last executing test programs: 5m22.06587617s ago: executing program 2 (id=549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) socket$netlink(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 5m15.614303262s ago: executing program 0 (id=559): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=@base={0x12, 0x2, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000005ac0)={r1, &(0x7f0000005a40)}, 0x20) 5m15.361611468s ago: executing program 0 (id=561): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (rerun: 32) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000580)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x4424, &(0x7f0000000340)=ANY=[@ANYBLOB="6eee621c67757365467265ac720069643d9892bfa4f510b21be71b0d4507a1fd172fc388d1b5c5d2b018dded37c94c645262f6afa204ca26a1c5a1865bcc5f6f154d34673a05bc7e89c98e445fb41e583ca48f90c76db42b0c50e8754fe90823c977a123e56a08ac83740af3baeeb981e77aea881498b41977482bb5cd498d0c4ca43bb82cc5fc75c2afc72d40c7fe5d30dd91b57af7a44da8dc4d044e095b40074dabd5b0fd128c8b8d154c23add087322ac686763cad64d4ddfc0606c0827cc4a7b184119ca62a3683bf83411017d758eace9fa67478d045", @ANYRESHEX=0x0, @ANYBLOB=',nfs=nostale_ro,dots,check=strict,nfs,nodots,dots,dots,dots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,sys_immutable,dots,nodots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blo', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="2d0000009058", 0x6}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/43], 0x40}, 0xfffe) (async) accept4(r3, &(0x7f0000000200), &(0x7f0000000280)=0x80, 0x80000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) syz_pidfd_open(r1, 0x0) ftruncate(r4, 0xfff000) 5m14.941992638s ago: executing program 0 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(0xffffffffffffffff, 0x372) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 5m14.708831425s ago: executing program 2 (id=567): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x1200, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) 5m14.667894326s ago: executing program 2 (id=568): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{0x0}, {&(0x7f00000001c0)="9a", 0x1}], 0x2, 0x5a03, 0x0, 0xf) sendto$inet6(r2, &(0x7f0000000100)="1b000ab226911440baa3f100", 0xfffffffffffffdaa, 0x4000000, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008000200110000000400"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) recvfrom$inet6(r1, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r3, 0x5414, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000380)="57199b7dba1badae5f0a8f0d139bbc1a2f52260f3f8520dfed7e47e81dbccd36e10150074b81cdbe05a410638b1ea5b98938abfe1506da8683b3c3742205321cc77a7e224f710000000000000000", 0x4e, 0x801, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x430002, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) getsockopt$inet6_buf(r4, 0x29, 0xd3, &(0x7f0000000180)=""/203, &(0x7f0000000280)=0xcb) 5m14.007553102s ago: executing program 0 (id=571): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x5, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x1}, 0xe) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf254a0000007200a800f1a2fd8ba39961c0fb0e231028b0e94daeedac08f83fbb3ea4c32b8c1834c23cf16b5f2be2ed6453af0cfc2cc375d5f45b9e6dcc18da5bdd692593d26eda95a13ca8b94d24fff4333511a1db8828d24b65c088796fa3509ef12e3d0c375133c80700b5fb0887fca89fc0fb1ab2820000080003000200000008001300020000008acbba9fe87610324175fc0637720e6fc2418c84a5fa496fb487a28847bae14739b5803ee5ec2416efec9ddd2c09369b"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x40018) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x8) r4 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) write$P9_RUNLINKAT(r4, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) setresuid(0x0, 0xffffffffffffffff, 0xee00) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x2, 0x0, 0x8000000000000, 0xfffffffffe000001}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) close(0x3) io_setup(0x4, &(0x7f00000005c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000700)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0xb1c4, r7, 0x0}]) 5m13.833058386s ago: executing program 0 (id=573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002400090228bd7000fedbdf250800000006000400000127d1"], 0x1c}}, 0x8800) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="ac0100001900674c0000000000000000ff010000000000000000000000000001fe88000000000000000000000000020100000000000000000a00008000000000a6ab5bd96ea737a9da770f0f2b19445ea7748174926cad4a52e6c8463ef3f76e2dffaff036d956de9ab2f4653e8c927bbb5547418d17ffbc3e7ac4a77936bd29623cd27feb69eb31dbd342aa78736d6a56032daa08bc8934290eaabd1c3902395445bc5af603ab71094d25f8bea06878c005bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1800080, 0x0) syz_emit_ethernet(0x192, &(0x7f00000007c0)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "ef14ee", 0x15c, 0x11, 0x1, @empty, @mcast1, {[@dstopts={0x33, 0xa, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast1}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x7ff}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x4, [0x4]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @fragment={0x72, 0x0, 0x4, 0x1, 0x0, 0x4, 0x67}, @dstopts={0x16, 0xa, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {0x4e24, 0x4e20, 0x94, 0x0, @opaque="ff319d23aa0813982340097650e12156ed56a54b0dfcb0796a9fc0049769b25742ed934235856fcc6c316dcea961bba020e83c9e5d3586cbb37099f80e8f5060b2779fb01af7a1d5dd5ba1a02746cbae734128326bb91244a21935f6f25206008b134fad3de96bee6ec4bb87900e62f1bb6a18c6751aebc169ceaf0386b90ad214b3810c322b8236da40f133"}}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000001980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r6, 0x4b40, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010006000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="000000062960b12231664cf165586d00", @ANYRES32=r5, @ANYBLOB="0200bb22", @ANYRES32=0x0, @ANYBLOB="040001000000000010000100000000002000040000000000"], 0x44, 0x3) futex(0xfffffffffffffffd, 0x6, 0x2, 0x0, 0x0, 0x8001) r7 = syz_open_dev$hiddev(&(0x7f0000000140), 0xdcf, 0x8300) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000000180)={0x1, 0xffffffff, 0xf9d4, 0x8, 0x0, 0x3}) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @random="8ad5184351f4", @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, {[@ssrr={0x89, 0x13, 0x61, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x37}, @loopback]}, @ra={0x94, 0x4}]}}, @address_request}}}}, 0x0) 5m13.725934739s ago: executing program 2 (id=575): syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0xfd, 0x10603, &(0x7f00000003c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x32, 0x0, &(0x7f0000005ec0)) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x4, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x6d276b17) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000011c80)="eea4d4c5cd4b062c91e214c75f66bf4bb53455ef326df729e1050ee6d3142774b719f9c51284b2016db04464103a8fc04c437c52a3924ee42580a795afbb593de89f9a95c4d694d8bbb5e3b413f44de6e4ddd78fe13c3b21dcdf2d8e31b73396c9a45222031da95a844b45cd3d5ff79d5c3b018a680fad7f47d1d3a06b1d4c4255c29aff931799d6d172115e34212cf869849655f5eeee3f9baf8b7c03fb6880696818a2b98666da2d6484398ea6c26a455cbf0e29da9f2d19d56fa96df2e200e8997f89933014fec30753886c5faecb6e81bdd69c5c58647290d8f922ea21ba15e138695b33123d13ee222522a28e19d9b6bbebab2c10798219eb94263b98089112a64482e03014aacac1ece8628727034235a39b5189431f9083188d594cf8af503c26ef9de748b927c274a83325cae5532169872b9b3d8ff93431dd186b3c73f9ac958fceb29d69f618141f375555bedabb8bccb5a2e91fd6315ecb9f6cee303f0d999fffc4f11026cc9c26b528d59baa820ee5d4bd310a3ef7f4474d0bdb257c23729579d372beeea7c4f08eb7950cebe396d84ae318c14b4629cc42f17e13606c4735baba2b8a5693e7542c2cc3d2f9e8c01eb78fb986d4f1e8cbbf4c61365730dbe94abb256c0370f7d5652c14862d934f819a63420cbce813e19d7271c30f0f75be8208f78d94306a32b9a590d9f1a72751c0798179bdece091faeee4ed26020d66f6e158fb13126f1b37b1efc9954c1e0f54999c2910a1f5468882ac0a50847c1079f99254c08f7b494d192170769d406baf861e4aa5ff57f32714681ccc98bdac2188d2cf5e583c4643b850dbd961f7adf393ef0f18258035391a44f9929f88d6d3e233cb339d91c48bea2222862e40069729a6f71f0da0b04d2ae0ee956f949298d62ae10104072fd60d571ea2cfc704e45ef8f26684567f49cba035a680a76c6c229fcda500591e1928d65beaf04e8470db960bb8e4c49e88c2f667241becdec7121305cca12f47c25da89c37e199eb97c902f640a3db1522a781d7202d27671a7034b41d1a1d340d96dbf659650464acc2a4a6181133669a390ff9f19461adb79aa7e6fdf67b8653653341ad342ce70524fb2e6bbc7f62fd379a88491fdf4f24525ca47c990d54f553f02dc82620d868de6c232cb9b1666a082f03a8dff8737eed990d6dca22fa8140ed1ed8b843e9bc9b0aebbbf27f77df4c4a62811ee3d8dd083dbad0050de2bc611d862f353bda601701c34e4c2aea10839a725eac1edeeddfe3cdb993b5d4d617103310fff7c02ed5652316807f1f9b128150cb385e96b782c8ef0b7ba38ed59e8a7bf1324c5c0e554175ff03cbf88a07581569838f4e4861ecbdd8540a79c75d5ea0ea3301c19bf91c52fcc1e87c539e8325c0aa7713be0a88f09e05936acdb7b36dbab705714a33327ffa47e65f268ca93c63a19abe1ed84dfa3aff6560925e0b08e1b2b2193d71217bd7e6c23bd3b59b8a72891e76a32a91fe9e6292e48e12bec81c99a079b2665f188d8f7babc76616003d3ee5a2e1606b015497ec6b0cfbe221abcf31b9edff6756f94d5b1de8662e1321e51e3acb15961dfe2a0eb629ce16e0aea02e38717a324e5bc64c9564696b6d0aac45b5d4f26cc153ca95780432f311109f17ce640b2a88cd1186dce83f34dccbcdab194800a4c47c53c6c3d8ebee5ab2c2e55229a791e0148cb0dca819981c1b7a08203e4221751390c857e3ac2ade44aa892677ee580bca790558a4a84cf4107ec69997c5da6bf403f1bf8aaabd25f488af5b71b7fcee74f584dd366ded5aed61237193ea00d87f54650087fce8932cb1250a9ab5e405defe9eee2288c53024ce90792b5176ed1c072e84987b52d36c0b74b540a521d2a27978b48c10eadff54300bbeae71b7d33aac48841a35d706542a292648507841287fd86a41bf4d4b50c7de95395e5644d75d3af821ca7dc484ecd235fc74302da7e8d0ceec4565fff8df0528bcd1eafe8691a41e8559734942a85ae944115987b0530ff8134359cf1091395bcfe189753ef0c081dd55d0c950fb768b453ec5fb7fbcba60f234d7078969ac35b666162e5216e6d3dc69fc8515654683740066fc13d7bd9da7e1f898b638876065bbc129e804ddb6fb4db5cf3073ef46ffde9f1ec74238cd20bfb885d531e66dd39a6086918835a7bc0e9de8c3abe32c7d55f00dc4b4def07e0115117bcff6d6c8673bd5ae978664b8129b06325902c7348a372af058381231ba1127de31f33bfc896bfd735e3456c407da496fab44aee1d6616c41a09ea15ebdfc011ff01c16ab27f418378e890e4b024d6876725ba5a7510bd4b0fb0a6641ea7196566c5704ef0c6e1656c631b1ead8c73f8a006a3b8ebe6ab3f6314e1a7fe55d4727acd660e0042693067703cfb6355e16b22c20195235512e4ae0cf56e4be97ff2b44a837d4b71eb8ac5b2f4742603fb10a6cf0c3d8eb5bc2832b7d3d7a934aa74970c295aa3025a3956b5800cce8f2f29a232ed8231e48a24255c361ba391a7299e2187f413c16644b337fc77c066ad4b42a6470d6f1abb941af42c7314dc0458955afc75e84a7290a4a2309c32be56fca0e3775cc5923d365f411c0e9875392e2abf28f24db39776a0c40e2ce140969a2d3f91eabcb70bb45c121ab3599b6a06ba6c4835eff5e66a291a90e6fd7f0c71360a9b774fb75e3f22660b19aae049a418e1510bd0632dc47a944922b6f11325da1b05156fc2685bdd20f02c098c82b6f85bf18ad468195603ec5685056fbb17140c32eb158454f12dee1458ef380aede90b15977b88a388b85e8f11162731cdbfd8a94ac14d4b6917d2a1b9cb85038901f95ada5b3d9d2543739f296eddc9d4f945a06a703c7d5f6a5636b4426a81383c38eeec9bc9377a302e790c78b026b7e107d5dae17379620f59471fc530df44e60601ae6fd200dc038832f313dc2e5aadfd923d7c570bb00c7e7daebbbb4ab98417ead218d831be843bb1d1eaf469416d1e2e26db3fa00c9a2d971928699ee9b9931ccb91c4212338b68eda9c3828a5c4ec331d94efd131b7192270f84f96c971a37722ea0c1148b888b28c425a446e34445499ae43123348fcb764c4c96ff7450edaceac2f9a9e3f238d31a9ad227d6a434a0ef0ea2c345fee014165c580bb18d677e46b5608ccd9bdd3c57cc5bf7213a3668ba738d4b2395fc2adb9308d97922f269910a3b2b8cd33f14f453e7da38fa4b246c0077c013a251b9e7f435043a26054a0acda6ce5d0a6529a0a23d6a3fa3ecd1242aeaee687269cc5f5f8a2da016484214bccfd3e1504cd6d23c0418613f2438f632bfb3293d760dc27be50c666d658353fd69162668c8a4c3eebe4ecec71991cb7a2fc561aba565562921e0862f41342e84283534396a45780d5b5e19000a18ce54c593c17642aa3b6a090bdffc1621c68078075d4e8b6542f4f4b37ade8003cb428427189d5964a027c896e2e5d36a24d46b9b3f8562899a55a649c36d6f99785b7e4f6b159d6e6cc14b4dde9b3783903d755564ff0d5fec17137b6c5b34dc69cc9962a33e4d67ea5c56ad75364af36eed5fd4e478282799ecd5668b39845965c78fe90d9bd5ffadbc8f476ff802e86aeda5d80ed90aa200d3a5a6550d54b692501cc9ad4e5ff41d214d5489ae53667441637b3ed27c661b3aaaf456e97351510b6bd99f3264a427f6ecc9ecd01513ea53300cebaf1934a0c0741c972bc36fbb99d41cdb7bf242125da5d35e5ee1d2d8494c6cf058949ff0f38cff4b561a493ad8bb66a885f1a9be792af105ee6295dc44a573e7fe4fb3ebb92fede7474b88cf4529772107909cf4e98bb1814e5e6c7ac3ba6813f6bbef68d5c8312e1ed5253e08f70500244441d3053a18a5ca6da1cad3f33731ef4b978ca1dd00d29d4090c707160ce4d573ba85a3cd637d3ad114eb3e57119d9ea349e1ba8fd5d7a0008464affe746420ec49b778e66f1c5f6173db366ee08a8fe455fb9498f1f70db0ebc6feed20fe58ef5723bc8b9b7bf2dcea658a7aa7b0692872363159b7d816e9870c607c3f1e47bbf5991d944bfe8214f0348010603d771cadae731b48ca64a038c63c1d27f120a3535aa60a8eea4dea206a20b374bf08e631f60f3ec9fe394d4a4542159bcc8a7634b6493591bc0b39fb9977af9d92ac9e52d8d2a22133c5918bd3424267ffcd0ab621513c73db505d61e197f9ed65df566f541e8b472bb113c0081039008135d7321eaa09e6b54654096ea84e6f026b725d41ed2df86d7b5e2f281d8e2ea13afb2b93a2c393815a94addf526c6901d988ee9905a798b5f161f9b2349307496625962fb514a4aa433b3009d73988da0a6abfb717025eba8a9edc8978a4dbb1d5cdb2f12328292f7c5325dac44ec93811c45bb26888f56815658018b2e2550417069db88134c8a527fbddff2488062be3ae372f1d770a038e7b228c0a7fbe1cbcce7c95b15b8636703cbf01d0ee1e0ba6d6f850af6c9cdef707976eca14d0a60014e132f353c87851afb19bb8bd547e38e0917f613d9c8b2f6c8b0705414ec00750c649b5ac9ef148e97bef034f3e0708f1ab76a56dd3afaeb0190bb5a4c559681168cd09f1d9a60d83fc19547d396915d5d8259ba9454ccf9f8ed21a0ef6f5041530c66cde23d6c0013a73cd81762cf0fee6d4b390badaccd363e2f8d98d60a2668dc814b738e7146ddccd7c9ca6fdf5459e6bf7e642c37f687938f0dc49bd1e5c4db4e12fb819282c69b07cafd6cb0d6d5a54de23fab6600d2a2cf0d123aebbcc4a0f8fdc0620392a40be7fd48ff3b760f85838570c68a5ac507ded98ec37183d55a0058c835974f25658eafb0a4e0112ba112ea35283e76c03adeef1dc76eb0dfaa4dc4ad89fbbd16d11d961d549de725b129cbb2bef51d8ac1207e7db9c2a2e79bf13ad3c2ea01f911b27758ec5dca4ff39650e76f39181afb7fc3b405eba5c5c517124481199cf2a49cf3a63de3f9a17780bc3f012e357d93e2ef049b3ef5a8c116b3d555076bb38f681b7a1938356ee13788e01f9785bd47cc635813327a7103811376c0b383ec50bece63f6cb711ca9c535bd2f9fad475fcf67d2decc537543865eeab891788c721876feeb52f6b9e2ad2d99d23774754773eab5101b62900fd2861b5555b0dec8c9959e30d279a655fa71882078232ec8551771de6194d90bd7cdd014fa3e5b627b76662f6a1c7e47cb264471df8417bcefdb6acd00bc403ed3947c2cee70d46d7ecb839fe4b36b0633dc1a2edf53bfa20043e75fc506c2adc47555053db2fd7d0aa1e13cf3a515d97261da0ba99c2abab8ae5823b84593aa094eb34e730408380961a36f725a2bd0bce1e034f19213de46eafe063e310dd0acbc44c41c294e381fb836e729470c9ed4ef7c874ccf1c24e47d077a8f449a0a3b0078f5ae2f44ae7cbf44c8a34d31db595e4e71acb514a7ab0a24f978e2feec48e3cf1e08df6edca7a2fd633b2ad6cffe1bb2b6b18966ad1307e54f2ca60320af906b06d24a1cb1208a4c842009cfdc49dd34c8228bef0d55616ca9573b5627a06efff96656ef05911f865132ba7b988a3bf9080b82d2ea70401137142ef8cc59c6a8d6f4a51f1f87ed481aa4d6618d211340e22cc113a37b91056e5ca9536304f33f1ec1845fa69f484322d6d48c4532353ce06002badb56996452bfc90016313b96715bcf02b96968523935e4e6a5943e77f2c4333ee7282729121f520478956a6bdbf108633174633e9bee63e3369c5f7a39e1a7eb6fb79d71f88a11e3fdd8a7b2668945e0ce9b3c696544de38315b2270b20dc82bc37130c52f6e691349ee9edf670e9e59b19b514707f319597ea987e5fe54857351cbab3d3b58e3ebec83d371b9226519cfc88d211e849b873ba98fb0028b9092e815789e7ffe910d50f0bf9ee74b0fdbaddcb858381a73e51b5c5e9d9fa6adb5bf6d63fd53a4a8fe02f674f48b8097f4ea616e2b642ece10a6faf399df4b69ed930a3cfe637c34e634143c6995930a89dc3919c1d8e802fe4ed58c13b842f04cb4bd1027a4b6afe06313034a371ebb643652bdc8ce6e3e10cb3c76ad76f6738bf295d43653f57622ba3a106b656398a0bdb2abc60dc68a593855af994a2fb0ab63755bc303a2b010a8acf264b7ecde24f61098d9659d9fea565eb3b35c03b3ff997df46021aad888417f0f70e3b615003525159f3889993ad02aced2d1f9217d9f9b9957863900ea063aed4c0128a2bd9309019267836581c0dcff5abd893e89fe4cd008b0631fa5c23b21845e31d03e0ea8594142cd306d66af3e314b9c60b686b800b2d01b19602eff2c7da57f158a5c616bc7387e7b77fc1da82aa615e74507f247be580b32eec03765f96b2a671b0d1d57c01e6d4c112f1248058c218218de3ea5c218133e299fbdd4867a0e31f6ded344615a5f31486b9f0d0b55b9f0a6d47664f5ddfd660b6a92e54ca21c169213dfddeeda29560443ce7af39826773c1b4eb71a22b619ee5d2b95ce5bcf8e574aacb87e99d72ef643dee8d2c4b9a7ba7b8f74ea992e9eb51c91f5250e2b056c6902cf2d9506917d1c80f7013516f5fc285c4e27bf8b8e12cf3a95aac4da5d53f103d93445e91d368765b5272ea9141275307bfa1c7867635a688f66e4036a0d243bb5364d8e9b5100e4acd392275d94b03f6d89afabe0795b058fa540eaf61152d80008a5ea759709b6e42ad12bf26755079fa71f1c6968facf8f624d0b2eb60d95146543f3926d9750e76885fcbc503185bcd6bfaf7a9d01efb030519bfd30f49796dddd8cf85a85fe5b742d28c3f06341d19806025e333fdf93988cedaddb0743a2c923ab0e0d055d2bc4980b09a99c50dd406b0f0f8b1880370f86a2b05375350f900324b568c3ea3f4d104c1b42145bd35d3449b89209462920f17f1ede0d38584359d73f6af2923f6c1b81b7f7013d3822220c284cb72ceb5c65ceb7b3afd4235bed49e4c6687fd3e0da7585c1c84dc7dcd6f6f9c6e279ca6d140dce0a220d09e098bc63bdc10d1beb699703038a189cd7e12517ddd010558f8aa72892b9c5dfa51349e6b0a32ad7619f616795aceb308641a6d47bd2f702e65274e98670579a072b859e2a45fa2a4deb8b942d02de9dc5c9629955a8b8d4459a553acaf88bc7fea4ef1de14c4020fcccb15284e9f54967f8f7ec2759b27b01f342b22052ce080a16827a5b51e70a39ae7332b5ce4e01fad4559acf446b5797ef002717c6f410fbaeb7203e9d6185c33109bb8e911bf828a4424d54269871ba5b4242f91659bd2ebc6691233117517fd9e225f255712d3541bfe3a9fdd7dfe1883114cbd7de2c124b79106b1b321f8383dc0ad30167ef4612073842f2fd4e2faf68ccd06d80cb61b404ec3da4cb4c8e26bcc7499996f7a30f36727f4fb7332a176f046c065a4532dd72a3335dc8128aa680a451ee07ed9e30a15bb5eb39d59c3bfcb55999861f766f5fdd5be1871f308f66865eb6ec51b77f92e8f892d4600e505699b868b814ea5464b39a3a548c666df7e9ea09661476aa846879e6dbe660e6c3c3a45ce9fdef516d8ef6dd3ddc4d2ce6a90827f276282780ea742be14a5744dd29404ae2b444ee67c2321f2bd3dc93ab50599d82cacfab2855222d4e91d65f2e39b02628f8d6b49d9cd353810c9ee21f32a63be8f2c3301b9ad003c5b0dd6c87bd2d36f73a51e150cde807299c78ed92dab11bb41f97225a0428ec5342a6263430800811f7f26ac870fb2d324a5e7bcbabe12b41dd00aa6c97f683ceeb3e0e459ad482f1da507a4fa165128e244eaccf6706aa3e7c683e05bf5b60492577595d3353251263dbe81568c434bf1aaf11c1bd7da76162f66c6925c0d4abf4333d5d71a86bc0ccea73e24faa06aec0caa6535924d1048ff5106b4284aa8fe4160e9589a3b0e90c27c090350ca4be3c85c24d596f8f8c703f9525e960eedf232fc2156c1a60c2f9a1aec5ab2f6e552e35e3d90a2c1ee7a77da787bc6bebf4716d32ce7649e464816ebfc80aa1624e4a5e87b1b222a56f8ff1cda1c4f685ce8200e1943f857544f30946aa76ecb80eff5e519e3c8c7b37f20fa77b1f11535ec08c7814aaa1a52bafce4f4299a18a711673afe2c3c29c003a9b34b81d96939eeca6a1bdc5c23ae86f9a673b90c90ed54dc5203438ef46b0271b105ef89e3df26fad80c19a3ee5d651c8e14e71da8d7fcda854643035ba155876e220585bc182eeca18dd912bfe73c217fb59a6ca8b213a1bef05a70a3f6363dc20e6629f6239d9d73aabc05f7e17366c68b39ea04cbc1a8a96b2e678ab9d873dc91b452046795b788277a7f2f6af02e09e7280cae80d0fb39648742306b279793396be3e04cf647f8c7c9173e433d2fbe25b21f6c0775bde641cb980aff9db2bf32742f17d48ae31214a550f0ca35fe05f5b98a134621cafe68b9c6778eb6d1a89301fa1cd0265433b7adf876e2f7ce17669ae3e3d273b5437c96e472470fb5bf7a465c6f01b4875a2e893e9ea94d6ef38d18c7018a03ccfc5d46400aa2dac9fb6010c938ebeb2ba4cde616ee78002086bdd4600c7da6a5c3f5a73b5f2056e7323e6765d2dd026f4dd84e43947b208c33e531b868e0ce16995c3bebd6cdc736c83924f2a98775f48608ad92afc1ab4de2bc14b752d868886a6a1b26a9efb7f7472280ffeea713473e8ca060c8a0e786f5232df7adf60286c3a40f54e5358a56f49c4325575dd414d1107f1e0e3d39cec5b8341c5edc49a0bd3e5a163777329e36624e0cc86a48d6974eebf6969bb219bbc2933e6afbace717f7abae59b7ce2f40548bc86805892dec552a5fd29718c1be035608ef7fb38491c46a7fe6f16ad236832d59932ae946e22ae1352aca5dfbb240146c7143a7acf27540b39597a86a391fdc8123f9ba01e640559d9449e36f24a2cedc5a18e1c0359896adda6d990a9848aef9a5e8866e371eafc18e1a2d3beb6bc8801cf4444d5d7a047803a824e3c7c5beaaf247bb282275b86f9a5dc77dba8145b5effe63d807d997920db2435c53c246088679c33084740e09841efc361c2e3029d7eb71a88d718ffc121e2855b8fab8ea1fdce2a4049cb6bf3c1166fa0c8f08fbe77b0f83152b811314347b0bcd3be22a3fec69bd4b693451f7aaee0929705c52c88a02f241c5a666b06f1f9eab702497a5f0a3351e9266db0949e5c81678613a493900b28273976acafa3eac0b29e73645d5b7bc4c6aeb98b3141128f7f8a2995108d8df98adb2ec24c87d0d3e266f2c410c36b9b1a7c6317dcb85ae5ff299efc755b4a86a9006dd1c4b2b8c02369cebac707d2587e3810d90d23ba061332c92cc29adc9dacdf312089ddfeca631b83781c17bae6be6a8931151071860e09cc024f614a78568b5b3026527c2ddcb4a8ea1cb2a08a5edf0760a0dd2ca1a383252762d2f97263baf6d39daf63e7473941306da4acf70dbc51467329a6c3aeab311cadde38c0040889d8cf3582f333181a2736d6f959bb2ce20e4bf826dc7e1e335029874d427568fee41afa2352baa604af9ebc1417ee2366f07a7f604c1d967c29da88776d91de75c109390da6459adc8981d4dd1c2f181959804b8f4644f3636028f7664eaa671230ff5b2479b35f56af3a9ef701e74a45977e6d228dfc164da27edf34eb16d561ff93bead602ebbaf1e5507390fd94ffe974351ce98f583f8c5b60051ef9e25367fefba462339e8ccfbdb5708ff4bbf32ddc5699822cca9e297b297e7e13bc9a3e2ab9cb40283d61b0b9df07fae7eb065a0cf5d45c65aca794a7939b6fa13c8bcae3a3186b12c921e83b0c8b56a5d5fd3d775716d19a3cf3b1174b17a8498543d8bc8c166221f995b56985f615f1b8a022eb546102b078f761a0e745676f2344cbd3281bd6301dfa79bed5c8f948355003fd4de5be636bc438267b945ec30ede488d3ffdaf0f7ab387af705c8c139fdd136d779dad696d45853397a0530d5414a5da13108630567966226c3cb1de2f0868cdfe0edbb7e798cde5069c2135c4eb54c897758d98f4590adadb2301e118386f69eef3f14e7416043af602f60484ffbad3a2e11803768e7552131c5179d57b168c10149c6ad627edd89695093db7a827e65963c7a89be6df35b1e32025e9ee0809b0682b42b22d39066e87628afeb822952871d6830298441514b91343224a1cad1f43799e4f5bfe01e8d66614a8e7f5db4743bd034264757282f9838ee2186539c3a48752beb9babb7e2d8b7eb77bb28813174ede0b07a92ccaffeb555fa95ed9b5f2361e726070a6de6cff34f79289eef37c5a22078edb12713b152a9823458b27ac3899c29c8e55830c6cdc9c2d6a06c5a6c0deeb1fc8f2a32d3c15cb84f9556c80d878139b7c0e974064186e1d5a1860332a76282282b9b6480b136c23e2fcbe9c475700c6f6b35241fc1fc86459030ab9685aec3cae1188d7d5e7962a97cf8ca7556749ac90f4d8880707fb088b1c3e67afd250411b87b806b38dd211101eb88233891d661ecd2900949d8c09e743e4867b070db412897a0f75078ad83c57b202013ec28ee3b42a33a305a69a4918418187082b0f19b37268cb2217d6c45c64d96087a17befaee1011d301920432ef513dcc4c47f7399b3791566850178a86c6f8ceb75afaf3cc82a9127e12a8cf1e21114ff406aab7d322512c5223509e0f5d5069725b896263a19849a7e70dfd1a199ce222f77f6045ba90e158cbf18be77d85749c64cb0a0380a9c6f5a8768217142c0e6629d5a41c780889978721a97fe2e96964a5058fe4e051b09f1b4b122fa6dabb21a8866770fee558becdbd1c090a812d5a0717035c1ebd539fc3c04bad002d7abd0bfdf0d319a56260063c6891b0a2f876b1e261223e93c786936d9a794462b27e22830e9e02ae1bcd5eb63c647e5d4ef1d01ef089c701409f745abdf48da1587bd37e106d08bbd8880cd16692cedec6d2008d7a0488b9682ca4fcd2db02c81fc6e80a191821126f71e212a039710669ee1fd85d21125f4042ea7a6a12a42f28f73c9c4c3e5eb7db3720dc79c455bbf545b3e6c84439849cbbd28005124b2d8590bab3b291fbda866b2d3aaa38628ec8cebea236431d717b5913f472bc5b6b662417f798ba0236ffc08b9511e13a7513356d33428aeb6b5802c02510e0458509e151572da39632fa32d373fd8cf22f76e4ea8ede9736cbaf1a946e2a77761870de5697413630df190bef591614bb87afb474cbe664d95b2b4335a7c36bc458047b9edc7ec6a3f0ca8ac5c338843db9d2beee8db933bec4aaa112eee6e8fa040b12bcb2367d07257ba249f0538769e315f345e3cc98ed783a8810bd944d0ccb03cae4b909fa6fc197893ea5e75aff3b59f627d5dda9226bea30105651e8a02276442f4770fe1962d7eec5aff68b33b71b51e677deef788e1144dbb16191dcc63ea6374e1eefd1eba61928184752a953a89c4eb4a2c3a2cedb1970602afc752fda10c5f83d6dd473d9cc719e7b39b42922c01e0ac31a6314b411695ab333f38a691adf250765dc18be7c535e356d31aef7656bb4bacf3be0dae240d18d1729d5526d634a00", 