last executing test programs: 9.706629734s ago: executing program 4 (id=110): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0xfe, 0x7, 0x7ffc1ffb}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000001080000000c000c400000000000000004"], 0x28}}, 0x0) write(r0, &(0x7f0000000180)="e4945572d2c9be643f04f671be040d4bce8d851de066a711b26d6e20051bea5a187d9173bd6852602b0e4f2b79b96acbf917c761fd343982ec854e5b60aac4bb7f8074d9d2197cf3b3e17fdca4b6a430d659f25d4cc25c6fde21a2d99f184a5338384bc47853b29e6fd78ae0310fea95536cb276a88f1ff5ae9f490c2b7a0f61b77ad5e7bd38ba3b8ecec2b1708af8849849bea4d3d254523762bd5068c7c7ada17fc4a015e7645cc56ae0fa69181d257b592d21b98187dffdc0122cf67e6e1fb29486b3313596c8b75800a574fcab", 0xcf) r3 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) syz_mount_image$f2fs(&(0x7f0000000400), &(0x7f0000000440)='./bus\x00', 0x800000, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x5516, &(0x7f00000005c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000005b00)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000005b40)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000005b80)="c7", 0x1) sendfile(r5, r4, 0x0, 0x2fffe) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2, 0x4) 7.726741132s ago: executing program 0 (id=121): syz_usb_connect$uac3(0x0, 0x85, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400c200b10400001020301090273"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/91, 0x5b}], 0x1, 0xa2e3, 0xc) socket$packet(0x11, 0x3, 0x300) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xbd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000300)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r4 = openat$cgroup_procs(r0, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/142, 0x8e}], 0x1, 0x4, 0x3) pread64(r1, &(0x7f00000004c0)=""/4, 0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r5, 0xc138fd05, &(0x7f0000000000)="0400") 7.697061603s ago: executing program 4 (id=123): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x800714, &(0x7f0000000440)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f0000000b40)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") r4 = syz_open_dev$loop(&(0x7f0000001000), 0xffffff7f7ffffffd, 0x200) ioctl$BLKGETNRZONES(r4, 0x80041285, 0x0) munmap(&(0x7f0000985000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000010c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000001100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000001200), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000001280), 0x80002c1, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001640)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x24, &(0x7f0000001680)={0x1, 0x2, 0xffffffffffff7bb7, 0x100000001}) 5.853095738s ago: executing program 1 (id=130): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x2000000, 0x1d4}, 0x8c0) 5.841568498s ago: executing program 1 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000440)=ANY=[@ANYBLOB="190f0000", @ANYRES16=r1, @ANYBLOB="a1830000000000000000050000000800030027b5", @ANYRES32], 0x78}}, 0x24048001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000ecf148cf231b0000000700210061d5"], 0x24}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f00000008c0)='oom_score_adj\x00') lseek(r8, 0xefffffffffffffff, 0x1) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb25210000000800", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r4, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x2}], "54762c8e2740f570"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "762c32d3129101d7"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x8, 0x5}, {0x10, 0x4}, {0x1, 0x4}, {0x6, 0x6}, {0x3, 0x7}, {0xe, 0x3}, {0x6, 0x6}, {0x9, 0x4}], "ee3af80801a768e2"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x0, 0x1}, {0x0, 0x7}, {0x8, 0x1}, {0x2, 0x5}, {0x10, 0x2}, {0x6, 0x6}, {0x9, 0x1}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x3}], "53f3680b2b638329"}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4800}, 0x22000021) (async) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_emit_ethernet(0xc2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000040)={0xffffff78, 0x9665, 0xffff7ff2, 0xe6b1, 0x5d, "0cffffffff00400000000500", 0x9, 0x140222}) (async) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)=0xd) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000000140)=0xd) (async) r10 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x88, 0x13, 0x53b, 0x1, 0x0, {}, [{0x74, 0x1, [@m_sample={0x40, 0x1a, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x440c0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r13, &(0x7f0000000a00)=ANY=[@ANYBLOB="27000000030000000000000000000000050000000000000006000010000000002f65646974bf00e468d52fc6e14bf7"], 0x27) (async) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x2}]}, 0x10) (async) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) getsockopt$SO_TIMESTAMP(r11, 0x1, 0x40, 0x0, &(0x7f0000000080)) 5.668487432s ago: executing program 1 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(0x0, 0x6000, 0x0) open(0x0, 0x34927e, 0x20) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={0xffffffffffffffff, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000002140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f00000021c0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000002300)="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", &(0x7f0000002440)="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", 0x2, 0x0, 0x3ff}, 0x24) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x1, 0x2, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.484964097s