last executing test programs: 15.893424138s ago: executing program 3 (id=1812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000fffff0000500b5340a580300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff10001d800c0000800500140000000000"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x5, 0x41, 0x1, 0xf7}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.830370145s ago: executing program 3 (id=1813): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000d00)=@abs, 0x6e) chdir(&(0x7f0000000d80)='./cgroup\x00') fchown(0xffffffffffffffff, 0x0, 0xee01) syz_mount_image$fuse(0x0, &(0x7f0000000dc0)='./file0\x00', 0x80c01, 0x0, 0x9, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40), 0x3412332, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x203a075, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x3a08082, 0x0) 15.297097159s ago: executing program 3 (id=1815): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) r3 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r3, &(0x7f0000001200)='\v', 0x1) connect$unix(r5, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r4, 0x0, 0x5005) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) write$P9_RLINK(r2, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) r8 = syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) close_range(r7, r8, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000a40)=0xc) 14.5077465s ago: executing program 0 (id=1818): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r2, &(0x7f0000001200)='\v', 0x1) connect$unix(r4, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, 0x0, 0x5005) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) r6 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) r7 = syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) close_range(r6, r7, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000a40)=0xc) 12.542313341s ago: executing program 1 (id=1825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000fffff0000500b5340a580300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff10001d800c0000800500140000000000"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x5, 0x41, 0x1, 0xf7}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.271424708s ago: executing program 1 (id=1826): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r3, &(0x7f0000001200)='\v', 0x1) connect$unix(r5, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f00000012c0), 0x651, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r4, 0x0, 0x5005) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) write$P9_RLINK(r2, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) r8 = syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) close_range(r7, r8, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000a40)=0xc) 11.680928919s ago: executing program 4 (id=1827): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x80, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x49, 0x11, 0x0, @local, @mcast2, {[], {0x4e23, 0x4e20, 0x49, 0x0, @opaque="a3a94219c4956b20dc0a624a54116af1eb4c3e3a3b04c2678727dfa140c1c1f8e6c6981968af4ab3f5be01053b5124b9813365185b7499275c247e734161fed227"}}}}}}, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000004c0)={0x10000000}) 11.653353981s ago: executing program 4 (id=1828): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4020400) r3 = openat(0xffffffffffffff9c, 0x0, 0x2060, 0x100) fcntl$setlease(r3, 0x400, 0x0) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x501, 0x1001, 0xffffffff, {0x0, 0x0, 0x0, 0x1, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x77cd}]}}]}, 0x38}}, 0x0) ioctl$DM_TARGET_MSG(r1, 0xc138fd0e, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000940)='./dm0\x00', 0x6180, r2) r4 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000980)='./dm0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f00000009c0), 0x0, 0x1000) 11.476652659s ago: executing program 0 (id=1829): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(0xffffffffffffffff, &(0x7f0000001200)='\v', 0x1) connect$unix(r4, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, 0x0, 0x5005) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) r6 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$P9_RLINK(r2, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000a40)=0xc) 11.391491848s ago: executing program 4 (id=1830): r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0da6) syz_open_procfs(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001240), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x2) recvmmsg(r1, &(0x7f0000003d80), 0x0, 0x2100, 0x0) pwritev(r2, 0x0, 0x0, 0x8, 0x5) set_tid_address(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="340000001800010000000000000000401d012600080005000806f90515000300030000200503000054831bdbae1d82b304000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001440)={0x0, 0x500, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100070d00000000007e0000000d297c419756ff2efbd8e231060e080076b9", @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) fchown(r0, 0xffffffffffffffff, 0xee01) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000001500)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2}, 0x8, 0x10, &(0x7f0000000800), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r6, 0x702, 0x36, 0x0, &(0x7f00000008c0)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a3", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.627882266s ago: executing program 3 (id=1831): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000200), 0x400000000000159, 0x40840) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x80, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000044c0)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff00080006"], 0x44}}, 0x2040800) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004540)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004580)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r9, 0x0, 0x4000) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r10, &(0x7f0000000040)={0xa, {0x2, 0x5, 0x8}}, 0xa) 4.637662727s ago: executing program 0 (id=1832): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x4, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x5], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0xd73, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd501, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xfb, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0xa01, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$binfmt_script(r2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02"], 0x262}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.635983217s ago: executing program 1 (id=1833): socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000006840), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000000af00)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f000000af40), 0x102, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f000000af80)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f000000afc0)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f000000b000)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4058040, &(0x7f000000b040)={0x11, 0x1, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4.634570747s ago: executing program 2 (id=1834): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000200), 0x400000000000159, 0x40840) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x80, &(0x7f0000000600)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000002480)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff00080006"], 0x44}}, 0x2040800) openat$dir(0xffffffffffffff9c, &(0x7f0000004540)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r5, &(0x7f0000004580)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.554640166s ago: executing program 0 (id=1835): setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x8000, 0x100) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x101c082, &(0x7f0000000340)=ANY=[@ANYBLOB='uni_xlate=0,utf8=1,uni_xlate=0,uni_xlate=1,nonumtail=0,fmask=00000000000000000000003,nonumtail=0,iocharset=default,siortname=winnt,showexec,shortname=win95,utf8=0,check=strict,codepage=1250,iocharset=cp864,utf8=1,uni_xlate=0,check=relaxed,\x00'], 0x6, 0x2b8, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000700)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000290000000800000005000000000000002400000000000000290000003200000000000000000000000000ffffac14142d", @ANYRES32=0x0, @ANYBLOB="faff0000"], 0x40}, 0x20044084) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1000040, &(0x7f0000000a00)={[], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\'-'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x39, 0x30, 0x36, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x31, 0x36], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x36, 0x34]}}}]}, 0x1, 0x5a3, &(0x7f0000000a80)="$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") r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000300), 0x17a, 0x0) recvmmsg(r4, &(0x7f00000008c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000900)={0x20000014}) pselect6(0x40, &(0x7f0000000940)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setitimer(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 4.099504712s ago: executing program 1 (id=1836): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000200), 0x400000000000159, 0x40840) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x80, &(0x7f0000000600)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000044c0)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff00080006"], 0x44}}, 0x2040800) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004540)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r4, &(0x7f0000004580)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r9, 0x0, 0x4000) 3.672742175s ago: executing program 2 (id=1837): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001300), 0x4000087, 0x2, 0x0) quotactl_fd$Q_SYNC(r3, 0xffffffff80000101, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) 3.656511717s ago: executing program 4 (id=1838): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000200), 0x400000000000159, 0x40840) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x80, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000044c0)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff00080006"], 0x44}}, 0x2040800) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004580)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(0xffffffffffffffff, 0x0, 0x4000) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000040)={0xa, {0x2, 0x5, 0x8}}, 0xa) 1.699917786s ago: executing program 1 (id=1839): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x2200002, &(0x7f0000000980)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000000a40)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000fc0)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001000)='net/fib_trie\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000010c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000001100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r2, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001200)={r1, r0}, 0xc) sendmmsg$unix(r4, &(0x7f0000001240), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001280)=0x2) recvmmsg(r3, &(0x7f0000003d80)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002900)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/139, 0x8b}, {&(0x7f0000002600)=""/134, 0x86}, {&(0x7f00000026c0)=""/136, 0x88}, {0x0}, {&(0x7f00000027c0)=""/130, 0x82}, {&(0x7f0000002880)=""/90, 0x5a}], 0xa, &(0x7f00000029c0)=""/184, 0xb8}, 0x358c0a4b}, {{&(0x7f0000002a80)=@in6, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002b00)=""/88, 0x58}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/139, 0x8b}, {&(0x7f0000003c40)=""/62, 0x3e}], 0x4, &(0x7f0000003cc0)=""/187, 0xbb}, 0x8}], 0x2, 0x2100, 0x0) pwritev(r4, &(0x7f0000001300), 0x0, 0x8, 0x5) set_tid_address(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="340000001800010000000000000000401d012600080005000806f90515000300030000200503000054831bdbae1d82b304000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001440)={0x0, 0x500, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796100070d00000000007e0000000d297c419756ff2efbd8e231060e080076b9", @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) fchown(r0, 0xffffffffffffffff, 0xee01) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000001500)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2}, 0x8, 0x10, &(0x7f0000000800), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r8, 0x702, 0x36, 0x0, &(0x7f00000008c0)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a3", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.698383277s ago: executing program 2 (id=1840): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000200), 0x400000000000159, 0x40840) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x80, &(0x7f0000000600)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000044c0)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff00080006"], 0x44}}, 0x2040800) syz_fuse_handle_req(r5, &(0x7f0000004580)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(0xffffffffffffffff, 0x0, 0x4000) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r10, &(0x7f0000000040)={0xa, {0x2, 0x5, 0x8}}, 0xa) 1.696746507s ago: executing program 3 (id=1841): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4020400) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) openat(0xffffffffffffff9c, 0x0, 0x2060, 0x100) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x501, 0x1001, 0xffffffff, {0x0, 0x0, 0x0, 0x1, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x77cd}]}}]}, 0x38}}, 0x0) ioctl$DM_TARGET_MSG(r1, 0xc138fd0e, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000940)='./dm0\x00', 0x6180, r2) r3 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000980)='./dm0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000009c0), 0x0, 0x1000) 1.579995739s ago: executing program 4 (id=1842): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4020400) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x2060, 0x100) fcntl$setlease(r3, 0x400, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x501, 0x1001, 0xffffffff, {0x0, 0x0, 0x0, 0x1, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x77cd}]}}]}, 0x38}}, 0x0) ioctl$DM_TARGET_MSG(r1, 0xc138fd0e, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000940)='./dm0\x00', 0x6180, r2) r4 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000980)='./dm0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f00000009c0), 0x0, 0x1000) 1.578118969s ago: executing program 3 (id=1843): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(0xffffffffffffffff, &(0x7f0000001200)='\v', 0x1) connect$unix(r4, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, 0x0, 0x5005) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) r6 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$P9_RLINK(r2, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000a40)=0xc) 1.155502912s ago: executing program 4 (id=1844): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(0xffffffffffffffff, &(0x7f0000001200)='\v', 0x1) connect$unix(r4, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, 0x0, 0x5005) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) r6 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$P9_RLINK(r2, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) r7 = syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) close_range(r6, r7, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) 733.715455ms ago: executing program 1 (id=1845): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r3, &(0x7f0000001200)='\v', 0x1) sendmmsg$unix(r6, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r4, 0x0, 0x5005) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) write$P9_RLINK(r2, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) 732.783175ms ago: executing program 2 (id=1846): socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000006840), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000000af00)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f000000af40), 0x102, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f000000af80)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f000000afc0)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f000000b000)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4058040, &(0x7f000000b040)={0x11, 0x1, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 673.625861ms ago: executing program 2 (id=1847): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = io_uring_setup(0x3585, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000800)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) open(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x36) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) creat(0x0, 0x8) r3 = openat(r2, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000780)='\f', 0x1, 0x8000c61) r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000900)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000c80)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 