0x2000, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000011b00)={0x0, 0x0, &(0x7f0000011ac0)={&(0x7f0000011b40)=ANY=[@ANYBLOB="000000005e7be0a96aea37e31c971acbb84d35ecf45350e6a372e7d355324abd7e88ae5e2fa65e7a37b275ba8b7da31b350fe1618345140472a3ba83be18cb2d477ee6cecde7fbcaa0748896974fc58d607846bb6f35e67498b04979e8b4f00b1c5a93b1d644d6c390fce2a16d838cdb5868f55187475fbf91d0dee6b3c270f32de7680ee010ae85e4e2f9ae1499d97e60bae510a35aff76d1ce0d88e50de8e10ea0282cdb12db29a3e702dce83289f64965e075e408516e33a43556503350449ee9426b8aebbe783fa2462ce27e7a38f7459a3fe320f7fe4dd6aa6cf6fa5dfcff2732a59158254859348ca846ff78ee", @ANYRES16, @ANYBLOB="080028bd7000fcdbdf25880000000c0099007f0000006a0000000a00060008021100000000000a00060008021100"], 0xda8}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 5m13.335401909s ago: executing program 0 (id=576): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x158) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/17, 0x18) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) munmap(&(0x7f0000788000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c4607010106000000000008000003003e00090000006b000000000000004000fff700000000dd01200000000000000000003e003800010007000200010003000000f7ffffff060000000000000008000000000000000900000000000000b800000000000000010000000100000001000000000000006cfb2ef4cdf49e780c9b032dce68ccf12023c6aaa359d1e02d5586569e6c62181fc39623996c46487f906ccf58a0a6b5df0a78bbfd126445c751bc09c9e2544f2eb7480d10b9"], 0xbe) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./mnt\x00', 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000004180)=[{{&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/189, 0xbd}, {&(0x7f0000001900)=""/32, 0x20}, {&(0x7f0000001940)=""/178, 0xb2}], 0x6}, 0x1}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/19, 0x13}, {&(0x7f0000001ac0)=""/47, 0x2f}, {&(0x7f0000001b00)=""/105, 0x69}], 0x3}, 0x3}, {{&(0x7f0000001bc0)=@isdn, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c40)=""/113, 0x71}, {&(0x7f0000001cc0)=""/22, 0x16}, {&(0x7f0000001d00)=""/124, 0x7c}, {&(0x7f0000001d80)=""/253, 0xfd}, {&(0x7f0000001e80)=""/87, 0x57}], 0x1, &(0x7f0000001f80)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/117, 0x75}, {&(0x7f0000004000)=""/4, 0x4}, {&(0x7f0000004040)=""/198, 0xc6}], 0x4}, 0x9}], 0x4, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200cd0, 0x0) socket$key(0xf, 0x3, 0x2) write(r0, 0x0, 0x0) truncate(&(0x7f0000000040)='./mnt\x00', 0xf9d) setuid(0x0) 5m13.106198904s ago: executing program 32 (id=576): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x158) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/17, 0x18) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) munmap(&(0x7f0000788000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c4607010106000000000008000003003e00090000006b000000000000004000fff700000000dd01200000000000000000003e003800010007000200010003000000f7ffffff060000000000000008000000000000000900000000000000b800000000000000010000000100000001000000000000006cfb2ef4cdf49e780c9b032dce68ccf12023c6aaa359d1e02d5586569e6c62181fc39623996c46487f906ccf58a0a6b5df0a78bbfd126445c751bc09c9e2544f2eb7480d10b9"], 0xbe) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./mnt\x00', 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000004180)=[{{&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/189, 0xbd}, {&(0x7f0000001900)=""/32, 0x20}, {&(0x7f0000001940)=""/178, 0xb2}], 0x6}, 0x1}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/19, 0x13}, {&(0x7f0000001ac0)=""/47, 0x2f}, {&(0x7f0000001b00)=""/105, 0x69}], 0x3}, 0x3}, {{&(0x7f0000001bc0)=@isdn, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c40)=""/113, 0x71}, {&(0x7f0000001cc0)=""/22, 0x16}, {&(0x7f0000001d00)=""/124, 0x7c}, {&(0x7f0000001d80)=""/253, 0xfd}, {&(0x7f0000001e80)=""/87, 0x57}], 0x1, &(0x7f0000001f80)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/117, 0x75}, {&(0x7f0000004000)=""/4, 0x4}, {&(0x7f0000004040)=""/198, 0xc6}], 0x4}, 0x9}], 0x4, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200cd0, 0x0) socket$key(0xf, 0x3, 0x2) write(r0, 0x0, 0x0) truncate(&(0x7f0000000040)='./mnt\x00', 0xf9d) setuid(0x0) 5m11.953519453s ago: executing program 2 (id=586): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r1, 0x852dd6c070cd7e4d}, 0x14}, 0x4, 0x700000000000000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/schedstat\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x46000a}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r7}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r10}) read$FUSE(r2, &(0x7f0000008e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x156e) r14 = syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r13, @ANYRESOCT=r11, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r13, @ANYRESHEX=r12], 0x1, 0x14f3, &(0x7f0000005940)="$eJzs3Au0jtX2MPA511qPW9Kb5JY113x408YiSXJJyCVJkiTJLSFJkiQkNrklIQm5J7mH5BY7ud9vuSfJkSRJSEiyvqFzzl/ndL7R9x+n/+d/xp6/MdbYa+5nz/XO9c53vO/zPHvs/W3HwVXrV6tUl5nh34J//ZIKAJkAoB8AXAMAEQCUzF4y+6XjmTWm/nsPIv5cD0270hWIK0n6n75J/9M36X/6Jv1P36T/6Zv0P32T/qdv0n8h0rOt0/NcKyP9Drn/n57J53/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/0zfpvxDp2ZW+//yfMzL+7Rm70nX8ueMKv/yEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQT58JlBgD+Pr/SdQkhhBBCCCGEEOLPEzJe6QqEEEIIIYQQQgjxPw9BgQYDEWSAjJAJMkMWuAqywtWQDa6BBFwL2eE6yAHXQ07IBbkhD+SFGyAfWCBwwBBDfigASbgRCsJNkAKFoDAUAQ9FoRjcDMXhFigBt0JJuA1Kwe1QGspAWSgHd0B5uBMqQEWoBHdBZagCVaEa3A3V4R6oAfdCTbgPasH9cK70X6usCw9BPXgY6sMj0AAehYbQCBpDE2j6z/mIAL/Jrw0PQB148J/yX4Su8BJ0g+6QCj2gJ7wMvaA39IG+0A9egf7wKgyA12AgDILB8DoMgTdgKLwJw2A4jIC3YCSMgtEwBsbCOBgPb8MEeAcmwrswCSbDFJgK02A6zID3YCbMgtnwPsyBD2AuzIP5sAAWwoewCBZDGnwES+BjWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCp/ANtgOO2An7ILdsAc+hb3wGeyDz2E/fPHfzD/7T/mdEBBQoUKDBjNgBsyEmTALZsGsmBWzYTZMYAKzY/b/erHkxtyYF/NiPsyHhISMjPkxPyYxiQWxIKZgChbGwujRYzEshsXxFiyBJbAklsRSWApLYxksg+WwHJbH8lgBK2AlrISVsTJWxap4N96N92ANrIE1sSbWwlpYG2tjHayDdbEu1sN6WB/rYwNsgA2xITbGxtgUm2IzbIbNsTm2xJbYCltha2yNbbANtsW22A7bYXtsjx2wA3bEjtgJO2NnfBFfxJfwJeyOlVUP7Ik9sRf2wj7YF/viK9gfX8VX8TUciINwML6Or+MbOBTP4DAcjiNwBJZXo3A0jkFW43A8jscJOAEn4kSchJNxMk7FaTgdZ+AMnImzcBa+j3PwA/wA5+E8XIALcSEuwsWYhmm4BM/iUlyGy3EFrsRVuBLX4Fpcg+txA67HTbgJt+AW/AQ/we24HXfiTtyNu/FT/BQ/w89wIO7H/XgAD+BBPIiH8BAexsN4BI/gUTyKx/AYHsfjeAJP4ik8iafxNJ7Bs3gOz+F5PI8X8Pm8X9fbXWjdQFCXGGVUBpVBZVKZVBaVRWVVWVU2lU0lVEJlV9lVDpVD5VQ5VW6VW+VVeVU+lU+RIsUqVvlVfpVUSVVQFVQpKkUVVoWVV14VU8VUcVVclVAlVEl1myqlblelVRnVwpdT5VR51dJXUBVVJVVJVVZVVFVVTVVT1VV1VUPVUDVVTVVL1VK11QOqjuqBffAhdakz9dUgbKAGY0PVSDVWTdQb+JhqpoZic9VCtVRPqOE4DFurZr6Nelq1VaOxnXpWjcHnVAc1DjuqF1Qn1Vl1US+qrqq576a6q0nYQ/VUU7GX6q36qL5qJlZRlzpWVb2mBqpBarB6XS3AN9RQ9aYapoarEeotNVKNUqPVGDVWjVPj1dtqgnpHTVTvqklqspqipqpparqaod5TM9UsNVu9r+aoD9RcNU/NVwvUQvWhWqQWqzT1kVqiPlZL1TK1XK1QK9UqtVqtUWvVOrVebVAb1Sa1WW1RW9UnapvarnaonWqX2q32qE/VXvWZ2qc+V/vVF+qAwlSAL9Uh9ZU6rL5WR9Q36qj6Vh1T36nj6nt1Qp1Up9QP6rT6UZ359b0RANTP6oL6RV1UQYFGrbTWRkc6g86oM+nMOou+SmfVV+ts+hqd0Nfq7Po6nUNfr3PqXDq3zqPz6ht0Pm01aadZxzq/LqCT+kZdUN+kU3QhXVgX0V4X1cX0zbq4vkWX0Lfqkvo2XUrfrkvrMrqsLqfv0OX1nbqCrqgr6bt0ZV1FV9XV9N26ur5H19D36pr6Pl1L369r6wd0Hf2grqsf0vX0w7q+fkQ30I/qhrqRbqyb6Kb6Md1MP66b6xa6pX5Ct9JP6tb6Kd1GP63b6md0O/2sbq+f0x3087qjfkF30p11F/2LvqiD7qa761TdQ/fUL+teurfuo/vqfvoV3V+/qgfo1/RAPUgP1q/rIfoNPVS/qYfp4XqEfkuP1KP0aD1Gj9Xj9Hj9tp6g39ET9bt6kp6sp+ipepqervv8baXZ/w/57/yL/AG/PvoWvVV/orfp7XqH3ql36d16j96j9+q9ep/ep/fr/fqAPqAP6oP6kD6kD+vD+og+oo/qo/qYPqaP6+P6hD6pf9I/6NP6R31Gn9Vn9U/6vD6vL/ztOQCDRhltjIlMBpPRZDKZTRZzlclqrjbZzDUmYa412c11Joe53uQ0uUxuk8fkNTeYfMYaMs6wiU1+U8AkzY2moLnJpJhCprApYrwpaoqZm//t/D+qr6lpapqZZqa5aW5ampamlWllWpvWpo1pY9qatqadaWfam/amg+lgOpqOppPpZLqYLqar6Wq6mW4m1aSanuZl08v0Nn1MX9PPvGL6m/5mgBlgBpqBZrAZbIaYIWaoGWqGmWFmhBlhRpqRZrQZbcaasWa8GW8mmAlmoploJplJZoqZYqaZaWaGmWFmmplmtplt5pg5Zq6Za+ab+WahWWgWmUUmzaSZJWaJWWqWmWVmhVlhVplVZo1ZY9aZdWaD2WA2mU1mqdlqtpptZpvZYXaYXWaX2WP2mL1mr9ln9pn9Zr85YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvm4qXTvkhFKjKRiTJEGaJMUaYoS5QlyhpljbJF2aJElIiyR9mjHNH1Uc4oV5Q7yhPljW6I8kU2oshFHMVR/qhAlIxujApGN0UpUaGocFQk8lHRqFh0c1Q8uiUqEd0alYxui0pFt0elozJR2ahcdEdUProzqhBVjCpFd0WVoypR1ahadHdUPbonqhHdG9WM7otqRfdHtaMHojrRg1Hd6KGoXvRwVD96JGoQPRo1jBpFjaMmUdM/df0QzuR63Hez3W2q7WF72pdtL9vb9rF9bT/7iu1vX7UD7Gt2oB1kB9vX7RD7hh1q37TD7HA7wr5lR9pRdrQdY8facXa8fdtOsO/YifZdO8lOtlPsVDvNTrcz7Ht2pp1lZ9v37Rz7gZ1r59n5doFdaD+0i+xim2Y/skvsx3apXWaX2xV2pV1lV9s1dq1dZ9fbDXaj3WQ32y12q/3EbrPb7Q670+6yu+0e+6ndaz+z++zndr/9wh6wf7EKvrSH7Ff2sP3aHrHf2KP2W3vMfmeP2+/tCXvSnrI/2NP2R3vGnrXn7E/2vP3ZXrC/2Is2XDq5v/TxToYMZaAMlIkyURbKQlkpK2WjbJSgBGWn7JSDclBOykm5KTflpbyUj/LRJUxM+Sk/JSlJBakgpVAKFabC5MlTMSpGxak4laASVJJKUikqRaWpNJWlsnQH3UF30p1UkSrSXXQXVaEqVI2qUXWqTjWoBtWkmlSLalFtqk11qA7VpbpUj+pRfapPDagBNaSG1JgaU1NqSs2oGTWn5tSSWlIrakWtqTW1oTbUltpSO2pH7ak9daAO1JE6UifqRF2oC3WlrtSNulEqpVJP6km9qBf1oT7Uj/pRf+pPA2gADaSBNJgG0xAaQkNpKA2j4TSC3qKRNIpG0xgaS+NoPI2nCTSBJtJEmkSTaApNoWk0jWbQDJpJM2k2zaY5NIfm0lyaT/NpIS2kRbSI0iiNltASWkpLaTktp5W0klbTalpLa2k9raeNtJE202baSltpG22jHbSDdtEu2kN7aC/tpX20j/bTfjpAB+ggHaRDdIgO02E6QkfoKB2lY3SMjtNxOkEn6BSdotN0ms7QGTpH5+g8/UwX6Be6SIEyucwui7vKZXVXu2zuGvfPcW6Xx+V1N7h8zrqcLtc/xOScS3GFXGFXxHlX1BVzN/8uLu3KuLKunLvDlXd3ugq/i6u7e1wNd6+r6e5z1dzd/xDXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vlRTmvvILXEfu6VumVvuVriVbpVb7db8V60r3Ca32W1xe9ynbpvb7na4nW6X2/1rfGkf+9znbr/7wh1x37iD7kt3yB1zh93Xv8aX9nfMfeeOu+/dCXfSnXI/uNPuR3fGnf11/5f2/oP7xV10wQEjK9ZsOOIMnJEzcWbOwldxVr6as/E1nOBrOTtfxzn4es7JuTg35+G8fAPnY8vEjpljzs8FOMk3ckG+iVO4EBfmIuy5KBfjm7k438Il+FYuybdxKb6dS3MZLsvl+A4uz3dyBa7IlfgursxVuCpX47u5Ot/DNfhersn3cS2+n2vzA1yHH+S6/BDX44e5Pj/CDfhRbsiNuDE34ab8GDfjx7k5t+CW/AS34ie5NT/FbfhpbsvPcDt+ltvzc9yBn+eO/AJ34s7chV/krvwSd+PunMo9uCe/zL24N/fhvtyPX+H+/CoP4Nd4IA/iwfw6D+E3eCi/ycN4OI/gt3gkj+LRPIbH8jgez2/zBH6HJ/K7PIkn8xSeytN4Os/g93gmz+LZ/D7P4Q94Ls/j+byAF/KHvIgXcxp/xEv4Y17Ky3g5r+CVvIpX8xpey+t4PW/gjbyJN/MW3sqf8Dbezjt4J+/i3byHP+W9/Bnv4895P3/BB/gvfJC/5EP8FR/mr/kIf8NH+Vs+xt/xcf6eT/BJPsU/8Gn+kc/wWT7HP/F5/pkv8C98kQNDjLGKdWziKM4QZ4wzxZnjLPFVcdb46jhbfE2ciK+Ns8fXxTni6+Occa44d5wnzhvfEOeLbUyxizmO4/xxgTgZ3xgXjG+KU+JCceG4SOzjonGx+Oa4eHxLXCK+NS4Z3xaXim+PS8dl4kfuKxffEZeP74wrxBXjSvFdceW4Slw1rhbfHVeP74lrxPfGNeP74hLx/XHt+IG4TvxgXDd+KK4XPxzXjx+JG8SPxg3jRnHjuEncNH4sbhY/HjePW8Qt4yfiVvGTcev4qbhN/HTcNn7mD4+nxj3invHL8ctxCPfq+ckFyYXJD5OLkouTacmPkkuSHyeXJpcllydXJFcmVyVXJ9ck1ybXJdcnNyQ3JjclNye3JEOolhE8euW1Nz7yGXxGn8ln9ln8VT6rv9pn89f4hL/WZ/fX+Rz+ep/T5/K5fR6f19/g83nryTvPPvb5fQGf9Df6gv4mn+IL+cK+iPe+qC/mm/imvqlv5h/3zX0L39I/4Z/wT/on/VP+Kf+0b+uf8e38s769f8538M/75/0LvpPv7Lv4F31X/5Lv5rv7VJ/qe/qevpfv5ftE4Pv5fr6/7+8H+AF+oB/oB/vBfogf4of6oX6YH+ZH+BF+pB/pR/vRfqwf68f78X6Cn+An+ol+kp/kp/gpfpqf5mf4GX6mn+ln+9l+TsocP9fP9fP9fL/QL/SL/CKf5tP8Er/EL/VL/XK/3K/0K/1qv9qv9Wv9er/eb/Qb/Wa/2W/1W/02v83v8Dv8Lr/L7/F7/F6/1+/z+/x+v98f8Af8QX/QH/Jf+cP+a3/Ef+OP+m/9Mf+dP+6/9yf8SX/K/+BP+x/9GX/Wn/M/+fP+Z3/B/+Iv+uDHJ95OTEi8k5iYeDcxKfPkxJTE1MS0xPTEjMR7iZmJWYnZifcTcxIfJOYm5iXmJxYkFiY+TCxKLE6kJT5KLEl8nFiaWJZYnliRWJlYlQjhhm1xyB8KhGS4MRQMN4WUUCgUDkWCD0VDsXBzKB5uCSXCraFkuC2UCreH0qFMKBseDQ1Do9A4NAlNw2OhWXg8NA8tQsvwRGgVngytw1OhTXg6tA3PhHbh2dA+PBc6hOdDx/BC6BQ6hy7hxdA1vBS6he4hNfQIPcPLoVfoHfqEvqFfeCX0D6+GAeG1MDAMCoPD62FIeCMMDW+GYWF4GBHeCiPDqDA6jAljw7gwPrwdJoR3wsTwbpgUJocpYWqYFqaHGeG9MDPMCrPD+2FO+CDMDfPC/LAgLAwfhkVhcUgLH4Ul4eOwNCwLy8OKsDKsCqvDmrA2rAvrw4awMWwKm8OWsDV8EraF7WFH2Bl2hd1hT/g07A2fhX3h87A/fBEOhL+Eg+HLcCh8FQ6Hr8OR8E04Gr4Nx8J34Xj4PpwIJ8Op8EM4HX4MZ8LZcC78FM6Hn8OF8Eu4+OvfrHW/UjfRhRBCCCH+Y6T+wfEe/+J76m/jkp4AcPX2PId/e1wDwMacf533VnlbJQDg6e4dH/r7qFw5NfXvj7tUQ1RgHgAkLudngMvxMmgJT0IbaAHF4e+/vvqt3qrzef6D9ZO3AWT5TU4muBxfXv+Wf7n/3mrUnD9cfx5ASoHLOZnhcnx5/RL/l/VzNfuD9TN/OR6g+W9yssLl+PL6xeBxeAba/MNPCiGEEEIIIYQQf9VblW3/R9e3l67P85rLORnhcvzb63MhhBBCCCGEEEL87/Rc5y5PPdamTYv2Mvmfn1T8b2ftljbJ5MpMrvAbkxBCCCGEEOJPd/mk/0pXIoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpF//P/6d2JXeoxBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCHGl/Z8AAAD//5fNKfo=") r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x43, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r15}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r15, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') symlinkat(&(0x7f0000000100)='./file0\x00', r14, &(0x7f0000000140)='./file0\x00') 5m11.332737339s ago: executing program 2 (id=593): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(0x0, 0x1, 0x40) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0xd20, 0x100000000000fdfd, 0x4}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x41) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0xa8c}}, 0x1006) 5m11.321148039s ago: executing program 33 (id=593): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(0x0, 0x1, 0x40) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0xd20, 0x100000000000fdfd, 0x4}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x41) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0xa8c}}, 0x1006) 1m51.35491305s ago: executing program 1 (id=1621): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x208205, &(0x7f0000000280)={[{@resuid}, {@errors_remount}, {}, {@lazytime}]}, 0x1, 0x638, &(0x7f0000001280)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022bbd7000000000000f00000008000300", @ANYBLOB="47000e0068"], 0x64}, 0x1, 0x0, 0x0, 0x20040050}, 0x48000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[], 0x20) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x318, 0x100000c, 0x0, 0x1c0, 0xc0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a2f3"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000, 0x9}, {}, 0x5}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x47, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m51.174155984s ago: executing program 1 (id=1624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents64(r3, &(0x7f00000001c0)=""/151, 0x97) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.100397796s ago: executing program 1 (id=1625): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000f82020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000230000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000040)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 1m51.017559019s ago: executing program 1 (id=1626): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYBLOB="195460834abffe799524c9cc1076da67db0581f96e6e913fb778bdbb73bc0800000000000000e3d933f03de46a538a0a18df3b9fb72cde8988"], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) (async) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYBLOB="195460834abffe799524c9cc1076da67db0581f96e6e913fb778bdbb73bc0800000000000000e3d933f03de46a538a0a18df3b9fb72cde8988"], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000100), 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') stat(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d00)) 1m50.833309623s ago: executing program 1 (id=1627): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = epoll_create1(0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000800)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x6, 0xff, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6503ec028c5028564abce83afe14c93e15e55655a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a6443ba43523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c00", 0x3, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0x9, 0xf7, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x2, 0x0, 0x0) close(0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x3ff) r6 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x20000, &(0x7f00000003c0)=ANY=[@ANYBLOB="66643d6f2ebb2f0e4dde97a424eb42a1662e8c389f8464a94bf982502d4db1974d3e6d3573861cf05abbbee088657eb34ae8ce61dcc7c6a751d82a40ac15be8d87909e5542ca8b3cb8474f745d519e6618fde39e71616d08b0a2dda2a0fb66b957481e211c113f443261e2ee1d5d3e19746a62bbbe9146e81d8e2b36281377a9e83868ff2d4461151c8075b6b7dd8511665c13db0f776616fb3d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC, @ANYBLOB=',\x00'], 0x0, 0x0, &(0x7f00000001c0)="adab276062f9b1c75c05e0399589d8d5a71619c25637e176c6b2b47ac5bb60eab227186b39655700e671bd483878ce2c7247a8c14151d6726e496e93b60d97385c39833ce33fd44c30f1a1f7aa1b9e9a579120df995fbf44d8e60bbe4e52502ab1c9f9ebd3e6c89d2eccbffd29446b639c49cd5130cfe740254b9112a5ac1e2605ff88b537a31859b693de0dcfdc96e8bd21d611e037ebe8b57a7e09e693028eaedd67bbdf1fb1bb2060811bf7f4116ca01eb0e846afc9b326052511ecd9a39c172091160315a873f6fdda28fcde3a046162d5497b6933af9d7e67c3de9667cad830d8feea18d2917455e30f") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0xe26) openat(r6, &(0x7f00000002c0)='./file0\x00', 0x40, 0x1) 1m49.841967598s ago: executing program 1 (id=1630): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x18000, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x200000033) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) read(r4, &(0x7f0000000240)=""/123, 0x7b) 1m49.841788488s ago: executing program 34 (id=1630): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x18000, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x200000033) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) read(r4, &(0x7f0000000240)=""/123, 0x7b) 1m35.464728938s ago: executing program 3 (id=1692): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x2d4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f00000012c0)=@vmx={0xb, 0x0, 0x2080, {0xeeef0000, 0x4, {0x2}, 0x1, 0x8001}, {"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", "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"}}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m34.286138868s ago: executing program 3 (id=1698): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x9) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) 1m33.38921543s ago: executing program 3 (id=1700): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000a6", 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x3, 0xfffffffd, 0x7, 0x4, 0x53}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r6 = epoll_create(0x7) r7 = epoll_create1(0x0) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x40000001}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x0, @ANYBLOB="0000fffffffffffffffffffffffd5f", @ANYRES16], 0x48) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x80000018}) syz_usb_connect$midi(0x5, 0x4f, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000203512148240000102030109023d00010118100409040000020103000609058e0b20000fd702052501012709058c0200026df780141f01"], 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050006f8211cfd09"], 0x0) 1m31.583865495s ago: executing program 3 (id=1709): mkdir(&(0x7f0000000000)='my_sys\x00', 0x0) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x7, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}], &(0x7f0000000340)='GPL\x00', 0x8, 0x8b, &(0x7f0000000540)=""/139, 0x41100, 0x1, '\x00', 0x0, @fallback=0xd, r0, 0x8, &(0x7f0000000600)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x6, 0x81, 0x6}, 0x10, 0x0, r0, 0x3, &(0x7f00000006c0)=[r0, r0, 0xffffffffffffffff, r0, r0, r3], &(0x7f0000000700)=[{0x5, 0x1, 0x8, 0x7}, {0x3, 0x2, 0xb, 0x3}, {0x5, 0x4, 0x8, 0x6}], 0x10, 0xd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r6, 0x16, 0x0, @void}, 0x10) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r7, r9, 0x16, 0x0, @void}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000440)=0xeffe, 0x4) syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2a1, &(0x7f0000000880)="$eJzs3T1rU10AB/DTtKUPfWjpJOriQSeX0HZ2aJEWigFFG0EF4Zbeasg1KbkZkuJQZxfB0W8gjm6C+AX6LdyKUDp1slJv31J06avQ32/Jn/xzTs65F84d7/qdd6/qS3l5KWmH0lRfKE2FUNrqC2OhFPashtvv33x4++jJ03vTlcrMwxhnp+cnJmOMoze+Pnv96ea39v+PP49+GQprY8/XNya/r11Zu7b+c/5lLY+1PDaa7ZjEhWaznSxkaVys5fVyjA+yNMnTWGvkaaunX8qay8vdmDQWR4aXW2mex6TRjfW0G9vN2G51Y/IiqTViuVyOI8OBk6h+3NreDhvbhYteDefP/b/cDh3q/4WwudqpdqrFZ9HPzlVmxuNvgwejNjudav9+P1H0sbcfDMO7/eTRfu/Rcqvod7q79ytHxg+FxTPeOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJdXOe4bO/h2s9Op9hd9+W99kWbnKjPjuz/o7QfC9YE//+fq2WwFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI4t767UkyxLW8Lxw86F/AeWIQhFKJ3CPBd9MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD5632JPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJdV3l2pJ1mWtk4r/LhaTHyouug9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBJ/QoAAP//VVZopQ==") openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) inotify_init1(0x80000) creat(0x0, 0x11f) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.433238369s ago: executing program 3 (id=1710): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = eventfd2(0x0, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0xf129}], 0x1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f00000002c0)="6eb3ef930c53dea1", 0x8}, {&(0x7f00000004c0)="c60d5d12ed6a7c52c74235f5c405b46e2bbd287ebaf0ff243ba1bd018edb7f5f22e70aeabdaf0eb87cd98bdc24fc12e03e8286a525a7ffc8", 0x38}], 0x2) r3 = fsmount(r1, 0x0, 0x80) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000001c0)=0x34, 0x4) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) mknodat$null(r3, &(0x7f0000000000)='./file2\x00', 0x400, 0x103) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r3, 0x16, 0x0, @void}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000006c0)={0x7, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}}}, 0x108) 1m31.105893797s ago: executing program 3 (id=1713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x5c, 0x0, 0x0) fsopen(0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket(0x10, 0x3, 0x0) epoll_create1(0x80000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x52) timer_create(0xfffffffd, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r6, {0x7, 0x3}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48000}, 0x840) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1m31.105724737s ago: executing program 35 (id=1713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x5c, 