ago: executing program 4 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys/devices/system/memory/memory35/state\x00', &(0x7f0000000500)='sysfs\x00', 0x2000004, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='offline\n', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1bf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xfffffffe}], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = gettid() r5 = gettid() timer_create(0x1, &(0x7f0000000340)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000580)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000005c0)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) timer_settime(r6, 0x1, &(0x7f00000006c0), 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000940)={[0xfffffffffbfffff5]}, 0x8, 0x0) read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020) tkill(r4, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) socket$inet(0x2, 0x3, 0x6) 5.037919917s ago: executing program 0 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x50011, &(0x7f00000003c0), 0x1, 0x793, &(0x7f0000000400)="$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") getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c80), 0x651, 0x0) capset(&(0x7f0000000cc0)={0x20080522}, &(0x7f0000000d00)={0x200002, 0x200003, 0x801, 0x4, 0x7}) recvmmsg(r1, &(0x7f0000000d40), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x18000, &(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000e40)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x1003}, 0x38) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001240)={'veth0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="800000001200080025bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="00000200000a00001400030076657468315f746f5f7465616d00000024000e000300000000000000008000000000000001040000000000000900e0400000000008001c00", @ANYRES32, @ANYBLOB="04001400053196c2272772ef4300fdd1f18fb4b208327000c0af0a00", @ANYRES32=r4, @ANYBLOB="0a000100aaaaaaaaaaaa0000"], 0x80}}, 0x24008008) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) r6 = open(&(0x7f0000001340)='./bus\x00', 0x1c1242, 0x0) ftruncate(r6, 0x2007ffb) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000001380)=0x80000000, 0x4) bind$packet(r7, &(0x7f00000013c0)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) ftruncate(r6, 0x6) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000001400)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r7, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) 4.969967699s ago: executing program 4 (id=140): r0 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000280)=ANY=[], 0xf9, 0x1213, &(0x7f0000000600)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async, rerun: 64) r2 = signalfd4(r0, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x800) (rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) move_mount(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x146) (async, rerun: 64) r3 = openat$cgroup_ro(r1, &(0x7f0000000540)='cpuacct.stat\x00', 0x275a, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x3, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@p, {0x3, 0x2, 0x3, 0xa, 0x0}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ptrace(0x10, r5) (async, rerun: 32) wait4(r5, 0x0, 0x0, 0x0) (async, rerun: 32) ptrace$pokeuser(0x6, r5, 0x350, 0x10000) (async) ptrace$pokeuser(0x6, r5, 0x388, 0x503fffc) (async, rerun: 64) r6 = fsopen(&(0x7f0000000580)='tmpfs\x00', 0x0) (rerun: 64) getpgrp(r5) (async) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001840)='size\x00', &(0x7f0000001880)='10M\x00', 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=@newlink={0x20, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7855, 0x40}}, 0x20}}, 0x20040004) (async) write$binfmt_misc(r3, &(0x7f0000000380), 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) (async) syz_mount_image$ext4(&(0x7f00000020c0)='ext4\x00', &(0x7f0000002100)='./file1\x00', 0x1000892, &(0x7f0000002140)={[{@resuid}, {@grpjquota_path={'grpjquota', 0x3d, './bus/file0'}}]}, 0x1, 0x572, &(0x7f0000002180)="$eJzs3V9rm9UfAPDvk6bdn26/dTDGTy+ksAsnc+na+meCF/NSdDjQ+xnarIymy2jSsdaB24W78UaGIOJAfAHeezl8A76KgQ6GjqIX3lSe9EmXNUmbtpnpzOcDac95npOcc/I85+R78iQkgIE1nv7JRbwUEV8lEcea9uUj2zm+Xm71ya2Z9JbE2trHvyeRZNsa5ZPs/2iW+X9E/PxFxJlca73V5ZX5YrlcWszyE7WF6xPV5ZWzVxeKc6W50rWp6enzb05PvfP2Wz3r62uX/vr2owfvn//y1Oo3Pz46fi+JC3Ek29fcjz243ZwZj/HsORmOC5sKTvagsv0k6XcD2JWhbJwPRzoHHIuhbNQD/32fR8QaMKAS4x8GVCMOaKzte7QOfmE8fm99AdTa//z6eyNxsL42OryaPLMySte7Yz2oP63jp9/u30tv0bv3IQC2dftORJzL51vnvySb/3bvXBdlNtexw/lvbYdNApo8SOOf19vFP5WsxMH6383xz2ibsbsb24//3KMeVNNRGv+92zb+3bhoNTaU5Y7WY77h5MrVcimd2/4XEadj+ECa3+p6zvnVhx3nqafx30g9Bkzrb8SCWTse5Q88e5/ZYq24lz43e3wn4uW28W+yEf8mbY5/+nxc6rKOk6X7r3Ta1xz/tu//87X2Q8Sr2fG//cya6OkVrWTr65MT9fNhonFWtPrz7slfOtXfuf9Hn0NvW6XH/3Db83+j/2NJ8/Xa6s7r+P7g36VO+7Y//u3P/5Hkk3p6JNt2s1irLU5GjCQftm6fenrfRr5RPu3/6VPtx/9W5/+hiPi0y/7fPXG3Y9F+n/9p/2d3dPx3nnj4wWffdaq/u+P/Rj11OtvSzfzXbQP38twBAAAAAADAfpOLiCOR5Aob6VyuUFj/fMeJOJwrV6q1M1cqS9dmo/5d2bEYzjWudI82fR5iMvs8bCM/tSk/HRHHI+LroUP1fGGmUp7td+cBAAAAAAAAAAAAAAAAAABgnxjt8P3/1K9D/W4d8Nz5yW8YXNuO/1780hOwL3n9h8Fl/MPgMv5hcBn/MLjySb9bAPSL138YXMY/DC7jHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq0sWL6W1t9cmtmTQ/e2N5ab5y4+xsqTpfWFiaKcxUFq8X5ho/ELKw5YMlf0S5Urk+ORVLNydqpWptorq8cnmhsnStdvnqQnGudLk0/G90CgAAAAAAAAAAAAAAAAAAAF4w1eWV+WK5XFqUkNhVIr8/miGxnmgM7D0/YH/nJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo9k8AAAD//24dNcY=") (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002740)={0x0, 0x0, 0x0}, &(0x7f0000002780)=0xc) syz_mount_image$exfat(&(0x7f00000027c0), &(0x7f0000002800)='./file0\x00', 