493.626869ms ago: executing program 2 (id=1848): r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0da6) syz_open_procfs(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001240), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x2) recvmmsg(r1, &(0x7f0000003d80), 0x0, 0x2100, 0x0) pwritev(r2, 0x0, 0x0, 0x8, 0x5) set_tid_address(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4004000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001440)={0x0, 0x500, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100070d00000000007e0000000d297c419756ff2efbd8e231060e080076b9", @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) fchown(r0, 0xffffffffffffffff, 0xee01) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000001500)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2}, 0x8, 0x10, &(0x7f0000000800), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r6, 0x702, 0x36, 0x0, &(0x7f00000008c0)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a3", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 388.61557ms ago: executing program 0 (id=1849): r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xc031, 0xffffffffffffffff, 0xc51dd000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) 0s ago: executing program 0 (id=1850): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(0xffffffffffffffff, &(0x7f0000001200)='\v', 0x1) connect$unix(r4, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, 0x0, 0x5005) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) r6 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$P9_RLINK(r2, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) r7 = syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) close_range(r6, r7, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) kernel console output (not intermixed with test programs): ORIG_RAX: 000000000000002e [ 191.176404][ T3057] RAX: ffffffffffffffda RBX: 00007fa23d025fa0 RCX: 00007fa23cda8fd9 [ 191.176418][ T3057] RDX: 0000000000000000 RSI: 0000200000005d00 RDI: 0000000000000004 [ 191.176431][ T3057] RBP: 00007fa23ce37fed R08: 0000000000000000 R09: 0000000000000000 [ 191.176443][ T3057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.176455][ T3057] R13: 00007fa23d026038 R14: 00007fa23d025fa0 R15: 00007fff33ce9208 [ 191.176473][ T3057] [ 191.282266][ T3083] FAULT_INJECTION: forcing a failure. [ 191.282266][ T3083] name fail_futex, interval 1, probability 0, space 0, times 0 [ 191.282293][ T3083] CPU: 0 PID: 3083 Comm: syz.2.964 Not tainted syzkaller #0 [ 191.282311][ T3083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 191.282321][ T3083] Call Trace: [ 191.282326][ T3083] [ 191.282333][ T3083] __dump_stack+0x21/0x24 [ 191.282358][ T3083] dump_stack_lvl+0x110/0x170 [ 191.282375][ T3083] ? __cfi_dump_stack_lvl+0x8/0x8 [ 191.282404][ T3083] ? __schedule+0xcbb/0x1700 [ 191.282423][ T3083] dump_stack+0x15/0x24 [ 191.282438][ T3083] should_fail_ex+0x3bf/0x510 [ 191.282458][ T3083] should_fail+0xb/0x10 [ 191.282474][ T3083] get_futex_key+0x143/0xb10 [ 191.282499][ T3083] ? schedule+0xd4/0x170 [ 191.282516][ T3083] ? __cfi_get_futex_key+0x10/0x10 [ 191.282541][ T3083] futex_wake+0x150/0x8e0 [ 191.282558][ T3083] ? __cfi_futex_wait+0x10/0x10 [ 191.282578][ T3083] ? __cfi_futex_wake+0x10/0x10 [ 191.282596][ T3083] ? __fget_files+0x2d1/0x330 [ 191.282616][ T3083] ? __fdget+0x1ae/0x220 [ 191.282633][ T3083] do_futex+0x2bf/0x430 [ 191.282646][ T3083] ? perf_trace_kvm_invlpga+0xf5/0x340 [ 191.282667][ T3083] ? __cfi_do_futex+0x10/0x10 [ 191.282682][ T3083] ? mutex_unlock+0x8f/0x230 [ 191.282701][ T3083] __se_sys_futex+0x136/0x310 [ 191.282719][ T3083] ? __x64_sys_futex+0x100/0x100 [ 191.282738][ T3083] __x64_sys_futex+0xe5/0x100 [ 191.282756][ T3083] x64_sys_call+0x7ec/0x9a0 [ 191.282775][ T3083] do_syscall_64+0x4c/0xa0 [ 191.282791][ T3083] ? clear_bhb_loop+0x30/0x80 [ 191.282811][ T3083] ? clear_bhb_loop+0x30/0x80 [ 191.282829][ T3083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.282848][ T3083] RIP: 0033:0x7fa23cda8fd9 [ 191.282867][ T3083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.282883][ T3083] RSP: 002b:00007fa23dd5c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 191.282902][ T3083] RAX: ffffffffffffffda RBX: 00007fa23d025fa8 RCX: 00007fa23cda8fd9 [ 191.282915][ T3083] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa23d025fac [ 191.282928][ T3083] RBP: 00007fa23d025fa0 R08: 000ec402b552a0f4 R09: 0000000000000000 [ 191.282941][ T3083] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 191.282954][ T3083] R13: 00007fa23d026038 R14: 00007fff33ce9120 R15: 00007fff33ce9208 [ 191.282968][ T3083] [ 192.125798][ T3054] tty tty28: ldisc open failed (-12), clearing slot 27 [ 192.292598][ T3132] selinux_netlink_send: 6 callbacks suppressed [ 192.292618][ T3132] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=3132 comm=syz.2.984 [ 192.346130][ T3140] FAULT_INJECTION: forcing a failure. [ 192.346130][ T3140] name failslab, interval 1, probability 0, space 0, times 0 [ 192.361699][ T3140] CPU: 1 PID: 3140 Comm: syz.4.988 Not tainted syzkaller #0 [ 192.369906][ T3140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 192.380156][ T3140] Call Trace: [ 192.383962][ T3140] [ 192.386906][ T3140] __dump_stack+0x21/0x24 [ 192.391501][ T3140] dump_stack_lvl+0x110/0x170 [ 192.396351][ T3140] ? __cfi_dump_stack_lvl+0x8/0x8 [ 192.401383][ T3140] dump_stack+0x15/0x24 [ 192.405986][ T3140] should_fail_ex+0x3bf/0x510 [ 192.412347][ T3140] __should_failslab+0xac/0xf0 [ 192.417944][ T3140] should_failslab+0x9/0x20 [ 192.422501][ T3140] __kmem_cache_alloc_node+0x3d/0x2d0 [ 192.428054][ T3140] ? io_alloc_hash_table+0x34/0xc0 [ 192.433726][ T3140] ? io_alloc_hash_table+0x34/0xc0 [ 192.440123][ T3140] __kmalloc+0xa4/0x1e0 [ 192.444852][ T3140] ? __kasan_kmalloc+0x95/0xb0 [ 192.450083][ T3140] io_alloc_hash_table+0x34/0xc0 [ 192.455731][ T3140] io_ring_ctx_alloc+0xc7/0xb00 [ 192.460803][ T3140] io_uring_create+0x29a/0xde1 [ 192.466659][ T3140] __x64_sys_io_uring_setup+0x21b/0x230 [ 192.473626][ T3140] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 192.481014][ T3140] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 192.489204][ T3140] x64_sys_call+0x4ab/0x9a0 [ 192.494679][ T3140] do_syscall_64+0x4c/0xa0 [ 192.499200][ T3140] ? clear_bhb_loop+0x30/0x80 [ 192.504894][ T3140] ? clear_bhb_loop+0x30/0x80 [ 192.509993][ T3140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.516780][ T3140] RIP: 0033:0x7f68175a8fd9 [ 192.521516][ T3140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.541211][ T3140] RSP: 002b:00007f6818460fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 192.549708][ T3140] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f68175a8fd9 [ 192.557679][ T3140] RDX: 0000200000000600 RSI: 0000000000000000 RDI: 000000000000001d [ 192.565678][ T3140] RBP: 00007f6817637fed R08: 0000000000000000 R09: 0000000000000000 [ 192.573668][ T3140] R10: 0000200000000640 R11: 0000000000000206 R12: 0000200000000600 [ 192.581639][ T3140] R13: 0000200000000640 R14: 0000000000000000 R15: 00007ffdacf96638 [ 192.589609][ T3140] [ 192.632720][ T3149] xt_hashlimit: size too large, truncated to 1048576 [ 192.789517][ T3161] overlayfs: failed to clone upperpath [ 192.813732][ T3165] loop1: detected capacity change from 0 to 128 [ 192.828042][ T3167] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=3167 comm=syz.0.999 [ 192.880432][ T3169] FAULT_INJECTION: forcing a failure. [ 192.880432][ T3169] name failslab, interval 1, probability 0, space 0, times 0 [ 192.902980][ T3169] CPU: 1 PID: 3169 Comm: syz.1.1000 Not tainted syzkaller #0 [ 192.910482][ T3169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 192.920638][ T3169] Call Trace: [ 192.923928][ T3169] [ 192.926876][ T3169] __dump_stack+0x21/0x24 [ 192.931218][ T3169] dump_stack_lvl+0x110/0x170 [ 192.936087][ T3169] ? __cfi_dump_stack_lvl+0x8/0x8 [ 192.941128][ T3169] ? release_sock+0x169/0x1c0 [ 192.945913][ T3169] dump_stack+0x15/0x24 [ 192.950217][ T3169] should_fail_ex+0x3bf/0x510 [ 192.954913][ T3169] __should_failslab+0xac/0xf0 [ 192.959700][ T3169] should_failslab+0x9/0x20 [ 192.964304][ T3169] kmem_cache_alloc_node+0x42/0x330 [ 192.969632][ T3169] ? __alloc_skb+0xe8/0x4a0 [ 192.974165][ T3169] __alloc_skb+0xe8/0x4a0 [ 192.978517][ T3169] netlink_sendmsg+0x635/0xbd0 [ 192.983305][ T3169] ? cgroup_rstat_updated+0xf0/0x360 [ 192.988617][ T3169] ? __cfi_netlink_sendmsg+0x10/0x10 [ 192.993978][ T3169] ? security_socket_sendmsg+0x93/0xb0 [ 192.999458][ T3169] __sys_sendto+0x4ac/0x660 [ 193.003979][ T3169] ? __cfi___sys_sendto+0x10/0x10 [ 193.009040][ T3169] ? do_user_addr_fault+0x9a5/0x1030 [ 193.014384][ T3169] __x64_sys_sendto+0xe5/0x100 [ 193.019213][ T3169] x64_sys_call+0x83/0x9a0 [ 193.023654][ T3169] do_syscall_64+0x4c/0xa0 [ 193.028092][ T3169] ? clear_bhb_loop+0x30/0x80 [ 193.032790][ T3169] ? clear_bhb_loop+0x30/0x80 [ 193.037493][ T3169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.043410][ T3169] RIP: 0033:0x7f35a076980e [ 193.047880][ T3169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.067863][ T3169] RSP: 002b:00007f35a1743e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 193.076415][ T3169] RAX: ffffffffffffffda RBX: 00007f35a17456c0 RCX: 00007f35a076980e [ 193.084436][ T3169] RDX: 0000000000000020 RSI: 00007f35a1744000 RDI: 0000000000000005 [ 193.092439][ T3169] RBP: 0000000000000000 R08: 00007f35a1743f04 R09: 000000000000000c [ 193.100429][ T3169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 193.108436][ T3169] R13: 00007f35a1743f58 R14: 00007f35a1744000 R15: 0000000000000000 [ 193.116443][ T3169] [ 193.157518][ T3186] loop3: detected capacity change from 0 to 256 [ 193.182330][ T3186] FAT-fs (loop3): Directory bread(block 64) failed [ 193.189131][ T3186] FAT-fs (loop3): Directory bread(block 65) failed [ 193.199861][ T3186] FAT-fs (loop3): Directory bread(block 66) failed [ 193.207768][ T3186] FAT-fs (loop3): Directory bread(block 67) failed [ 193.220886][ T3186] FAT-fs (loop3): Directory bread(block 68) failed [ 193.229895][ T3198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=3198 comm=syz.2.1012 [ 193.247633][ T3186] FAT-fs (loop3): Directory bread(block 69) failed [ 193.254764][ T3186] FAT-fs (loop3): Directory bread(block 70) failed [ 193.262219][ T3186] FAT-fs (loop3): Directory bread(block 71) failed [ 193.276325][ T3186] FAT-fs (loop3): Directory bread(block 72) failed [ 193.283109][ T3186] FAT-fs (loop3): Directory bread(block 73) failed [ 193.344445][ T3186] syz.3.1009: attempt to access beyond end of device [ 193.344445][ T3186] loop3: rw=2049, sector=1224, nr_sectors = 256 limit=256 [ 193.358477][ T3186] syz.3.1009: attempt to access beyond end of device [ 193.358477][ T3186] loop3: rw=2049, sector=1512, nr_sectors = 320 limit=256 [ 193.386546][ T3186] Buffer I/O error on dev loop3, logical block 308, lost async page write [ 193.390962][ T28] audit: type=1400 audit(1794459191.505:320): avc: denied { ioctl } for pid=3217 comm="syz.2.1022" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 193.499382][ T3234] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=3234 comm=syz.3.1029 [ 193.531204][ T3238] FAULT_INJECTION: forcing a failure. [ 193.531204][ T3238] name failslab, interval 1, probability 0, space 0, times 0 [ 193.545188][ T3238] CPU: 0 PID: 3238 Comm: syz.3.1031 Not tainted syzkaller #0 [ 193.553778][ T3238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 193.565767][ T3238] Call Trace: [ 193.570005][ T3238] [ 193.573468][ T3238] __dump_stack+0x21/0x24 [ 193.579249][ T3238] dump_stack_lvl+0x110/0x170 [ 193.584026][ T3238] ? __cfi_dump_stack_lvl+0x8/0x8 [ 193.589367][ T3238] dump_stack+0x15/0x24 [ 193.594501][ T3238] should_fail_ex+0x3bf/0x510 [ 193.599185][ T3238] __should_failslab+0xac/0xf0 [ 193.605461][ T3238] should_failslab+0x9/0x20 [ 193.610288][ T3238] __kmem_cache_alloc_node+0x3d/0x2d0 [ 193.616426][ T3238] ? alloc_fdtable+0xcd/0x2e0 [ 193.622958][ T3238] ? alloc_fdtable+0xcd/0x2e0 [ 193.627664][ T3238] kmalloc_trace+0x29/0xb0 [ 193.632292][ T3238] alloc_fdtable+0xcd/0x2e0 [ 193.637806][ T3238] dup_fd+0x693/0x8c0 [ 193.642664][ T3238] ? copy_fs_struct+0x4c/0x220 [ 193.648253][ T3238] ksys_unshare+0x440/0x850 [ 193.652975][ T3238] ? __cfi_ksys_unshare+0x10/0x10 [ 193.658629][ T3238] ? fpregs_restore_userregs+0x128/0x260 [ 193.664633][ T3238] __x64_sys_unshare+0x38/0x40 [ 193.669679][ T3238] x64_sys_call+0x767/0x9a0 [ 193.674462][ T3238] do_syscall_64+0x4c/0xa0 [ 193.678887][ T3238] ? clear_bhb_loop+0x30/0x80 [ 193.683945][ T3238] ? clear_bhb_loop+0x30/0x80 [ 193.689547][ T3238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.696026][ T3238] RIP: 0033:0x7f71b2ba8fd9 [ 193.700638][ T3238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.720693][ T3238] RSP: 002b:00007f71b3a4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 193.730075][ T3238] RAX: ffffffffffffffda RBX: 00007f71b2e25fa0 RCX: 00007f71b2ba8fd9 [ 193.738245][ T3238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000680 [ 193.746745][ T3238] RBP: 00007f71b2c37fed R08: 0000000000000000 R09: 0000000000000000 [ 193.755113][ T3238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.763532][ T3238] R13: 00007f71b2e26038 R14: 00007f71b2e25fa0 R15: 00007ffd52718df8 [ 193.771521][ T3238] [ 194.105270][ T3248] loop1: detected capacity change from 0 to 256 [ 194.120505][ T3248] FAT-fs (loop1): Directory bread(block 64) failed [ 194.127825][ T3248] FAT-fs (loop1): Directory bread(block 65) failed [ 194.131882][ T3255] IPv4: Oversized IP packet from 127.0.0.1 [ 194.134957][ T3248] FAT-fs (loop1): Directory bread(block 66) failed [ 194.140447][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 194.147663][ T3248] FAT-fs (loop1): Directory bread(block 67) failed [ 194.160103][ T3248] FAT-fs (loop1): Directory bread(block 68) failed [ 194.172188][ T3248] FAT-fs (loop1): Directory bread(block 69) failed [ 194.180358][ T3259] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=3259 comm=syz.0.1040 [ 194.184664][ T3248] FAT-fs (loop1): Directory bread(block 70) failed [ 194.203252][ T28] audit: type=1400 audit(1794459704.429:321): avc: denied { mount } for pid=3260 comm="syz.2.1041" name="/" dev="configfs" ino=13079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 194.206361][ T3248] FAT-fs (loop1): Directory bread(block 71) failed [ 194.230755][ T28] audit: type=1400 audit(1794459704.459:322): avc: denied { search } for pid=3260 comm="syz.2.1041" name="/" dev="configfs" ino=13079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 194.239995][ T3265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1042'. [ 194.261725][ T28] audit: type=1400 audit(1794459704.459:323): avc: denied { read } for pid=3260 comm="syz.2.1041" name="/" dev="configfs" ino=13079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 194.270929][ T3248] FAT-fs (loop1): Directory bread(block 72) failed [ 194.292027][ T28] audit: type=1400 audit(1794459704.459:324): avc: denied { open } for pid=3260 comm="syz.2.1041" path="/" dev="configfs" ino=13079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 194.299967][ T3248] FAT-fs (loop1): Directory bread(block 73) failed [ 194.359118][ T28] audit: type=1400 audit(1794459704.579:325): avc: denied { map } for pid=3274 comm="syz.4.1048" path="/proc/545/task/546/cmdline" dev="proc" ino=27392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 194.412529][ T3248] bio_check_eod: 4 callbacks suppressed [ 194.412543][ T3248] syz.1.1034: attempt to access beyond end of device [ 194.412543][ T3248] loop1: rw=2049, sector=1224, nr_sectors = 256 limit=256 [ 194.436760][ T3248] syz.1.1034: attempt to access beyond end of device [ 194.436760][ T3248] loop1: rw=2049, sector=1512, nr_sectors = 320 limit=256 [ 194.439079][ T3281] FAULT_INJECTION: forcing a failure. [ 194.439079][ T3281] name failslab, interval 1, probability 0, space 0, times 0 [ 194.451709][ T3248] syz.1.1034: attempt to access beyond end of device [ 194.451709][ T3248] loop1: rw=2049, sector=1864, nr_sectors = 576 limit=256 [ 194.480512][ T3248] syz.1.1034: attempt to access beyond end of device [ 194.480512][ T3248] loop1: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 194.484209][ T3281] CPU: 1 PID: 3281 Comm: syz.2.1051 Not tainted syzkaller #0 [ 194.497603][ T3286] syz.1.1034: attempt to access beyond end of device [ 194.497603][ T3286] loop1: rw=2049, sector=1228, nr_sectors = 4 limit=256 [ 194.501607][ T3281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.515530][ T3286] Buffer I/O error on dev loop1, logical block 307, lost async page write [ 194.525272][ T3281] Call Trace: [ 194.525283][ T3281] [ 194.525290][ T3281] __dump_stack+0x21/0x24 [ 194.525312][ T3281] dump_stack_lvl+0x110/0x170 [ 194.525327][ T3281] ? __cfi_dump_stack_lvl+0x8/0x8 [ 194.542962][ T3286] syz.1.1034: attempt to access beyond end of device [ 194.542962][ T3286] loop1: rw=2049, sector=1232, nr_sectors = 4 limit=256 [ 194.544299][ T3281] ? avc_has_perm_noaudit+0x30a/0x490 [ 194.544328][ T3281] dump_stack+0x15/0x24 [ 194.554451][ T3286] Buffer I/O error on dev loop1, logical block 308, lost async page