0x0, 0x0) fsopen(0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket(0x10, 0x3, 0x0) epoll_create1(0x80000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x52) timer_create(0xfffffffd, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r6, {0x7, 0x3}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48000}, 0x840) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 9.18184491s ago: executing program 8 (id=2120): stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f00000002c0)={[{@block_validity}, {@nogrpid}, {@max_batch_time}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}], [{@flag='nomand'}, {@obj_type={'obj_type', 0x3d, '+(}([/]\xa9@'}}, {@fsname={'fsname', 0x3d, 'e\x05\xf0\x00\x00'}}, {@uid_gt={'uid>', r0}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_role={'obj_role', 0x3d, '\''}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPDnHa2+bLkrl1LqXqxSig2la9lFpjaF2sWllx4K7bVgIa+M0PoDScWVLKjU/gMhyT+QSw6JSfAhPvuSQK65JM41JoeACYqVQAiJwuyHrEi7kmV9jCP/fvBq3o+ZeZ9HI+3MC7sbwAtrKP+RRRyLiMspotzszyKip17ri1ho7Le8ND/21dL8WIqVlX98niJFxOOl+bHWuVJze7jZ6IuID/6c4qf/3zjv9Ozc5GitVp1qtk/NXLt5anp27ncT10avVq9Wr58++4eRMyNnh8+NbC+h/s5DX39y4d6Xv/rrpwvfvPHtnS9eeT3FhRhojq3No5n1jg3F0OrvZK1SRIzuwvmfB13NfNbmmUpbHJTtcVAAAHSUrXmG+3mUoyuePLyV490PCw0OAAAA2BUrXRErAAAAwAGXrP8BAADggGu9D+Dx0vxYqxT7joT99ehiRAw28l9ulsZIKRbq277ojohDj1Os/Vhrahy2Y0MR8fDjc2/nJdp8DnmvLSxGxC/aXf9Uz3+w+Uno9flnETG8C/MPrWv/mPK/sAvzF50/AC+m+xcbN7KN979s9fkn2tz/Sm3uXc+i6Ptf6/lvecPz35P8uzo8//39Kee4XYpbncby/P947y9vtUo+f77dUVLb8Ggx4peldvmn1fxTh/wvb3HuFI1TlL+7Ve20T9H5r7wWcSLa59+SNv9+olPjE7XqcONn2zkW3x95s9P8ReefX/9DHfLf5Pr35X03f3Cmzl/q869Ll+5u6GzuvnX+2Wc96Z/1Wk+z5z+jMzNTpyN60t829p/ZPN/WPq1z5Pmf/PXm///t/v7z14SF5t9Gnspic5u3/7duzj/duf1Op3ha678ir/+V7V//et9LTznHb957+eT6vtb3a61d/+Yln/9haqyFAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAli4iBSFklIlK9nmWVSsThiPhZHMpqN6Znfjt+49/Xr+RjEYPRnY1P1KrDEVFutFPePl2vP2mfWdf+fUQcjYhXy/31dmXsRu1K0ckDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw6nBEDETKKhGRRcRyOcsqlaKjAgAAAHbdYNEBAAAAAHvO+h8AAAAOPut/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9tjR4/cfpIhYON9fL7me5lh3oZEBey0rOgCgMF1FBwAUplR0AEBhtrnG97gAB1DaYryvbW/+6tG7J/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Hw6cez+gxQRC+f76yXX0xzrbnvE8X2MDthLWdEBAIXp2mywtH9xAPvvmf/Fj+xuHMD+a7/GB14kaYvxvsY+vRtH2nQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGAN1EvKKhGR1etZVqlEHImIwehO4xO16nBE/CQiPip39+bt3qKDBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdNz85NjtZq1alnqaSdHa6i0qny3+cjjP2tpHqlr+gwGpWiX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACjC9Ozc5GitVp2aLjoSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGjTs3OTo7VadeopKne3s/OaStE5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQnO8DAAD//wbDC8Y=") syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x853040, &(0x7f0000000240)={[{@jqfmt_vfsv0}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xc000400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xb}}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) 8.126434516s ago: executing program 8 (id=2124): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x7, 0x7fff, {0x6, 0x1, 0x6, 0xb92, 0x81, 0x9}, {0x9, 0x1, 0x6, 0x100, 0x6}, 0x10000, 0x11e4, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0xa, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0x2, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0xfff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000020, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0xfffffffa, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe5f, 0x5, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x5, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x488}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 3.485827113s ago: executing program 8 (id=2127): stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f00000002c0)={[{@block_validity}, {@nogrpid}, {@max_batch_time}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}], [{@flag='nomand'}, {@obj_type={'obj_type', 0x3d, '+(}([/]\xa9@'}}, {@fsname={'fsname', 0x3d, 'e\x05\xf0\x00\x00'}}, {@uid_gt={'uid>', r0}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_role={'obj_role', 0x3d, '\''}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPDnHa2+bLkrl1LqXqxSig2la9lFpjaF2sWllx4K7bVgIa+M0PoDScWVLKjU/gMhyT+QSw6JSfAhPvuSQK65JM41JoeACYqVQAiJwuyHrEi7kmV9jCP/fvBq3o+ZeZ9HI+3MC7sbwAtrKP+RRRyLiMspotzszyKip17ri1ho7Le8ND/21dL8WIqVlX98niJFxOOl+bHWuVJze7jZ6IuID/6c4qf/3zjv9Ozc5GitVp1qtk/NXLt5anp27ncT10avVq9Wr58++4eRMyNnh8+NbC+h/s5DX39y4d6Xv/rrpwvfvPHtnS9eeT3FhRhojq3No5n1jg3F0OrvZK1SRIzuwvmfB13NfNbmmUpbHJTtcVAAAHSUrXmG+3mUoyuePLyV490PCw0OAAAA2BUrXRErAAAAwAGXrP8BAADggGu9D+Dx0vxYqxT7joT99ehiRAw28l9ulsZIKRbq277ojohDj1Os/Vhrahy2Y0MR8fDjc2/nJdp8DnmvLSxGxC/aXf9Uz3+w+Uno9flnETG8C/MPrWv/mPK/sAvzF50/AC+m+xcbN7KN979s9fkn2tz/Sm3uXc+i6Ptf6/lvecPz35P8uzo8//39Kee4XYpbncby/P947y9vtUo+f77dUVLb8Ggx4peldvmn1fxTh/wvb3HuFI1TlL+7Ve20T9H5r7wWcSLa59+SNv9+olPjE7XqcONn2zkW3x95s9P8ReefX/9DHfLf5Pr35X03f3Cmzl/q869Ll+5u6GzuvnX+2Wc96Z/1Wk+z5z+jMzNTpyN60t829p/ZPN/WPq1z5Pmf/PXm///t/v7z14SF5t9Gnspic5u3/7duzj/duf1Op3ha678ir/+V7V//et9LTznHb957+eT6vtb3a61d/+Yln/9haqyFAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAli4iBSFklIlK9nmWVSsThiPhZHMpqN6Znfjt+49/Xr+RjEYPRnY1P1KrDEVFutFPePl2vP2mfWdf+fUQcjYhXy/31dmXsRu1K0ckDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw6nBEDETKKhGRRcRyOcsqlaKjAgAAAHbdYNEBAAAAAHvO+h8AAAAOPut/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9tjR4/cfpIhYON9fL7me5lh3oZEBey0rOgCgMF1FBwAUplR0AEBhtrnG97gAB1DaYryvbW/+6tG7J/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Hw6cez+gxQRC+f76yXX0xzrbnvE8X2MDthLWdEBAIXp2mywtH9xAPvvmf/Fj+xuHMD+a7/GB14kaYvxvsY+vRtH2nQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGAN1EvKKhGR1etZVqlEHImIwehO4xO16nBE/CQiPip39+bt3qKDBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdNz85NjtZq1alnqaSdHa6i0qny3+cjjP2tpHqlr+gwGpWiX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACjC9Ozc5GitVp2aLjoSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGjTs3OTo7VadeopKne3s/OaStE5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQnO8DAAD//wbDC8Y=") syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x853040, &(0x7f0000000240)={[{@jqfmt_vfsv0}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0xc000400) r4 = socket$inet6(0xa, 0x3, 0x3c) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007111c1000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101006, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xc00) 2.461782439s ago: executing program 8 (id=2136): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) preadv2(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0, 0x0, 0x20000) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1) getrlimit(0x9, &(0x7f0000000000)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@test_dummy_encryption}, {@dioread_lock}, {@noblock_validity}, {}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/cgroups\x00', 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ptrace$getsig(0x4202, r0, 0x7fffffffffffffff, &(0x7f00000000c0)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000800)={0x2, 0x6e23, @multicast1}, 0x10, 0x0}}], 0x3d, 0x24000844) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) fallocate(r3, 0x0, 0x8e14, 0x8ffff) 1.285201768s ago: executing program 5 (id=2147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x200000c4) 1.250122319s ago: executing program 5 (id=2148): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r4, &(0x7f00000005c0)}, 0x20) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x65) 830.051229ms ago: executing program 7 (id=2155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x406c830) 794.303591ms ago: executing program 8 (id=2156): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000240)={[{@rodir}, {@numtail}, {@rodir}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@rodir}, {@utf8no}, {@shortname_winnt}, {@fat=@flush}, {@shortname_winnt}]}, 0x81, 0x2d1, &(0x7f0000000880)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) 760.404752ms ago: executing program 7 (id=2157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x58}}, 0x0) 662.129714ms ago: executing program 4 (id=2159): unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 662.007674ms ago: executing program 7 (id=2160): r0 = socket(0x11, 0xa, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0xffffffffffffffff) 661.935643ms ago: executing program 4 (id=2161): r0 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0xb0000003}) 661.900043ms ago: executing program 7 (id=2162): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002f00), 0x1, 0x2000, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080)=0x4001, 0x4) write(r0, &(0x7f0000000b80)="240000001e005f0214e0ffda8250bb22fe54e592afe412cdf8bb048d8dd5d6d87c998fe8", 0x24) 661.843283ms ago: executing program 4 (id=2163): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@nobarrier}, {@noinit_itable}, {@dioread_nolock}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$eJzs3M9rHHUbAPBnpknTH+m7eeE9vLynFypWqN2kqdqTEPFcKPQPqGEzCSGTbMhuahMDbT14EAQVwR+96H/gRRG8lP4PiuBNwYOgNY0HwUNkNpvEbnfT1CadGj8fmOzz/c7uPM+THb7swM4G8I/1/+JPEjEYERcjotKeTyPicCs6EnF943l3V1dqa6srtSTW1y/dSYqXteY2j5W0H49H6yXx34i43R9x+vX78zaWlmfG8zxbaI+Hm7Pzw42l5TPTs+NT2VQ2Nzoycu7cC6PPPzeyZ72+9dqnP7/5xctffXR+9vcX7zw7kcRYq+/o6GMvbfxP+mOsY35uP5KVKCm7AAAAdqX4nH8oIvpan1IrcagVAQAAAAfJ+sA6AAAAcOAlUXYFAAAAwP7a/B7A3dWV2ub2OL9/8NNLETG0fW/x2lb+vtY9xBFHoj8ijq0l99yZkGy8DB7J9RsRcWusy/mftM+/hzSwHXbeue4e6SfPrWL9Geu2/qVb6090WX/6Nn874RFtrn9r961/2/kP9Vj/Lu4mwfWIgYVTX/fMfyPif33d8idb+ZMe+V/ZZY+fDX77Xa99659EnIru+f+ca4ffhxienM6z9t+uOU5+fu30Tv0f65U/2bn/+V32//3N0alea0mR/5mTO7//3fIX58Tb7TrSiHin/ViM3+3I8fTtkQ936n+iR/8Pev8/7nXQa/cOv3xj+YdeTwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu0ogYjCStbsVpWq1GHI+I/8SxNK83mqcn64tzE8W+iKHoTyen82wkIiob46QYn23F2+PRjvG5iPh3RLxXOdoaV2v1fKLs5gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhyPCIGI0mrEZFGxK+VNK1Wy64KAAAA2HNDZRcAAAAA7DvX/wAAAHDwPcz1/419rAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40C5euFBs62urK7ViPHFlaXGmfuXMRNaYqc4u1qq1+sJ8dapen8qzaq0++6Dj5fX6/PmYW7w63MwazeHG0vLl2friXPPy9Oz4VHY5638sXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCwBltbklYjIm3FaVqtRpyIiKHoTyan82wkIv4VEd9U+geK8dmyiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDPNZaWZ8bzPFu4NzjR3t1l1wEJjrY7fFLqEQieqKDERQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNI0lpZnxvM8W2iUXQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlSn9MIqLYTlWeGuzcezj5rdJ6jIhXb156/+p4s7lwtpj/ZWu++UF7frSM+gEAAIBOm9fp7ev4tOx6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv4/G0vLMeJ5nC/sYlN0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw1/wRAAD//4hJxgU=") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0) 602.703725ms ago: executing program 7 (id=2164): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x1) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) 593.677526ms ago: executing program 8 (id=2165): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 525.801307ms ago: executing program 7 (id=2166): clock_adjtime(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x652800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getrusage(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 507.767268ms ago: executing program 4 (id=2167): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0xf, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 149.086847ms ago: executing program 5 (id=2168): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x1}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}}]}}}]}, 0x70}}, 0x0) 120.633197ms ago: executing program 6 (id=2169): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="00000000140000000000000001"], 0x38, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 105.713508ms ago: executing program 6 (id=2170): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 88.154848ms ago: executing program 4 (id=2171): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000b00)={0x1, 0x0, 0xa, 0x11, 0x26, 0x0}) 87.516228ms ago: executing program 5 (id=2172): mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x8800, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1c4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000480)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 42.08675ms ago: executing program 6 (id=2173): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 41.926739ms ago: executing program 6 (id=2174): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 41.80449ms ago: executing program 5 (id=2175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000006800090300000000010000000a00000000000000040004000800010002000000f2633b76db16cfafd3ebc23d4d6f07a771d4c8854c4c08a46301df15edb6d36b08872ce2b2a3a1a0bcaa3db1510408548cb18b8eee9fc6efa01802ca09875aa06e233cbcb1157752207184f3b80dacb1bc56863f54131a56bfb1145d0a9211fcbd6b224d7b20d3d070c897b7f9fe525998ed5d93b16214847b6be3f1f4acfaac21ffa02ea55e5f437821a8fca0443a792531403b824ed7ff795a9799ca6bf40ab7ed1d4ccebbb9c8021a04e36c9d340c337a3ce241e0fa613270632355fec3"], 0x24}}, 0x0) 41.753219ms ago: executing program 4 (id=2176): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 33.04494ms ago: executing program 6 (id=2177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000906050600000000000000000200000005000100070000000900020073797a3000000000240007800c000180080001407f0000010c000280080001407ffd000108000a4000"], 0x4c}}, 0x0) 4.02505ms ago: executing program 5 (id=2178): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f00000000c0)=""/59, 0x3b) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 6 (id=2179): madvise(&(0x7f0000800000)=nil, 0x0, 0x0) 0s ago: executing program 6 (id=2181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4008800) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x4}, {}, {0x6, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): 35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.6.1817" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 429.999052][ T24] audit: type=1326 audit(1785681389.535:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.6.1817" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 430.024031][ T24] audit: type=1326 audit(1785681389.535:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.6.1817" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 430.049010][ T24] audit: type=1326 audit(1785681389.575:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.6.1817" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 430.074543][ T24] audit: type=1326 audit(1785681389.575:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.6.1817" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 430.123688][ T7396] EXT4-fs (loop5): Test dummy encryption mode enabled [ 430.130631][ T24] audit: type=1326 audit(1785681389.575:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.6.1817" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 430.157145][ T7396] EXT4-fs (loop5): Unrecognized mount option "obj_role=minixdf" or missing value [ 430.200688][ T7396] 9pnet: Insufficient options for proto=fd [ 430.229071][ T24] audit: type=1326 audit(1785681389.575:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.6.1817" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 430.287702][ T7399] FAT-fs (loop6): Unrecognized mount option "uniW¹_xlate=0" or missing value [ 430.312184][ T7396] exfat: Deprecated parameter 'namecase' [ 430.469355][ T7396] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 431.274851][ T7420] EXT4-fs (loop6): Test dummy encryption mode enabled [ 431.301079][ T7420] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1825: inode has both inline data and extents flags [ 431.324375][ T7420] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1825: couldn't read orphan inode 15 (err -117) [ 431.345237][ T7420] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 431.424706][ T24] audit: type=1400 audit(1785681391.255:742): avc: denied { mounton } for pid=7428 comm="syz.7.1828" path="/45/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 431.630150][ T328] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 431.630583][ T7434] exfat: Deprecated parameter 'utf8' [ 431.643225][ T7434] exfat: Deprecated parameter 'utf8' [ 431.727728][ T7429] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 431.737007][ T7429] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 431.741716][ T7434] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 431.749147][ T7429] F2FS-fs (loop7): invalid crc value [ 431.763746][ T7439] EXT4-fs (loop8): Unrecognized mount option "nomand" or missing value [ 431.784957][ T7434] overlayfs: filesystem on './file0' not supported [ 431.839885][ T2505] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 431.868693][ T7429] F2FS-fs (loop7): Found nat_bits in checkpoint [ 431.930157][ T7429] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 431.937361][ T7429] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 432.030029][ T328] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.057084][ T328] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 432.229911][ T328] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.243809][ T328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.265500][ T328] usb 6-1: Product: syz [ 432.269724][ T328] usb 6-1: Manufacturer: syz [ 432.289666][ T328] usb 6-1: SerialNumber: syz [ 432.370468][ T328] cdc_mbim 6-1:1.0: skipping garbage [ 432.449849][ T33] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 432.571061][ T7426] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 432.747438][ T7453] EXT4-fs (loop8): Test dummy encryption mode enabled [ 432.754524][ T7453] EXT4-fs (loop8): Unrecognized mount option "obj_role=minixdf" or missing value [ 432.766228][ T7453] 9pnet: Insufficient options for proto=fd [ 432.819957][ T33] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.831451][ T33] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.842424][ T33] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.862852][ T33] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.872992][ T33] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.941733][ T7453] exfat: Deprecated parameter 'namecase' [ 432.949256][ T33] usb 8-1: config 0 descriptor?? [ 433.058076][ T7453] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 433.290331][ T7426] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 433.309907][ T328] cdc_mbim 6-1:1.0: setting tx_max = 48 [ 433.316766][ T328] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 433.324441][ T328] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 66:84:73:29:2e:bf [ 433.424342][ T134] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 433.440010][ T5] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 433.489924][ T33] usbhid 8-1:0.0: can't add hid device: -71 [ 433.495947][ T33] usbhid: probe of 8-1:0.0 failed with error -71 [ 433.503902][ T33] usb 8-1: USB disconnect, device number 9 [ 433.517564][ T730] usb 6-1: USB disconnect, device number 42 [ 433.523836][ T730] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 433.799913][ T5] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.810932][ T5] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 433.979909][ T5] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.989083][ T5] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.999263][ T7508] FAT-fs (loop7): Unrecognized mount option "uniW¹_xlate=0" or missing value [ 434.001605][ T5] usb 9-1: Product: syz [ 434.012502][ T5] usb 9-1: Manufacturer: syz [ 434.017301][ T5] usb 9-1: SerialNumber: syz [ 434.060370][ T5] cdc_mbim 9-1:1.0: skipping garbage [ 434.260973][ T7461] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 434.339914][ T301] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 434.348483][ T7518] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 434.353812][ T460] udevd[460]: incorrect ext4 checksum on /dev/loop7 [ 434.733354][ T7521] EXT4-fs (loop7): Test dummy encryption mode enabled [ 434.740482][ T7521] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 434.752172][ T7521] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 434.801958][ T24] audit: type=1326 audit(1785681394.635:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.6.1843" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 434.810169][ T301] usb 6-1: Using ep0 maxpacket: 8 [ 434.832095][ T2505] usb 7-1: unable to get BOS descriptor or descriptor too short [ 434.840904][ T24] audit: type=1326 audit(1785681394.665:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.6.1843" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 434.866391][ T24] audit: type=1326 audit(1785681394.665:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.6.1843" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 434.891613][ T24] audit: type=1326 audit(1785681394.665:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.6.1843" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 434.891633][ T24] audit: type=1326 audit(1785681394.665:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.6.1843" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 434.891652][ T24] audit: type=1326 audit(1785681394.665:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.6.1843" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 434.891670][ T24] audit: type=1326 audit(1785681394.665:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.6.1843" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 434.891689][ T24] audit: type=1326 audit(1785681394.665:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.6.1843" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 434.891708][ T24] audit: type=1326 audit(1785681394.675:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.6.1843" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 434.891727][ T24] audit: type=1326 audit(1785681394.675:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.6.1843" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cec31019 code=0x7ffc0000 [ 434.992020][ T301] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 434.992043][ T301] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 434.992160][ T2505] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 435.100021][ T7529] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 435.118254][ T2505] usb 7-1: can't read configurations, error -71 [ 435.125029][ T5] cdc_mbim 