0x2000084c, &(0x7f0000002840)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r8, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000002940)="$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") mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000140), 0x800, &(0x7f0000003e40)={[{@metacopy_off}, {@uuid_on}, {@index_off}, {@default_permissions}, {@volatile}, {@default_permissions}, {@uuid_auto}], [{@dont_measure}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@fowner_lt}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@dont_hash}, {@uid_lt}, {@flag='ro'}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'tmpfs\x00'}}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) fdatasync(r3) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xfffffe3b, 0x100000000000001) 4.828129142s ago: executing program 2 (id=141): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001980), 0x10) sendmsg$can_bcm(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="05000000e608"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)={0x5, 0x40, 0x7fff, {0x0, 0x2710}, {}, {0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x2, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$can_bcm(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)={0x5, 0x10, 0x108, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2, 0x0, 0x0, 0x24000040}, 0x800) 4.642610317s ago: executing program 1 (id=142): syz_emit_ethernet(0x73, &(0x7f0000004280)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x39, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x2, 0x32, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], "bff83ebea3b2f8c1d2"}}}}}}}, 0x0) r0 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/features/extended_error\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'nicvf0\x00', 0x8fd2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x7fffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x44004) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0xb0}}, 0x4000) 4.642451097s ago: executing program 3 (id=143): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x200000000, 0x1d4}, 0x8c0) 3.961239783s ago: executing program 2 (id=144): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r2, 0x4008af7c, &(0x7f00000001c0)={0x2, 0x4}) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) connect$tipc(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x958000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8=r0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") dup2(r0, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_udp(0x2, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$netlink(0x10, 0x3, 0x0) ptrace(0x4207, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x7}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}]}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2, 0x7f, 0x7, 0x113, 0x29, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2, 0x20, 0x0, 0x7, 0xfffffffe}}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newqdisc={0x11c, 0x24, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3, 0xfff3}, {0xfff3}, {0x7, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x14}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0xfffffffd}]}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x381, 0x7, 0x2}}}}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xf9, 0x9c, 0x0, 0x0, 0x10000, 0x10001, 0x5}}, {0xe, 0x2, [0x88a, 0x5, 0x9, 0xad, 0xffff]}}, {{0x1c, 0x1, {0xb, 0x9, 0x368f, 0xd360, 0x1, 0x0, 0xffff6015, 0x4}}, {0xc, 0x2, [0xfffd, 0x7, 0x60dd, 0x16]}}, {{0x1c, 0x1, {0x8, 0x5, 0xfff9, 0x5, 0x2, 0x8, 0x9, 0x4}}, {0xc, 0x2, [0x3, 0xff7f, 0xa, 0x1]}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x11c}}, 0x0) ftruncate(r3, 0xc2b) 3.872089056s ago: executing program 3 (id=145): gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004, @tid=r0}, &(0x7f0000000080)) syz_emit_ethernet(0x52, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x1c, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x3, 0x3, @private2, 0x3, 0x1, 0x4}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x1, 0x1, 0x9d) recvmmsg(r1, &(0x7f0000002040), 0x400000000000233, 0x10022, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x9, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0000f60180c2000003bbbbbbbbbbbb86dd60cc71c2000e32012001000000000000000000000000000000000000000000000001000004d4000000010000216d0090000000000000"], 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900082b01fec400000000000000000000000000bbfe8000000000000000000000000000aaff"], 0x0) 3.737477969s ago: executing program 1 (id=146): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = socket(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000035000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000000000a000000"], 0xec}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d32345653667601e2ac63e057c7b501d196e016466fcb78dcaaf6c3efed495a46215be00a71bfb117c31254732f700760700c00100ef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a656", 0x90, 0x20000004, 0x0, 0x0) close(r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x23) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x8, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r5, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000021c0)={{0x0, 0x9, 0x7, 0x3, 0x8000000000000000, 0x6, 0xf, 0x3, 0x7, 0x9, 0x0, 0x2, 0x4, 0x2, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001040)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x8b, "4aec70b7e4c7d7"}) 3.626520992s ago: executing program 2 (id=147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003010000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup\x00', 