write [ 194.568157][ T3281] should_fail_ex+0x3bf/0x510 [ 194.568188][ T3281] __should_failslab+0xac/0xf0 [ 194.568208][ T3281] should_failslab+0x9/0x20 [ 194.568288][ T3281] slab_pre_alloc_hook+0x30/0x1d0 [ 194.606072][ T3281] kmem_cache_alloc_lru+0x49/0x280 [ 194.611297][ T3281] ? __d_alloc+0x34/0x6d0 [ 194.615675][ T3281] __d_alloc+0x34/0x6d0 [ 194.620123][ T3281] d_alloc_parallel+0xe2/0x1280 [ 194.625270][ T3281] ? __kasan_check_write+0x14/0x20 [ 194.630576][ T3281] ? rwsem_read_trylock+0x2af/0x640 [ 194.636026][ T3281] ? downgrade_write+0x370/0x370 [ 194.641342][ T3281] ? __cfi_d_alloc_parallel+0x10/0x10 [ 194.646907][ T3281] ? down_read+0xa6/0xf0 [ 194.651260][ T3281] ? __cfi_down_read+0x10/0x10 [ 194.656129][ T3281] path_openat+0x95c/0x2f30 [ 194.660675][ T3281] ? getname_flags+0xba/0x510 [ 194.665383][ T3281] ? do_filp_open+0x420/0x420 [ 194.670175][ T3281] do_filp_open+0x1ee/0x420 [ 194.674702][ T3281] ? __cfi_do_filp_open+0x10/0x10 [ 194.679746][ T3281] ? __cfi_kfree_link+0x10/0x10 [ 194.684613][ T3281] ? alloc_fd+0x4c1/0x570 [ 194.687507][ T3302] tmpfs: Unsupported parameter 'mpol' [ 194.688958][ T3281] do_sys_openat2+0x15e/0x820 [ 194.699758][ T3281] ? __se_sys_futex+0x136/0x310 [ 194.704622][ T3281] ? do_sys_open+0xe0/0xe0 [ 194.709047][ T3281] ? __this_cpu_preempt_check+0x13/0x20 [ 194.714614][ T3281] ? xfd_validate_state+0x70/0x150 [ 194.719826][ T3281] __x64_sys_openat+0x136/0x160 [ 194.724678][ T3281] x64_sys_call+0x783/0x9a0 [ 194.729455][ T3281] do_syscall_64+0x4c/0xa0 [ 194.734038][ T3281] ? clear_bhb_loop+0x30/0x80 [ 194.738789][ T3281] ? clear_bhb_loop+0x30/0x80 [ 194.743574][ T3281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.749484][ T3281] RIP: 0033:0x7fa23cd6980e [ 194.753904][ T3281] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.779588][ T3281] RSP: 002b:00007fa23dd5bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.788171][ T3281] RAX: ffffffffffffffda RBX: 00007fa23dd5c6c0 RCX: 00007fa23cd6980e [ 194.796418][ T3281] RDX: 0000000000000002 RSI: 00007fa23dd5bf90 RDI: ffffffffffffff9c [ 194.804429][ T3281] RBP: 00007fa23ce37fed R08: 0000000000000000 R09: 0000000000000000 [ 194.812851][ T3281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.821172][ T3281] R13: 00007fa23d026038 R14: 00007fa23d025fa0 R15: 00007fff33ce9208 [ 194.829364][ T3281] [ 194.837173][ T349] kworker/u4:4: attempt to access beyond end of device [ 194.837173][ T349] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 194.866178][ T349] Buffer I/O error on dev loop1, logical block 306, lost async page write [ 194.869392][ T3314] xt_hashlimit: size too large, truncated to 1048576 [ 194.875631][ T349] kworker/u4:4: attempt to access beyond end of device [ 194.875631][ T349] loop1: rw=1, sector=1228, nr_sectors = 4 limit=256 [ 194.899542][ T349] Buffer I/O error on dev loop1, logical block 307, lost async page write [ 194.932756][ T3321] FAULT_INJECTION: forcing a failure. [ 194.932756][ T3321] name failslab, interval 1, probability 0, space 0, times 0 [ 194.964248][ T3321] CPU: 0 PID: 3321 Comm: syz.1.1056 Not tainted syzkaller #0 [ 194.972185][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.982344][ T3321] Call Trace: [ 194.985629][ T3321] [ 194.988563][ T3321] __dump_stack+0x21/0x24 [ 194.993090][ T3321] dump_stack_lvl+0x110/0x170 [ 194.997778][ T3321] ? __cfi_dump_stack_lvl+0x8/0x8 [ 195.002811][ T3321] ? free_unref_page_commit+0x268/0x6d0 [ 195.008386][ T3321] dump_stack+0x15/0x24 [ 195.012624][ T3321] should_fail_ex+0x3bf/0x510 [ 195.017321][ T3321] __should_failslab+0xac/0xf0 [ 195.022234][ T3321] should_failslab+0x9/0x20 [ 195.026764][ T3321] __kmem_cache_alloc_node+0x3d/0x2d0 [ 195.032185][ T3321] ? inode_doinit_use_xattr+0x5d/0x3f0 [ 195.037671][ T3321] ? inode_doinit_use_xattr+0x5d/0x3f0 [ 195.043241][ T3321] kmalloc_trace+0x29/0xb0 [ 195.049330][ T3321] inode_doinit_use_xattr+0x5d/0x3f0 [ 195.054779][ T3321] inode_doinit_with_dentry+0x945/0xd90 [ 195.060366][ T3321] ? sb_finish_set_opts+0xa10/0xa10 [ 195.065582][ T3321] ? __cfi_current_time+0x10/0x10 [ 195.070635][ T3321] selinux_d_instantiate+0x27/0x40 [ 195.075932][ T3321] security_d_instantiate+0xb3/0x110 [ 195.081567][ T3321] d_splice_alias+0x6d/0x390 [ 195.086182][ T3321] kernfs_iop_lookup+0x2c2/0x310 [ 195.091293][ T3321] ? __cfi_kernfs_iop_lookup+0x10/0x10 [ 195.096934][ T3321] path_openat+0x13fe/0x2f30 [ 195.102142][ T3321] ? do_filp_open+0x420/0x420 [ 195.106825][ T3321] do_filp_open+0x1ee/0x420 [ 195.111349][ T3321] ? __cfi_do_filp_open+0x10/0x10 [ 195.116375][ T3321] ? alloc_fd+0x4c1/0x570 [ 195.120877][ T3321] do_sys_openat2+0x15e/0x820 [ 195.125661][ T3321] ? __se_sys_futex+0x136/0x310 [ 195.131316][ T3321] ? do_sys_open+0xe0/0xe0 [ 195.135745][ T3321] ? __x64_sys_futex+0x100/0x100 [ 195.140691][ T3321] __x64_sys_openat+0x136/0x160 [ 195.145536][ T3321] x64_sys_call+0x783/0x9a0 [ 195.150052][ T3321] do_syscall_64+0x4c/0xa0 [ 195.154553][ T3321] ? clear_bhb_loop+0x30/0x80 [ 195.159416][ T3321] ? clear_bhb_loop+0x30/0x80 [ 195.164444][ T3321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.170456][ T3321] RIP: 0033:0x7f35a07a8fd9 [ 195.174965][ T3321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.194839][ T3321] RSP: 002b:00007f35a1745028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.203520][ T3321] RAX: ffffffffffffffda RBX: 00007f35a0a25fa0 RCX: 00007f35a07a8fd9 [ 195.211779][ T3321] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 195.219787][ T3321] RBP: 00007f35a0837fed R08: 0000000000000000 R09: 0000000000000000 [ 195.228152][ T3321] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 195.236380][ T3321] R13: 00007f35a0a26038 R14: 00007f35a0a25fa0 R15: 00007ffcbad50448 [ 195.245054][ T3321] [ 195.330158][ T3340] netlink: 'syz.1.1075': attribute type 1 has an invalid length. [ 195.358410][ T3350] loop1: detected capacity change from 0 to 128 [ 195.367034][ T3348] FAULT_INJECTION: forcing a failure. [ 195.367034][ T3348] name failslab, interval 1, probability 0, space 0, times 0 [ 195.384531][ T3348] CPU: 0 PID: 3348 Comm: syz.2.1078 Not tainted syzkaller #0 [ 195.390502][ T3350] syz.1.1080: attempt to access beyond end of device [ 195.390502][ T3350] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 195.391951][ T3348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 195.391968][ T3348] Call Trace: [ 195.391973][ T3348] [ 195.424051][ T3348] __dump_stack+0x21/0x24 [ 195.428395][ T3348] dump_stack_lvl+0x110/0x170 [ 195.433112][ T3348] ? __cfi_dump_stack_lvl+0x8/0x8 [ 195.438152][ T3348] dump_stack+0x15/0x24 [ 195.442348][ T3348] should_fail_ex+0x3bf/0x510 [ 195.447052][ T3348] __should_failslab+0xac/0xf0 [ 195.451831][ T3348] should_failslab+0x9/0x20 [ 195.456344][ T3348] __kmem_cache_alloc_node+0x3d/0x2d0 [ 195.461732][ T3348] ? kvmalloc_node+0x28a/0x460 [ 195.466506][ T3348] ? kasan_save_alloc_info+0x1f/0x30 [ 195.471828][ T3348] ? kvmalloc_node+0x28a/0x460 [ 195.476595][ T3348] __kmalloc_node+0xa2/0x1e0 [ 195.481190][ T3348] kvmalloc_node+0x28a/0x460 [ 195.485788][ T3348] ? __cfi_kvmalloc_node+0x10/0x10 [ 195.490886][ T3348] ? synchronize_rcu+0x97/0x3d0 [ 195.495729][ T3348] bpf_test_run_xdp_live+0x206/0x1b00 [ 195.501088][ T3348] ? __cfi_mutex_unlock+0x10/0x10 [ 195.506114][ T3348] ? text_poke_copy+0x7d/0xa0 [ 195.510775][ T3348] ? 0xffffffffa00041c0 [ 195.514917][ T3348] ? __asan_set_shadow_00+0xe/0x10 [ 195.520325][ T3348] ? bpf_dispatcher_change_prog+0xc43/0xec0 [ 195.526237][ T3348] ? do_syscall_64+0x4c/0xa0 [ 195.530859][ T3348] ? xdp_convert_md_to_buff+0x370/0x370 [ 195.536508][ T3348] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 195.542945][ T3348] ? __kasan_check_write+0x14/0x20 [ 195.548263][ T3348] ? _copy_from_user+0x8f/0xc0 [ 195.553039][ T3348] bpf_prog_test_run_xdp+0x757/0xf80 [ 195.558357][ T3348] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 195.564185][ T3348] ? __kasan_check_write+0x14/0x20 [ 195.569524][ T3348] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 195.575453][ T3348] bpf_prog_test_run+0x3b4/0x5c0 [ 195.580563][ T3348] ? bpf_prog_query+0x270/0x270 [ 195.585986][ T3348] ? selinux_bpf+0xce/0xf0 [ 195.590424][ T3348] ? security_bpf+0x93/0xb0 [ 195.596625][ T3348] __sys_bpf+0x5ee/0x850 [ 195.600876][ T3348] ? bpf_link_show_fdinfo+0x330/0x330 [ 195.606419][ T3348] ? __kasan_check_write+0x14/0x20 [ 195.611535][ T3348] ? fpregs_restore_userregs+0x128/0x260 [ 195.617243][ T3348] __x64_sys_bpf+0x7c/0x90 [ 195.621666][ T3348] x64_sys_call+0x488/0x9a0 [ 195.626959][ T3348] do_syscall_64+0x4c/0xa0 [ 195.631370][ T3348] ? clear_bhb_loop+0x30/0x80 [ 195.636045][ T3348] ? clear_bhb_loop+0x30/0x80 [ 195.640726][ T3348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.646613][ T3348] RIP: 0033:0x7fa23cda8fd9 [ 195.651031][ T3348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.670834][ T3348] RSP: 002b:00007fa23dd5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.679238][ T3348] RAX: ffffffffffffffda RBX: 00007fa23d025fa0 RCX: 00007fa23cda8fd9 [ 195.687294][ T3348] RDX: 0000000000000050 RSI: 0000200000001140 RDI: 000000000000000a [ 195.695281][ T3348] RBP: 00007fa23ce37fed R08: 0000000000000000 R09: 0000000000000000 [ 195.703258][ T3348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.711216][ T3348] R13: 00007fa23d026038 R14: 00007fa23d025fa0 R15: 00007fff33ce9208 [ 195.719210][ T3348] [ 195.752384][ T3370] FAULT_INJECTION: forcing a failure. [ 195.752384][ T3370] name failslab, interval 1, probability 0, space 0, times 0 [ 195.771666][ T3375] tmpfs: Unsupported parameter 'mpol' [ 195.778869][ T3370] CPU: 1 PID: 3370 Comm: syz.1.1087 Not tainted syzkaller #0 [ 195.786263][ T3370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 195.796299][ T3370] Call Trace: [ 195.799667][ T3370] [ 195.802598][ T3370] __dump_stack+0x21/0x24 [ 195.806945][ T3370] dump_stack_lvl+0x110/0x170 [ 195.811711][ T3370] ? __cfi_dump_stack_lvl+0x8/0x8 [ 195.816739][ T3370] dump_stack+0x15/0x24 [ 195.820902][ T3370] should_fail_ex+0x3bf/0x510 [ 195.825580][ T3370] ? create_new_namespaces+0x34/0x660 [ 195.831060][ T3370] __should_failslab+0xac/0xf0 [ 195.835830][ T3370] should_failslab+0x9/0x20 [ 195.840352][ T3370] kmem_cache_alloc+0x3b/0x320 [ 195.845124][ T3370] create_new_namespaces+0x34/0x660 [ 195.850335][ T3370] __se_sys_setns+0x2c2/0x1180 [ 195.855100][ T3370] ? __this_cpu_preempt_check+0x13/0x20 [ 195.860640][ T3370] ? xfd_validate_state+0x70/0x150 [ 195.865745][ T3370] ? __x64_sys_setns+0x70/0x70 [ 195.870506][ T3370] ? fpregs_restore_userregs+0x128/0x260 [ 195.876143][ T3370] __x64_sys_setns+0x5b/0x70 [ 195.880737][ T3370] x64_sys_call+0x672/0x9a0 [ 195.885263][ T3370] do_syscall_64+0x4c/0xa0 [ 195.889697][ T3370] ? clear_bhb_loop+0x30/0x80 [ 195.894367][ T3370] ? clear_bhb_loop+0x30/0x80 [ 195.899031][ T3370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.904919][ T3370] RIP: 0033:0x7f35a07a8fd9 [ 195.909503][ T3370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.929201][ T3370] RSP: 002b:00007f35a1745028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 195.937645][ T3370] RAX: ffffffffffffffda RBX: 00007f35a0a25fa0 RCX: 00007f35a07a8fd9 [ 195.945609][ T3370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 195.954009][ T3370] RBP: 00007f35a0837fed R08: 0000000000000000 R09: 0000000000000000 [ 195.961987][ T3370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.970133][ T3370] R13: 00007f35a0a26038 R14: 00007f35a0a25fa0 R15: 00007ffcbad50448 [ 195.978103][ T3370] [ 196.014145][ T3383] ip_tables: iptables: counters copy to user failed while replacing table [ 196.113239][ T3407] FAULT_INJECTION: forcing a failure. [ 196.113239][ T3407] name failslab, interval 1, probability 0, space 0, times 0 [ 196.126284][ T3407] CPU: 0 PID: 3407 Comm: syz.2.1107 Not tainted syzkaller #0 [ 196.133677][ T3407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 196.143744][ T3407] Call Trace: [ 196.147050][ T3407] [ 196.150002][ T3407] __dump_stack+0x21/0x24 [ 196.154526][ T3407] dump_stack_lvl+0x110/0x170 [ 196.159218][ T3407] ? __cfi_dump_stack_lvl+0x8/0x8 [ 196.164259][ T3407] dump_stack+0x15/0x24 [ 196.168517][ T3407] should_fail_ex+0x3bf/0x510 [ 196.173207][ T3407] ? create_new_namespaces+0x34/0x660 [ 196.178603][ T3407] __should_failslab+0xac/0xf0 [ 196.181344][ T3418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1112'. [ 196.183385][ T3407] should_failslab+0x9/0x20 [ 196.183413][ T3407] kmem_cache_alloc+0x3b/0x320 [ 196.183439][ T3407] create_new_namespaces+0x34/0x660 [ 196.206882][ T3407] __se_sys_setns+0x2c2/0x1180 [ 196.211665][ T3407] ? __this_cpu_preempt_check+0x13/0x20 [ 196.217210][ T3407] ? xfd_validate_state+0x70/0x150 [ 196.222342][ T3407] ? __x64_sys_setns+0x70/0x70 [ 196.227120][ T3407] ? fpregs_restore_userregs+0x128/0x260 [ 196.232750][ T3407] __x64_sys_setns+0x5b/0x70 [ 196.237357][ T3407] x64_sys_call+0x672/0x9a0 [ 196.241857][ T3407] do_syscall_64+0x4c/0xa0 [ 196.246346][ T3407] ? clear_bhb_loop+0x30/0x80 [ 196.251014][ T3407] ? clear_bhb_loop+0x30/0x80 [ 196.255687][ T3407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.261578][ T3407] RIP: 0033:0x7fa23cda8fd9 [ 196.266088][ T3407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.285683][ T3407] RSP: 002b:00007fa23dd5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 196.294107][ T3407] RAX: ffffffffffffffda RBX: 00007fa23d025fa0 RCX: 00007fa23cda8fd9 [ 196.302068][ T3407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 196.310030][ T3407] RBP: 00007fa23ce37fed R08: 0000000000000000 R09: 0000000000000000 [ 196.317995][ T3407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.326482][ T3407] R13: 00007fa23d026038 R14: 00007fa23d025fa0 R15: 00007fff33ce9208 [ 196.334475][ T3407] [ 196.469424][ T3453] loop1: detected capacity change from 0 to 512 [ 196.505369][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 196.505385][ T28] audit: type=1326 audit(1700001026.399:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.1.1131" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35a07a8fd9 code=0x0 [ 196.559269][ T28] audit: type=1326 audit(1700001026.449:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.1.1131" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f35a07a8fd9 code=0x0 [ 196.887267][ T3480] FAULT_INJECTION: forcing a failure. [ 196.887267][ T3480] name fail_futex, interval 1, probability 0, space 0, times 0 [ 196.903129][ T3480] CPU: 1 PID: 3480 Comm: syz.1.1142 Not tainted syzkaller #0 [ 196.911978][ T3480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 196.924140][ T3480] Call Trace: [ 196.928056][ T3480] [ 196.931563][ T3480] __dump_stack+0x21/0x24 [ 196.936744][ T3480] dump_stack_lvl+0x110/0x170 [ 196.942337][ T3480] ? __cfi_dump_stack_lvl+0x8/0x8 [ 196.948346][ T3480] ? do_madvise+0x296/0x3290 [ 196.953830][ T3480] dump_stack+0x15/0x24 [ 196.958832][ T3480] should_fail_ex+0x3bf/0x510 [ 196.964453][ T3480] should_fail+0xb/0x10 [ 196.969433][ T3480] get_futex_key+0x143/0xb10 [ 196.974978][ T3480] ? schedule+0xd4/0x170 [ 196.980049][ T3480] ? __cfi_get_futex_key+0x10/0x10 [ 196.986183][ T3480] futex_wake+0x150/0x8e0 [ 196.991350][ T3480] ? __cfi_futex_wait+0x10/0x10 [ 196.997149][ T3480] ? __cfi_futex_wake+0x10/0x10 [ 197.002957][ T3480] ? vfs_write+0xa51/0xd00 [ 197.008238][ T3480] do_futex+0x2bf/0x430 [ 197.013234][ T3480] ? __cfi_do_futex+0x10/0x10 [ 197.018821][ T3480] ? __kasan_check_write+0x14/0x20 [ 197.024948][ T3480] ? mutex_unlock+0x8f/0x230 [ 197.030435][ T3480] __se_sys_futex+0x136/0x310 [ 197.036248][ T3480] ? __x64_sys_futex+0x100/0x100 [ 197.042301][ T3480] ? ksys_write+0x1fa/0x260 [ 197.047707][ T3480] __x64_sys_futex+0xe5/0x100 [ 197.053315][ T3480] x64_sys_call+0x7ec/0x9a0 [ 197.058796][ T3480] do_syscall_64+0x4c/0xa0 [ 197.064112][ T3480] ? clear_bhb_loop+0x30/0x80 [ 197.070172][ T3480] ? clear_bhb_loop+0x30/0x80 [ 197.075805][ T3480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.082872][ T3480] RIP: 0033:0x7f35a07a8fd9 [ 197.088154][ T3480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.111667][ T3480] RSP: 002b:00007f35a17450e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 197.121746][ T3480] RAX: ffffffffffffffda RBX: 00007f35a0a25fa8 RCX: 00007f35a07a8fd9 [ 197.131622][ T3480] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f35a0a25fac [ 197.141382][ T3480] RBP: 00007f35a0a25fa0 R08: 0032e17ed18a72e0 R09: 0000000000000000 [ 197.150969][ T3480] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 197.160524][ T3480] R13: 00007f35a0a26038 R14: 00007ffcbad50360 R15: 00007ffcbad50448 [ 197.170209][ T3480] [ 197.220211][ T3491] loop3: detected capacity change from 0 to 128 [ 197.266374][ T3501] loop3: detected capacity change from 0 to 512 [ 197.278589][ T3501] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.748893][ T3514] device gretap0 entered promiscuous mode [ 198.756824][ T3514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 198.768089][ T3514] device gretap0 left promiscuous mode [ 199.809268][ T3533] FAULT_INJECTION: forcing a failure. [ 199.809268][ T3533] name failslab, interval 1, probability 0, space 0, times 0 [ 199.826280][ T3533] CPU: 0 PID: 3533 Comm: syz.3.1154 Not tainted syzkaller #0 [ 199.835590][ T3533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 199.847768][ T3533] Call Trace: [ 199.851702][ T3533] [ 199.855212][ T3533] __dump_stack+0x21/0x24 [ 199.860406][ T3533] dump_stack_lvl+0x110/0x170 [ 199.866015][ T3533] ? __cfi_dump_stack_lvl+0x8/0x8 [ 199.872051][ T3533] dump_stack+0x15/0x24 [ 199.877068][ T3533] should_fail_ex+0x3bf/0x510 [ 199.882690][ T3533] __should_failslab+0xac/0xf0 [ 199.888419][ T3533] should_failslab+0x9/0x20 [ 199.893831][ T3533] __kmem_cache_alloc_node+0x3d/0x2d0 [ 199.900282][ T3533] ? kvmalloc_node+0x28a/0x460 [ 199.906000][ T3533] ? kasan_save_alloc_info+0x1f/0x30 [ 199.912359][ T3533] ? kvmalloc_node+0x28a/0x460 [ 199.918082][ T3533] __kmalloc_node+0xa2/0x1e0 [ 199.923595][ T3533] kvmalloc_node+0x28a/0x460 [ 199.929219][ T3533] ? __cfi_kvmalloc_node+0x10/0x10 [ 199.935358][ T3533] ? synchronize_rcu+0x97/0x3d0 [ 199.941195][ T3533] bpf_test_run_xdp_live+0x206/0x1b00 [ 199.947673][ T3533] ? __cfi_mutex_unlock+0x10/0x10 [ 199.953710][ T3533] ? text_poke_copy+0x7d/0xa0 [ 199.959344][ T3533] ? 