9-1:1.0: setting tx_max = 48 [ 435.152138][ T5] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 435.162588][ T5] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 6e:15:97:4a:54:9d [ 435.210223][ T7528] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 435.219910][ T301] usb 6-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 435.229227][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.237541][ T301] usb 6-1: Product: syz [ 435.242030][ T301] usb 6-1: Manufacturer: syz [ 435.246714][ T301] usb 6-1: SerialNumber: syz [ 435.252630][ T7538] exfat: Deprecated parameter 'namecase' [ 435.287873][ T7538] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 435.309730][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1844'. [ 435.328907][ T33] usb 9-1: USB disconnect, device number 7 [ 435.335467][ T33] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 435.963251][ T7589] EXT4-fs (loop6): Unrecognized mount option "nomand" or missing value [ 436.008253][ T301] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 436.022864][ T301] usb 6-1: USB disconnect, device number 43 [ 436.089863][ T33] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 436.099635][ T7592] EXT4-fs warning (device loop8): ext4_xattr_inode_get:506: inode #11: comm syz.8.1853: EA inode hash validation failed [ 436.112495][ T7592] EXT4-fs error (device loop8) in ext4_do_update_inode:5362: error 27 [ 436.121129][ T7592] EXT4-fs (loop8): Remounting filesystem read-only [ 436.127734][ T7592] EXT4-fs error (device loop8): ext4_dirty_inode:6181: inode #15: comm syz.8.1853: mark_inode_dirty error [ 436.139622][ T7592] EXT4-fs error (device loop8) in ext4_do_update_inode:5362: error 27 [ 436.148046][ T7592] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2943: inode #15: comm syz.8.1853: mark_inode_dirty error [ 436.160292][ T7592] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2946: inode #15: comm syz.8.1853: mark inode dirty (error -27) [ 436.173540][ T7592] EXT4-fs warning (device loop8): ext4_evict_inode:305: xattr delete (err -27) [ 436.182642][ T7592] EXT4-fs (loop8): 1 orphan inode deleted [ 436.188462][ T7592] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,acl,resgid=0x0000000000000000,errors=remount-ro,min_batch_time=0x0000000000001cf3, [ 436.580061][ T33] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 436.596348][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.629072][ T33] usb 5-1: config 0 descriptor?? [ 438.725999][ T7605] exfat: Deprecated parameter 'namecase' [ 438.754120][ T7605] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 438.829926][ T33] usb 5-1: Cannot set MAC address [ 438.835416][ T33] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 438.991199][ T33] usb 5-1: USB disconnect, device number 60 [ 439.389839][ T389] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 439.479839][ T301] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 439.646830][ T33] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 439.900291][ T389] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 439.921714][ T389] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.968620][ T389] usb 7-1: config 0 descriptor?? [ 440.039961][ T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 440.059858][ T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.079844][ T33] usb 5-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 440.089069][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.101530][ T33] usb 5-1: config 0 descriptor?? [ 440.109925][ T301] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 440.119051][ T301] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.133080][ T301] usb 9-1: config 0 descriptor?? [ 440.360279][ T7636] exfat: Deprecated parameter 'utf8' [ 440.368088][ T7636] exfat: Deprecated parameter 'utf8' [ 440.412549][ T7636] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 440.429038][ T7636] overlayfs: filesystem on './file0' not supported [ 440.581534][ T33] hid-generic 0003:0925:8066.0019: unbalanced collection at end of report description [ 440.591635][ T33] hid-generic: probe of 0003:0925:8066.0019 failed with error -22 [ 440.710148][ T7645] exfat: Deprecated parameter 'utf8' [ 440.715509][ T7645] exfat: Deprecated parameter 'utf8' [ 440.723328][ T7645] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 440.737666][ T7645] overlayfs: filesystem on './file0' not supported [ 440.789327][ T658] usb 5-1: USB disconnect, device number 61 [ 440.820691][ T7648] EXT4-fs (loop7): Unrecognized mount option "nomand" or missing value [ 441.070441][ T7653] exfat: Deprecated parameter 'namecase' [ 441.109881][ T389] usb 7-1: Cannot set MAC address [ 441.115166][ T389] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 441.132767][ T7653] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 441.163200][ T389] usb 7-1: USB disconnect, device number 42 [ 441.190334][ T301] usb 9-1: Cannot set MAC address [ 441.195669][ T301] MOSCHIP usb-ethernet driver: probe of 9-1:0.0 failed with error -71 [ 441.223573][ T301] usb 9-1: USB disconnect, device number 8 [ 441.270463][ T7660] exfat: Deprecated parameter 'utf8' [ 441.287387][ T7660] exfat: Deprecated parameter 'utf8' [ 441.327922][ T7664] FAT-fs (loop6): Unrecognized mount option "nonumtaiģ=0" or missing value [ 441.343456][ T7660] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 441.375848][ T7660] overlayfs: filesystem on './file0' not supported [ 441.609825][ T2505] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 441.749963][ T389] usb 7-1: new low-speed USB device number 43 using dummy_hcd [ 441.760179][ T7677] exfat: Deprecated parameter 'utf8' [ 441.765835][ T7677] exfat: Deprecated parameter 'utf8' [ 441.799942][ T301] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 441.808759][ T7677] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 441.836209][ T7677] overlayfs: filesystem on './file0' not supported [ 441.969890][ T2505] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.980942][ T2505] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 442.039824][ T389] usb 7-1: device descriptor read/64, error -71 [ 442.159901][ T2505] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.169158][ T2505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.177482][ T2505] usb 5-1: Product: syz [ 442.182161][ T2505] usb 5-1: Manufacturer: syz [ 442.186778][ T2505] usb 5-1: SerialNumber: syz [ 442.191661][ T301] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.206642][ T301] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 442.215925][ T301] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.240618][ T2505] cdc_mbim 5-1:1.0: skipping garbage [ 442.379882][ T301] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.389058][ T301] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.397471][ T301] usb 9-1: Product: syz [ 442.401860][ T301] usb 9-1: Manufacturer: syz [ 442.406540][ T301] usb 9-1: SerialNumber: syz [ 442.439832][ T389] usb 7-1: device descriptor read/64, error -71 [ 442.442911][ T7668] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 442.453908][ T301] cdc_mbim 9-1:1.0: skipping garbage [ 442.460056][ T301] cdc_mbim 9-1:1.0: skipping garbage [ 442.465532][ T301] cdc_mbim 9-1:1.0: bind() failure [ 442.522677][ T7683] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 442.530595][ T7683] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 442.539487][ T7683] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 442.547883][ T7683] F2FS-fs (loop7): Found nat_bits in checkpoint [ 442.577686][ T7683] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 442.584841][ T7683] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 442.693559][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1882'. [ 442.702913][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1882'. [ 442.713389][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1882'. [ 442.719950][ T389] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 443.018776][ T389] usb 7-1: device descriptor read/64, error -71 [ 443.208481][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 443.208496][ T24] audit: type=1326 audit(1785681403.035:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7696 comm="syz.5.1885" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa2d40f019 code=0x0 [ 443.239671][ T7668] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 443.249885][ T2505] cdc_mbim 5-1:1.0: setting tx_max = 48 [ 443.256441][ T2505] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 443.264104][ T2505] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 26:ab:9c:9c:be:5d [ 443.357486][ T134] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 443.456260][ T2505] usb 5-1: USB disconnect, device number 62 [ 443.462598][ T2505] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 443.489882][ T389] usb 7-1: device descriptor read/64, error -71 [ 443.609901][ T389] usb usb7-port1: attempt power cycle [ 444.029991][ T389] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 444.206833][ T7752] EXT4-fs (loop5): Unrecognized mount option "nomand" or missing value [ 444.299825][ T389] usb 7-1: device descriptor read/8, error -71 [ 444.509897][ T389] usb 7-1: device descriptor read/8, error -71 [ 444.587351][ T6288] usb 9-1: USB disconnect, device number 9 [ 444.667761][ T7766] exfat: Deprecated parameter 'utf8' [ 444.678209][ T7766] exfat: Deprecated parameter 'utf8' [ 444.796481][ T7766] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 444.808659][ T7770] EXT4-fs (loop8): dax option not supported [ 444.860753][ T7766] overlayfs: filesystem on './file0' not supported [ 445.593902][ T7786] xt_hashlimit: size too large, truncated to 1048576 [ 445.648015][ T7787] netem: change failed [ 445.780216][ T7791] exfat: Deprecated parameter 'utf8' [ 445.797546][ T7791] exfat: Deprecated parameter 'utf8' [ 445.858761][ T7791] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 445.929883][ T730] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 445.940979][ T7793] FAT-fs (loop6): Unrecognized mount option "uniW¹_xlate=0" or missing value [ 445.952612][ T7791] overlayfs: filesystem on './file0' not supported [ 446.084807][ T7800] EXT4-fs (loop4): dax option not supported [ 446.219862][ T730] usb 9-1: Using ep0 maxpacket: 32 [ 446.317405][ T389] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 446.729888][ T389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.740895][ T389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.750702][ T389] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.763530][ T389] usb 8-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 446.770071][ T730] usb 9-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 446.772682][ T389] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.783064][ T730] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.793195][ T389] usb 8-1: config 0 descriptor?? [ 446.800121][ T730] usb 9-1: Product: syz [ 446.806756][ T730] usb 9-1: Manufacturer: syz [ 446.811485][ T730] usb 9-1: SerialNumber: syz [ 446.849877][ T301] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 447.061651][ T7798] input: syz0 as /devices/virtual/input/input25 [ 447.068004][ T7798] input: failed to attach handler leds to device input25, error: -6 [ 447.087330][ T7786] udc-core: couldn't find an available UDC or it's busy [ 447.094469][ T7786] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 447.099981][ T301] usb 7-1: Using ep0 maxpacket: 16 [ 447.219835][ T6288] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 447.249968][ T730] usb 9-1: MIDIStreaming interface descriptor not found [ 447.262609][ T730] usb 9-1: USB disconnect, device number 10 [ 447.315704][ T389] sony 0003:054C:1000.001A: item fetching failed at offset 20/24 [ 447.323660][ T389] sony 0003:054C:1000.001A: parse failed [ 447.329370][ T389] sony: probe of 0003:054C:1000.001A failed with error -22 [ 447.379940][ T301] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 447.389169][ T301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.397531][ T301] usb 7-1: Product: syz [ 447.401804][ T301] usb 7-1: Manufacturer: syz [ 447.406415][ T301] usb 7-1: SerialNumber: syz [ 447.512397][ T7798] udc-core: couldn't find an available UDC or it's busy [ 447.519439][ T7798] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 447.589884][ T6288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.600874][ T6288] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 447.769916][ T6288] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 447.779058][ T6288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.787116][ T6288] usb 5-1: Product: syz [ 447.791421][ T6288] usb 5-1: Manufacturer: syz [ 447.796056][ T6288] usb 5-1: SerialNumber: syz [ 447.840280][ T6288] cdc_mbim 5-1:1.0: skipping garbage [ 447.979892][ T301] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 447.987687][ T301] usb 7-1: USB disconnect, device number 47 [ 448.040754][ T7811] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 448.339854][ T389] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 448.579354][ T24] audit: type=1400 audit(1785681408.405:785): avc: denied { read write } for pid=7825 comm="syz.8.1912" dev="anon_inodefs" ino=44595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 448.604927][ T24] audit: type=1400 audit(1785681408.435:786): avc: denied { open } for pid=7825 comm="syz.8.1912" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 448.664894][ T7827] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 448.673685][ T7827] EXT4-fs (loop8): orphan cleanup on readonly fs [ 448.680531][ T7827] Quota error (device loop8): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 448.691316][ T7827] EXT4-fs warning (device loop8): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 448.700673][ T7811] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 448.706592][ T389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.714183][ T7827] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 448.729951][ T6288] cdc_mbim 5-1:1.0: setting tx_max = 48 [ 448.737969][ T6288] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 448.744409][ T7827] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.1912: bg 0: block 15: invalid block bitmap [ 448.750250][ T389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.766816][ T7827] EXT4-fs error (device loop8) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 448.767031][ T6288] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 3e:d1:54:7f:c4:28 [ 448.786494][ T389] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 448.796065][ T7827] EXT4-fs (loop8): 1 truncate cleaned up [ 448.810527][ T389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.820539][ T7827] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 448.828750][ T389] usb 6-1: config 0 descriptor?? [ 448.840578][ T24] audit: type=1400 audit(1785681408.675:787): avc: denied { lock } for pid=7825 comm="syz.8.1912" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 448.927575][ T301] usb 5-1: USB disconnect, device number 63 [ 448.938155][ T301] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 449.007332][ T2505] usb 8-1: USB disconnect, device number 10 [ 449.324683][ T7862] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 449.334196][ T7862] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 449.439872][ T2505] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 449.529993][ T389] usb 6-1: language id specifier not provided by device, defaulting to English [ 449.645392][ T6288] hid-generic 0000:0000:0001.001C: unknown main item tag 0x0 [ 449.653115][ T6288] hid-generic 0000:0000:0001.001C: unknown main item tag 0x0 [ 449.662130][ T6288] hid-generic 0000:0000:0001.001C: unknown main item tag 0x0 [ 449.669905][ T6288] hid-generic 0000:0000:0001.001C: unknown main item tag 0x0 [ 449.677549][ T6288] hid-generic 0000:0000:0001.001C: unknown main item tag 0x0 [ 449.685038][ T6288] hid-generic 0000:0000:0001.001C: unknown main item tag 0x0 [ 449.692492][ T6288] hid-generic 0000:0000:0001.001C: unknown main item tag 0x0 [ 449.700042][ T6288] hid-generic 0000:0000:0001.001C: unknown main item tag 0x0 [ 449.708491][ T6288] hid-generic 0000:0000:0001.001C: hidraw0: HID v0.10 Device [syz0] on syz1 [ 449.720978][ T7875] xt_hashlimit: size too large, truncated to 1048576 [ 449.769909][ T389] uclogic 0003:256C:006D.001B: failed retrieving Huion firmware version: -71 [ 449.778741][ T389] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 449.800018][ T389] uclogic: probe of 0003:256C:006D.001B failed with error -71 [ 449.829602][ T389] usb 6-1: USB disconnect, device number 44 [ 449.839872][ T2505] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.856288][ T2505] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 449.869879][ T6288] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 450.039899][ T2505] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.049026][ T2505] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.057352][ T2505] usb 8-1: Product: syz [ 450.061731][ T2505] usb 8-1: Manufacturer: syz [ 450.066355][ T2505] usb 8-1: SerialNumber: syz [ 450.110650][ T2505] cdc_mbim 8-1:1.0: skipping garbage [ 450.240021][ T6288] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 450.280504][ T6288] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.357442][ T7853] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 450.384623][ T6288] usb 9-1: config 0 descriptor?? [ 450.502627][ T7886] EXT4-fs (loop5): Unrecognized mount option "nomand" or missing value [ 451.031545][ T7895] EXT4-fs (loop4): Unrecognized mount option "nomand" or missing value [ 451.040061][ T7853] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 451.059917][ T2505] cdc_mbim 8-1:1.0: setting tx_max = 48 [ 451.150107][ T2505] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 451.171514][ T2505] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 7e:3b:b1:cd:12:51 [ 451.281049][ T389] usb 8-1: USB disconnect, device number 11 [ 451.290402][ T389] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 451.440054][ T6288] usb 9-1: Cannot set MAC address [ 451.445745][ T6288] MOSCHIP usb-ethernet driver: probe of 9-1:0.0 failed with error -71 [ 451.620796][ T6288] usb 9-1: USB disconnect, device number 11 [ 451.809069][ T730] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 451.889942][ T730] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 451.897423][ T730] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 451.909488][ T7936] xt_hashlimit: size too large, truncated to 1048576 [ 451.916490][ T730] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 451.923971][ T2505] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 451.924036][ T730] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 451.924053][ T730] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 451.924069][ T730] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 451.924084][ T730] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 451.932249][ T730] hid-generic 0000:0000:0001.001D: hidraw0: HID v0.10 Device [syz0] on syz1 [ 452.149898][ T6288] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 452.279898][ T2505] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.290999][ T2505] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 452.389819][ T730] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 452.439812][ T6288] usb 9-1: device descriptor read/64, error -71 [ 452.459912][ T2505] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.469125][ T2505] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.477384][ T2505] usb 6-1: Product: syz [ 452.481784][ T2505] usb 6-1: Manufacturer: syz [ 452.486431][ T2505] usb 6-1: SerialNumber: syz [ 452.540349][ T2505] cdc_mbim 6-1:1.0: skipping garbage [ 452.629853][ T730] usb 7-1: Using ep0 maxpacket: 8 [ 452.635637][ T7957] EXT4-fs (loop7): Unrecognized mount option "nomand" or missing value [ 452.740707][ T7910] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 452.889846][ T6288] usb 9-1: device descriptor read/64, error -71 [ 453.009965][ T730] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 453.023437][ T730] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 453.051110][ T7962] EXT4-fs (loop4): Ignoring removed bh option [ 453.057525][ T7962] EXT4-fs (loop4): Test dummy encryption mode enabled [ 453.066029][ T7962] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1937: inode #1: comm syz.4.1937: iget: illegal inode # [ 453.079349][ T7962] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1937: error while reading EA inode 1 err=-117 [ 453.091901][ T7962] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1937: inode #1: comm syz.4.1937: iget: illegal inode # [ 453.105213][ T7962] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1937: error while reading EA inode 1 err=-117 [ 453.117789][ T7962] EXT4-fs (loop4): 1 orphan inode deleted [ 453.123595][ T7962] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,bh,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,auto_da_alloc,debug_want_extra_isize=0x000000000000005c,test_dummy_encryption,dioread_lock,noblock_validity,bsddf,,errors=continue [ 453.189967][ T730] usb 7-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 453.199270][ T730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.207761][ T730] usb 7-1: Product: syz [ 453.212313][ T730] usb 7-1: Manufacturer: syz [ 453.217032][ T730] usb 7-1: SerialNumber: syz [ 453.223243][ T6288] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 453.287286][ T7965] EXT4-fs error (device loop4): ext4_lookup:1834: inode #2: comm syz.4.1937: deleted inode referenced: 15 [ 453.480172][ T7910] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 453.499886][ T2505] cdc_mbim 6-1:1.0: setting tx_max = 48 [ 453.507130][ T2505] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 453.514911][ T2505] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, e2:d1:66:5a:a8:ee [ 453.519933][ T6288] usb 9-1: device descriptor read/64, error -71 [ 453.612331][ T730] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 453.622576][ T134] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 453.632069][ T730] usb 7-1: USB disconnect, device number 48 [ 453.701593][ T2505] usb 6-1: USB disconnect, device number 45 [ 453.707859][ T2505] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 453.919841][ T6288] usb 9-1: device descriptor read/64, error -71 [ 453.992519][ T8016] xt_hashlimit: size too large, truncated to 1048576 [ 454.032817][ T8013] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 454.043863][ T6288] usb usb9-port1: attempt power cycle [ 454.057156][ T8017] netem: change failed [ 454.062507][ T8013] FAT-fs (loop4): unable to read boot sector [ 454.339835][ T2505] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 454.459822][ T6288] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 454.480307][ T8021] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 454.488168][ T8021] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 454.497253][ T8021] F2FS-fs (loop7): Unrecognized mount option "fastboo" or missing value [ 454.506019][ T730] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 454.589854][ T2505] usb 7-1: Using ep0 maxpacket: 32 [ 454.633871][ T8024] EXT4-fs (loop7): dax option not supported [ 454.639988][ T6288] usb 9-1: device descriptor read/8, error -71 [ 455.037816][ T6288] usb 9-1: device descriptor read/8, error -71 [ 455.176473][ T8032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.099850][ T730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.110828][ T2505] usb 7-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 456.119892][ T2505] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.127890][ T2505] usb 7-1: Product: syz [ 456.132128][ T730] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 456.175297][ T8037] FAULT_INJECTION: forcing a failure. [ 456.175297][ T8037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.188532][ T8037] CPU: 0 PID: 8037 Comm: syz.7.1945 Not tainted syzkaller #0 [ 456.195915][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.205993][ T8037] Call Trace: [ 456.209309][ T8037] __dump_stack+0x21/0x24 [ 456.213671][ T8037] dump_stack_lvl+0x1a7/0x208 [ 456.218390][ T8037] ? show_regs_print_info+0x18/0x18 [ 456.223609][ T8037] ? avc_has_perm+0x27f/0x3d0 [ 456.228307][ T8037] ? avc_has_perm_noaudit+0x260/0x260 [ 456.233693][ T8037] dump_stack+0x15/0x1c [ 456.237868][ T8037] should_fail+0x3ab/0x500 [ 456.242305][ T8037] should_fail_usercopy+0x1a/0x20 [ 456.247355][ T8037] _copy_from_user+0x20/0xd0 [ 456.251958][ T8037] ipv6_setsockopt+0x3cb/0x36f0 [ 456.256825][ T8037] ? 