0x121000, 0x80) connect$can_bcm(r2, &(0x7f0000000080), 0x10) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x2, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0x0, 0x1, 0x7fff0001}]}) statx(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup\x00', 0x3900, 0x4, &(0x7f00000008c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048011}, 0x2bd8772777e04b4) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000480)=""/117, 0x75}], 0x2}, 0x7}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000000)="0400", 0xffec, 0x0, &(0x7f00000007c0)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r5, 0x5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x240000d4, &(0x7f0000000740)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 3.492177535s ago: executing program 3 (id=148): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x800714, &(0x7f0000000440)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f0000000b40)="$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") r4 = syz_open_dev$loop(&(0x7f0000001000), 0xffffff7f7ffffffd, 0x200) ioctl$BLKGETNRZONES(r4, 0x80041285, 0x0) munmap(&(0x7f0000985000/0x1000)=nil, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000010c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000001100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000001200), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000001280), 0x80002c1, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001640)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x24, &(0x7f0000001680)={0x1, 0x2, 0xffffffffffff7bb7, 0x100000001}) 3.462118626s ago: executing program 2 (id=149): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x844) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x10}}], 0x10, 0x800}}], 0x1, 0x200000c4) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000006580)={0x8, {"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", 0x1000}}, 0x1006) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000340)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8402, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x18, r7}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x18, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x8936, &(0x7f0000000140)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x12) syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f00000003c0)='./bus\x00', 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xfd, 0x553e, &(0x7f0000000580)="$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") socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000005b40)={{0xa, 0x4e21, 0x80, @private0, 0x1}, {0xa, 0x4e20, 0x8, @private1, 0x5}, 0x0, {[0xfffffff9, 0x9c3, 0x10000, 0xfffffffa, 0x4, 0xfffffffd, 0x5, 0x3ff]}}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f0000005bc0)={0xc, 0xe, &(0x7f0000005c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000006380)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000063c0)={0x0, 0x0, &(0x7f0000006400), &(0x7f0000006440), 0x619, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000006480)={r8, &(0x7f00000064c0), &(0x7f0000006500)=""/106}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000005ac0)='./bus\x00', 0x140) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005b00)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x2000000000000004) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 3.333796919s ago: executing program 4 (id=150): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000400)={0x0, 0x2a0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x6322, 0x4) sendmmsg$inet6(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r3, 0x0, 0x0, 0x12060, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) 3.068185315s ago: executing program 4 (id=151): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000400)=ANY=[@ANYBLOB="7a78de0db8c2cebf94b0542f37aff106967729ea2a27082625e46be99348a196ab7f366b4c4466d9e4d2ead7f5dcfc4739ffa61b2ea593d3247d1738dda7a0a11ce6d77cb9e907037bdf8431e1972d7d031697b34498b5e397a3214bf6a40cfd17ce4386139e96a1af20b5a501deef280d97e46165e4d7d31c583e9de11a71156558", @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x86, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff80cc03df2bac890645000078006400000029907800000000e00000010000000000649078200200000000000000000000bfd8a5dd3cf41bea4201001100005efefd7f1afca8f60ffc0e896f38da0000000b3d22b336984ffb47476e10c3ae64b1bb3b2195c4b058706558a70864bef1f0524a72fc660b8cd26e095f24ab642591"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_setup(0xc, &(0x7f0000000140)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000007c0)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000900)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}, {{0xa, 0x4e20, 0x2, @loopback, 0x200}}, {{0xa, 0x4e22, 0x8001, @loopback, 0x14}}]}, 0x210) 3.062962865s ago: executing program 32 (id=151): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000400)=ANY=[@ANYBLOB="7a78de0db8c2cebf94b0542f37aff106967729ea2a27082625e46be99348a196ab7f366b4c4466d9e4d2ead7f5dcfc4739ffa61b2ea593d3247d1738dda7a0a11ce6d77cb9e907037bdf8431e1972d7d031697b34498b5e397a3214bf6a40cfd17ce4386139e96a1af20b5a501deef280d97e46165e4d7d31c583e9de11a71156558", @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x86, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff80cc03df2bac890645000078006400000029907800000000e00000010000000000649078200200000000000000000000bfd8a5dd3cf41bea4201001100005efefd7f1afca8f60ffc0e896f38da0000000b3d22b336984ffb47476e10c3ae64b1bb3b2195c4b058706558a70864bef1f0524a72fc660b8cd26e095f24ab642591"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_setup(0xc, &(0x7f0000000140)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000007c0)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000900)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}, {{0xa, 