0xffffffffa00041c0 [ 199.964338][ T3533] ? __asan_set_shadow_00+0xe/0x10 [ 199.970517][ T3533] ? bpf_dispatcher_change_prog+0xc43/0xec0 [ 199.975184][ T3543] sch_fq: defrate 30669 ignored. [ 199.977631][ T3533] ? do_syscall_64+0x4c/0xa0 [ 199.977662][ T3533] ? xdp_convert_md_to_buff+0x370/0x370 [ 199.995817][ T3533] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 200.003149][ T3533] ? __kasan_check_write+0x14/0x20 [ 200.009284][ T3533] ? _copy_from_user+0x8f/0xc0 [ 200.015002][ T3533] bpf_prog_test_run_xdp+0x757/0xf80 [ 200.021354][ T3533] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 200.028335][ T3533] ? __kasan_check_write+0x14/0x20 [ 200.034477][ T3533] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 200.041456][ T3533] bpf_prog_test_run+0x3b4/0x5c0 [ 200.047387][ T3533] ? bpf_prog_query+0x270/0x270 [ 200.053214][ T3533] ? selinux_bpf+0xce/0xf0 [ 200.058536][ T3533] ? security_bpf+0x93/0xb0 [ 200.063958][ T3533] __sys_bpf+0x5ee/0x850 [ 200.069376][ T3533] ? bpf_link_show_fdinfo+0x330/0x330 [ 200.076375][ T3533] ? fpregs_restore_userregs+0x128/0x260 [ 200.083462][ T3533] __x64_sys_bpf+0x7c/0x90 [ 200.088981][ T3533] x64_sys_call+0x488/0x9a0 [ 200.094414][ T3533] do_syscall_64+0x4c/0xa0 [ 200.101079][ T3533] ? clear_bhb_loop+0x30/0x80 [ 200.106912][ T3533] ? clear_bhb_loop+0x30/0x80 [ 200.112540][ T3533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.119617][ T3533] RIP: 0033:0x7f71b2ba8fd9 [ 200.124894][ T3533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.148636][ T3533] RSP: 002b:00007f71b3a4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.158944][ T3533] RAX: ffffffffffffffda RBX: 00007f71b2e25fa0 RCX: 00007f71b2ba8fd9 [ 200.168516][ T3533] RDX: 0000000000000050 RSI: 0000200000001140 RDI: 000000000000000a [ 200.178228][ T3533] RBP: 00007f71b2c37fed R08: 0000000000000000 R09: 0000000000000000 [ 200.187998][ T3533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.197661][ T3533] R13: 00007f71b2e26038 R14: 00007f71b2e25fa0 R15: 00007ffd52718df8 [ 200.207228][ T3533] [ 200.250995][ T3574] device syzkaller0 entered promiscuous mode [ 200.275913][ T3582] loop3: detected capacity change from 0 to 16 [ 200.297200][ T3582] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 200.327332][ T3582] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 200.352935][ T3582] erofs: (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 200.366824][ T3582] erofs: (device loop3): mounted with root inode @ nid 36. [ 200.391958][ T3582] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 200.429455][ T3582] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 200.451307][ T3608] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 200.474636][ T3615] device syzkaller0 entered promiscuous mode [ 200.481938][ T3608] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 200.530819][ T28] audit: type=1400 audit(1700001030.419:330): avc: denied { ioctl } for pid=3621 comm="syz.4.1206" path="socket:[28950]" dev="sockfs" ino=28950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.618376][ T3633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'. [ 200.629891][ T3633] device bridge_slave_1 left promiscuous mode [ 200.638312][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.644983][ T3636] xt_hashlimit: max too large, truncated to 1048576 [ 200.654977][ T3633] device bridge_slave_0 left promiscuous mode [ 200.662694][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.668470][ T3638] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 200.681818][ T3638] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 200.696502][ T3638] overlayfs: missing 'lowerdir' [ 200.717933][ T3642] loop4: detected capacity change from 0 to 16 [ 200.728277][ T3642] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 200.741675][ T3642] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 200.755336][ T3642] erofs: (device loop4): mounted with root inode @ nid 36. [ 200.767124][ T3642] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 200.780962][ T3642] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 200.792761][ T3642] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 200.806082][ T3642] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 200.869631][ T3655] device syzkaller0 entered promiscuous mode [ 200.955390][ T3681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.180404][ T3689] device syzkaller0 entered promiscuous mode [ 201.377837][ T28] audit: type=1400 audit(1700001031.269:331): avc: denied { getopt } for pid=3704 comm="syz.0.1243" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.421900][ T3712] Invalid ELF header type: 2 != 1 [ 201.439786][ T28] audit: type=1400 audit(1700001031.329:332): avc: denied { getopt } for pid=3715 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 201.496516][ T28] audit: type=1400 audit(1700001031.389:333): avc: denied { create } for pid=3725 comm="syz.0.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 201.784838][ T28] audit: type=1400 audit(1700001031.679:334): avc: denied { ioctl } for pid=3764 comm="syz.1.1272" path="/221/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=13061 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 201.841354][ T3771] loop1: detected capacity change from 0 to 128 [ 201.855337][ T28] audit: type=1400 audit(1700001031.749:335): avc: denied { bind } for pid=3774 comm="syz.0.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.921139][ T3786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1285'. [ 201.959108][ T3797] xt_hashlimit: max too large, truncated to 1048576 [ 202.040450][ T3818] loop3: detected capacity change from 0 to 16 [ 202.048531][ T3818] erofs: (device loop3): mounted with root inode @ nid 36. [ 202.058841][ T28] audit: type=1400 audit(1700001031.949:336): avc: denied { read } for pid=3817 comm="syz.3.1298" name="file1" dev="loop3" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 202.092252][ T3820] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 202.124661][ T3824] device syzkaller0 entered promiscuous mode [ 202.232991][ T3849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 202.245506][ T3849] device bridge_slave_1 left promiscuous mode [ 202.257809][ T3849] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.273162][ T3849] device bridge_slave_0 left promiscuous mode [ 202.286365][ T3849] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.447875][ T3880] ------------[ cut here ]------------ [ 202.454698][ T3880] WARNING: CPU: 1 PID: 3880 at crypto/rsa-pkcs1pad.c:540 pkcs1pad_verify+0x4b8/0x600 [ 202.466318][ T3880] Modules linked in: [ 202.470985][ T3880] CPU: 1 PID: 3880 Comm: syz.4.1326 Not tainted syzkaller #0 [ 202.479938][ T3880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 202.492108][ T3880] RIP: 0010:pkcs1pad_verify+0x4b8/0x600 [ 202.498882][ T3880] Code: 44 89 f6 e8 4a 0f 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c6 1a 2c ff 0f 0b b8 ea ff ff ff eb e3 e8 b8 1a 2c ff <0f> 0b b8 ea ff ff ff eb d5 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 85 [ 202.517880][ T28] audit: type=1400 audit(1700001032.399:337): avc: denied { getopt } for pid=3893 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.522992][ T3880] RSP: 0018:ffffc90012297728 EFLAGS: 00010283 [ 202.555016][ T3880] RAX: ffffffff82455768 RBX: ffff88811a78e000 RCX: 0000000000080000 [ 202.564617][ T3880] RDX: ffffc90003311000 RSI: 0000000000000982 RDI: 0000000000000983 [ 202.574226][ T3880] RBP: ffffc90012297770 R08: ffffc900122978af R09: ffffc90012297898 [ 202.583812][ T3880] R10: 0000000000000000 R11: ffffffff824552b0 R12: 0000000000000000 [ 202.593413][ T3880] R13: ffff8881322c7980 R14: dffffc0000000000 R15: ffff88811a78e038 [ 202.603518][ T3880] FS: 00007f68184616c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 202.614457][ T3880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.622357][ T3880] CR2: 0000001b2ee23ffc CR3: 000000013117a000 CR4: 00000000003506a0 [ 202.631973][ T3880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.642400][ T3880] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.652021][ T3880] Call Trace: [ 202.655960][ T3880] [ 202.659465][ T3880] ? sg_init_one+0x93/0x140 [ 202.664898][ T3880] public_key_verify_signature+0x90f/0xd80 [ 202.671861][ T3880] ? __cfi_public_key_verify_signature+0x10/0x10 [ 202.679630][ T3880] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 202.686752][ T3880] ? memdup_user+0x2a/0xc0 [ 202.692070][ T3880] ? keyctl_pkey_verify+0x3a4/0x460 [ 202.698459][ T3880] ? __se_sys_keyctl+0x817/0xe10 [ 202.704645][ T3880] ? __x64_sys_keyctl+0xbf/0xd0 [ 202.710488][ T3880] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 202.718341][ T3880] public_key_verify_signature_2+0x43/0x50 [ 202.725450][ T3880] verify_signature+0xe4/0x110 [ 202.731173][ T3880] asymmetric_key_verify_signature+0x177/0x220 [ 202.739033][ T3880] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 202.747101][ T3880] ? __kasan_check_write+0x14/0x20 [ 202.753246][ T3880] keyctl_pkey_verify+0x434/0x460 [ 202.759277][ T3880] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 202.766159][ T3880] ? kasan_quarantine_put+0x34/0x190 [ 202.772495][ T3880] __se_sys_keyctl+0x817/0xe10 [ 202.778251][ T3880] ? ____kasan_slab_free+0x13d/0x180 [ 202.784631][ T3880] ? __x64_sys_keyctl+0xd0/0xd0 [ 202.790441][ T3880] ? do_futex+0x2e2/0x430 [ 202.795640][ T3880] ? __cfi_do_futex+0x10/0x10 [ 202.801259][ T3880] ? __se_sys_futex+0x136/0x310 [ 202.807111][ T3880] ? __this_cpu_preempt_check+0x13/0x20 [ 202.814090][ T3880] ? xfd_validate_state+0x70/0x150 [ 202.820281][ T3880] ? __kasan_check_write+0x14/0x20 [ 202.827086][ T3880] ? fpregs_restore_userregs+0x128/0x260 [ 202.833889][ T3880] __x64_sys_keyctl+0xbf/0xd0 [ 202.839518][ T3880] x64_sys_call+0x71a/0x9a0 [ 202.845079][ T3880] do_syscall_64+0x4c/0xa0 [ 202.850377][ T3880] ? clear_bhb_loop+0x30/0x80 [ 202.856037][ T3880] ? clear_bhb_loop+0x30/0x80 [ 202.861651][ T3880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.868997][ T3880] RIP: 0033:0x7f68175a8fd9 [ 202.874349][ T3880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.898648][ T3880] RSP: 002b:00007f6818461028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 202.908753][ T3880] RAX: ffffffffffffffda RBX: 00007f6817825fa0 RCX: 00007f68175a8fd9 [ 202.918329][ T3880] RDX: 00002000000008c0 RSI: 0000200000000880 RDI: 000000000000001c [ 202.927980][ T3880] RBP: 00007f6817637fed R08: 0000200000000900 R09: 0000000000000000 [ 202.937695][ T3880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.947297][ T3880] R13: 00007f6817826038 R14: 00007f6817825fa0 R15: 00007ffdacf96638 [ 202.956896][ T3880] [ 202.960503][ T3880] ---[ end trace 0000000000000000 ]--- [ 203.002586][ T3922] 9pnet: Could not find request transport: fJÀ·¸´·m+P<Î7ˆÍ6$¤@6ç9dqr;ÌeO>_ÅL %ãqp¡°ÈBß¹ [ 203.181005][ T3961] device erspan0 entered promiscuous mode [ 203.200792][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 203.519855][ T3992] FAULT_INJECTION: forcing a failure. [ 203.519855][ T3992] name failslab, interval 1, probability 0, space 0, times 0 [ 203.535153][ T3992] CPU: 0 PID: 3992 Comm: syz.4.1376 Tainted: G W syzkaller #0 [ 203.545782][ T3992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 203.557838][ T3992] Call Trace: [ 203.561764][ T3992] [ 203.565268][ T3992] __dump_stack+0x21/0x24 [ 203.570451][ T3992] dump_stack_lvl+0x110/0x170 [ 203.576044][ T3992] ? __cfi_dump_stack_lvl+0x8/0x8 [ 203.582057][ T3992] ? put_dec+0xd7/0xe0 [ 203.586990][ T3992] dump_stack+0x15/0x24 [ 203.591980][ T3992] should_fail_ex+0x3bf/0x510 [ 203.597588][ T3992] __should_failslab+0xac/0xf0 [ 203.603309][ T3992] should_failslab+0x9/0x20 [ 203.608888][ T3992] slab_pre_alloc_hook+0x30/0x1d0 [ 203.615144][ T3992] kmem_cache_alloc_lru+0x49/0x280 [ 203.621285][ T3992] ? __d_alloc+0x34/0x6d0 [ 203.626491][ T3992] __d_alloc+0x34/0x6d0 [ 203.631476][ T3992] d_alloc_parallel+0xe2/0x1280 [ 203.637300][ T3992] ? memcpy+0x56/0x70 [ 203.642082][ T3992] ? avc_has_perm_noaudit+0x30a/0x490 [ 203.648540][ T3992] ? lockref_put_return+0x152/0x1d0 [ 203.654777][ T3992] ? __cfi_d_alloc_parallel+0x10/0x10 [ 203.661217][ T3992] ? __kasan_check_write+0x14/0x20 [ 203.667349][ T3992] ? rwsem_read_trylock+0x2af/0x640 [ 203.673585][ T3992] __lookup_slow+0x14f/0x410 [ 203.679113][ T3992] ? lookup_one_len+0x2e0/0x2e0 [ 203.684920][ T3992] ? down_read+0xa6/0xf0 [ 203.690106][ T3992] ? __cfi_down_read+0x10/0x10 [ 203.695811][ T3992] lookup_slow+0x57/0x70 [ 203.700907][ T3992] link_path_walk+0x984/0xeb0 [ 203.706615][ T3992] ? handle_lookup_down+0x130/0x130 [ 203.712845][ T3992] path_openat+0x27f/0x2f30 [ 203.718333][ T3992] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.725711][ T3992] ? do_filp_open+0x420/0x420 [ 203.731355][ T3992] ? preempt_schedule_irq+0xca/0x120 [ 203.737706][ T3992] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 203.744679][ T3992] do_filp_open+0x1ee/0x420 [ 203.750122][ T3992] ? sysvec_reschedule_ipi+0x78/0x80 [ 203.756584][ T3992] ? __cfi_do_filp_open+0x10/0x10 [ 203.762611][ T3992] ? __cfi_kfree_link+0x10/0x10 [ 203.768434][ T3992] ? alloc_fd+0x4c1/0x570 [ 203.773639][ T3992] do_sys_openat2+0x15e/0x820 [ 203.779275][ T3992] ? __se_sys_futex+0x136/0x310 [ 203.785084][ T3992] ? do_sys_open+0xe0/0xe0 [ 203.790375][ T3992] ? __this_cpu_preempt_check+0x13/0x20 [ 203.797020][ T3992] ? xfd_validate_state+0x70/0x150 [ 203.803253][ T3992] __x64_sys_openat+0x136/0x160 [ 203.809177][ T3992] x64_sys_call+0x783/0x9a0 [ 203.814790][ T3992] do_syscall_64+0x4c/0xa0 [ 203.820071][ T3992] ? clear_bhb_loop+0x30/0x80 [ 203.825894][ T3992] ? clear_bhb_loop+0x30/0x80 [ 203.831509][ T3992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.838584][ T3992] RIP: 0033:0x7f681756980e [ 203.843885][ T3992] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.867408][ T3992] RSP: 002b:00007f6818460ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.877505][ T3992] RAX: ffffffffffffffda RBX: 00007f68184616c0 RCX: 00007f681756980e [ 203.887173][ T3992] RDX: 0000000000000002 RSI: 00007f6818460f90 RDI: ffffffffffffff9c [ 203.896746][ T3992] RBP: 00007f6817637fed R08: 0000000000000000 R09: 0000000000000000 [ 203.906737][ T3992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.916335][ T3992] R13: 00007f6817826038 R14: 00007f6817825fa0 R15: 00007ffdacf96638 [ 203.926006][ T3992] [ 203.974168][ T4000] FAULT_INJECTION: forcing a failure. [ 203.974168][ T4000] name failslab, interval 1, probability 0, space 0, times 0 [ 203.990016][ T4000] CPU: 1 PID: 4000 Comm: syz.4.1379 Tainted: G W syzkaller #0 [ 204.000868][ T4000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 204.013177][ T4000] Call Trace: [ 204.017102][ T4000] [ 204.020604][ T4000] __dump_stack+0x21/0x24 [ 204.025797][ T4000] dump_stack_lvl+0x110/0x170 [ 204.031396][ T4000] ? __cfi_dump_stack_lvl+0x8/0x8 [ 204.037416][ T4000] dump_stack+0x15/0x24 [ 204.042500][ T4000] should_fail_ex+0x3bf/0x510 [ 204.048148][ T4000] __should_failslab+0xac/0xf0 [ 204.053871][ T4000] should_failslab+0x9/0x20 [ 204.059277][ T4000] __kmem_cache_alloc_node+0x3d/0x2d0 [ 204.065766][ T4000] ? register_netdevice+0x2ea/0x1550 [ 204.072164][ T4000] ? full_name_hash+0x9d/0xf0 [ 204.077776][ T4000] ? register_netdevice+0x2ea/0x1550 [ 204.084117][ T4000] kmalloc_trace+0x29/0xb0 [ 204.089419][ T4000] register_netdevice+0x2ea/0x1550 [ 204.095553][ T4000] ? dev_addr_mod+0x2f3/0x3b0 [ 204.101146][ T4000] ? __cfi_register_netdevice+0x10/0x10 [ 204.107773][ T4000] ? tun_net_initialize+0x154/0x430 [ 204.113984][ T4000] ? tun_setup+0x2b0/0x2b0 [ 204.119278][ T4000] tun_set_iff+0x831/0xee0 [ 204.124764][ T4000] __tun_chr_ioctl+0x88c/0x1ef0 [ 204.130565][ T4000] ? tun_flow_create+0x320/0x320 [ 204.136501][ T4000] ? __kasan_check_write+0x14/0x20 [ 204.142620][ T4000] tun_chr_ioctl+0x2a/0x40 [ 204.147916][ T4000] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 204.154139][ T4000] __se_sys_ioctl+0x12f/0x1b0 [ 204.159758][ T4000] __x64_sys_ioctl+0x7b/0x90 [ 204.165265][ T4000] x64_sys_call+0x58b/0x9a0 [ 204.170646][ T4000] do_syscall_64+0x4c/0xa0 [ 204.176024][ T4000] ? clear_bhb_loop+0x30/0x80 [ 204.181622][ T4000] ? clear_bhb_loop+0x30/0x80 [ 204.187251][ T4000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.194304][ T4000] RIP: 0033:0x7f68175a8fd9 [ 204.199600][ T4000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.223131][ T4000] RSP: 002b:00007f6818461028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.233221][ T4000] RAX: ffffffffffffffda RBX: 00007f6817825fa0 RCX: 00007f68175a8fd9 [ 204.242763][ T4000] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 204.252304][ T4000] RBP: 00007f6817637fed R08: 0000000000000000 R09: 0000000000000000 [ 204.261951][ T4000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.271534][ T4000] R13: 00007f6817826038 R14: 00007f6817825fa0 R15: 00007ffdacf96638 [ 204.281097][ T4000] [ 204.304016][ T861] smpboot: CPU 1 is now offline [ 204.487170][ T4042] loop4: detected capacity change from 0 to 512 [ 204.528065][ T4042] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.605889][ T4042] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 204.640626][ T4042] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 204.747048][ T4042] syz.4.1398: attempt to access beyond end of device [ 204.747048][ T4042] loop4: rw=2049, sector=17179852706, nr_sectors = 64 limit=512 [ 205.310378][ T4116] 9pnet_virtio: no channels available for device ./proc [ 205.468604][ T4128] FAULT_INJECTION: forcing a failure. [ 205.468604][ T4128] name failslab, interval 1, probability 0, space 0, times 0 [ 205.517071][ T4128] CPU: 0 PID: 4128 Comm: syz.2.1437 Tainted: G W syzkaller #0 [ 205.527703][ T4128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 205.539850][ T4128] Call Trace: [ 205.543756][ T4128] [ 205.547250][ T4128] __dump_stack+0x21/0x24 [ 205.552412][ T4128] dump_stack_lvl+0x110/0x170 [ 205.557986][ T4128] ? __cfi_dump_stack_lvl+0x8/0x8 [ 205.564048][ T4128] dump_stack+0x15/0x24 [ 205.569022][ T4128] should_fail_ex+0x3bf/0x510 [ 205.574612][ T4128] __should_failslab+0xac/0xf0 [ 205.580326][ T4128] should_failslab+0x9/0x20 [ 205.585698][ T4128] __kmem_cache_alloc_node+0x3d/0x2d0 [ 205.592321][ T4128] ? __hw_addr_add_ex+0x1f4/0x6f0 [ 205.598326][ T4128] ? __hw_addr_add_ex+0x1f4/0x6f0 [ 205.604325][ T4128] kmalloc_trace+0x29/0xb0 [ 205.609602][ T4128] __hw_addr_add_ex+0x1f4/0x6f0 [ 205.615403][ T4128] ? kvmalloc_node+0x28a/0x460 [ 205.621100][ T4128] dev_addr_init+0x143/0x220 [ 205.626575][ T4128] ? __cfi_dev_addr_init+0x10/0x10 [ 205.632673][ T4128] ? cap_capable+0x1a6/0x230 [ 205.638145][ T4128] alloc_netdev_mqs+0x287/0xfb0 [ 205.643932][ T4128] ? __cfi_tun_setup+0x10/0x10 [ 205.649608][ T4128] tun_set_iff+0x547/0xee0 [ 205.654881][ T4128] __tun_chr_ioctl+0x88c/0x1ef0 [ 205.660671][ T4128] ? tun_flow_create+0x320/0x320 [ 205.666579][ T4128] ? __kasan_check_write+0x14/0x20 [ 205.672714][ T4128] tun_chr_ioctl+0x2a/0x40 [ 205.677998][ T4128] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 205.684103][ T4128] __se_sys_ioctl+0x12f/0x1b0 [ 205.689686][ T4128] __x64_sys_ioctl+0x7b/0x90 [ 205.695175][ T4128] x64_sys_call+0x58b/0x9a0 [ 205.700548][ T4128] do_syscall_64+0x4c/0xa0 [ 205.705814][ T4128] ? clear_bhb_loop+0x30/0x80 [ 205.711409][ T4128] ? clear_bhb_loop+0x30/0x80 [ 205.716989][ T4128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.724027][ T4128] RIP: 0033:0x7fa23cda8fd9 [ 205.729399][ T4128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.753014][ T4128] RSP: 002b:00007fa23dd5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.763086][ T4128] RAX: ffffffffffffffda RBX: 00007fa23d025fa0 RCX: 00007fa23cda8fd9 [ 205.772619][ T4128] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 205.782151][ T4128] RBP: 00007fa23ce37fed R08: 0000000000000000 R09: 0000000000000000 [ 205.791687][ T4128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.801217][ T4128] R13: 00007fa23d026038 R14: 00007fa23d025fa0 R15: 00007fff33ce9208 [ 205.810771][ T4128] [ 205.836732][ T28] audit: type=1400 audit(1700001035.729:338): avc: denied { write } for pid=4131 comm="syz.1.1440" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.927392][ T4144] loop1: detected capacity change from 0 to 512 [ 205.947086][ T4147] xt_hashlimit: invalid rate [ 205.975058][ T28] audit: type=1400 audit(1700001035.809:339): avc: denied { mount } for pid=4143 comm="syz.1.1446" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 206.003551][ T4144] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.017217][ T317] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.111462][ T28] audit: type=1400 audit(1700001035.869:340): avc: denied { mounton } for pid=4143 comm="syz.1.1446" path="/257/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 206.191579][ T4174] loop3: detected capacity change from 0 to 512 [ 206.201413][ T28] audit: type=1400 audit(1700001035.979:341): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 206.239302][ T4174] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 206.273222][ T4174] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 206.286673][ T28] audit: type=1400 audit(1700001036.039:342): avc: denied { cmd } for pid=4158 comm="syz.1.1454" path="/dev/ublk-control" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 206.419628][ T4183] loop3: detected capacity change from 0 to 128 [ 206.600972][ T4150] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.729286][ T4197] fuse: Bad value for 'fd' [ 207.734101][ T4203] loop4: detected capacity change from 0 to 512 [ 208.195743][ T4203] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 208.252938][ T6] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 208.274936][ T4203] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 208.442871][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 208.455081][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.480534][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.504530][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 208.527693][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.548762][ T6] usb 4-1: config 0 descriptor?? [ 208.561928][ T6] hub 4-1:0.0: USB hub found [ 208.611872][ T861] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 208.633665][ T4213] random: crng reseeded on system resumption [ 208.673743][ T4209] loop4: detected capacity change from 0 to 131072 [ 209.148340][ T6] hub 4-1:0.0: 1 port detected [ 209.182922][ T861] usb 2-1: Using ep0 maxpacket: 32 [ 209.193896][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.220934][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.235726][ T861] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 209.246846][ T861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.264150][ T861] usb 2-1: config 0 descriptor?? [ 209.281927][ T861] hub 2-1:0.0: USB hub found [ 209.834780][ T4199] loop3: detected capacity change from 0 to 256 [ 209.848758][ T6] usb 4-1: USB disconnect, device number 24 [ 209.862789][ T861] hub 2-1:0.0: 1 port detected [ 210.682907][ T537] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 210.717050][ T4233] loop1: detected capacity change from 0 to 256 [ 210.809817][ T4242] fuse: Bad value for 'fd' [ 210.883975][ T537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.940429][ T537] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.997154][ T537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.043689][ T537] usb 5-1: config 0 descriptor?? [ 211.272180][ T537] usbhid 5-1:0.0: can't add hid device: -71 [ 211.293162][ T537] usbhid: probe of 5-1:0.0 failed with error -71 [ 211.329544][ T537] usb 5-1: USB disconnect, device number 21 [ 211.426417][ T4213] Restarting kernel threads ... done. [ 211.489179][ T4247] FAULT_INJECTION: forcing a failure. [ 211.489179][ T4247] name failslab, interval 1, probability 0, space 0, times 0 [ 211.533652][ T861] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 211.559844][ T4247] CPU: 0 PID: 4247 Comm: syz.2.1487 Tainted: G W syzkaller #0 [ 211.570576][ T4247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 211.582622][ T4247] Call Trace: [ 211.586532][ T4247] [ 211.590031][ T4247] __dump_stack+0x21/0x24 [ 211.595204][ T4247] dump_stack_lvl+0x110/0x170 [ 211.600792][ T4247] ? __cfi_dump_stack_lvl+0x8/0x8 [ 211.606802][ T4247] dump_stack+0x15/0x24 [ 211.611765][ T4247] should_fail_ex+0x3bf/0x510 [ 211.617348][ T4247] ? security_file_alloc+0x33/0x130 [ 211.623560][ T4247] __should_failslab+0xac/0xf0 [ 211.629275][ T4247] should_failslab+0x9/0x20 [ 211.634647][ T4247] kmem_cache_alloc+0x3b/0x320 [ 211.640334][ T4247] ? __alloc_file+0x28/0x2a0 [ 211.645814][ T4247] security_file_alloc+0x33/0x130 [ 211.651811][ T4247] __alloc_file+0xb5/0x2a0 [ 211.657093][ T4247] alloc_empty_file+0x97/0x180 [ 211.662791][ T4247] path_openat+0xf4/0x2f30 [ 211.668058][ T4247] ? kasan_set_track+0x60/0x70 [ 211.673765][ T4247] ? kasan_set_track+0x4b/0x70 [ 211.679480][ T4247] ? __kasan_slab_alloc+0x72/0x80 [ 211.685478][ T4247] ? slab_post_alloc_hook+0x4f/0x2d0 [ 211.691810][ T4247] ? kmem_cache_alloc+0x166/0x320 [ 211.697827][ T4247] ? getname_flags+0xba/0x510 [ 211.703426][ T4247] ? getname+0x19/0x20 [ 211.708272][ T4247] ? do_sys_openat2+0xeb/0x820 [ 211.713966][ T4247] ? __x64_sys_openat+0x136/0x160 [ 211.719967][ T4247] ? x64_sys_call+0x783/0x9a0 [ 211.725549][ T4247] ? do_syscall_64+0x4c/0xa0 [ 211.731142][ T4247] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.738496][ T4247] ? do_filp_open+0x420/0x420 [ 211.744759][ T4247] do_filp_open+0x1ee/0x420 [ 211.750170][ T4247] ? __cfi_do_filp_open+0x10/0x10 [ 211.756402][ T4247] ? alloc_fd+0x4c1/0x570 [ 211.761614][ T4247] do_sys_openat2+0x15e/0x820 [ 211.767267][ T4247] ? __se_sys_futex+0x136/0x310 [ 211.773304][ T4247] ? do_sys_open+0xe0/0xe0 [ 211.778620][ T4247] ? __this_cpu_preempt_check+0x13/0x20 [ 211.785261][ T4247] ? xfd_validate_state+0x70/0x150 [ 211.791388][ T4247] __x64_sys_openat+0x136/0x160 [ 211.797200][ T4247] x64_sys_call+0x783/0x9a0 [ 211.802601][ T4247] do_syscall_64+0x4c/0xa0 [ 211.807863][ T4247] ? clear_bhb_loop+0x30/0x80 [ 211.813444][ T4247] ? clear_bhb_loop+0x30/0x80 [ 211.819260][ T4247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.826312][ T4247] RIP: 0033:0x7fa23cd6980e [ 211.831590][ T4247] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.855086][ T4247] RSP: 002b:00007fa23dd5bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.865155][ T4247] RAX: ffffffffffffffda RBX: 00007fa23dd5c6c0 RCX: 00007fa23cd6980e [ 211.874726][ T4247] RDX: 0000000000000002 RSI: 00007fa23dd5bf90 RDI: ffffffffffffff9c [ 211.884279][ T4247] RBP: 00007fa23ce37fed R08: 0000000000000000 R09: 0000000000000000 [ 211.893829][ T4247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.903364][ T4247] R13: 00007fa23d026038 R14: 00007fa23d025fa0 R15: 00007fff33ce9208 [ 211.912938][ T4247] [ 212.138085][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.212908][ T537] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 212.407738][ T4269] loop1: detected capacity change from 0 to 34816 [ 212.423942][ T537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.440702][ T4269] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 213.736558][ T537] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 213.749273][ T4269] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.765014][ T537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.911548][ T4272] loop3: detected capacity change from 0 to 256 [ 213.946173][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 213.958205][ T537] usb 5-1: config 0 descriptor?? [ 213.970894][ T1026] usb 2-1: USB disconnect, device number 33 [ 213.983652][ T537] usb 5-1: can't set config #0, error -71 [ 213.997955][ T537] usb 5-1: USB disconnect, device number 22 [ 214.017246][ T4279] loop1: detected capacity change from 0 to 33792 [ 214.103011][ T4279] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.157803][ T28] audit: type=1400 audit(1700001044.049:343): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 214.185981][ T4279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 214.383072][ T537] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 215.725913][ T4299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1501'. [ 217.772876][ T537] usb 5-1: Using ep0 maxpacket: 32 [ 217.827025][ T537] usb 5-1: device descriptor read/all, error -71 [ 217.857621][ T290] EXT4-fs (loop1): unmounting filesystem. [ 221.334477][ T4325] loop3: detected capacity change from 0 to 256 [ 221.653738][ T537] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 221.723869][ T4330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1518'. [ 223.295256][ T4344] random: crng reseeded on system resumption [ 223.346133][ T4340] Restarting kernel threads ... done. [ 223.797089][ T1026] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 223.992871][ T1026] usb 2-1: Using ep0 maxpacket: 32 [ 224.004084][ T1026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.030492][ T1026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.054492][ T1026] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.077658][ T1026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.100669][ T1026] usb 2-1: config 0 descriptor?? [ 224.114884][ T1026] hub 2-1:0.0: USB hub found [ 224.262874][ T861] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 224.315086][ T1026] hub 2-1:0.0: 1 port detected [ 224.452905][ T861] usb 4-1: Using ep0 maxpacket: 32 [ 224.460154][ T861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.477301][ T861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.501193][ T861] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.523033][ T861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.538302][ T861] usb 4-1: config 0 descriptor?? [ 224.546947][ T861] hub 4-1:0.0: USB hub found [ 224.572916][ T537] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 224.774575][ T861] hub 4-1:0.0: 1 port detected [ 225.673747][ T4370] loop1: detected capacity change from 0 to 256 [ 226.368471][ T6] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 226.389791][ T537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.415651][ T537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.870558][ T537] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 226.881905][ T537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.894895][ T537] usb 5-1: config 0 descriptor?? [ 226.903956][ T1026] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 226.986103][ T4376] loop3: detected capacity change from 0 to 256 [ 227.023850][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.602708][ T537] usbhid 5-1:0.0: can't add hid device: -71 [ 228.694294][ T537] usbhid: probe of 5-1:0.0 failed with error -71 [ 228.752617][ T6] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 228.813157][ T537] usb 5-1: USB disconnect, device number 25 [ 228.857437][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.267366][ T6] usb 3-1: config 0 descriptor?? [ 229.298632][ T861] usb 2-1: USB disconnect, device number 34 [ 229.305930][ T6] usb 3-1: can't set config #0, error -71 [ 229.313276][ T1026] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 229.359088][ T6] usb 3-1: USB disconnect, device number 26 [ 229.923720][ T4408] loop4: detected capacity change from 0 to 33792 [ 229.970479][ T4408] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 230.045984][ T4408] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 230.288585][ T4412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1542'. [ 230.572908][ T861] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 231.734911][ T6] usb 4-1: USB disconnect, device number 25 [ 231.763850][ T861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.828301][ T861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.847121][ T289] EXT4-fs (loop4): unmounting filesystem. [ 231.885009][ T861] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 231.955561][ T861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.034217][ T861] usb 3-1: config 0 descriptor?? [ 233.477846][ T4429] loop4: detected capacity change from 0 to 256 [ 233.516983][ T861] usb 3-1: can't set config #0, error -71 [ 233.544473][ T861] usb 3-1: USB disconnect, device number 27 [ 233.763659][ T4436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1551'. [ 234.583692][ T537] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 234.593344][ T6] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 235.483319][ T4456] random: crng reseeded on system resumption [ 235.546546][ T4456] Restarting kernel threads ... done. [ 235.582870][ T537] usb 2-1: device not accepting address 35, error -71 [ 235.591031][ T6] usb 4-1: device not accepting address 26, error -71 [ 235.737805][ T4462] loop4: detected capacity change from 0 to 33792 [ 235.783241][ T4462] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.848302][ T4462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.982903][ T6] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 236.022902][ T1026] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 236.032564][ T4468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1559'. [ 236.182889][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 236.193792][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.232886][ T1026] usb 3-1: Using ep0 maxpacket: 32 [ 236.248074][ T1026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.271311][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.342898][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 236.353951][ T1026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.373716][ T4470] incfs: mount failed -22 [ 236.396054][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.406319][ T1026] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 237.744541][ T6] usb 4-1: config 0 descriptor?? [ 237.753976][ T1026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.809651][ T6] hub 4-1:0.0: USB hub found [ 237.824751][ T1026] usb 3-1: config 0 descriptor?? [ 237.852485][ T1026] hub 3-1:0.0: USB hub found [ 237.860661][ T4476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1562'. [ 238.681407][ T6] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 238.695040][ T289] EXT4-fs (loop4): unmounting filesystem. [ 238.740723][ T1026] hub 3-1:0.0: 1 port detected [ 238.757743][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 238.783264][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 240.307107][ T1026] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 240.363597][ T1026] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 240.389091][ T1026] usbhid 3-1:0.0: can't add hid device: -71 [ 240.402415][ T1026] usbhid: probe of 3-1:0.0 failed with error -71 [ 240.803425][ T1026] usb 3-1: USB disconnect, device number 28 [ 240.913097][ T6] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 240.922887][ T537] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 241.005283][ T4495] loop1: detected capacity change from 0 to 256 [ 241.113811][ T537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.146807][ T537] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 241.193589][ T4497] random: crng reseeded on system resumption [ 241.218510][ T537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.249241][ T4497] Restarting kernel threads ... done. [ 241.263293][ T537] usb 5-1: config 0 descriptor?? [ 241.485055][ T537] usbhid 5-1:0.0: can't add hid device: -71 [ 241.504656][ T537] usbhid: probe of 5-1:0.0 failed with error -71 [ 241.539978][ T537] usb 5-1: USB disconnect, device number 26 [ 243.244242][ T1026] usb 4-1: USB disconnect, device number 27 [ 243.285995][ T4511] loop3: detected capacity change from 0 to 33792 [ 243.307977][ T4510] incfs: mount failed -22 [ 243.341378][ T4511] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 244.729790][ T4511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 244.759080][ T28] audit: type=1400 audit(1700001074.649:344): avc: denied { create } for pid=4508 comm="syz.3.1574" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.022743][ T28] audit: type=1400 audit(1700001074.839:345): avc: denied { write open } for pid=4508 comm="syz.3.1574" path="/239/file0/.pending_reads" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.075335][ T4523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1574'. [ 245.180273][ T28] audit: type=1400 audit(1700001075.019:346): avc: denied { setattr } for pid=4508 comm="syz.3.1574" name=".pending_reads" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.222879][ T537] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 245.282876][ T322] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 245.314655][ T28] audit: type=1400 audit(1700001075.019:347): avc: denied { ioctl } for pid=4508 comm="syz.3.1574" path="/239/file0/.pending_reads" dev="loop3" ino=18 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.372007][ T288] EXT4-fs (loop3): unmounting filesystem. [ 245.456598][ T537] usb 5-1: Using ep0 maxpacket: 32 [ 245.477724][ T537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.862886][ T322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 245.885247][ T537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.907334][ T322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 245.929567][ T537] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.959350][ T322] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 245.977300][ T4537] random: crng reseeded on system resumption [ 245.984608][ T537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.999346][ T322] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 246.014712][ T537] usb 5-1: config 0 descriptor?? [ 246.025485][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.035770][ T537] hub 5-1:0.0: USB hub found [ 246.044379][ T4525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 246.054163][ T4535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1580'. [ 246.066035][ T4525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 246.082237][ T322] pl2303 3-1:1.0: required interrupt-in endpoint missing [ 246.242624][ T537] hub 5-1:0.0: 1 port detected [ 247.865331][ T537] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 247.889453][ T537] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 247.918784][ T537] usbhid 5-1:0.0: can't add hid device: -71 [ 247.932006][ T4525] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 247.944251][ T537] usbhid: probe of 5-1:0.0 failed with error -71 [ 247.960332][ T1026] usb 3-1: USB disconnect, device number 29 [ 248.011618][ T4551] incfs: mount failed -22 [ 248.017323][ T322] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 248.183017][ T537] usb 5-1: reset high-speed USB device number 27 using dummy_hcd [ 248.222877][ T322] usb 4-1: Using ep0 maxpacket: 32 [ 248.233942][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.259521][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.285385][ T322] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.310736][ T322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.332956][ T322] usb 4-1: config 0 descriptor?? [ 248.349787][ T322] hub 4-1:0.0: USB hub found [ 248.549873][ T322] hub 4-1:0.0: 1 port detected [ 249.611452][ T322] usb 4-1: USB disconnect, device number 28 [ 253.338723][ T4589] random: crng reseeded on system resumption [ 253.351664][ T4591] loop4: detected capacity change from 0 to 256 [ 253.475306][ T1026] usb 5-1: USB disconnect, device number 27 [ 253.612521][ T4600] incfs: mount failed -22 [ 254.106529][ T1026] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 254.304383][ T1026] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 254.336672][ T1026] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 254.372879][ T1026] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 254.412055][ T1026] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 254.446657][ T1026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.480075][ T4595] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.530583][ T4595] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.558953][ T1026] pl2303 2-1:1.0: required interrupt-in endpoint missing [ 254.833869][ T4595] loop1: detected capacity change from 0 to 8192 [ 255.590883][ T322] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 255.602542][ T4619] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 255.673968][ T4624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1606'. [ 255.702612][ T861] usb 2-1: USB disconnect, device number 37 [ 255.842870][ T322] usb 4-1: Using ep0 maxpacket: 32 [ 255.860105][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.910100][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.944546][ T322] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.004343][ T322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.026283][ T322] usb 4-1: config 0 descriptor?? [ 256.399327][ T322] hub 4-1:0.0: USB hub found [ 256.415087][ T322] hub 4-1:0.0: 1 port detected [ 256.473712][ T4639] random: crng reseeded on system resumption [ 256.567953][ T861] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 256.583416][ T4642] incfs: mount failed -22 [ 256.762856][ T861] usb 3-1: Using ep0 maxpacket: 32 [ 256.770071][ T861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.783486][ T861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.854042][ T861] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.906020][ T1026] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 256.917071][ T861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.932718][ T861] usb 3-1: config 0 descriptor?? [ 256.939960][ T861] hub 3-1:0.0: USB hub found [ 257.349764][ T861] hub 3-1:0.0: 1 port detected [ 257.396194][ T4652] loop3: detected capacity change from 0 to 256 [ 257.432883][ T1026] usb 2-1: Using ep0 maxpacket: 32 [ 257.447765][ T1026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.486589][ T1026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.521820][ T1026] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 257.555288][ T1026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.589481][ T1026] usb 2-1: config 0 descriptor?? [ 257.609552][ T1026] hub 2-1:0.0: USB hub found [ 257.791958][ T479] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 259.592571][ T1026] hub 2-1:0.0: 1 port detected [ 259.717662][ T479] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 260.933703][ T4665] loop1: detected capacity change from 0 to 256 [ 262.028683][ T4639] Restarting kernel threads ... done. [ 262.036227][ T537] usb 4-1: USB disconnect, device number 30 [ 262.154291][ T861] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 262.162595][ T479] usb 2-1: USB disconnect, device number 38 [ 262.620815][ T537] usb 3-1: USB disconnect, device number 30 [ 262.635094][ T4679] loop4: detected capacity change from 0 to 33280 [ 262.659706][ T4679] EXT4-fs: Ignoring removed bh option [ 262.679701][ T4679] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 264.724368][ T537] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 265.268132][ T4705] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1628'. [ 265.363670][ T537] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 265.389608][ T4710] random: crng reseeded on system resumption [ 265.405031][ T537] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 265.424765][ T4710] Restarting kernel threads ... done. [ 265.431371][ T537] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 265.522752][ T537] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 265.534096][ T537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.547899][ T4689] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 265.565537][ T4689] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 265.574791][ T537] pl2303 5-1:1.0: required interrupt-in endpoint missing [ 266.032667][ T479] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 266.052970][ T4721] loop4: detected capacity change from 0 to 33280 [ 266.061595][ T537] usb 5-1: USB disconnect, device number 28 [ 266.075683][ T4721] EXT4-fs: Ignoring removed bh option [ 266.087914][ T4721] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 266.112896][ T861] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 266.619630][ T479] usb 4-1: Using ep0 maxpacket: 32 [ 266.664312][ T861] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.681058][ T479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.096053][ T4733] device syzkaller0 entered promiscuous mode [ 267.112893][ T861] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.130115][ T479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.172275][ T861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 267.180699][ T479] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 267.202939][ T28] audit: type=1400 audit(1700001097.089:348): avc: denied { associate } for pid=4738 comm="syz.0.1639" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 267.232904][ T861] usb 2-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 267.253960][ T479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.274114][ T861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.296476][ T479] usb 4-1: config 0 descriptor?? [ 267.304218][ T479] hub 4-1:0.0: USB hub found [ 267.314882][ T861] usb 2-1: config 0 descriptor?? [ 269.476139][ T861] usbhid 2-1:0.0: can't add hid device: -71 [ 269.493724][ T479] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 269.525088][ T4751] random: crng reseeded on system resumption [ 269.537396][ T4756] loop3: detected capacity change from 0 to 33280 [ 269.547721][ T861] usbhid: probe of 2-1:0.0 failed with error -71 [ 269.557881][ T479] usbhid 4-1:0.0: can't add hid device: -71 [ 269.574418][ T861] usb 2-1: USB disconnect, device number 39 [ 269.587614][ T4756] EXT4-fs: Ignoring removed bh option [ 269.599018][ T479] usbhid: probe of 4-1:0.0 failed with error -71 [ 269.641247][ T4759] loop4: detected capacity change from 0 to 256 [ 269.662087][ T4756] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 269.708022][ T479] usb 4-1: USB disconnect, device number 31 [ 271.341793][ T6] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 271.742279][ T4769] fuse: Bad value for 'fd' [ 271.764319][ T4771] device syzkaller0 entered promiscuous mode [ 271.852637][ T4773] incfs: Backing dir is not set, filesystem can't be mounted. [ 271.862003][ T4773] incfs: mount failed -2 [ 271.941266][ T861] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 271.973785][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 272.379245][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 272.404352][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 272.852913][ T861] usb 2-1: Using ep0 maxpacket: 32 [ 272.896155][ T4788] loop1: detected capacity change from 0 to 256 [ 272.939287][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 272.963020][ T861] usb 2-1: device descriptor read/all, error -71 [ 272.975764][ T4790] random: crng reseeded on system resumption [ 272.992910][ T6] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 273.020415][ T4790] Restarting kernel threads ... done. [ 273.027448][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.062960][ T6] usb 3-1: can't set config #1, error -71 [ 273.081139][ T6] usb 3-1: USB disconnect, device number 31 [ 273.181421][ T4798] loop1: detected capacity change from 0 to 33280 [ 273.193642][ T4798] EXT4-fs: Ignoring removed bh option [ 273.206654][ T4798] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 273.591185][ T4803] device syzkaller0 entered promiscuous mode [ 274.219349][ T6] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 274.292875][ T861] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 275.162628][ T861] usb 2-1: Using ep0 maxpacket: 32 [ 275.168880][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 275.180369][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.194839][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.220224][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.234234][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.258423][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.292880][ T861] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.351795][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.363499][ T861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.384258][ T6] usb 3-1: config 0 descriptor?? [ 275.391276][ T6] hub 3-1:0.0: USB hub found [ 275.761949][ T4827] fuse: Bad value for 'fd' [ 275.782653][ T861] usb 2-1: config 0 descriptor?? [ 275.822502][ T4829] loop3: detected capacity change from 0 to 256 [ 275.867553][ T6] hub 3-1:0.0: 1 port detected [ 275.877319][ T861] hub 2-1:0.0: USB hub found [ 275.886451][ T4831] random: crng reseeded on system resumption [ 276.494936][ T861] hub 2-1:0.0: 1 port detected [ 276.979171][ T4840] fuse: Bad value for 'fd' [ 278.694818][ T6] usb 3-1: USB disconnect, device number 32 [ 278.723540][ T4831] Restarting kernel threads ... done. [ 278.774281][ T4851] device syzkaller0 entered promiscuous mode [ 278.782860][ T4849] incfs: mount failed -22 [ 278.800905][ T861] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 278.809421][ T479] usb 2-1: USB disconnect, device number 41 [ 279.220347][ T4855] loop3: detected capacity change from 0 to 33280 [ 279.247795][ T4855] EXT4-fs: Ignoring removed bh option [ 279.297288][ T4855] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 279.852875][ T861] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 280.239468][ T4876] fuse: Bad value for 'fd' [ 280.362883][ T861] usb 5-1: Using ep0 maxpacket: 32 [ 280.373813][ T861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.400158][ T861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.412850][ T479] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 280.432952][ T861] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 280.456040][ T861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.477217][ T861] usb 5-1: config 0 descriptor?? [ 280.490627][ T861] hub 5-1:0.0: USB hub found [ 280.602844][ T479] usb 4-1: Using ep0 maxpacket: 32 [ 280.614021][ T479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.649577][ T537] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 280.678826][ T479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.691526][ T861] hub 5-1:0.0: 1 port detected [ 280.710789][ T479] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 280.731799][ T479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.754366][ T479] usb 4-1: config 0 descriptor?? [ 280.769562][ T479] hub 4-1:0.0: USB hub found [ 280.780528][ T4881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1683'. [ 280.852828][ T537] usb 2-1: Using ep0 maxpacket: 32 [ 280.864400][ T537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.909150][ T537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.770683][ T479] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 290.758996][ T4891] device syzkaller0 entered promiscuous mode [ 290.766296][ T537] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 290.817651][ T479] usbhid 4-1:0.0: can't add hid device: -71 [ 291.213344][ T479] usbhid: probe of 4-1:0.0 failed with error -71 [ 291.222960][ T537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.274251][ T537] usb 2-1: config 0 descriptor?? [ 291.333338][ T479] usb 4-1: USB disconnect, device number 32 [ 291.378372][ T537] usb 2-1: can't set config #0, error -71 [ 291.679661][ T4901] loop3: detected capacity change from 0 to 256 [ 292.036436][ T537] usb 2-1: USB disconnect, device number 42 [ 292.061425][ T6] usb 5-1: USB disconnect, device number 29 [ 292.069770][ T322] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 292.215671][ T4914] loop3: detected capacity change from 0 to 33280 [ 292.311586][ T4914] EXT4-fs: Ignoring removed bh option [ 293.022479][ T4918] fuse: Bad value for 'fd' [ 293.039664][ T4914] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 293.103005][ T537] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 293.260846][ T4927] device syzkaller0 entered promiscuous mode [ 294.003854][ T537] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.017167][ T537] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.033547][ T537] usb 2-1: config 0 interface 0 has no altsetting 0 [ 294.041546][ T537] usb 2-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 294.052856][ T322] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 294.062026][ T537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.074346][ T537] usb 2-1: config 0 descriptor?? [ 294.233871][ T4935] incfs: Error accessing: ./file0. [ 294.240068][ T4935] incfs: mount failed -2 [ 294.249488][ T537] usbhid 2-1:0.0: can't add hid device: -71 [ 294.262894][ T322] usb 3-1: Using ep0 maxpacket: 32 [ 294.273443][ T537] usbhid: probe of 2-1:0.0 failed with error -71 [ 294.281625][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.665750][ T479] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 294.683022][ T4942] random: crng reseeded on system resumption [ 294.695181][ T537] usb 2-1: USB disconnect, device number 43 [ 294.713031][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.769673][ T4939] Restarting kernel threads ... done. [ 294.776909][ T322] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 294.790040][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.802136][ T322] usb 3-1: config 0 descriptor?? [ 294.810638][ T322] hub 3-1:0.0: USB hub found [ 295.115002][ T322] hub 3-1:0.0: 1 port detected [ 295.132846][ T479] usb 4-1: Using ep0 maxpacket: 32 [ 295.140016][ T479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.153402][ T479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.169049][ T479] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 295.188922][ T479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.203974][ T479] usb 4-1: config 0 descriptor?? [ 295.216376][ T479] hub 4-1:0.0: USB hub found [ 295.382846][ T359] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 295.412224][ T479] hub 4-1:0.0: 1 port detected [ 295.587492][ T359] usb 5-1: Using ep0 maxpacket: 32 [ 297.140532][ T479] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 297.197920][ T359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.970566][ T479] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 297.991987][ T359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.004318][ T479] usbhid 4-1:0.0: can't add hid device: -71 [ 298.017673][ T479] usbhid: probe of 4-1:0.0 failed with error -71 [ 298.031660][ T359] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 298.058193][ T359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.134061][ T479] usb 4-1: USB disconnect, device number 33 [ 298.196887][ T4970] device syzkaller0 entered promiscuous mode [ 298.970633][ T359] usb 5-1: config 0 descriptor?? [ 298.985071][ T537] usb 3-1: USB disconnect, device number 33 [ 298.992409][ T322] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 299.000715][ T359] usb 5-1: can't set config #0, error -71 [ 299.021691][ T359] usb 5-1: USB disconnect, device number 30 [ 300.624684][ T4987] random: crng reseeded on system resumption [ 300.656623][ T4987] Restarting kernel threads ... done. [ 301.233684][ T4996] loop4: detected capacity change from 0 to 256 [ 303.812991][ T479] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 303.910393][ T5019] device syzkaller0 entered promiscuous mode [ 305.772837][ T479] usb 4-1: Using ep0 maxpacket: 32 [ 306.754020][ T479] usb 4-1: device descriptor read/all, error -71 [ 307.731980][ T5045] random: crng reseeded on system resumption [ 307.748219][ T5045] Restarting kernel threads ... done. [ 308.391806][ T479] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 308.831753][ T5061] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1736'. [ 308.845947][ T5063] loop3: detected capacity change from 0 to 33792 [ 308.864166][ T5063] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.954241][ T5063] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 309.387559][ T359] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 309.396828][ T322] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 309.417305][ T5072] device syzkaller0 entered promiscuous mode [ 309.499881][ T5075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1737'. [ 309.602830][ T322] usb 3-1: Using ep0 maxpacket: 32 [ 309.610104][ T359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.631361][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.657662][ T359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.682645][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.705627][ T359] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 309.772849][ T322] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 309.826348][ T359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.852851][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.747647][ T359] usb 5-1: config 0 descriptor?? [ 311.759696][ T5086] loop4: detected capacity change from 0 to 33280 [ 312.727478][ T322] usb 3-1: config 0 descriptor?? [ 312.733798][ T359] usb 5-1: can't set config #0, error -71 [ 312.750650][ T5086] EXT4-fs: Ignoring removed bh option [ 312.757945][ T322] usb 3-1: can't set config #0, error -71 [ 312.771440][ T359] usb 5-1: USB disconnect, device number 31 [ 312.831078][ T5089] random: crng reseeded on system resumption [ 312.840705][ T5086] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 312.853199][ T322] usb 3-1: USB disconnect, device number 34 [ 312.880074][ T288] EXT4-fs (loop3): unmounting filesystem. [ 313.094060][ T5100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1748'. [ 314.131027][ T5111] device syzkaller0 entered promiscuous mode [ 314.767863][ T5124] loop4: detected capacity change from 0 to 256 [ 314.812835][ T1026] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 314.992835][ T359] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 315.012824][ T1026] usb 3-1: Using ep0 maxpacket: 32 [ 315.082969][ T1026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.148785][ T1026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.208291][ T1026] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 315.257304][ T359] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.276655][ T1026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.319413][ T359] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.344143][ T1026] usb 3-1: config 0 descriptor?? [ 315.375633][ T1026] hub 3-1:0.0: USB hub found [ 315.412074][ T359] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.452701][ T359] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 315.509694][ T359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.550028][ T5132] loop4: detected capacity change from 0 to 256 [ 315.575803][ T1026] hub 3-1:0.0: 1 port detected [ 315.610973][ T359] usb 4-1: config 0 descriptor?? [ 315.654250][ T4583] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 317.273440][ T5133] loop4: detected capacity change from 0 to 33792 [ 317.281405][ T5133] ext4: Unknown parameter 'fowner' [ 317.300044][ T1026] usb 3-1: USB disconnect, device number 35 [ 317.880820][ T5142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1759'. [ 317.994143][ T359] usbhid 4-1:0.0: can't add hid device: -71 [ 318.058056][ T359] usbhid: probe of 4-1:0.0 failed with error -71 [ 318.087189][ T359] usb 4-1: USB disconnect, device number 36 [ 318.509769][ T5153] device syzkaller0 entered promiscuous mode [ 318.590924][ T5155] random: crng reseeded on system resumption [ 318.641197][ T5155] Restarting kernel threads ... done. [ 318.942148][ T359] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 319.953828][ T359] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.976165][ T359] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 320.437979][ T537] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 320.493180][ T359] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 320.504866][ T359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.731733][ T359] usb 4-1: USB disconnect, device number 37 [ 322.067890][ T537] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.758700][ T1026] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 323.611298][ T537] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.637289][ T5191] device syzkaller0 entered promiscuous mode [ 324.100020][ T5195] random: crng reseeded on system resumption [ 324.119669][ T537] usb 3-1: config 0 interface 0 has no altsetting 0 [ 324.150431][ T537] usb 3-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 324.167480][ T5195] Restarting kernel threads ... done. [ 324.188447][ T537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.211187][ T537] usb 3-1: config 0 descriptor?? [ 324.285542][ T5195] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 324.306639][ T537] usb 3-1: can't set config #0, error -71 [ 324.406787][ T537] usb 3-1: USB disconnect, device number 36 [ 324.811037][ T5211] loop4: detected capacity change from 0 to 256 [ 324.831837][ T5213] loop1: detected capacity change from 0 to 33280 [ 324.913374][ T5213] EXT4-fs: Ignoring removed bh option [ 324.929210][ T5213] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 326.371536][ T5216] loop4: detected capacity change from 0 to 33792 [ 326.379513][ T5216] ext4: Unknown parameter 'fowner' [ 326.839440][ T537] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 326.888398][ T4584] I/O error, dev loop4, sector 33664 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.887993][ T5234] device syzkaller0 entered promiscuous mode [ 328.442243][ T5247] incfs: mount failed -22 [ 328.512842][ T537] usb 3-1: device not accepting address 37, error -71 [ 328.569264][ T5251] random: crng reseeded on system resumption [ 328.681549][ T5256] loop3: detected capacity change from 0 to 33792 [ 328.708288][ T5251] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 328.745560][ T5256] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 328.868502][ T5256] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 329.036822][ T5261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1792'. [ 329.573099][ T288] EXT4-fs (loop3): unmounting filesystem. [ 329.636018][ T5263] loop3: detected capacity change from 0 to 33280 [ 329.691417][ T5263] EXT4-fs: Ignoring removed bh option [ 329.730297][ T5263] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 330.337756][ T5230] loop1: detected capacity change from 0 to 131072 [ 330.832733][ T1026] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 331.392831][ T1026] usb 5-1: Using ep0 maxpacket: 32 [ 331.409281][ T1026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.825555][ T5281] device syzkaller0 entered promiscuous mode [ 331.848193][ T1026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.877940][ T1026] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 331.892882][ T5283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1800'. [ 331.912844][ T1026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.940945][ T1026] usb 5-1: config 0 descriptor?? [ 331.977886][ T1026] hub 5-1:0.0: USB hub found [ 332.022280][ T5287] incfs: mount failed -22 [ 332.112878][ T537] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 332.568091][ T1026] hub 5-1:0.0: 1 port detected [ 332.672831][ T537] usb 2-1: Using ep0 maxpacket: 32 [ 332.688271][ T537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.727987][ T537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.756152][ T537] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.779265][ T537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.324252][ T537] usb 2-1: config 0 descriptor?? [ 333.358559][ T537] hub 2-1:0.0: USB hub found [ 333.416240][ T5310] loop4: detected capacity change from 0 to 256 [ 333.923858][ T537] hub 2-1:0.0: 1 port detected [ 335.379271][ T5318] device syzkaller0 entered promiscuous mode [ 335.392703][ T861] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 335.403945][ T537] hub 2-1:0.0: config failed, can't get hub status (err -5) [ 335.416552][ T5320] loop1: detected capacity change from 0 to 256 [ 335.442543][ T537] usbhid 2-1:0.0: can't add hid device: -71 [ 335.503006][ T5322] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1812'. [ 335.517149][ T537] usbhid: probe of 2-1:0.0 failed with error -71 [ 335.579659][ T537] usb 2-1: USB disconnect, device number 44 [ 335.614778][ T28] audit: type=1400 audit(1700001165.509:349): avc: denied { remount } for pid=5323 comm="syz.3.1813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 336.046269][ T5328] loop1: detected capacity change from 0 to 33792 [ 336.106434][ T5328] ext4: Unknown parameter 'fowner' [ 336.352817][ T861] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 336.451846][ T5335] random: crng reseeded on system resumption [ 336.498326][ T5335] Restarting kernel threads ... done. [ 336.552831][ T861] usb 4-1: Using ep0 maxpacket: 32 [ 336.570919][ T861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.622731][ T861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.673209][ T861] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 336.716603][ T861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.758293][ T861] usb 4-1: config 0 descriptor?? [ 336.786746][ T861] hub 4-1:0.0: USB hub found [ 336.943910][ T1026] usb 5-1: USB disconnect, device number 33 [ 338.553876][ T861] hub 4-1:0.0: 1 port detected [ 338.716909][ T5356] device syzkaller0 entered promiscuous mode [ 338.877924][ T5362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1825'. [ 339.300045][ T5366] fuse: Bad value for 'fd' [ 339.372844][ T537] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 339.452830][ T359] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 339.471318][ T5368] loop3: detected capacity change from 0 to 256 [ 339.562819][ T537] usb 3-1: Using ep0 maxpacket: 32 [ 339.576469][ T537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.615689][ T537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.651421][ T537] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.684787][ T359] usb 2-1: Using ep0 maxpacket: 32 [ 339.705495][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.741952][ T537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.764478][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.788061][ T537] usb 3-1: config 0 descriptor?? [ 339.808621][ T537] hub 3-1:0.0: USB hub found [ 339.816393][ T359] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.854161][ T359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.949384][ T359] usb 2-1: config 0 descriptor?? [ 339.972777][ T861] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 339.983842][ T359] hub 2-1:0.0: USB hub found [ 341.515333][ T537] hub 3-1:0.0: 1 port detected [ 341.534900][ T359] hub 2-1:0.0: 1 port detected [ 341.665346][ T5381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1830'. [ 342.069133][ T5383] loop1: detected capacity change from 0 to 256 [ 345.757693][ T1026] usb 4-1: USB disconnect, device number 38 [ 345.765006][ T537] usb 3-1: USB disconnect, device number 39 [ 345.772708][ T359] usb 2-1: USB disconnect, device number 45 [ 347.689779][ T5401] fuse: Bad value for 'fd' [ 349.641351][ T5414] fuse: Bad value for 'fd' [ 349.763684][ T5418] loop1: detected capacity change from 0 to 33792 [ 350.193657][ T5418] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 350.249798][ T5418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 350.381863][ T5437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1839'. [ 350.640769][ T290] EXT4-fs (loop1): unmounting filesystem. [ 