0xffffffffa002c000 [ 456.261002][ T8037] ? ipv6_update_options+0x390/0x390 [ 456.266301][ T8037] ? __kernel_text_address+0xa0/0x100 [ 456.271800][ T8037] ? unwind_get_return_address+0x4d/0x90 [ 456.277450][ T8037] ? stack_trace_save+0xf0/0xf0 [ 456.282318][ T8037] ? arch_stack_walk+0xee/0x140 [ 456.287184][ T8037] ? stack_trace_save+0xa6/0xf0 [ 456.292049][ T8037] ? stack_trace_snprint+0xe0/0xe0 [ 456.297181][ T8037] ? kasan_set_track+0x5b/0x70 [ 456.301995][ T8037] ? kasan_set_track+0x4a/0x70 [ 456.306772][ T8037] ? kasan_set_free_info+0x23/0x40 [ 456.311896][ T8037] ? ____kasan_slab_free+0x125/0x160 [ 456.317200][ T8037] ? __kasan_slab_free+0x11/0x20 [ 456.322152][ T8037] ? slab_free_freelist_hook+0xc5/0x190 [ 456.327714][ T8037] ? kmem_cache_free+0x100/0x2d0 [ 456.332668][ T8037] ? putname+0xfe/0x150 [ 456.336890][ T8037] ? do_sys_openat2+0x68e/0x750 [ 456.341754][ T8037] ? __x64_sys_openat+0x136/0x160 [ 456.346835][ T8037] ? do_syscall_64+0x31/0x40 [ 456.351443][ T8037] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 456.357533][ T8037] ? _kstrtoull+0x3bb/0x4c0 [ 456.362049][ T8037] ? avc_has_perm+0x168/0x3d0 [ 456.366747][ T8037] ? avc_has_perm+0x27f/0x3d0 [ 456.371444][ T8037] ? avc_has_perm_noaudit+0x260/0x260 [ 456.376845][ T8037] ? selinux_socket_setsockopt+0x282/0x360 [ 456.382672][ T8037] ? selinux_socket_getsockopt+0x340/0x340 [ 456.388502][ T8037] ? __fget_files+0x2e1/0x340 [ 456.393201][ T8037] udpv6_setsockopt+0x92/0xb0 [ 456.397904][ T8037] sock_common_setsockopt+0xa0/0xb0 [ 456.403123][ T8037] ? sock_common_recvmsg+0x1c0/0x1c0 [ 456.408460][ T8037] __sys_setsockopt+0x2fa/0x480 [ 456.413328][ T8037] ? __ia32_sys_recv+0xb0/0xb0 [ 456.418143][ T8037] ? ksys_write+0x1fa/0x260 [ 456.422805][ T8037] __x64_sys_setsockopt+0xbf/0xd0 [ 456.427862][ T8037] do_syscall_64+0x31/0x40 [ 456.432305][ T8037] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 456.438258][ T8037] RIP: 0033:0x7faa1fa9d019 [ 456.442709][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.462365][ T8037] RSP: 002b:00007faa1e4b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 456.470801][ T8037] RAX: ffffffffffffffda RBX: 00007faa1fd25180 RCX: 00007faa1fa9d019 [ 456.478792][ T8037] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 456.486783][ T8037] RBP: 00007faa1e4b4090 R08: 00000000000003a0 R09: 0000000000000000 [ 456.494776][ T8037] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.502781][ T8037] R13: 00007faa1fd25218 R14: 00007faa1fd25180 R15: 00007ffffc0c8ed8 [ 457.099847][ T2505] usb 7-1: Manufacturer: syz [ 457.104629][ T2505] usb 7-1: SerialNumber: syz [ 457.129862][ T2505] usb 7-1: can't set config #1, error -71 [ 457.139940][ T2505] usb 7-1: USB disconnect, device number 49 [ 457.163432][ T8044] EXT4-fs (loop4): Unrecognized mount option "nomand" or missing value [ 457.215358][ T301] hid-generic 0000:0000:0001.001E: unknown main item tag 0x0 [ 457.226135][ T301] hid-generic 0000:0000:0001.001E: unknown main item tag 0x0 [ 457.243986][ T301] hid-generic 0000:0000:0001.001E: unknown main item tag 0x0 [ 457.260133][ T301] hid-generic 0000:0000:0001.001E: unknown main item tag 0x0 [ 457.299348][ T8049] xt_hashlimit: size too large, truncated to 1048576 [ 457.300324][ T301] hid-generic 0000:0000:0001.001E: unknown main item tag 0x0 [ 457.319870][ T730] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.333120][ T730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.345485][ T301] hid-generic 0000:0000:0001.001E: unknown main item tag 0x0 [ 457.657766][ T730] usb 6-1: Product: syz [ 457.662089][ T301] hid-generic 0000:0000:0001.001E: unknown main item tag 0x0 [ 457.669539][ T730] usb 6-1: Manufacturer: syz [ 457.674621][ T301] hid-generic 0000:0000:0001.001E: unknown main item tag 0x0 [ 457.683219][ T301] hid-generic 0000:0000:0001.001E: hidraw0: HID v0.10 Device [syz0] on syz1 [ 457.699859][ T730] usb 6-1: can't set config #1, error -71 [ 457.714352][ T730] usb 6-1: USB disconnect, device number 46 [ 457.869290][ T8060] SELinux: policydb string does not match my string SE Linux [ 457.887942][ T8060] SELinux: failed to load policy [ 457.893963][ T8062] FAULT_INJECTION: forcing a failure. [ 457.893963][ T8062] name failslab, interval 1, probability 0, space 0, times 0 [ 457.918083][ T8062] CPU: 1 PID: 8062 Comm: syz.6.1953 Not tainted syzkaller #0 [ 457.925508][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.935772][ T8062] Call Trace: [ 457.939099][ T8062] __dump_stack+0x21/0x24 [ 457.943463][ T8062] dump_stack_lvl+0x1a7/0x208 [ 457.948196][ T8062] ? thaw_kernel_threads+0x220/0x220 [ 457.953508][ T8062] ? show_regs_print_info+0x18/0x18 [ 457.958730][ T8062] ? stack_trace_save+0xa6/0xf0 [ 457.963691][ T8062] dump_stack+0x15/0x1c [ 457.967866][ T8062] should_fail+0x3ab/0x500 [ 457.972302][ T8062] ? __get_vm_area_node+0x113/0x450 [ 457.977530][ T8062] __should_failslab+0xa4/0xe0 [ 457.982324][ T8062] should_failslab+0x9/0x20 [ 457.986851][ T8062] kmem_cache_alloc_trace+0x3a/0x2e0 [ 457.992155][ T8062] ? memcpy+0x56/0x70 [ 457.996160][ T8062] __get_vm_area_node+0x113/0x450 [ 458.001556][ T8062] __vmalloc_node_range+0xe7/0x7a0 [ 458.006685][ T8062] ? sel_write_load+0x2dd/0x5c0 [ 458.011570][ T8062] ? __kasan_check_write+0x14/0x20 [ 458.016701][ T8062] ? mutex_lock+0x92/0xf0 [ 458.021078][ T8062] ? sel_write_load+0x2dd/0x5c0 [ 458.025954][ T8062] vmalloc+0x78/0x90 [ 458.029870][ T8062] ? sel_write_load+0x2dd/0x5c0 [ 458.034746][ T8062] sel_write_load+0x2dd/0x5c0 [ 458.039446][ T8062] ? sel_make_dir+0x270/0x270 [ 458.044141][ T8062] ? rw_verify_area+0x1c0/0x360 [ 458.049006][ T8062] ? sel_make_dir+0x270/0x270 [ 458.053703][ T8062] vfs_write+0x344/0xd70 [ 458.057970][ T8062] ? kernel_write+0x3c0/0x3c0 [ 458.062674][ T8062] ? __kasan_check_write+0x14/0x20 [ 458.067799][ T8062] ? mutex_lock+0x92/0xf0 [ 458.072151][ T8062] ? mutex_trylock+0xb0/0xb0 [ 458.076761][ T8062] ? __fget_files+0x2e1/0x340 [ 458.081457][ T8062] ? __fdget_pos+0x2d2/0x380 [ 458.086066][ T8062] ? ksys_write+0x70/0x260 [ 458.090501][ T8062] ksys_write+0x14a/0x260 [ 458.094862][ T8062] ? __ia32_sys_read+0x90/0x90 [ 458.099652][ T8062] ? debug_smp_processor_id+0x17/0x20 [ 458.105065][ T8062] __x64_sys_write+0x7b/0x90 [ 458.109673][ T8062] do_syscall_64+0x31/0x40 [ 458.114139][ T8062] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 458.120053][ T8062] RIP: 0033:0x7f87cec31019 [ 458.124493][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.139982][ T730] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 458.144119][ T8062] RSP: 002b:00007f87cd68a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.144162][ T8062] RAX: ffffffffffffffda RBX: 00007f87ceeb8fa0 RCX: 00007f87cec31019 [ 458.168102][ T8062] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000003 [ 458.176127][ T8062] RBP: 00007f87cd68a090 R08: 0000000000000000 R09: 0000000000000000 [ 458.184163][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.192148][ T8062] R13: 00007f87ceeb9038 R14: 00007f87ceeb8fa0 R15: 00007ffeac741598 [ 458.204162][ T8062] syz.6.1953: vmalloc: allocation failure: 65212 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 458.217316][ T8062] CPU: 1 PID: 8062 Comm: syz.6.1953 Not tainted syzkaller #0 [ 458.224716][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.234797][ T8062] Call Trace: [ 458.238116][ T8062] __dump_stack+0x21/0x24 [ 458.242478][ T8062] dump_stack_lvl+0x1a7/0x208 [ 458.247181][ T8062] ? show_regs_print_info+0x18/0x18 [ 458.252410][ T8062] ? pr_cont_kernfs_name+0xe3/0xf0 [ 458.257547][ T8062] dump_stack+0x15/0x1c [ 458.261741][ T8062] warn_alloc+0x1dc/0x200 [ 458.266089][ T8062] ? __get_vm_area_node+0x113/0x450 [ 458.271311][ T8062] ? zone_watermark_ok_safe+0x290/0x290 [ 458.276883][ T8062] ? memcpy+0x56/0x70 [ 458.280913][ T8062] ? __get_vm_area_node+0x345/0x450 [ 458.286135][ T8062] __vmalloc_node_range+0x272/0x7a0 [ 458.291354][ T8062] ? __kasan_check_write+0x14/0x20 [ 458.296482][ T8062] ? mutex_lock+0x92/0xf0 [ 458.300836][ T8062] ? sel_write_load+0x2dd/0x5c0 [ 458.305707][ T8062] vmalloc+0x78/0x90 [ 458.309623][ T8062] ? sel_write_load+0x2dd/0x5c0 [ 458.314506][ T8062] sel_write_load+0x2dd/0x5c0 [ 458.319225][ T8062] ? sel_make_dir+0x270/0x270 [ 458.323940][ T8062] ? rw_verify_area+0x1c0/0x360 [ 458.328807][ T8062] ? sel_make_dir+0x270/0x270 [ 458.333524][ T8062] vfs_write+0x344/0xd70 [ 458.337788][ T8062] ? kernel_write+0x3c0/0x3c0 [ 458.342488][ T8062] ? __kasan_check_write+0x14/0x20 [ 458.347729][ T8062] ? mutex_lock+0x92/0xf0 [ 458.352083][ T8062] ? mutex_trylock+0xb0/0xb0 [ 458.356688][ T8062] ? __fget_files+0x2e1/0x340 [ 458.361394][ T8062] ? __fdget_pos+0x2d2/0x380 [ 458.365999][ T8062] ? ksys_write+0x70/0x260 [ 458.370425][ T8062] ksys_write+0x14a/0x260 [ 458.374761][ T8062] ? __ia32_sys_read+0x90/0x90 [ 458.379535][ T8062] ? debug_smp_processor_id+0x17/0x20 [ 458.384923][ T8062] __x64_sys_write+0x7b/0x90 [ 458.389520][ T8062] do_syscall_64+0x31/0x40 [ 458.393951][ T8062] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 458.399851][ T8062] RIP: 0033:0x7f87cec31019 [ 458.404298][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.424061][ T8062] RSP: 002b:00007f87cd68a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.432508][ T8062] RAX: ffffffffffffffda RBX: 00007f87ceeb8fa0 RCX: 00007f87cec31019 [ 458.440500][ T8062] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000003 [ 458.448486][ T8062] RBP: 00007f87cd68a090 R08: 0000000000000000 R09: 0000000000000000 [ 458.456487][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.464485][ T8062] R13: 00007f87ceeb9038 R14: 00007f87ceeb8fa0 R15: 00007ffeac741598 [ 458.482648][ T8062] Mem-Info: [ 458.485922][ T8062] active_anon:48 inactive_anon:33690 isolated_anon:0 [ 458.485922][ T8062] active_file:18287 inactive_file:10349 isolated_file:0 [ 458.485922][ T8062] unevictable:0 dirty:342 writeback:0 [ 458.485922][ T8062] slab_reclaimable:8397 slab_unreclaimable:75610 [ 458.485922][ T8062] mapped:30606 shmem:20008 pagetables:717 bounce:0 [ 458.485922][ T8062] free:1519662 free_pcp:1401 free_cma:0 [ 458.531961][ T8062] Node 0 active_anon:192kB inactive_anon:134860kB active_file:73148kB inactive_file:41396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122424kB dirty:1368kB writeback:0kB shmem:80032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4384kB all_unreclaimable? no [ 458.561874][ T8062] DMA32 free:2983636kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986548kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2912kB local_pcp:1496kB free_cma:0kB [ 458.590601][ T8062] lowmem_reserve[]: 0 3941 3941 [ 458.595812][ T8062] Normal free:3095340kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:192kB inactive_anon:134864kB active_file:73148kB inactive_file:41396kB unevictable:0kB writepending:1372kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:3040kB bounce:0kB free_pcp:2120kB local_pcp:1304kB free_cma:0kB [ 458.626584][ T8062] lowmem_reserve[]: 0 0 0 [ 458.631007][ T8062] DMA32: 5*4kB (UM) 4*8kB (M) 4*16kB (M) 7*32kB (UM) 8*64kB (UM) 7*128kB (UM) 6*256kB (UM) 5*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2983636kB [ 458.640020][ T6288] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 458.647281][ T8062] Normal: 681*4kB (UME) 765*8kB (UME) 764*16kB (UME) 1027*32kB (UME) 577*64kB (UME) 150*128kB (UM) 73*256kB (UME) 34*512kB (UME) 12*1024kB (ME) 10*2048kB (UM) 712*4096kB (M) = 3095276kB [ 458.673103][ T8062] 52685 total pagecache pages [ 458.677803][ T8062] 4040 pages in swap cache [ 458.682562][ T8062] Swap cache stats: add 26249, delete 22209, find 3131/3131 [ 458.690594][ T8062] Free swap = 108296kB [ 458.694810][ T8062] Total swap = 124996kB [ 458.698977][ T8062] 2097051 pages RAM [ 458.702978][ T8062] 0 pages HighMem/MovableOnly [ 458.707679][ T8062] 341386 pages reserved [ 458.712055][ T8062] 0 pages cma reserved [ 458.749895][ T730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.761054][ T730] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 458.772008][ T8075] FAT-fs (loop6): Unrecognized mount option "nonumtaiģ=0" or missing value [ 458.849921][ T33] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 458.919823][ T6288] usb 9-1: device descriptor read/64, error -71 [ 458.929863][ T730] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.939063][ T730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.947294][ T730] usb 6-1: Product: syz [ 458.951599][ T730] usb 6-1: Manufacturer: syz [ 458.956203][ T730] usb 6-1: SerialNumber: syz [ 459.000431][ T730] cdc_mbim 6-1:1.0: skipping garbage [ 459.049842][ T658] usb 7-1: new low-speed USB device number 50 using dummy_hcd [ 459.200791][ T8058] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 459.209995][ T33] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 459.219205][ T33] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.227946][ T33] usb 8-1: config 0 descriptor?? [ 459.319832][ T6288] usb 9-1: device descriptor read/64, error -71 [ 459.326191][ T658] usb 7-1: device descriptor read/64, error -71 [ 459.600071][ T6288] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 459.799817][ T658] usb 7-1: device descriptor read/64, error -71 [ 459.840034][ T8058] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 459.859986][ T730] cdc_mbim 6-1:1.0: setting tx_max = 48 [ 459.866766][ T730] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 459.874288][ T730] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 56:42:e1:46:26:58 [ 459.899870][ T6288] usb 9-1: device descriptor read/64, error -71 [ 459.975043][ T134] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 460.061985][ T730] usb 6-1: USB disconnect, device number 47 [ 460.068179][ T730] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 460.069970][ T658] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 460.289894][ T33] usb 8-1: Cannot set MAC address [ 460.295059][ T6288] usb 9-1: device descriptor read/64, error -71 [ 460.301494][ T33] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 460.310534][ T33] usb 8-1: USB disconnect, device number 12 [ 460.330945][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1961'. [ 460.349815][ T658] usb 7-1: device descriptor read/64, error -71 [ 460.412941][ T8128] EXT4-fs error (device loop7) in ext4_do_update_inode:5362: error 27 [ 460.421431][ T6288] usb usb9-port1: attempt power cycle [ 460.424674][ T8128] EXT4-fs error (device loop7) in ext4_orphan_del:3292: error 27 [ 460.435149][ T8128] EXT4-fs error (device loop7) in ext4_do_update_inode:5362: error 27 [ 460.443824][ T8128] EXT4-fs error (device loop7): ext4_evict_inode:333: inode #15: comm syz.7.1962: mark_inode_dirty error [ 460.455492][ T8128] EXT4-fs (loop7): 1 orphan inode deleted [ 460.461298][ T8128] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 460.602599][ T328] hid-generic 0000:0000:0001.001F: unknown main item tag 0x0 [ 460.610665][ T328] hid-generic 0000:0000:0001.001F: unknown main item tag 0x0 [ 460.618177][ T328] hid-generic 0000:0000:0001.001F: unknown main item tag 0x0 [ 460.625717][ T328] hid-generic 0000:0000:0001.001F: unknown main item tag 0x0 [ 460.633164][ T328] hid-generic 0000:0000:0001.001F: unknown main item tag 0x0 [ 460.640864][ T328] hid-generic 0000:0000:0001.001F: unknown main item tag 0x0 [ 460.648420][ T328] hid-generic 0000:0000:0001.001F: unknown main item tag 0x0 [ 460.655906][ T328] hid-generic 0000:0000:0001.001F: unknown main item tag 0x0 [ 460.663924][ T328] hid-generic 0000:0000:0001.001F: hidraw0: HID v0.10 Device [syz0] on syz1 [ 460.674464][ T8139] xt_hashlimit: size too large, truncated to 1048576 [ 460.759821][ T658] usb 7-1: device descriptor read/64, error -71 [ 460.849829][ T6288] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 460.879860][ T658] usb usb7-port1: attempt power cycle [ 460.967748][ T328] hid-generic 0000:0000:0001.0020: unknown main item tag 0x0 [ 460.971599][ T8145] EXT4-fs (loop5): Unrecognized mount option "nomand" or missing value [ 460.977747][ T328] hid-generic 0000:0000:0001.0020: unknown main item tag 0x0 [ 460.991216][ T6288] usb 9-1: device descriptor read/8, error -71 [ 460.997734][ T328] hid-generic 0000:0000:0001.0020: unknown main item tag 0x0 [ 461.005818][ T328] hid-generic 0000:0000:0001.0020: unknown main item tag 0x0 [ 461.013909][ T328] hid-generic 0000:0000:0001.0020: unknown main item tag 0x0 [ 461.021426][ T328] hid-generic 0000:0000:0001.0020: unknown main item tag 0x0 [ 461.029180][ T328] hid-generic 0000:0000:0001.0020: unknown main item tag 0x0 [ 461.036695][ T328] hid-generic 0000:0000:0001.0020: unknown main item tag 0x0 [ 461.043756][ T8149] xt_hashlimit: size too large, truncated to 1048576 [ 461.045996][ T328] hid-generic 0000:0000:0001.0020: hidraw0: HID v0.10 Device [syz0] on syz1 [ 461.086579][ T8150] fido_id[8150]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0001.0020/report_descriptor': No such file or directory [ 461.239869][ T6288] usb 9-1: device descriptor read/8, error -71 [ 461.259599][ T24] audit: type=1400 audit(1785681421.085:788): avc: denied { setattr } for pid=8156 comm="syz.7.1969" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.289804][ T658] usb 7-1: new low-speed USB device number 52 using dummy_hcd [ 461.460047][ T658] usb 7-1: device descriptor read/8, error -71 [ 461.652804][ T24] audit: type=1400 audit(1785681421.485:789): avc: denied { connect } for pid=8165 comm="syz.8.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 461.672475][ T24] audit: type=1400 audit(1785681421.485:790): avc: denied { write } for pid=8165 comm="syz.8.