0x4e20, 0x2, @loopback, 0x200}}, {{0xa, 0x4e22, 0x8001, @loopback, 0x14}}]}, 0x210) 2.05761285s ago: executing program 5 (id=152): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(0x0, 0x6000, 0x0) open(0x0, 0x34927e, 0x20) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={0xffffffffffffffff, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000002140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f00000021c0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000002300)="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", &(0x7f0000002440)="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", 0x2, 0x0, 0x3ff}, 0x24) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x1, 0x2, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.967699662s ago: executing program 0 (id=153): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r2, &(0x7f0000000440)=0x3, 0x12) io_setup(0x3ff, &(0x7f0000000480)=0x0) io_submit(r3, 0x2, &(0x7f00000004c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, r1, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x6, r2, &(0x7f0000000580)='m', 0x1, 0x1, 0x0, 0x0, r2}]) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2, 0x20, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x10007}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5c}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000800)={r6, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) bind$packet(r5, &(0x7f0000000840)={0x11, 0xc, r6, 0x1, 0xf}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r10, r8, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaa0cfbefef14ccaaaaaaaa00200000006143069078ac1414ffac1414aa00004e2300000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000001980), 0x10) sendmsg$can_bcm(r11, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="05000000e608"], 0x80}}, 0x0) sendmsg$can_bcm(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="0500000040000000ff7f000900190000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000200100000004000020020200"/24], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x61) read$FUSE(r12, &(0x7f0000001c40)={0x2020}, 0x2020) sendmsg$can_bcm(r11, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="050000001000003027489ad8b1e42615476fa2845cd4a506626bc92ed06900803dd06a5dd7fdc12cba86a48febd674833b1615b266783cd393b8d64d73e9b31af2ba530159c3135cfd1865611f4b7a68e59b4000000000000000a920962235c9afb007b127da0e70d0d7456c6e1cb257ab12a4a9515632557f00d5403f382e3d768db5764645a5912a7dccde", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000000000000029fd71a69d3295d8"], 0x48}, 0x2, 0x0, 0x0, 0x24040054}, 0x800) 1.831133285s ago: executing program 1 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x50011, &(0x7f00000003c0), 0x1, 0x793, &(0x7f0000000400)="$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") getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000c00)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80), 0x651, 0x0) capset(&(0x7f0000000cc0)={0x20080522}, &(0x7f0000000d00)={0x200002, 0x200003, 0x801, 0x4, 0x7}) recvmmsg(r0, &(0x7f0000000d40), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x18000, &(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000e40)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x1003}, 0x38) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001240)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="800000001200080025bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="00000200000a00001400030076657468315f746f5f7465616d00000024000e000300000000000000008000000000000001040000000000000900e0400000000008001c00", @ANYRES32, @ANYBLOB="04001400053196c2272772ef4300fdd1f18fb4b208327000c0af0a00", @ANYRES32=r3, @ANYBLOB="0a000100aaaaaaaaaaaa0000"], 0x80}}, 0x24008008) r5 = open(&(0x7f0000001340)='./bus\x00', 0x1c1242, 0x0) ftruncate(r5, 0x2007ffb) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000001380)=0x80000000, 0x4) bind$packet(r6, &(0x7f00000013c0)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) ftruncate(r5, 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r6, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) 1.719764658s ago: executing program 0 (id=155): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) capset(&(0x7f0000000100)={0x20071026}, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$int_in(r2, 0x5452, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)=""/4096) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) fchown(r0, 0xffffffffffffffff, 0xee00) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x400, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1a, 0x7, 0x5, 0x79, 0x3, 0x3], 0x3332d000, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x200000, 0xa000, 0xd, 0x7a, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xa}, {0x2, 0xffff1000, 0x8, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x7, 0x6, 0xc4, 0x10, 0x6, 0x2, 0xff, 0xc, 0xfc}, {0x1, 0xdddd1000, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0xea, 0x0, 0x89, 0x3}, {0x0, 0xffff1000, 0x3, 0x0, 0xc2, 0x3, 0x4, 0x6, 0x2, 0x34, 0x1}, {0xffffffff, 0x1, 0xc, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0x5, 0x5, 0xf1}, {0xffff1000, 0x60000, 0xc, 0x3, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0xfd}, {0x0, 0x8080000, 0x0, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x9000, 0x1}, 0xddf8ffdb, 