350.703077][ T359] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 350.712219][ T537] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 350.912885][ T537] usb 5-1: Using ep0 maxpacket: 32 [ 350.919139][ T359] usb 4-1: Using ep0 maxpacket: 32 [ 350.933839][ T359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.947096][ T861] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 350.956297][ T537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.999294][ T537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.011184][ T359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.035926][ T359] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.047003][ T537] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.068055][ T537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.078198][ T5449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1848'. [ 351.089160][ T359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.108631][ T537] usb 5-1: config 0 descriptor?? [ 351.116795][ T359] usb 4-1: config 0 descriptor?? [ 351.143604][ T537] hub 5-1:0.0: USB hub found [ 351.150042][ T359] hub 4-1:0.0: USB hub found [ 351.162917][ T861] usb 2-1: Using ep0 maxpacket: 32 [ 351.173560][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.214936][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.251180][ T861] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.287032][ T861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.321326][ T861] usb 2-1: config 0 descriptor?? [ 351.328145][ T359] hub 4-1:0.0: 1 port detected [ 351.336154][ T537] hub 5-1:0.0: 1 port detected [ 351.358173][ T861] hub 2-1:0.0: USB hub found [ 451.152747][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 451.161285][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5449 [ 451.170123][ C0] (detected by 0, t=10002 jiffies, g=26601, q=264 ncpus=1) [ 451.178865][ C0] task:syz.2.1848 state:R running task stack:25416 pid:5449 ppid:291 flags:0x00004000 [ 451.191778][ C0] Call Trace: [ 451.195687][ C0] [ 451.199119][ C0] sched_show_task+0x391/0x550 [ 451.204979][ C0] ? __kasan_check_write+0x14/0x20 [ 451.211259][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 451.218487][ C0] ? __cfi_sched_show_task+0x10/0x10 [ 451.224872][ C0] ? wq_watchdog_touch+0x100/0x190 [ 451.231045][ C0] print_other_cpu_stall+0xd8d/0x10c0 [ 451.237492][ C0] ? print_cpu_stall+0x590/0x590 [ 451.243377][ C0] ? cpufreq_acct_update_power+0xc0/0x450 [ 451.250284][ C0] ? __kasan_check_read+0x11/0x20 [ 451.256276][ C0] rcu_sched_clock_irq+0x7bc/0x1310 [ 451.262547][ C0] ? __cfi_rcu_sched_clock_irq+0x10/0x10 [ 451.269300][ C0] ? debug_smp_processor_id+0x17/0x20 [ 451.275806][ C0] ? hrtimer_run_queues+0x166/0x420 [ 451.282103][ C0] update_process_times+0x148/0x1b0 [ 451.288335][ C0] tick_sched_timer+0x17c/0x240 [ 451.294236][ C0] ? __cfi_tick_sched_timer+0x10/0x10 [ 451.300647][ C0] __hrtimer_run_queues+0x398/0x8a0 [ 451.306860][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 451.313296][ C0] ? ktime_get_update_offsets_now+0x30c/0x320 [ 451.321287][ C0] hrtimer_interrupt+0x3ad/0x8c0 [ 451.327200][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 451.334435][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 451.341160][ C0] [ 451.344644][ C0] [ 451.348130][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 451.355281][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 451.363606][ C0] Code: d0 f6 90 7e 65 8b 15 d1 f6 90 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 6c 0b 00 00 00 74 4e 8b 91 48 0b 00 00 <83> fa 03 75 43 48 8b 91 50 0b 00 00 44 8b 89 4c 0b 00 00 49 c1 e1 [ 451.387212][ C0] RSP: 0018:ffffc90000aef980 EFLAGS: 00000246 [ 451.394523][ C0] RAX: ffffffff84186f88 RBX: ffffc90000aefa88 RCX: ffff88811c685100 [ 451.404062][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.413655][ C0] RBP: ffffc90000aef980 R08: ffff88811c685107 R09: 1ffff110238d0a20 [ 451.423202][ C0] R10: dffffc0000000000 R11: ffffed10238d0a21 R12: ffff88811c685100 [ 451.432758][ C0] R13: 0000000000000000 R14: 0000000000004000 R15: 1ffff110238d0a20 [ 451.442305][ C0] ? bpf_test_timer_continue+0x138/0x4a0 [ 451.449199][ C0] bpf_test_timer_continue+0x138/0x4a0 [ 451.455735][ C0] bpf_test_run+0x456/0x940 [ 451.461141][ C0] ? dst_hold+0xc0/0xc0 [ 451.466123][ C0] ? __cfi_eth_type_trans+0x10/0x10 [ 451.472398][ C0] ? bpf_prog_test_run_skb+0x7e5/0x18a0 [ 451.479021][ C0] ? convert___skb_to_skb+0x40/0x5b0 [ 451.485330][ C0] bpf_prog_test_run_skb+0xd64/0x18a0 [ 451.491757][ C0] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 451.498692][ C0] bpf_prog_test_run+0x3b4/0x5c0 [ 451.504642][ C0] ? bpf_prog_query+0x270/0x270 [ 451.510440][ C0] ? selinux_bpf+0xce/0xf0 [ 451.515782][ C0] ? security_bpf+0x93/0xb0 [ 451.521186][ C0] __sys_bpf+0x5ee/0x850 [ 451.526787][ C0] ? bpf_link_show_fdinfo+0x330/0x330 [ 451.533215][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 451.540007][ C0] __x64_sys_bpf+0x7c/0x90 [ 451.545290][ C0] x64_sys_call+0x488/0x9a0 [ 451.550782][ C0] do_syscall_64+0x4c/0xa0 [ 451.556067][ C0] ? clear_bhb_loop+0x30/0x80 [ 451.561717][ C0] ? clear_bhb_loop+0x30/0x80 [ 451.567320][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.574370][ C0] RIP: 0033:0x7fa23cda8fd9 [ 451.579656][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.603180][ C0] RSP: 002b:00007fa23dd3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.613474][ C0] RAX: ffffffffffffffda RBX: 00007fa23d026090 RCX: 00007fa23cda8fd9 [ 451.623013][ C0] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 000000000000000a [ 451.632578][ C0] RBP: 00007fa23ce37fed R08: 0000000000000000 R09: 0000000000000000 [ 451.642128][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.651658][ C0] R13: 00007fa23d026128 R14: 00007fa23d026090 R15: 00007fff33ce9208 [ 451.661862][ C0] [ 451.665479][ C0] rcu: rcu_preempt kthread starved for 9811 jiffies! g26601 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 451.678776][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 451.690854][ C0] rcu: RCU grace-period kthread stack dump: [ 451.698102][ C0] task:rcu_preempt state:R running task stack:28320 pid:14 ppid:2 flags:0x00004000 [ 451.711717][ C0] Call Trace: [ 451.715627][ C0] [ 451.719132][ C0] __schedule+0xcb3/0x1700 [ 451.724479][ C0] ? release_firmware_map_entry+0x190/0x190 [ 451.731707][ C0] ? __mod_timer+0x865/0xc00 [ 451.737328][ C0] ? task_woken_rt+0x30/0x1e0 [ 451.743009][ C0] schedule+0xbd/0x170 [ 451.747876][ C0] schedule_timeout+0x159/0x340 [ 451.753684][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 451.761110][ C0] ? __cfi_process_timeout+0x10/0x10 [ 451.767511][ C0] ? prepare_to_swait_event+0x30f/0x330 [ 451.775100][ C0] rcu_gp_fqs_loop+0x2ed/0x1100 [ 451.781688][ C0] ? __cfi_rcu_implicit_dynticks_qs+0x10/0x10 [ 451.789285][ C0] ? rcu_gp_init+0xf30/0xf30 [ 451.794773][ C0] rcu_gp_kthread+0x99/0x390 [ 451.800662][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 451.806858][ C0] ? try_to_wake_up+0x622/0x1250 [ 451.812843][ C0] ? __kasan_check_read+0x11/0x20 [ 451.819260][ C0] ? __kthread_parkme+0x13a/0x180 [ 451.825499][ C0] kthread+0x281/0x320 [ 451.830435][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 451.836636][ C0] ? __cfi_kthread+0x10/0x10 [ 451.842107][ C0] ret_from_fork+0x1f/0x30 [ 451.847372][ C0] [ 451.850957][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 451.858568][ C0] CPU: 0 PID: 5449 Comm: syz.2.1848 Tainted: G W syzkaller #0 [ 451.869155][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 451.881204][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 451.889397][ C0] Code: d0 f6 90 7e 65 8b 15 d1 f6 90 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 6c 0b 00 00 00 74 4e 8b 91 48 0b 00 00 <83> fa 03 75 43 48 8b 91 50 0b 00 00 44 8b 89 4c 0b 00 00 49 c1 e1 [ 451.913216][ C0] RSP: 0018:ffffc90000aef980 EFLAGS: 00000246 [ 451.920482][ C0] RAX: ffffffff84186f88 RBX: ffffc90000aefa88 RCX: ffff88811c685100 [ 451.930029][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.939556][ C0] RBP: ffffc90000aef980 R08: ffff88811c685107 R09: 1ffff110238d0a20 [ 451.949099][ C0] R10: dffffc0000000000 R11: ffffed10238d0a21 R12: ffff88811c685100 [ 451.958637][ C0] R13: 0000000000000000 R14: 0000000000004000 R15: 1ffff110238d0a20 [ 451.968200][ C0] FS: 00007fa23dd3b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 451.978893][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.986782][ C0] CR2: 00007fac883f07a0 CR3: 0000000137b7c000 CR4: 00000000003506b0 [ 451.996316][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 452.005844][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 452.015370][ C0] Call Trace: [ 452.019279][ C0] [ 452.022760][ C0] bpf_test_timer_continue+0x138/0x4a0 [ 452.029275][ C0] bpf_test_run+0x456/0x940 [ 452.034638][ C0] ? dst_hold+0xc0/0xc0 [ 452.039583][ C0] ? __cfi_eth_type_trans+0x10/0x10 [ 452.045796][ C0] ? bpf_prog_test_run_skb+0x7e5/0x18a0 [ 452.052417][ C0] ? convert___skb_to_skb+0x40/0x5b0 [ 452.058822][ C0] bpf_prog_test_run_skb+0xd64/0x18a0 [ 452.065231][ C0] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 452.072164][ C0] bpf_prog_test_run+0x3b4/0x5c0 [ 452.078063][ C0] ? bpf_prog_query+0x270/0x270 [ 452.083956][ C0] ? selinux_bpf+0xce/0xf0 [ 452.089218][ C0] ? security_bpf+0x93/0xb0 [ 452.094591][ C0] __sys_bpf+0x5ee/0x850 [ 452.099674][ C0] ? bpf_link_show_fdinfo+0x330/0x330 [ 452.106087][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 452.112813][ C0] __x64_sys_bpf+0x7c/0x90 [ 452.118089][ C0] x64_sys_call+0x488/0x9a0 [ 452.123458][ C0] do_syscall_64+0x4c/0xa0 [ 452.128716][ C0] ? clear_bhb_loop+0x30/0x80 [ 452.134288][ C0] ? clear_bhb_loop+0x30/0x80 [ 452.140051][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.147105][ C0] RIP: 0033:0x7fa23cda8fd9 [ 452.152372][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.175865][ C0] RSP: 002b:00007fa23dd3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.185923][ C0] RAX: ffffffffffffffda RBX: 00007fa23d026090 RCX: 00007fa23cda8fd9 [ 452.195482][ C0] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 000000000000000a [ 452.205027][ C0] RBP: 00007fa23ce37fed R08: 0000000000000000 R09: 0000000000000000 [ 452.214558][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.224097][ C0] R13: 00007fa23d026128 R14: 00007fa23d026090 R15: 00007fff33ce9208 [ 452.233645][ C0] [ 572.142928][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 220s! [ 572.153090][ C0] Showing busy workqueues and worker pools: [ 572.160119][ C0] workqueue events: flags=0x0 [ 572.165696][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 572.165723][ C0] pending: kfree_rcu_monitor, jump_label_update_timeout, vmstat_shepherd, psi_avgs_work, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 572.165993][ C0] workqueue events_long: flags=0x0 [ 572.199814][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 572.199839][ C0] pending: br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup [ 572.200027][ C0] workqueue events_unbound: flags=0x2 [ 572.229668][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 572.229692][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 572.229806][ C0] workqueue events_power_efficient: flags=0x80 [ 572.254804][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=8/256 refcnt=9 [ 572.254830][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, gc_worker, reg_check_chans_work, check_lifetime [ 572.255098][ C0] workqueue mm_percpu_wq: flags=0x8 [ 572.290898][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.290930][ C0] pending: vmstat_update [ 572.290953][ C0] workqueue writeback: flags=0x4a [ 572.311569][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 572.311598][ C0] pending: wb_workfn, wb_workfn, wb_workfn [ 572.311732][ C0] workqueue kblockd: flags=0x18 [ 572.333493][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=4/256 refcnt=5 [ 572.333521][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 572.333653][ C0] workqueue usb_hub_wq: flags=0x4 [ 572.361715][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 572.361744][ C0] in-flight: 537:hub_event hub_event, 359:hub_event hub_event, 861:hub_event hub_event [ 572.361888][ C0] workqueue dm_bufio_cache: flags=0x8 [ 572.389410][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.389442][ C0] pending: work_fn [ 572.389524][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 572.410242][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=7 [ 572.410271][ C0] pending: addrconf_verify_work [ 572.410370][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 572.410427][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.447056][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.447082][ C0] pending: wg_packet_handshake_send_worker [ 572.447164][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.469628][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.469659][ C0] pending: wg_packet_encrypt_worker [ 572.469679][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.491481][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.491508][ C0] pending: wg_packet_handshake_send_worker [ 572.491531][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.513900][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.513928][ C0] pending: wg_packet_encrypt_worker [ 572.513944][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.535707][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.535731][ C0] pending: wg_packet_handshake_send_worker [ 572.535752][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 572.558127][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.558161][ C0] pending: wg_packet_encrypt_worker [ 572.558182][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.580078][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.580103][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.580138][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.605560][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.605588][ C0] pending: wg_packet_handshake_send_worker [ 572.605611][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.627860][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.627886][ C0] pending: wg_packet_encrypt_worker [ 572.627901][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.649651][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.649680][ C0] pending: wg_packet_handshake_send_worker [ 572.649705][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 572.672002][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.672032][ C0] pending: wg_packet_encrypt_worker [ 572.672050][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.694101][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.694122][ C0] pending: wg_packet_encrypt_worker [ 572.694136][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.715928][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.715957][ C0] pending: wg_packet_handshake_send_worker [ 572.715981][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.738267][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.738299][ C0] pending: wg_packet_encrypt_worker [ 572.738321][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 572.760377][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.760403][ C0] pending: wg_packet_encrypt_worker [ 572.760419][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.782478][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.782502][ C0] pending: wg_packet_encrypt_worker [ 572.782518][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.804241][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.804264][ C0] pending: wg_packet_handshake_send_worker [ 572.804284][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.826522][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.826549][ C0] pending: wg_packet_encrypt_worker [ 572.826565][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.848305][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.848326][ C0] pending: wg_packet_handshake_send_worker [ 572.848347][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 572.870648][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.870683][ C0] pending: wg_packet_encrypt_worker [ 572.870703][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.892836][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.892864][ C0] pending: wg_packet_encrypt_worker [ 572.892885][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.914638][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.914660][ C0] pending: wg_packet_handshake_send_worker [ 572.914682][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.936910][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.936935][ C0] pending: wg_packet_encrypt_worker [ 572.936952][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.958743][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.958776][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.958811][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 572.984567][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.984596][ C0] pending: wg_packet_encrypt_worker [ 572.984618][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=221s workers=7 idle: 1026 479 322 6