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 461.794147][ T730] hid-generic 0000:0000:0001.0021: unknown main item tag 0x0 [ 461.800232][ T658] usb 7-1: device descriptor read/8, error -71 [ 461.804194][ T730] hid-generic 0000:0000:0001.0021: unknown main item tag 0x0 [ 461.815370][ T730] hid-generic 0000:0000:0001.0021: unknown main item tag 0x0 [ 461.822903][ T730] hid-generic 0000:0000:0001.0021: unknown main item tag 0x0 [ 461.830583][ T730] hid-generic 0000:0000:0001.0021: unknown main item tag 0x0 [ 461.849891][ T328] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 461.909885][ T24] audit: type=1400 audit(1785681421.715:791): avc: denied { read } for pid=8165 comm="syz.8.1972" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 461.933929][ T33] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 461.946030][ T24] audit: type=1400 audit(1785681421.715:792): avc: denied { open } for pid=8165 comm="syz.8.1972" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 462.007963][ T8174] xt_hashlimit: size too large, truncated to 1048576 [ 462.089837][ T328] usb 5-1: Using ep0 maxpacket: 8 [ 462.210530][ T328] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 462.242957][ T328] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 462.310207][ T33] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.333873][ T33] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 462.460397][ T328] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 462.483267][ T328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.820175][ T33] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.839865][ T33] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.848018][ T328] usb 5-1: Product: syz [ 462.853202][ T33] usb 8-1: Product: syz [ 462.857465][ T33] usb 8-1: Manufacturer: syz [ 462.862964][ T328] usb 5-1: Manufacturer: syz [ 462.867618][ T328] usb 5-1: SerialNumber: syz [ 462.873181][ T33] usb 8-1: SerialNumber: syz [ 462.930386][ T33] cdc_mbim 8-1:1.0: skipping garbage [ 463.013912][ T730] hid-generic 0000:0000:0001.0021: unknown main item tag 0x0 [ 463.021423][ T730] hid-generic 0000:0000:0001.0021: unknown main item tag 0x0 [ 463.028879][ T730] hid-generic 0000:0000:0001.0021: unknown main item tag 0x0 [ 463.039935][ T730] hid-generic 0000:0000:0001.0021: hidraw0: HID v0.10 Device [syz0] on syz1 [ 463.081351][ T8179] fido_id[8179]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 463.121764][ T8164] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 463.171179][ T8183] FAT-fs (loop6): Unrecognized mount option "uniW¹_xlate=0" or missing value [ 463.190112][ T301] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 463.272216][ T328] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 463.282227][ T328] usb 5-1: USB disconnect, device number 64 [ 463.329873][ T290] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 463.559980][ T301] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.571000][ T301] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 463.689910][ T290] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 463.699207][ T290] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.707490][ T658] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 463.716254][ T290] usb 9-1: config 0 descriptor?? [ 463.750101][ T301] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.759399][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.768012][ T301] usb 6-1: Product: syz [ 463.770865][ T8164] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 463.773028][ T301] usb 6-1: Manufacturer: syz [ 463.784013][ T301] usb 6-1: SerialNumber: syz [ 463.790013][ T33] cdc_mbim 8-1:1.0: setting tx_max = 48 [ 463.799095][ T33] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 463.807363][ T33] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 4a:8a:4f:27:16:c1 [ 463.850281][ T301] cdc_mbim 6-1:1.0: skipping garbage [ 463.938764][ T134] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 463.979990][ T658] usb 7-1: device descriptor read/64, error -71 [ 463.997811][ T730] usb 8-1: USB disconnect, device number 13 [ 464.004550][ T730] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 464.017541][ T8207] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue [ 464.032283][ T8207] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.048901][ T8207] EXT4-fs error (device loop4): ext4_lookup:1830: inode #12: comm syz.4.1980: iget: bad i_size value: 2533274857506816 [ 464.052465][ T8168] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 464.069361][ T8207] EXT4-fs error (device loop4): ext4_lookup:1830: inode #12: comm syz.4.1980: iget: bad i_size value: 2533274857506816 [ 464.089360][ T24] audit: type=1400 audit(1785681423.915:793): avc: denied { append } for pid=8206 comm="syz.4.1980" path="/419/bus/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 464.126863][ T24] audit: type=1400 audit(1785681423.955:794): avc: denied { map } for pid=8206 comm="syz.4.1980" path="/419/bus/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 464.399853][ T658] usb 7-1: device descriptor read/64, error -71 [ 464.669885][ T658] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 464.789974][ T290] usb 9-1: Cannot set MAC address [ 464.795579][ T8168] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 464.804216][ T290] MOSCHIP usb-ethernet driver: probe of 9-1:0.0 failed with error -71 [ 464.818292][ T290] usb 9-1: USB disconnect, device number 20 [ 464.946642][ T301] cdc_mbim 6-1:1.0: setting tx_max = 48 [ 464.962333][ T301] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 464.970971][ T301] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 3e:48:60:a5:81:40 [ 464.992157][ T658] usb 7-1: device descriptor read/64, error -71 [ 465.027181][ T33] usb 6-1: USB disconnect, device number 48 [ 465.046121][ T33] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 465.111496][ T8256] FAT-fs (loop4): Unrecognized mount option "nonumtaiģ=0" or missing value [ 465.399838][ T658] usb 7-1: device descriptor read/64, error -71 [ 465.519962][ T658] usb usb7-port1: attempt power cycle [ 465.590543][ T8285] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1987'. [ 465.599666][ T8285] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1987'. [ 465.609445][ T8285] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1987'. [ 465.610929][ T730] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 466.259977][ T658] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 466.653408][ T301] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 466.820256][ T658] usb 7-1: device descriptor read/8, error -71 [ 466.937498][ T8296] netlink: 'syz.6.1990': attribute type 1 has an invalid length. [ 466.990291][ T8302] FAT-fs (loop6): Unrecognized mount option "uniW¹_xlate=0" or missing value [ 467.059830][ T658] usb 7-1: device descriptor read/8, error -71 [ 467.059838][ T730] usb 5-1: device descriptor read/64, error -71 [ 467.229818][ T290] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 467.299919][ T301] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.311069][ T301] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.321392][ T301] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.334518][ T301] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.343610][ T301] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.352800][ T301] usb 8-1: config 0 descriptor?? [ 467.541583][ T8313] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 467.559836][ T730] usb 5-1: device descriptor read/64, error -71 [ 467.606131][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1996'. [ 467.659982][ T290] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.671194][ T290] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 467.730645][ T8321] exfat: Deprecated parameter 'utf8' [ 467.736165][ T8321] exfat: Deprecated parameter 'utf8' [ 467.744160][ T8321] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 467.762598][ T8321] overlayfs: filesystem on './file0' not supported [ 467.829829][ T730] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 467.849915][ T290] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.859076][ T290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.867182][ T290] usb 6-1: Product: syz [ 467.871467][ T290] usb 6-1: Manufacturer: syz [ 467.876123][ T290] usb 6-1: SerialNumber: syz [ 467.889880][ T301] usbhid 8-1:0.0: can't add hid device: -71 [ 467.896221][ T301] usbhid: probe of 8-1:0.0 failed with error -71 [ 467.910459][ T301] usb 8-1: USB disconnect, device number 14 [ 467.920295][ T290] cdc_mbim 6-1:1.0: skipping garbage [ 468.052827][ T8326] fuse: Bad value for 'fd' [ 468.099898][ T730] usb 5-1: device descriptor read/64, error -71 [ 468.122559][ T8300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 468.769821][ T301] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 468.780235][ T8300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 468.799837][ T290] cdc_mbim 6-1:1.0: setting tx_max = 48 [ 468.810376][ T290] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 468.817670][ T290] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 46:2c:92:c3:6b:ee [ 468.909944][ T730] usb usb5-port1: attempt power cycle [ 468.950260][ T8345] EXT4-fs (loop8): first meta block group too large: 150994944 (group descriptor block count 1) [ 469.002229][ T2505] usb 6-1: USB disconnect, device number 49 [ 469.010251][ T2505] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 469.029842][ T301] usb 8-1: Using ep0 maxpacket: 8 [ 469.081304][ T8345] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2004'. [ 469.191210][ T301] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 469.201702][ T8368] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 469.213608][ T8368] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (24509!=33349) [ 469.229516][ T8368] EXT4-fs (loop8): failed to initialize system zone (-117) [ 469.239187][ T301] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 469.250009][ T8368] EXT4-fs (loop8): mount failed [ 469.319802][ T730] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 469.429891][ T730] usb 5-1: Using ep0 maxpacket: 32 [ 469.449901][ T301] usb 8-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 469.459104][ T301] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.467346][ T301] usb 8-1: Product: syz [ 469.472006][ T301] usb 8-1: Manufacturer: syz [ 469.476717][ T301] usb 8-1: SerialNumber: syz [ 469.539796][ T290] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 469.549876][ T730] usb 5-1: config 221 has an invalid interface number: 132 but max is 0 [ 469.558356][ T730] usb 5-1: config 221 has no interface number 0 [ 469.574993][ T730] usb 5-1: config 221 interface 132 has no altsetting 0 [ 469.727343][ T24] audit: type=1326 audit(1785681429.555:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.5.2009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2d40f019 code=0x7ffc0000 [ 469.779805][ T24] audit: type=1326 audit(1785681429.555:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.5.2009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2d40f019 code=0x7ffc0000 [ 469.782166][ T730] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=3d.87 [ 469.826284][ T24] audit: type=1326 audit(1785681429.555:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.5.2009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2d40f019 code=0x7ffc0000 [ 469.851158][ T730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.851170][ T730] usb 5-1: Product: syz [ 469.851180][ T730] usb 5-1: Manufacturer: syz [ 469.851209][ T730] usb 5-1: SerialNumber: syz [ 469.865964][ T24] audit: type=1326 audit(1785681429.555:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.5.2009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ffa2d40f019 code=0x7ffc0000 [ 469.898012][ T24] audit: type=1326 audit(1785681429.595:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.5.2009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2d40f019 code=0x7ffc0000 [ 469.898071][ T8383] EXT4-fs (loop6): Unrecognized mount option "nomand" or missing value [ 469.923107][ T24] audit: type=1326 audit(1785681429.655:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.5.2009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2d40f019 code=0x7ffc0000 [ 469.956181][ T24] audit: type=1326 audit(1785681429.655:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.5.2009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa2d40f019 code=0x7ffc0000 [ 469.981234][ T290] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.992057][ T290] usb 9-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 470.001241][ T290] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.010148][ T24] audit: type=1326 audit(1785681429.835:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.5.2009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffa2d40f019 code=0x7ffc0000 [ 470.035677][ T290] usb 9-1: config 0 descriptor?? [ 470.042608][ T301] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 470.069142][ T301] usb 8-1: USB disconnect, device number 15 [ 470.080631][ T290] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 470.095818][ T8386] FAT-fs (loop5): Unrecognized mount option "nonumtaiģ=0" or missing value [ 470.335473][ T8390] EXT4-fs (loop7): Test dummy encryption mode enabled [ 470.342532][ T8368] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 470.374254][ T8390] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.2012: inode has both inline data and extents flags [ 470.388321][ T8390] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.2012: couldn't read orphan inode 15 (err -117) [ 470.401015][ T8390] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 470.469857][ T290] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 470.485902][ T658] usb 9-1: USB disconnect, device number 21 [ 470.749897][ T290] usb 6-1: device descriptor read/64, error -71 [ 470.939674][ T8400] fuse: Bad value for 'fd' [ 471.016120][ T8402] EXT4-fs (loop8): Unrecognized mount option "nomand" or missing value [ 471.149810][ T290] usb 6-1: device descriptor read/64, error -71 [ 471.513279][ T290] usb 6-1: new low-speed USB device number 51 using dummy_hcd [ 471.630720][ T730] usb_ehset_test: probe of 5-1:221.132 failed with error -32 [ 471.642275][ T730] usb 5-1: USB disconnect, device number 67 [ 471.789827][ T290] usb 6-1: device descriptor read/64, error -71 [ 471.920319][ T8420] EXT4-fs (loop6): Ignoring removed bh option [ 471.926683][ T8420] EXT4-fs (loop6): Test dummy encryption mode enabled [ 471.933483][ T8423] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 471.948969][ T8420] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.2021: inode #1: comm syz.6.2021: iget: illegal inode # [ 471.962646][ T8420] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2021: error while reading EA inode 1 err=-117 [ 471.975344][ T8420] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.2021: inode #1: comm syz.6.2021: iget: illegal inode # [ 471.988768][ T8420] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2021: error while reading EA inode 1 err=-117 [ 472.001106][ T730] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 472.009218][ T8420] EXT4-fs (loop6): 1 orphan inode deleted [ 472.015191][ T8420] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,bh,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,auto_da_alloc,debug_want_extra_isize=0x000000000000005c,test_dummy_encryption,dioread_lock,noblock_validity,bsddf,,errors=continue [ 472.132472][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2023'. [ 472.209792][ T290] usb 6-1: device descriptor read/64, error -71 [ 472.330941][ T290] usb usb6-port1: attempt power cycle [ 472.343841][ T8432] EXT4-fs error (device loop6): ext4_lookup:1834: inode #2: comm syz.6.2021: deleted inode referenced: 15 [ 472.379890][ T730] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.402859][ T730] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 472.579864][ T730] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 472.588987][ T730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.607355][ T730] usb 5-1: Product: syz [ 472.611751][ T730] usb 5-1: Manufacturer: syz [ 472.616371][ T730] usb 5-1: SerialNumber: syz [ 472.622379][ T8438] EXT4-fs (loop7): Test dummy encryption mode enabled [ 472.651210][ T8438] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.2025: inode has both inline data and extents flags [ 472.670325][ T730] cdc_mbim 5-1:1.0: skipping garbage [ 472.680005][ T8438] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.2025: couldn't read orphan inode 15 (err -117) [ 472.700049][ T8438] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 472.739837][ T290] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 472.826241][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2026'. [ 472.875633][ T8413] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 472.904636][ T8443] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 472.916607][ T8443] EXT4-fs error (device loop7): ext4_map_blocks:742: inode #3: block 1: comm syz.7.2026: lblock 1 mapped to illegal pblock 1 (length 1) [ 472.931053][ T8443] EXT4-fs (loop7): Remounting filesystem read-only [ 472.937722][ T8443] Quota error (device loop7): write_blk: dquota write failed [ 472.945457][ T290] usb 6-1: device descriptor read/8, error -71 [ 472.952035][ T8443] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 472.962427][ T8443] EXT4-fs error (device loop7): ext4_acquire_dquot:6230: comm syz.7.2026: Failed to acquire dquot type 0 [ 472.974243][ T8443] EXT4-fs (loop7): 1 orphan inode deleted [ 472.980599][ T8443] EXT4-fs (loop7): mounted filesystem without journal. Opts: €; abort,min_batch_time=0x0000000000000008,errors=remount-ro,nodiscard,data_err=ignore,nomblk_io_submit,user_xattr, [ 473.000150][ T8449] FAT-fs (loop8): Directory bread(block 64) failed [ 473.016887][ T8449] FAT-fs (loop8): Directory bread(block 65) failed [ 473.029263][ T8449] FAT-fs (loop8): Directory bread(block 66) failed [ 473.037339][ T8443] EXT4-fs error (device loop7): ext4_remount:5882: Abort forced by user [ 473.046181][ T8449] FAT-fs (loop8): Directory bread(block 67) failed [ 473.046223][ T8449] FAT-fs (loop8): Directory bread(block 68) failed [ 473.046238][ T8449] FAT-fs (loop8): Directory bread(block 69) failed [ 473.046342][ T8449] FAT-fs (loop8): Directory bread(block 70) failed [ 473.070217][ T8443] EXT4-fs (loop7): Remounting filesystem read-only [ 473.073467][ T8449] FAT-fs (loop8): Directory bread(block 71) failed [ 473.086785][ T8449] FAT-fs (loop8): Directory bread(block 72) failed [ 473.093573][ T8449] FAT-fs (loop8): Directory bread(block 73) failed [ 473.128381][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2026'. [ 473.149892][ T8443] tipc: Started in network mode [ 473.160954][ T8443] tipc: Own node identity 7, cluster identity 4711 [ 473.169931][ T290] usb 6-1: device descriptor read/8, error -71 [ 473.176227][ T8443] tipc: 32-bit node address hash set to 7 [ 473.183082][ T8454] mmap: syz.7.2026 (8454): VmData 40960000 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 473.221248][ T8449] attempt to access beyond end of device [ 473.221248][ T8449] loop8: rw=2049, want=1352, limit=256 [ 473.232757][ T8449] attempt to access beyond end of device [ 473.232757][ T8449] loop8: rw=2049, want=1512, limit=256 [ 473.244338][ T8449] attempt to access beyond end of device [ 473.244338][ T8449] loop8: rw=2049, want=1832, limit=256 [ 473.259151][ T8449] attempt to access beyond end of device [ 473.259151][ T8449] loop8: rw=2049, want=6072, limit=256 [ 473.321564][ T8449] attempt to access beyond end of device [ 473.321564][ T8449] loop8: rw=524288, want=1248, limit=256 [ 473.333275][ T8449] attempt to access beyond end of device [ 473.333275][ T8449] loop8: rw=524288, want=1352, limit=256 [ 473.344837][ T8449] attempt to access beyond end of device [ 473.344837][ T8449] loop8: rw=524288, want=1512, limit=256 [ 473.356553][ T8449] attempt to access beyond end of device [ 473.356553][ T8449] loop8: rw=0, want=1240, limit=256 [ 473.367638][ T8449] attempt to access beyond end of device [ 473.367638][ T8449] loop8: rw=0, want=1240, limit=256 [ 473.378946][ T8449] attempt to access beyond end of device [ 473.378946][ T8449] loop8: rw=0, want=1240, limit=256 [ 473.455737][ T7] EXT4-fs error (device loop7): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 473.470468][ T7] EXT4-fs (loop7): Remounting filesystem read-only [ 473.477102][ T7] EXT4-fs error (device loop7): ext4_release_dquot:6266: comm kworker/u4:0: Failed to release dquot type 0 [ 473.530407][ T8413] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 473.549979][ T730] cdc_mbim 5-1:1.0: setting tx_max = 48 [ 473.559939][ T730] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 473.568414][ T730] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, aa:23:10:86:e7:2e [ 473.630258][ T8458] FAT-fs (loop6): Unrecognized mount option "uniW¹_xlate=0" or missing value [ 473.670295][ T290] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 473.690651][ T8459] EXT4-fs (loop7): Unrecognized mount option "nomand" or missing value [ 473.730411][ T134] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 473.752986][ T730] usb 5-1: USB disconnect, device number 68 [ 473.759337][ T730] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 473.895359][ T8176] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 473.903117][ T290] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.923144][ T290] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 474.195969][ T290] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.228134][ T290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.236403][ T290] usb 6-1: Product: syz [ 474.240779][ T290] usb 6-1: Manufacturer: syz [ 474.245476][ T290] usb 6-1: SerialNumber: syz [ 474.250350][ T8176] usb 9-1: Using ep0 maxpacket: 8 [ 474.353114][ T290] cdc_mbim 6-1:1.0: skipping garbage [ 474.440056][ T8176] usb 9-1: config 0 interface 0 has no altsetting 0 [ 474.470972][ T8176] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 474.539829][ T8176] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.548905][ T8453] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 474.565352][ T8176] usb 9-1: config 0 descriptor?? [ 475.040567][ T8529] FAT-fs (loop6): Unrecognized mount option "nonumtaiģ=0" or missing value [ 475.050501][ T8464] FAULT_INJECTION: forcing a failure. [ 475.050501][ T8464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.063799][ T8464] CPU: 0 PID: 8464 Comm: syz.8.2034 Not tainted syzkaller #0 [ 475.071214][ T8464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.081299][ T8464] Call Trace: [ 475.084642][ T8464] __dump_stack+0x21/0x24 [ 475.089037][ T8464] dump_stack_lvl+0x1a7/0x208 [ 475.093753][ T8464] ? show_regs_print_info+0x18/0x18 [ 475.098977][ T8464] dump_stack+0x15/0x1c [ 475.103159][ T8464] should_fail+0x3ab/0x500 [ 475.107638][ T8464] should_fail_usercopy+0x1a/0x20 [ 475.112685][ T8464] _copy_to_user+0x20/0x90 [ 475.117130][ T8464] __x64_sys_clock_adjtime+0x266/0x320 [ 475.122614][ T8464] ? do_clock_adjtime+0x130/0x130 [ 475.127720][ T8464] ? debug_smp_processor_id+0x17/0x20 [ 475.133117][ T8464] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 475.139210][ T8464] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 475.144867][ T8464] do_syscall_64+0x31/0x40 [ 475.149305][ T8464] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 475.155221][ T8464] RIP: 0033:0x7f6780614019 [ 475.159660][ T8464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.179295][ T8464] RSP: 002b:00007f677f06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 475.187736][ T8464] RAX: ffffffffffffffda RBX: 00007f678089bfa0 RCX: 00007f6780614019 [ 475.195713][ T8464] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 475.203712][ T8464] RBP: 00007f677f06d090 R08: 0000000000000000 R09: 0000000000000000 [ 475.211686][ T8464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.219678][ T8464] R13: 00007f678089c038 R14: 00007f678089bfa0 R15: 00007fff90fa15e8 [ 475.240042][ T8453] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 475.250127][ T290] cdc_mbim 6-1:1.0: setting tx_max = 48 [ 475.256287][ T290] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 475.263555][ T290] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 46:2b:7e:36:18:6d [ 475.274134][ T8176] usbhid 9-1:0.0: can't add hid device: -71 [ 475.284950][ T8176] usbhid: probe of 9-1:0.0 failed with error -71 [ 475.297195][ T8176] usb 9-1: USB disconnect, device number 22 [ 475.323181][ T8528] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 475.385836][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2039'. [ 475.457875][ T301] usb 6-1: USB disconnect, device number 53 [ 475.464913][ T301] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 475.516205][ T8548] EXT4-fs (loop4): Unrecognized mount option "nomand" or missing value [ 