0x0, 0x0, 0x60, 0x8, 0x5c00, 0x3000, [0x80000001, 0x800000, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.64410465s ago: executing program 3 (id=156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) socket(0x10, 0x80002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x456, &(0x7f0000001740)="$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") r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001bc0), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001c00)={0x3, 0x1, 0x10, 0x0, 0x400}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001c40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001c80)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001cc0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000001d00)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001d80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001e00), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000001e40), 0x10106, 0x2, 0x0) sendto$unix(r3, 0x0, 0x0, 0x84, &(0x7f0000001e80)=@file={0x7fc338224da5f62b, './file1\x00'}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)={0x24, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6d}}]}]}, 0x24}}, 0x8000) mkdir(&(0x7f0000001fc0)='mysys\x00', 0x1ff) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002000)='syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000002040)=0xdfa, 0x4) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000002080), 0x4) 1.23671208s ago: executing program 0 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./mnt/trace_pipe\x00', &(0x7f00000002c0), &(0x7f0000000340)=@v2={0x2000000, [{0x74f, 0x1}, {0xd, 0x80000001}]}, 0x14, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x88040, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x24020400) setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000540)=""/190) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x1) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000000)=0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) readahead(0xffffffffffffffff, 0xb, 0x83) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840)=0x100000, &(0x7f0000000880)=r0}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r3, &(0x7f0000000080)='com', 0x3) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/103, 0x67}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000900)=""/107, 0x6b}, {&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f00000001c0)=""/41, 0x29}], 0x5) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.095419283s ago: executing program 5 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000002180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x22) 728.165802ms ago: executing program 5 (id=159): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003010000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup\x00', 0x121000, 0x80) connect$can_bcm(r2, &(0x7f0000000080), 0x10) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x2, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0x0, 0x1, 0x7fff0001}]}) statx(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup\x00', 0x3900, 0x4, &(0x7f00000008c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048011}, 0x2bd8772777e04b4) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000480)=""/117, 0x75}], 0x2}, 0x7}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000000)="0400", 0xffec, 0x0, &(0x7f00000007c0)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r5, 0x5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x240000d4, &(0x7f0000000740)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 661.457134ms ago: executing program 2 (id=160): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a30c00", "9e8ecc7bb535247672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "0002d900", "a1014200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) 636.187555ms ago: executing program 5 (id=161): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x9, 0x2, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001080)=""/219, 0xdb}, {&(0x7f0000001180)=""/172, 0xac}, {&(0x7f0000001340)=""/213, 0xd5}], 0x3}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000240)='./bus\x00', 0x1800004, &(0x7f0000000280)={[{@discard_unit_segment}, {@noacl}, {@noinline_dentry}, {@alloc_mode_def}, {@grpjquota={'grpjquota', 0x3d, 'checkpoint=disable'}}, {@alloc_mode_def}, {@two_active_logs}, {@compress_cache}, {@noheap}, {@adaptive_mode}, {@atgc}, {@discard_unit_section}, {@jqfmt_vfsold}, {@inline_xattr}, {@inline_data}], [{@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'active_logs=2'}}]}, 0xfd, 0x552d, &(0x7f000000cf00)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x3, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000100)=""/15, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x31083e, &(0x7f0000000380)={[{@grpid}, {@nogrpid}, {@quota}, {@nobh}]}, 0x0, 0x511, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @c}}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000480), 0x0, 0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 630.230705ms ago: executing program 3 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000d40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000018000180140002006c6f00000000000000000000000000001c00038008000c7190d9020020000000080005000400ffff080004"], 0x48}}, 0x40000) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) setsockopt(0xffffffffffffffff, 0xd7f, 0xff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000dc0)={0x0, 0x21, 