_ioctl+0x1f6/0x330 [ 255.156280][ T4672] __fput+0x1fd/0x8f0 [ 255.164225][ T10] sock_do_ioctl+0x114/0x330 [ 255.164241][ T10] sock_ioctl+0x475/0x700 [ 255.166554][ T4672] ____fput+0x15/0x20 [ 255.170504][ T10] __se_sys_ioctl+0x12f/0x1b0 [ 255.170521][ T10] __x64_sys_ioctl+0x7b/0x90 [ 255.170535][ T10] x64_sys_call+0x58b/0x9a0 [ 255.175105][ T4672] task_work_run+0x1e1/0x250 [ 255.183049][ T10] do_syscall_64+0x4c/0xa0 [ 255.183071][ T10] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.188075][ T4672] ? __cfi_task_work_run+0x10/0x10 [ 255.196019][ T10] [ 255.196024][ T10] Last potentially related work creation: [ 255.196029][ T10] kasan_save_stack+0x3a/0x60 [ 255.201140][ T4672] ? __cfi___close_range+0x10/0x10 [ 255.204414][ T10] __kasan_record_aux_stack+0xb6/0xc0 [ 255.209152][ T4672] ? do_user_addr_fault+0x9a5/0x1030 [ 255.214496][ T10] kasan_record_aux_stack_noalloc+0xb/0x10 [ 255.214512][ T10] kvfree_call_rcu+0x8b/0x7a0 [ 255.217434][ T4672] exit_to_user_mode_loop+0x9b/0xb0 [ 255.222252][ T10] inet6_ifa_finish_destroy+0x129/0x1b0 [ 255.222269][ T10] addrconf_ifdown+0x1254/0x1950 [ 255.225964][ T4672] exit_to_user_mode_prepare+0x87/0xd0 [ 255.230783][ T10] addrconf_notify+0x39f/0xe30 [ 255.230802][ T10] raw_notifier_call_chain+0xa1/0x110 [ 255.235537][ T4672] syscall_exit_to_user_mode+0x1a/0x30 [ 255.239751][ T10] __dev_notify_flags+0x276/0x5b0 [ 255.239772][ T10] dev_change_flags+0xe3/0x1a0 [ 255.244445][ T4672] do_syscall_64+0x58/0xa0 [ 255.249264][ T10] do_setlink+0xc02/0x2a10 [ 255.253687][ T4672] ? clear_bhb_loop+0x30/0x80 [ 255.257609][ T10] rtnl_newlink+0x17d7/0x20d0 [ 255.262200][ T4672] ? clear_bhb_loop+0x30/0x80 [ 255.266473][ T10] rtnetlink_rcv_msg+0xb28/0xde0 [ 255.270447][ T4672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.275079][ T10] netlink_rcv_skb+0x200/0x450 [ 255.279663][ T4672] RIP: 0033:0x7ff7ce99e199 [ 255.284120][ T10] rtnetlink_rcv+0x1c/0x20 [ 255.288684][ T4672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.293078][ T10] netlink_unicast+0x8c1/0xa60 [ 255.293094][ T10] netlink_sendmsg+0x8b9/0xbd0 [ 255.298958][ T4672] RSP: 002b:00007ffc5b4415c8 EFLAGS: 00000246 [ 255.304038][ T10] ____sys_sendmsg+0x5fb/0x9c0 [ 255.304059][ T10] ___sys_sendmsg+0x2a2/0x360 [ 255.306360][ T4672] ORIG_RAX: 00000000000001b4 [ 255.312047][ T10] __x64_sys_sendmsg+0x20d/0x2e0 [ 255.316708][ T4672] RAX: 0000000000000000 RBX: 00007ffc5b4416b0 RCX: 00007ff7ce99e199 [ 255.321797][ T10] x64_sys_call+0x171/0x9a0 [ 255.321815][ T10] do_syscall_64+0x4c/0xa0 [ 255.321833][ T10] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.327173][ T4672] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 255.332427][ T10] [ 255.332432][ T10] Second to last potentially related work creation: [ 255.332438][ T10] kasan_save_stack+0x3a/0x60 [ 255.332455][ T10] __kasan_record_aux_stack+0xb6/0xc0 [ 255.332467][ T10] kasan_record_aux_stack_noalloc+0xb/0x10 [ 255.332481][ T10] insert_work+0x51/0x300 [ 255.332495][ T10] __queue_work+0x9d0/0xd50 [ 255.332512][ T10] delayed_work_timer_fn+0x61/0x80 [ 255.332528][ T10] call_timer_fn+0x46/0x2a0 [ 255.332545][ T10] __run_timers+0x672/0x9b0 [ 255.332561][ T10] run_timer_softirq+0x6a/0xf0 [ 255.332579][ T10] handle_softirqs+0x1d7/0x600 [ 255.332596][ T10] __irq_exit_rcu+0x52/0xf0 [ 255.332611][ T10] irq_exit_rcu+0x9/0x10 [ 255.332625][ T10] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 255.332643][ T10] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 255.332659][ T10] [ 255.332663][ T10] The buggy address belongs to the object at ffff888131bf9000 [ 255.332663][ T10] which belongs to the cache kmalloc-512 of size 512 [ 255.332678][ T10] The buggy address is located 128 bytes inside of [ 255.332678][ T10] 512-byte region [ffff888131bf9000, ffff888131bf9200) [ 255.332695][ T10] [ 255.332699][ T10] The buggy address belongs to the physical page: [ 255.332713][ T10] page:ffffea0004c6fe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x131bf8 [ 255.332732][ T10] head:ffffea0004c6fe00 order:2 compound_mapcount:0 compound_pincount:0 [ 255.332746][ T10] flags: 0x4000000000010200(slab|head|zone=1) [ 255.332781][ T10] raw: 4000000000010200 ffffea0004c7a700 dead000000000002 ffff888100042f00 [ 255.332796][ T10] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 255.332804][ T10] page dumped because: kasan: bad access detected [ 255.332817][ T10] page_owner tracks the page as allocated [ 255.332823][ T10] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 287, tgid 287 (syz-executor), ts 24223592677, free_ts 0 [ 255.332852][ T10] post_alloc_hook+0x1f5/0x210 [ 255.332872][ T10] prep_new_page+0x1c/0x110 [ 255.332890][ T10] get_page_from_freelist+0x2ca9/0x2d20 [ 255.332917][ T10] __alloc_pages+0x1fa/0x610 [ 255.332935][ T10] alloc_slab_page+0x6e/0xf0 [ 255.332950][ T10] new_slab+0x98/0x3e0 [ 255.332963][ T10] ___slab_alloc+0x70f/0xb70 [ 255.332982][ T10] __slab_alloc+0x5e/0xa0 [ 255.333002][ T10] __kmem_cache_alloc_node+0x204/0x2d0 [ 255.333021][ T10] __kmalloc_node_track_caller+0xa1/0x1e0 [ 255.333038][ T10] __alloc_skb+0x226/0x4a0 [ 255.333055][ T10] netlink_sendmsg+0x635/0xbd0 [ 255.333072][ T10] __sys_sendto+0x4ac/0x660 [ 255.333090][ T10] __x64_sys_sendto+0xe5/0x100 [ 255.333109][ T10] x64_sys_call+0x83/0x9a0 [ 255.333127][ T10] do_syscall_64+0x4c/0xa0 [ 255.333147][ T10] page_owner free stack trace missing [ 255.333153][ T10] [ 255.333156][ T10] Memory state around the buggy address: [ 255.333166][ T10] ffff888131bf8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.333177][ T10] ffff888131bf9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.333188][ T10] >ffff888131bf9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.333196][ T10] ^ [ 255.333205][ T10] ffff888131bf9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.333215][ T10] ffff888131bf9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.333223][ T10] ================================================================== [ 255.333301][ T10] Disabling lock debugging due to kernel taint [ 255.364677][ T28] audit: type=1400 audit(1791403646.238:2749): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 255.365343][ T4672] RBP: 000000000003e33e R08: 0000000000000001 R09: 0000000000000000 [ 255.365358][ T4672] R10: 0000001b30f20000 R11: 0000000000000246 R12: 00007ffc5b4416f0 [ 255.370389][ T28] audit: type=1400 audit(1791403646.238:2750): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.375480][ T4672] R13: 00007ff7cec25fac R14: 000000000003e38b R15: 00007ff7cec25fa0 [ 255.375499][ T4672] [ 255.375506][ T4672] ---[ end trace 0000000000000000 ]--- [ 255.381224][ T28] audit: type=1400 audit(1791403646.238:2751): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.956529][ T28] audit: type=1400 audit(1791403646.238:2752): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.978255][ T28] audit: type=1400 audit(1791403646.238:2753): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 255.998963][ T28] audit: type=1400 audit(1791403646.238:2754): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.022256][ T28] audit: type=1400 audit(1791403646.238:2755): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1