475.525531][ T8562] netlink: 276 bytes leftover after parsing attributes in process `syz.7.2042'. [ 475.536544][ T8562] netlink: 276 bytes leftover after parsing attributes in process `syz.7.2042'. [ 475.550357][ T730] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 475.562067][ T8562] FAULT_INJECTION: forcing a failure. [ 475.562067][ T8562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.576298][ T8562] CPU: 0 PID: 8562 Comm: syz.7.2042 Not tainted syzkaller #0 [ 475.583701][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.593784][ T8562] Call Trace: [ 475.597105][ T8562] __dump_stack+0x21/0x24 [ 475.601458][ T8562] dump_stack_lvl+0x1a7/0x208 [ 475.606160][ T8562] ? show_regs_print_info+0x18/0x18 [ 475.611383][ T8562] ? vfs_write+0xae4/0xd70 [ 475.615826][ T8562] dump_stack+0x15/0x1c [ 475.620002][ T8562] should_fail+0x3ab/0x500 [ 475.624471][ T8562] should_fail_usercopy+0x1a/0x20 [ 475.629518][ T8562] _copy_from_user+0x20/0xd0 [ 475.634129][ T8562] __se_sys_bpf+0x1bb/0x740 [ 475.638645][ T8562] ? __x64_sys_bpf+0x90/0x90 [ 475.643255][ T8562] ? debug_smp_processor_id+0x17/0x20 [ 475.648668][ T8562] __x64_sys_bpf+0x7b/0x90 [ 475.653104][ T8562] do_syscall_64+0x31/0x40 [ 475.657538][ T8562] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 475.663443][ T8562] RIP: 0033:0x7faa1fa9d019 [ 475.667883][ T8562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.687515][ T8562] RSP: 002b:00007faa1e4f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.695953][ T8562] RAX: ffffffffffffffda RBX: 00007faa1fd24fa0 RCX: 00007faa1fa9d019 [ 475.703971][ T8562] RDX: 0000000000000020 RSI: 0000200000000c40 RDI: 0000000000000012 [ 475.711990][ T8562] RBP: 00007faa1e4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 475.720005][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.728000][ T8562] R13: 00007faa1fd25038 R14: 00007faa1fd24fa0 R15: 00007ffffc0c8ed8 [ 475.978901][ T8571] netlink: 276 bytes leftover after parsing attributes in process `syz.8.2043'. [ 475.991234][ T8571] netlink: 276 bytes leftover after parsing attributes in process `syz.8.2043'. [ 476.210656][ T8576] FAT-fs (loop5): Unrecognized mount option "uniW¹_xlate=0" or missing value [ 476.309835][ T730] usb 7-1: device descriptor read/64, error -71 [ 476.347603][ T8581] EXT4-fs (loop4): Ignoring removed bh option [ 476.377417][ T8581] EXT4-fs (loop4): Test dummy encryption mode enabled [ 476.401448][ T8581] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.2046: inode #1: comm syz.4.2046: iget: illegal inode # [ 476.446550][ T8581] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2046: error while reading EA inode 1 err=-117 [ 476.459571][ T8581] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.2046: inode #1: comm syz.4.2046: iget: illegal inode # [ 476.483449][ T8581] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2046: error while reading EA inode 1 err=-117 [ 476.497733][ T8581] EXT4-fs (loop4): 1 orphan inode deleted [ 476.503774][ T8581] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,bh,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,auto_da_alloc,debug_want_extra_isize=0x000000000000005c,test_dummy_encryption,dioread_lock,noblock_validity,bsddf,,errors=continue [ 476.600445][ T8588] exfat: Deprecated parameter 'utf8' [ 476.605795][ T8588] exfat: Deprecated parameter 'utf8' [ 476.623351][ T8588] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 476.657345][ T8588] overlayfs: missing 'lowerdir' [ 476.699899][ T730] usb 7-1: device descriptor read/64, error -71 [ 476.759814][ T8176] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 476.844474][ T8598] EXT4-fs error (device loop4): ext4_lookup:1834: inode #2: comm syz.4.2046: deleted inode referenced: 15 [ 476.979789][ T730] usb 7-1: new low-speed USB device number 59 using dummy_hcd [ 476.999789][ T8176] usb 8-1: Using ep0 maxpacket: 8 [ 477.069840][ T5] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 477.119880][ T8176] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 477.131180][ T8176] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 477.249795][ T730] usb 7-1: device descriptor read/64, error -71 [ 477.299888][ T8176] usb 8-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 477.319343][ T8176] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.329417][ T8176] usb 8-1: Product: syz [ 477.339518][ T8176] usb 8-1: Manufacturer: syz [ 477.349618][ T8176] usb 8-1: SerialNumber: syz [ 477.439907][ T5] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8 [ 477.452433][ T5] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 477.467669][ T5] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 477.569884][ T5] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.589159][ T5] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 477.597675][ T5] usb 9-1: SerialNumber: syz [ 477.650539][ T5] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 477.659824][ T730] usb 7-1: device descriptor read/64, error -71 [ 477.780974][ T730] usb usb7-port1: attempt power cycle [ 477.801745][ T8176] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 477.811450][ T8176] usb 8-1: USB disconnect, device number 16 [ 477.863682][ T8600] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 477.908444][ T301] usb 9-1: USB disconnect, device number 23 [ 477.942732][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2052'. [ 478.041593][ T8606] EXT4-fs (loop4): Unrecognized mount option "nomand" or missing value [ 479.051073][ T5] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 479.058760][ T730] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 479.181440][ T8621] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 479.194363][ T8624] FAT-fs (loop8): Unrecognized mount option "uniW¹_xlate=0" or missing value [ 479.240072][ T8627] exfat: Deprecated parameter 'utf8' [ 479.245552][ T8627] exfat: Deprecated parameter 'utf8' [ 479.289909][ T730] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.300999][ T730] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 479.302326][ T8621] FAULT_INJECTION: forcing a failure. [ 479.302326][ T8621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.317823][ T8627] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 479.338424][ T8621] CPU: 0 PID: 8621 Comm: syz.4.2057 Not tainted syzkaller #0 [ 479.345845][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.355941][ T8621] Call Trace: [ 479.359262][ T8621] __dump_stack+0x21/0x24 [ 479.363623][ T8621] dump_stack_lvl+0x1a7/0x208 [ 479.368326][ T8621] ? thaw_kernel_threads+0x220/0x220 [ 479.373640][ T8621] ? vsnprintf+0x189d/0x1990 [ 479.378267][ T8621] ? show_regs_print_info+0x18/0x18 [ 479.383501][ T8621] dump_stack+0x15/0x1c [ 479.387686][ T8621] should_fail+0x3ab/0x500 [ 479.392165][ T8621] should_fail_usercopy+0x1a/0x20 [ 479.393997][ T8627] overlayfs: unrecognized mount option "/" or missing value [ 479.397284][ T8621] _copy_to_user+0x20/0x90 [ 479.408974][ T8621] simple_read_from_buffer+0xe9/0x160 [ 479.414377][ T8621] proc_fail_nth_read+0x1a6/0x220 [ 479.419439][ T8621] ? proc_fault_inject_write+0x310/0x310 [ 479.425114][ T8621] ? rw_verify_area+0x1c0/0x360 [ 479.430000][ T8621] ? proc_fault_inject_write+0x310/0x310 [ 479.435715][ T8621] vfs_read+0x209/0xa50 [ 479.439906][ T8621] ? kernel_read+0x70/0x70 [ 479.444355][ T8621] ? __kasan_check_write+0x14/0x20 [ 479.449501][ T8621] ? mutex_lock+0x92/0xf0 [ 479.453904][ T8621] ? mutex_trylock+0xb0/0xb0 [ 479.458519][ T8621] ? __fget_files+0x2e1/0x340 [ 479.463313][ T8621] ? __fdget_pos+0x2d2/0x380 [ 479.467940][ T8621] ? ksys_read+0x70/0x260 [ 479.472308][ T8621] ksys_read+0x14a/0x260 [ 479.476579][ T8621] ? vfs_write+0xd70/0xd70 [ 479.481014][ T8621] ? ____fput+0x15/0x20 [ 479.485231][ T8621] ? debug_smp_processor_id+0x17/0x20 [ 479.490624][ T8621] __x64_sys_read+0x7b/0x90 [ 479.495147][ T8621] do_syscall_64+0x31/0x40 [ 479.499581][ T8621] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 479.505492][ T8621] RIP: 0033:0x7fefa100084e [ 479.509932][ T8621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.529573][ T8621] RSP: 002b:00007fef9fa98fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.538029][ T8621] RAX: ffffffffffffffda RBX: 00007fef9fa996c0 RCX: 00007fefa100084e [ 479.546054][ T8621] RDX: 000000000000000f RSI: 00007fef9fa990a0 RDI: 0000000000000005 [ 479.554144][ T8621] RBP: 00007fef9fa99090 R08: 0000000000000000 R09: 0000000000000000 [ 479.562145][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.570148][ T8621] R13: 00007fefa12c8038 R14: 00007fefa12c7fa0 R15: 00007ffd60a321b8 [ 479.650361][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.661545][ T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 479.691159][ T8638] FAULT_INJECTION: forcing a failure. [ 479.691159][ T8638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.704512][ T730] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.714295][ T730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.722508][ T8638] CPU: 0 PID: 8638 Comm: syz.7.2061 Not tainted syzkaller #0 [ 479.729911][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.740012][ T8638] Call Trace: [ 479.743329][ T8638] __dump_stack+0x21/0x24 [ 479.747712][ T8638] dump_stack_lvl+0x1a7/0x208 [ 479.752406][ T8638] ? thaw_kernel_threads+0x220/0x220 [ 479.757715][ T8638] ? show_regs_print_info+0x18/0x18 [ 479.762937][ T8638] ? emulator_read_write+0x4ad/0x640 [ 479.768243][ T8638] dump_stack+0x15/0x1c [ 479.772424][ T8638] should_fail+0x3ab/0x500 [ 479.776859][ T8638] should_fail_usercopy+0x1a/0x20 [ 479.781904][ T8638] __kvm_read_guest_page+0x128/0x1c0 [ 479.787252][ T8638] kvm_vcpu_read_guest_page+0x40/0x50 [ 479.792642][ T8638] emulator_read_std+0x14f/0x1d0 [ 479.797612][ T8638] __emulate_int_real+0x465/0x740 [ 479.802654][ T8638] ? emulate_int_real+0x1d0/0x1d0 [ 479.807704][ T8638] x86_emulate_insn+0x2205/0x3630 [ 479.812749][ T8638] x86_emulate_instruction+0x95b/0x1e80 [ 479.818319][ T8638] kvm_mmu_page_fault+0x468/0x550 [ 479.823364][ T8638] handle_ept_violation+0x2c7/0x480 [ 479.828579][ T8638] ? handle_desc+0x70/0x70 [ 479.833011][ T8638] vmx_handle_exit+0x966/0x15a0 [ 479.837880][ T8638] ? vmx_flush_tlb_guest+0x240/0x240 [ 479.843184][ T8638] vcpu_enter_guest+0x304d/0x70e0 [ 479.848263][ T8638] ? push+0x660/0x660 [ 479.852368][ T8638] ? emulator_get_segment+0x2c6/0x5d0 [ 479.857769][ T8638] ? local_bh_enable+0x30/0x30 [ 479.862557][ T8638] ? segmented_read+0x60/0x300 [ 479.867350][ T8638] ? __kasan_check_read+0x11/0x20 [ 479.872396][ T8638] ? emulate_pop+0x29f/0x5f0 [ 479.877012][ T8638] ? em_sti+0x210/0x210 [ 479.881192][ T8638] ? unwind_get_return_address+0x4d/0x90 [ 479.886849][ T8638] ? stack_trace_save+0xf0/0xf0 [ 479.891717][ T8638] ? arch_stack_walk+0xee/0x140 [ 479.896593][ T8638] ? em_pop_sreg+0xd7/0x6a0 [ 479.901112][ T8638] ? stack_trace_snprint+0xe0/0xe0 [ 479.906247][ T8638] ? em_push_sreg+0x5c0/0x5c0 [ 479.910958][ T8638] ? kasan_set_track+0x5b/0x70 [ 479.915741][ T8638] ? kasan_set_free_info+0x23/0x40 [ 479.920874][ T8638] ? ____kasan_slab_free+0x125/0x160 [ 479.926178][ T8638] ? __kasan_slab_free+0x11/0x20 [ 479.931139][ T8638] ? x86_emulate_insn+0x431/0x3630 [ 479.936303][ T8638] ? __kasan_check_read+0x11/0x20 [ 479.941349][ T8638] ? vmx_get_rflags+0x103/0x180 [ 479.946219][ T8638] ? vmx_get_interrupt_shadow+0x13/0x50 [ 479.951900][ T8638] ? x86_emulate_instruction+0x1640/0x1e80 [ 479.957759][ T8638] ? complete_emulated_mmio+0x565/0x870 [ 479.963417][ T8638] kvm_arch_vcpu_ioctl_run+0xaf5/0x18f0 [ 479.968986][ T8638] kvm_vcpu_ioctl+0x7ea/0xbd0 [ 479.973683][ T8638] ? kernel_write+0x3c0/0x3c0 [ 479.978386][ T8638] ? kvm_create_vcpu_debugfs+0x190/0x190 [ 479.984036][ T8638] ? selinux_file_ioctl+0x3ad/0x4c0 [ 479.989287][ T8638] ? mutex_trylock+0xb0/0xb0 [ 479.993896][ T8638] ? __fget_files+0x2e1/0x340 [ 479.998605][ T8638] ? selinux_file_alloc_security+0x120/0x120 [ 480.004641][ T8638] ? __fget_files+0x2e1/0x340 [ 480.009347][ T8638] ? security_file_ioctl+0x84/0xa0 [ 480.014479][ T8638] ? kvm_create_vcpu_debugfs+0x190/0x190 [ 480.020142][ T8638] __se_sys_ioctl+0x121/0x1a0 [ 480.024840][ T8638] __x64_sys_ioctl+0x7b/0x90 [ 480.029449][ T8638] do_syscall_64+0x31/0x40 [ 480.033881][ T8638] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 480.039797][ T8638] RIP: 0033:0x7faa1fa9d019 [ 480.044237][ T8638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.063861][ T8638] RSP: 002b:00007faa1e4f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.072298][ T8638] RAX: ffffffffffffffda RBX: 00007faa1fd24fa0 RCX: 00007faa1fa9d019 [ 480.080381][ T8638] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 480.088371][ T8638] RBP: 00007faa1e4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 480.096367][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.104353][ T8638] R13: 00007faa1fd25038 R14: 00007faa1fd24fa0 R15: 00007ffffc0c8ed8 [ 480.121982][ T730] usb 7-1: Product: syz [ 480.126671][ T8634] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 480.141860][ T730] usb 7-1: Manufacturer: syz [ 480.147876][ T8634] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 480.160595][ T730] usb 7-1: SerialNumber: syz [ 480.177546][ T8634] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 480.203094][ T8634] SELinux: policydb version 1392508928 does not match my version range 15-33 [ 480.210244][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.221743][ T730] cdc_mbim 7-1:1.0: skipping garbage [ 480.229912][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.238982][ T5] usb 6-1: Product: syz [ 480.243370][ T8634] SELinux: failed to load policy [ 480.248651][ T5] usb 6-1: Manufacturer: syz [ 480.253473][ T5] usb 6-1: SerialNumber: syz [ 480.254480][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 480.254521][ T24] audit: type=1400 audit(1785681440.096:804): avc: denied { mounton } for pid=8633 comm="syz.4.2060" path="/429/bus/file0" dev="loop4" ino=1048654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 480.300304][ T5] cdc_mbim 6-1:1.0: skipping garbage [ 480.312422][ T24] audit: type=1400 audit(1785681440.126:805): avc: denied { append } for pid=8633 comm="syz.4.2060" path="/429/bus/freezer.state" dev="loop4" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 480.477019][ T8612] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 480.501064][ T8610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 480.511561][ T8648] EXT4-fs (loop7): Test dummy encryption mode enabled [ 480.520795][ T8648] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.2065: inode has both inline data and extents flags [ 480.534622][ T8648] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.2065: couldn't read orphan inode 15 (err -117) [ 480.546924][ T8648] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 480.557279][ T8646] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 480.616839][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2066'. [ 480.626610][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2064'. [ 480.675833][ T301] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 480.682428][ T8658] EXT4-fs (loop7): Unrecognized mount option "nomand" or missing value [ 481.859960][ T730] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 481.866337][ T730] cdc_mbim 7-1:1.0: bind() failure [ 481.872454][ T730] cdc_ncm 7-1:1.1: bind() failure [ 481.878739][ T730] usb 7-1: USB disconnect, device number 60 [ 482.236554][ T8610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 482.259864][ T5] cdc_mbim 6-1:1.0: setting tx_max = 48 [ 482.267080][ T5] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 482.289250][ T5] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, aa:4e:32:31:61:52 [ 482.350493][ T24] audit: type=1326 audit(1785681442.186:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.8.2072" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6780614019 code=0x7ffc0000 [ 482.360198][ T301] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 482.392386][ T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.401711][ T301] usb 5-1: config 0 descriptor?? [ 482.407134][ T24] audit: type=1326 audit(1785681442.186:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.8.2072" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6780614019 code=0x7ffc0000 [ 482.436215][ T24] audit: type=1326 audit(1785681442.186:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.8.2072" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6780614019 code=0x7ffc0000 [ 482.465348][ T24] audit: type=1326 audit(1785681442.226:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.8.2072" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6780614019 code=0x7ffc0000 [ 482.495231][ T24] audit: type=1326 audit(1785681442.226:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.8.2072" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6780614019 code=0x7ffc0000 [ 482.520520][ T730] usb 6-1: USB disconnect, device number 54 [ 482.521242][ T24] audit: type=1326 audit(1785681442.226:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.8.2072" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6780614019 code=0x7ffc0000 [ 482.537924][ T730] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 482.560590][ T24] audit: type=1326 audit(1785681442.226:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.8.2072" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6780614019 code=0x7ffc0000 [ 482.589904][ T8677] EXT4-fs (loop7): Unrecognized mount option "nomand" or missing value [ 482.598419][ T24] audit: type=1326 audit(1785681442.226:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.8.2072" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6780614019 code=0x7ffc0000 [ 483.160101][ T8707] exfat: Deprecated parameter 'utf8' [ 483.169634][ T8707] exfat: Deprecated parameter 'utf8' [ 483.245027][ T8718] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2077'. [ 483.326146][ T8718] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2077'. [ 483.370363][ T8718] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2077'. [ 483.385526][ T8707] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 483.458804][ T8707] overlayfs: missing 'lowerdir' [ 483.661559][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2079'. [ 483.724438][ T8726] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2078'. [ 483.762984][ T8726] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2078'. [ 483.773753][ T8726] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2078'. [ 483.784016][ T301] usb 5-1: Cannot set MAC address [ 483.789470][ T301] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 483.800630][ T301] usb 5-1: USB disconnect, device number 69 [ 483.996002][ T8730] EXT4-fs (loop4): Unrecognized mount option "nomand" or missing value [ 484.029846][ T730] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 484.169784][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2082'. [ 484.179131][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2082'. [ 484.188408][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2082'. [ 484.299811][ T730] usb 6-1: device descriptor read/64, error -71 [ 484.669860][ T301] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 485.520138][ T8753] exfat: Deprecated parameter 'utf8' [ 485.525557][ T8753] exfat: Deprecated parameter 'utf8' [ 485.589866][ T730] usb 6-1: device descriptor read/64, error -71 [ 485.597722][ T8753] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 485.602521][ T8751] EXT4-fs (loop4): Unrecognized mount option "nomand" or missing value [ 485.632692][ T8753] overlayfs: filesystem on './file0' not supported [ 486.120132][ T8764] exfat: Deprecated parameter 'utf8' [ 486.125456][ T8764] exfat: Deprecated parameter 'utf8' [ 486.130852][ T730] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 486.167831][ T8764] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 486.190835][ T8764] overlayfs: unrecognized mount option "/" or missing value [ 486.209995][ T301] usb 7-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 486.219083][ T301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.227355][ T301] usb 7-1: Product: syz [ 486.231739][ T301] usb 7-1: Manufacturer: syz [ 486.236457][ T301] usb 7-1: SerialNumber: syz [ 487.353989][ T8777] EXT4-fs (loop5): Ignoring removed bh option [ 487.371268][ T8777] EXT4-fs (loop5): Test dummy encryption mode enabled [ 487.401244][ T8777] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.2094: inode #1: comm syz.5.2094: iget: illegal inode # [ 487.428379][ T8773] F2FS-fs (loop4): invalid crc value [ 487.438806][ T730] usb 6-1: device descriptor read/64, error -71 [ 487.452477][ T8773] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 487.460458][ T8777] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2094: error while reading EA inode 1 err=-117 [ 487.479284][ T8777] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.2094: inode #1: comm syz.5.2094: iget: illegal inode # [ 487.493366][ T8777] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2094: error while reading EA inode 1 err=-117 [ 487.509266][ T8777] EXT4-fs (loop5): 1 orphan inode deleted [ 487.515489][ T8777] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,bh,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,auto_da_alloc,debug_want_extra_isize=0x000000000000005c,test_dummy_encryption,dioread_lock,noblock_validity,bsddf,,errors=continue [ 487.526813][ T8773] F2FS-fs (loop4): Start checkpoint disabled! [ 487.550297][ T8784] FAT-fs (loop8): Unrecognized mount option "nonumtaiģ=0" or missing value [ 487.562086][ T8773] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 487.583527][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 487.583543][ T24] audit: type=1326 audit(1785681447.416:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.7.2095" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 487.663868][ T24] audit: type=1326 audit(1785681447.456:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.7.2095" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 487.688850][ T24] audit: type=1326 audit(1785681447.456:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.7.2095" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 487.715278][ T24] audit: type=1326 audit(1785681447.456:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.7.2095" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 487.740242][ T24] audit: type=1326 audit(1785681447.456:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.7.2095" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 487.765259][ T24] audit: type=1326 audit(1785681447.456:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.7.2095" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 487.790398][ T24] audit: type=1326 audit(1785681447.456:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.7.2095" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 487.815357][ T24] audit: type=1326 audit(1785681447.456:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.7.2095" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 487.840365][ T24] audit: type=1326 audit(1785681447.456:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.7.2095" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 487.840477][ T8789] EXT4-fs (loop7): Unrecognized mount option "nomand" or missing value [ 487.865285][ T5] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 487.877072][ T8792] EXT4-fs error (device loop5): ext4_lookup:1834: inode #2: comm syz.5.2094: deleted inode referenced: 15 [ 487.959885][ T301] usb 7-1: MIDIStreaming interface descriptor not found [ 487.973525][ T301] usb 7-1: USB disconnect, device number 61 [ 488.419836][ T5] usb 9-1: device descriptor read/64, error -71 [ 488.451018][ T480] udevd[480]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 488.461589][ T8773] F2FS-fs (loop4): switch extent_cache option is not allowed [ 488.552629][ T8802] 9pnet: Insufficient options for proto=fd [ 488.661107][ T8806] 9pnet: Insufficient options for proto=fd [ 488.689866][ T8808] __nla_validate_parse: 4 callbacks suppressed [ 488.689877][ T8808] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2104'. [ 488.733914][ T8808] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 488.775049][ T8808] EXT4-fs error (device loop6): ext4_map_blocks:742: inode #3: block 1: comm syz.6.2104: lblock 1 mapped to illegal pblock 1 (length 1) [ 488.808836][ T8808] EXT4-fs (loop6): Remounting filesystem read-only [ 488.809926][ T5] usb 9-1: device descriptor read/64, error -71 [ 488.821258][ T8808] Quota error (device loop6): write_blk: dquota write failed [ 488.830975][ T8808] EXT4-fs error (device loop6): ext4_acquire_dquot:6230: comm syz.6.2104: Failed to acquire dquot type 0 [ 488.849828][ T8808] EXT4-fs (loop6): 1 orphan inode deleted [ 488.859899][ T8808] EXT4-fs (loop6): mounted filesystem without journal. Opts: €; abort,min_batch_time=0x0000000000000008,errors=remount-ro,nodiscard,data_err=ignore,nomblk_io_submit,user_xattr, [ 488.919288][ T8808] EXT4-fs error (device loop6): ext4_remount:5882: Abort forced by user [ 488.940836][ T8808] EXT4-fs (loop6): Remounting filesystem read-only [ 489.028833][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2104'. [ 489.038177][ T8808] tipc: Started in network mode [ 489.043119][ T8808] tipc: Own node identity 7, cluster identity 4711 [ 489.049987][ T8808] tipc: 32-bit node address hash set to 7 [ 489.400590][ T5] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 489.457158][ T319] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 489.471758][ T319] EXT4-fs (loop6): Remounting filesystem read-only [ 489.478384][ T319] EXT4-fs error (device loop6): ext4_release_dquot:6266: comm kworker/u4:4: Failed to release dquot type 0 [ 489.745210][ T8829] EXT4-fs (loop5): Unrecognized mount option "nomand" or missing value [ 490.108178][ T8831] EXT4-fs (loop7): Unrecognized mount option "nomand" or missing value [ 490.704130][ T5] usb 9-1: device descriptor read/64, error -71 [ 490.727605][ T8838] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.2113: EA inode hash validation failed [ 490.727625][ T8842] fuse: Invalid rootmode [ 490.740621][ T8838] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 490.753271][ T8838] EXT4-fs (loop4): Remounting filesystem read-only [ 490.759855][ T8838] EXT4-fs error (device loop4): ext4_dirty_inode:6181: inode #15: comm syz.4.2113: mark_inode_dirty error [ 490.771349][ T8838] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 490.779671][ T8838] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2943: inode #15: comm syz.4.2113: mark_inode_dirty error [ 490.791817][ T8838] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2946: inode #15: comm syz.4.2113: mark inode dirty (error -27) [ 490.804783][ T8838] EXT4-fs warning (device loop4): ext4_evict_inode:305: xattr delete (err -27) [ 490.813863][ T8838] EXT4-fs (loop4): 1 orphan inode deleted [ 490.819604][ T8838] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,acl,resgid=0x0000000000000000,errors=remount-ro,min_batch_time=0x0000000000001cf3, [ 491.357671][ T8860] EXT4-fs (loop8): Unrecognized mount option "nomand" or missing value [ 491.548595][ T8864] EXT4-fs (loop5): Ignoring removed bh option [ 491.636501][ T8864] EXT4-fs (loop5): Test dummy encryption mode enabled [ 491.645430][ T8864] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.2121: inode #1: comm syz.5.2121: iget: illegal inode # [ 491.658897][ T8864] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2121: error while reading EA inode 1 err=-117 [ 491.671401][ T8864] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.2121: inode #1: comm syz.5.2121: iget: illegal inode # [ 491.684851][ T8864] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2121: error while reading EA inode 1 err=-117 [ 491.698168][ T8864] EXT4-fs (loop5): 1 orphan inode deleted [ 491.704035][ T8864] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,bh,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,auto_da_alloc,debug_want_extra_isize=0x000000000000005c,test_dummy_encryption,dioread_lock,noblock_validity,bsddf,,errors=continue [ 492.184804][ T301] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 492.199498][ T8878] EXT4-fs error (device loop5): ext4_lookup:1834: inode #2: comm syz.5.2121: deleted inode referenced: 15 [ 497.110385][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 497.110400][ T24] audit: type=1326 audit(1785681456.946:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.7.2130" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 497.157980][ T8901] fuse: Bad value for 'rootmode' [ 497.158081][ T24] audit: type=1326 audit(1785681456.976:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.7.2130" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 497.188151][ T24] audit: type=1326 audit(1785681456.976:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.7.2130" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 497.213102][ T24] audit: type=1326 audit(1785681456.976:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.7.2130" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 497.238043][ T24] audit: type=1326 audit(1785681456.976:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.7.2130" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 497.262912][ T24] audit: type=1326 audit(1785681456.976:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.7.2130" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 497.288092][ T24] audit: type=1326 audit(1785681456.976:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.7.2130" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faa1fa9d019 code=0x7ffc0000 [ 497.327699][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2133'. [ 497.361714][ T8894] EXT4-fs (loop8): Unrecognized mount option "nomand" or missing value [ 497.437620][ T8911] EXT4-fs (loop4): Unrecognized mount option "nomand" or missing value [ 497.509808][ T301] usb 7-1: device not accepting address 62, error -71 [ 497.879780][ T301] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 498.208759][ T8924] EXT4-fs (loop8): Ignoring removed bh option [ 498.250851][ T8924] EXT4-fs (loop8): Test dummy encryption mode enabled [ 498.374465][ T8924] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.2136: inode #1: comm syz.8.2136: iget: illegal inode # [ 498.395092][ T8924] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2136: error while reading EA inode 1 err=-117 [ 498.408195][ T8924] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.2136: inode #1: comm syz.8.2136: iget: illegal inode # [ 498.421741][ T8924] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2136: error while reading EA inode 1 err=-117 [ 498.434838][ T8924] EXT4-fs (loop8): 1 orphan inode deleted [ 498.440800][ T8924] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,bh,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,auto_da_alloc,debug_want_extra_isize=0x000000000000005c,test_dummy_encryption,dioread_lock,noblock_validity,bsddf,,errors=continue [ 498.452607][ T301] usb 7-1: Using ep0 maxpacket: 8 [ 498.509725][ T24] audit: type=1400 audit(1785681458.336:853): avc: denied { ioctl } for pid=8931 comm="syz.7.2138" path="socket:[47915]" dev="sockfs" ino=47915 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 498.553823][ T24] audit: type=1400 audit(1785681458.346:854): avc: denied { bind } for pid=8931 comm="syz.7.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 498.573611][ T301] usb 7-1: too many configurations: 31, using maximum allowed: 8 [ 498.588222][ T24] audit: type=1400 audit(1785681458.346:855): avc: denied { read } for pid=8931 comm="syz.7.2138" path="socket:[47915]" dev="sockfs" ino=47915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 498.626197][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2141'. [ 498.636371][ T8939] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2141'. [ 498.719869][ T301] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 498.727574][ T301] usb 7-1: can't read configurations, error -61 [ 498.734015][ T301] usb usb7-port1: attempt power cycle [ 498.802517][ T8945] EXT4-fs error (device loop8): ext4_lookup:1834: inode #2: comm syz.8.2136: deleted inode referenced: 15 [ 498.977612][ T8947] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 499.139830][ T301] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 499.239837][ T301] usb 7-1: Using ep0 maxpacket: 8 [ 499.279886][ T301] usb 7-1: too many configurations: 31, using maximum allowed: 8 [ 499.539830][ T301] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 499.549582][ T301] usb 7-1: can't read configurations, error -61 [ 499.564215][ T8968] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 499.579116][ T8968] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 499.591487][ T8968] EXT4-fs (loop7): 1 truncate cleaned up [ 499.597276][ T8968] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,errors=remount-ro, [ 499.719950][ T301] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 499.809864][ T301] usb 7-1: Using ep0 maxpacket: 8 [ 499.849881][ T301] usb 7-1: too many configurations: 31, using maximum allowed: 8 [ 499.894188][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2162'. [ 499.918819][ T8994] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noinit_itable,dioread_nolock,init_itable,,errors=continue [ 499.933340][ T8994] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.969884][ T301] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 499.978930][ T301] usb 7-1: can't read configurations, error -61 [ 499.985555][ T301] usb usb7-port1: unable to enumerate USB device [ 500.557093][ T9038] ================================================================== [ 500.565260][ T9038] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3160 [ 500.573433][ T9038] Read of size 8 at addr ffff88810bd3bcd8 by task syz.6.2181/9038 [ 500.581248][ T9038] [ 500.583618][ T9038] CPU: 1 PID: 9038 Comm: syz.6.2181 Not tainted syzkaller #0 [ 500.591004][ T9038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.601107][ T9038] Call Trace: [ 500.604440][ T9038] __dump_stack+0x21/0x24 [ 500.608801][ T9038] dump_stack_lvl+0x1a7/0x208 [ 500.613509][ T9038] ? show_regs_print_info+0x18/0x18 [ 500.618704][ T9038] ? thaw_kernel_threads+0x220/0x220 [ 500.624005][ T9038] print_address_description+0x7f/0x2c0 [ 500.629578][ T9038] ? tc_setup_flow_action+0x88e/0x3160 [ 500.635059][ T9038] kasan_report+0x100/0x140 [ 500.639612][ T9038] ? flow_action_cookie_create+0x28/0x90 [ 500.645265][ T9038] ? tc_setup_flow_action+0x88e/0x3160 [ 500.650777][ T9038] __asan_report_load8_noabort+0x14/0x20 [ 500.656432][ T9038] tc_setup_flow_action+0x88e/0x3160 [ 500.661737][ T9038] mall_replace_hw_filter+0x2db/0x8c0 [ 500.667159][ T9038] ? pcpu_block_update_hint_alloc+0x8b7/0xc50 [ 500.673251][ T9038] ? mall_set_parms+0x450/0x450 [ 500.678163][ T9038] ? tcf_exts_destroy+0xb0/0xb0 [ 500.683041][ T9038] ? pcpu_alloc+0xf8d/0x16c0 [ 500.687655][ T9038] ? mall_set_parms+0x1a0/0x450 [ 500.692566][ T9038] mall_change+0x546/0x770 [ 500.697054][ T9038] ? __kasan_check_write+0x14/0x20 [ 500.702197][ T9038] ? mall_get+0xa0/0xa0 [ 500.706376][ T9038] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 500.712291][ T9038] tc_new_tfilter+0x1487/0x1ab0 [ 500.717171][ T9038] ? mall_get+0xa0/0xa0 [ 500.721349][ T9038] ? tcf_gate_entry_destructor+0x20/0x20 [ 500.726996][ T9038] ? 0xffffffffa002c000 [ 500.731188][ T9038] ? security_capable+0x87/0xb0 [ 500.736057][ T9038] ? ns_capable+0x8c/0xf0 [ 500.740414][ T9038] ? netlink_net_capable+0x125/0x160 [ 500.745722][ T9038] ? tcf_gate_entry_destructor+0x20/0x20 [ 500.751374][ T9038] rtnetlink_rcv_msg+0x811/0xca0 [ 500.756340][ T9038] ? unwind_get_return_address+0x4d/0x90 [ 500.761999][ T9038] ? rtnetlink_bind+0x80/0x80 [ 500.766739][ T9038] ? stack_trace_save+0xa6/0xf0 [ 500.771610][ T9038] ? stack_trace_snprint+0xe0/0xe0 [ 500.776738][ T9038] ? avc_has_perm+0x168/0x3d0 [ 500.781437][ T9038] ? memcpy+0x56/0x70 [ 500.785440][ T9038] ? avc_has_perm+0x27f/0x3d0 [ 500.790134][ T9038] ? __kasan_slab_alloc+0xc9/0xe0 [ 500.795195][ T9038] ? avc_has_perm_noaudit+0x260/0x260 [ 500.800610][ T9038] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 500.806703][ T9038] ? selinux_nlmsg_lookup+0x398/0x430 [ 500.812128][ T9038] netlink_rcv_skb+0x1e9/0x430 [ 500.816937][ T9038] ? rtnetlink_bind+0x80/0x80 [ 500.821641][ T9038] ? netlink_ack+0xb30/0xb30 [ 500.826254][ T9038] ? __netlink_lookup+0x387/0x3b0 [ 500.831306][ T9038] rtnetlink_rcv+0x1c/0x20 [ 500.835763][ T9038] netlink_unicast+0x86c/0xa30 [ 500.840575][ T9038] netlink_sendmsg+0x949/0xb70 [ 500.845405][ T9038] ? netlink_getsockopt+0x530/0x530 [ 500.850634][ T9038] ? security_socket_sendmsg+0x82/0xa0 [ 500.856124][ T9038] ? netlink_getsockopt+0x530/0x530 [ 500.861370][ T9038] ____sys_sendmsg+0x5be/0x8f0 [ 500.866161][ T9038] ? __sys_sendmsg_sock+0x40/0x40 [ 500.871207][ T9038] ? import_iovec+0x7c/0xb0 [ 500.875726][ T9038] ___sys_sendmsg+0x236/0x2e0 [ 500.880412][ T9038] ? __sys_sendmsg+0x280/0x280 [ 500.885190][ T9038] ? alloc_file+0x82/0x580 [ 500.889618][ T9038] ? __fdget+0x1a1/0x230 [ 500.894227][ T9038] __x64_sys_sendmsg+0x201/0x2d0 [ 500.899177][ T9038] ? __kasan_check_write+0x14/0x20 [ 500.904296][ T9038] ? ___sys_sendmsg+0x2e0/0x2e0 [ 500.909164][ T9038] ? __kasan_check_read+0x11/0x20 [ 500.914203][ T9038] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 500.919855][ T9038] do_syscall_64+0x31/0x40 [ 500.924284][ T9038] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 500.930185][ T9038] RIP: 0033:0x7f87cec31019 [ 500.934610][ T9038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.954233][ T9038] RSP: 002b:00007f87cd68a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.962663][ T9038] RAX: ffffffffffffffda RBX: 00007f87ceeb8fa0 RCX: 00007f87cec31019 [ 500.970655][ T9038] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 500.978642][ T9038] RBP: 00007f87cecc800c R08: 0000000000000000 R09: 0000000000000000 [ 500.986627][ T9038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.994615][ T9038] R13: 00007f87ceeb9038 R14: 00007f87ceeb8fa0 R15: 00007ffeac741598 [ 501.002600][ T9038] [ 501.004936][ T9038] Allocated by task 9038: [ 501.009299][ T9038] __kasan_kmalloc+0xd4/0x100 [ 501.013996][ T9038] __kmalloc+0x19f/0x330 [ 501.018247][ T9038] tcf_idr_create+0x5f/0x790 [ 501.022854][ T9038] tcf_idr_create_from_flags+0x61/0x70 [ 501.028320][ T9038] tcf_gact_init+0x2e6/0x560 [ 501.032917][ T9038] tcf_action_init_1+0x443/0x6d0 [ 501.038055][ T9038] tcf_action_init+0x227/0x780 [ 501.042863][ T9038] tcf_exts_validate+0x23c/0x540 [ 501.047824][ T9038] mall_set_parms+0x4a/0x450 [ 501.052634][ T9038] mall_change+0x47a/0x770 [ 501.057174][ T9038] tc_new_tfilter+0x1487/0x1ab0 [ 501.062240][ T9038] rtnetlink_rcv_msg+0x811/0xca0 [ 501.067311][ T9038] netlink_rcv_skb+0x1e9/0x430 [ 501.072096][ T9038] rtnetlink_rcv+0x1c/0x20 [ 501.076526][ T9038] netlink_unicast+0x86c/0xa30 [ 501.081305][ T9038] netlink_sendmsg+0x949/0xb70 [ 501.086079][ T9038] ____sys_sendmsg+0x5be/0x8f0 [ 501.090913][ T9038] ___sys_sendmsg+0x236/0x2e0 [ 501.095608][ T9038] __x64_sys_sendmsg+0x201/0x2d0 [ 501.100557][ T9038] do_syscall_64+0x31/0x40 [ 501.104992][ T9038] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 501.110918][ T9038] [ 501.113273][ T9038] Last potentially related work creation: [ 501.119009][ T9038] kasan_save_stack+0x3a/0x60 [ 501.123790][ T9038] __kasan_record_aux_stack+0xd2/0x100 [ 501.129391][ T9038] kasan_record_aux_stack_noalloc+0xb/0x10 [ 501.135409][ T9038] kvfree_call_rcu+0x117/0x670 [ 501.140335][ T9038] drop_sysctl_table+0x2f5/0x430 [ 501.145286][ T9038] drop_sysctl_table+0x2e4/0x430 [ 501.150232][ T9038] unregister_sysctl_table+0x75/0x120 [ 501.155614][ T9038] unregister_net_sysctl_table+0x15/0x20 [ 501.161344][ T9038] inetdev_event+0x788/0x1010 [ 501.166033][ T9038] raw_notifier_call_chain+0x90/0x100 [ 501.171417][ T9038] unregister_netdevice_many+0x100e/0x19f0 [ 501.177241][ T9038] unregister_netdev+0x148/0x1c0 [ 501.182190][ T9038] usbnet_disconnect+0xbb/0x3a0 [ 501.187049][ T9038] usb_unbind_interface+0x212/0x8a0 [ 501.192290][ T9038] device_release_driver_internal+0x531/0x7c0 [ 501.198400][ T9038] device_release_driver+0x19/0x20 [ 501.203544][ T9038] bus_remove_device+0x2df/0x340 [ 501.208587][ T9038] device_del+0x62e/0xe60 [ 501.212935][ T9038] usb_disable_device+0x3a8/0x750 [ 501.217985][ T9038] usb_disconnect+0x32d/0x870 [ 501.222671][ T9038] hub_event+0x19c2/0x4220 [ 501.227131][ T9038] process_one_work+0x6fd/0xbc0 [ 501.231994][ T9038] worker_thread+0xa8e/0x13c0 [ 501.236861][ T9038] kthread+0x324/0x3b0 [ 501.240994][ T9038] ret_from_fork+0x1f/0x30 [ 501.245428][ T9038] [ 501.247775][ T9038] Second to last potentially related work creation: [ 501.254378][ T9038] kasan_save_stack+0x3a/0x60 [ 501.259071][ T9038] __kasan_record_aux_stack+0xd2/0x100 [ 501.264550][ T9038] kasan_record_aux_stack_noalloc+0xb/0x10 [ 501.270367][ T9038] kvfree_call_rcu+0x117/0x670 [ 501.275143][ T9038] drop_sysctl_table+0x2f5/0x430 [ 501.280098][ T9038] drop_sysctl_table+0x2e4/0x430 [ 501.285050][ T9038] unregister_sysctl_table+0x75/0x120 [ 501.290445][ T9038] unregister_net_sysctl_table+0x15/0x20 [ 501.296103][ T9038] neigh_sysctl_unregister+0x78/0x90 [ 501.301407][ T9038] addrconf_ifdown+0x1628/0x1890 [ 501.306362][ T9038] addrconf_notify+0x3bd/0xea0 [ 501.311163][ T9038] raw_notifier_call_chain+0x90/0x100 [ 501.316555][ T9038] unregister_netdevice_many+0x100e/0x19f0 [ 501.322420][ T9038] ip_tunnel_delete_nets+0x343/0x390 [ 501.327724][ T9038] ipgre_exit_batch_net+0x22/0x30 [ 501.332778][ T9038] cleanup_net+0x5fe/0xb80 [ 501.337240][ T9038] process_one_work+0x6fd/0xbc0 [ 501.342116][ T9038] worker_thread+0xa8e/0x13c0 [ 501.346811][ T9038] kthread+0x324/0x3b0 [ 501.350896][ T9038] ret_from_fork+0x1f/0x30 [ 501.355318][ T9038] [ 501.357662][ T9038] The buggy address belongs to the object at ffff88810bd3bc00 [ 501.357662][ T9038] which belongs to the cache kmalloc-256 of size 256 [ 501.371732][ T9038] The buggy address is located 216 bytes inside of [ 501.371732][ T9038] 256-byte region [ffff88810bd3bc00, ffff88810bd3bd00) [ 501.385011][ T9038] The buggy address belongs to the page: [ 501.390682][ T9038] page:ffffea00042f4e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10bd3a [ 501.400929][ T9038] head:ffffea00042f4e80 order:1 compound_mapcount:0 [ 501.407530][ T9038] flags: 0x4000000000010200(slab|head) [ 501.413120][ T9038] raw: 4000000000010200 ffffea0004560480 0000000e0000000e ffff888100043200 [ 501.421847][ T9038] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 501.430443][ T9038] page dumped because: kasan: bad access detected [ 501.436891][ T9038] page_owner tracks the page as allocated [ 501.442650][ T9038] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 3519366861, free_ts 0 [ 501.460548][ T9038] prep_new_page+0x176/0x190 [ 501.465166][ T9038] get_page_from_freelist+0x225f/0x23f0 [ 501.470808][ T9038] __alloc_pages_nodemask+0x29a/0x640 [ 501.476223][ T9038] new_slab+0x84/0x3f0 [ 501.480423][ T9038] ___slab_alloc+0x2f8/0x4c0 [ 501.485022][ T9038] __slab_alloc+0x63/0xa0 [ 501.489369][ T9038] kmem_cache_alloc_trace+0x1a8/0x2e0 [ 501.494772][ T9038] device_add+0xb9/0xc00 [ 501.499031][ T9038] usb_new_device+0x9ba/0x1460 [ 501.503804][ T9038] register_root_hub+0x243/0x460 [ 501.508750][ T9038] usb_add_hcd+0xa64/0xf10 [ 501.513178][ T9038] dummy_hcd_probe+0x14a/0x290 [ 501.517951][ T9038] platform_drv_probe+0x11b/0x1a0 [ 501.522990][ T9038] really_probe+0x3bf/0xa60 [ 501.527532][ T9038] driver_probe_device+0xe1/0x190 [ 501.532565][ T9038] __device_attach_driver+0x282/0x3f0 [ 501.537949][ T9038] page_owner free stack trace missing [ 501.543341][ T9038] [ 501.545700][ T9038] Memory state around the buggy address: [ 501.551344][ T9038] ffff88810bd3bb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 501.559418][ T9038] ffff88810bd3bc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.567508][ T9038] >ffff88810bd3bc80: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 501.575592][ T9038] ^ [ 501.582540][ T9038] ffff88810bd3bd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 501.590619][ T9038] ffff88810bd3bd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 501.598697][ T9038] ================================================================== [ 501.606796][ T9038] Disabling lock debugging due to kernel taint [ 502.103016][ T9042] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 502.111688][ T9042] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 502.120670][ T9042] F2FS-fs (loop4): invalid crc value [ 502.128251][ T9042] F2FS-fs (loop4): Found nat_bits in checkpoint [ 502.162877][ T9042] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 502.170106][ T9042] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4