0x2}, &(0x7f0000000e00)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000e40)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x0, &(0x7f0000000e80)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="525a0000000057fdfffffdffffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000f40)='./file0\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) fcntl$setlease(r5, 0x400, 0x1) r6 = syz_create_resource$binfmt(&(0x7f0000000f80)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) close(0x3) sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001640)={0x3b4, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_GROUPS={0x398, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x27c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3eb}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$&}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff69}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@\']):^]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4cb9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}]}, {0x198, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16b, 0x2, 'z\xdb\xf4\xb7v\x9ev\xfc\xcc\x04\xa9^\xbe0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) (async) unshare(0x2040400) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000100)={0x1, 0x1, 0x80000000000033, 0xc1b2}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendto$inet(r6, &(0x7f0000000000)="c0234d631001d8fa", 0x8, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) (async) setresuid(0x0, 0x0, 0x0) (async, rerun: 32) setreuid(0x0, 0x0) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0x31) sendmsg$nl_route(r7, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=@can_newroute={0x44, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x7}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "d3698ac660061306"}, 0x4}}, @CGW_MOD_UID={0x8, 0xe, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0xde50a9659187563d}, 0x40000c0) (async, rerun: 64) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x1408, &(0x7f0000001e80)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}], [{@fowner_lt}, {@subj_user={'subj_user', 0x3d, 'exfat\x00'}}, {@subj_type={'subj_type', 0x3d, 'syz1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x64, 0x98e8c221ff4814f7, 0x63, 0x39, 0x36, 0x64], 0x2d, [0x39, 0x64, 0x39, 0x31], 0x2d, [0x37, 0x36, 0x39, 0x30], 0x2d, [0xd, 0x35, 0x61, 0x62], 0x2d, [0x39, 0x61, 0x63, 0x34, 0x31, 0x63, 0x64, 0x34]}}}, {@uid_eq={'uid', 0x3d, r8}}]}}) (rerun: 64) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x800, &(0x7f0000000800), 0x1, 0x153f, &(0x7f0000000840)="$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") (async, rerun: 32) getsockopt(r0, 0x28, 0x1, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) (rerun: 32) 368.159231ms ago: executing program 0 (id=164): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = socket(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000035000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000000000a000000"], 0xec}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d32345653667601e2ac63e057c7b501d196e016466fcb78dcaaf6c3efed495a46215be00a71bfb117c31254732f700760700c00100ef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a656", 0x90, 0x20000004, 0x0, 0x0) close(r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x23) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x8, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r5, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000021c0)={{0x0, 0x9, 0x7, 0x3, 0x8000000000000000, 0x6, 0xf, 0x3, 0x7, 0x9, 0x0, 0x2, 0x4, 0x2, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001040)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x8b, "4aec70b7e4c7d7"}) 0s ago: executing program 2 (id=165): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newqdisc={0x68, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xfff3, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x3, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000002}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000001100)='r:t_st/event1 ./file0:0x0 arg2=%bx', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRES16=0x0], 0xfc, 0x258, &(0x7f0000000500)="$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") chdir(&(0x7f0000000780)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0x0, 0xe8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000940)=ANY=[], &(0x7f0000000f00)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb9b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000001200)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x0, &(0x7f0000001380)=ANY=[@ANYRES8=r3, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', r1, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000013c0)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x6, 0xc, &(0x7f00000014c0)=ANY=[], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001540)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001580)=ANY=[@ANYBLOB="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"/3457], 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f00000000c0), 0x10) listen(r0, 0x8) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) kernel console output (not intermixed with test programs): HANGE): veth0_vlan: link becomes ready [ 25.813629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.821275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.828731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.836297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.844910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.852936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.861969][ T281] device veth0_vlan entered promiscuous mode [ 25.872460][ T280] device veth1_macvtap entered promiscuous mode [ 25.880283][ T279] device veth0_vlan entered promiscuous mode [ 25.886961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.894873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.903447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.914649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.922987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.942783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.951353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.960090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.968771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.977562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.986419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.995311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.003943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.014085][ T282] device veth1_macvtap entered promiscuous mode [ 26.023153][ T281] device veth1_macvtap entered promiscuous mode [ 26.031536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.039862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.048602][ T283] device veth1_macvtap entered promiscuous mode [ 26.056679][ T279] device veth1_macvtap entered promiscuous mode [ 26.073149][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 26.081401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.089852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.098302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.106997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.115460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.135524][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.146296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.158363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.167270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.176094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.184712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.193915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.202506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.210874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.230293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.238663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.247227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.256055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.590528][ T319] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 28.118895][ C0] sched: RT throttling activated [ 29.121236][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 29.121247][ T24] audit: type=1400 audit(1791581213.410:100): avc: denied { write } for pid=311 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 29.149968][ T24] audit: type=1400 audit(1791581213.410:101): avc: denied { mmap_zero } for pid=311 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 29.366275][ T24] audit: type=1400 audit(1791581213.420:102): avc: denied { mount } for pid=302 comm="syz.3.4" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.456500][ T325] xt_hashlimit: size too large, truncated to 1048576 [ 29.466369][ T24] audit: type=1400 audit(1791581213.960:103): avc: denied { rmdir } for pid=282 comm="syz-executor" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:logrotate_exec_t:s0" [ 29.576037][ T24] audit: type=1400 audit(1791581214.150:104): avc: denied { create } for pid=302 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.595560][ T24] audit: type=1400 audit(1791581214.150:105): avc: denied { setopt } for pid=302 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.614909][ T24] audit: type=1400 audit(1791581214.150:106): avc: denied { bind } for pid=302 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.634013][ T24] audit: type=1400 audit(1791581214.220:107): avc: denied { create } for pid=324 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.672989][ T24] audit: type=1400 audit(1791581214.220:108): avc: denied { read } for pid=324 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.689177][ T53] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.731609][ T24] audit: type=1400 audit(1791581214.220:109): avc: denied { map } for pid=302 comm="syz.3.4" path="socket:[15703]" dev="sockfs" ino=15703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.933347][ T333] loop0: p4 [ 29.947236][ T333] loop0: p4 size 262144 extends beyond EOD, truncated [ 30.108980][ T53] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.120212][ T53] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.133335][ T53] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.140137][ T53] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 30.169837][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.206600][ T53] usb 4-1: config 0 descriptor?? [ 31.009070][ T53] usbhid 4-1:0.0: can't add hid device: -71 [ 31.017033][ T53] usbhid: probe of 4-1:0.0 failed with error -71 [ 31.046090][ T53] usb 4-1: USB disconnect, device number 2 [ 31.224317][ T347] FAT-fs (loop3): Unrecognized mount option "zxÞ¸Âο”°T/7¯ñ–w)ê*'&%äké“H¡–«6kLDfÙäÒê×õÜüG9ÿ¦.¥“Ó$}8ݧ ¡æ×|¹é{ß„1á—-}—³D˜µã—£!Kö¤ ýÎC†ž–¡¯ µ¥Þï(—äaeä×ÓX>�áqeXÿÿ0xffffffffffffffff0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿ" or missing value [ 31.438967][ T300] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 31.769103][ T350] ====================================================== [ 31.769103][ T350] WARNING: the mand mount option is being deprecated and [ 31.769103][ T350] will be removed in v5.15! [ 31.769103][ T350] ====================================================== [ 31.797041][ T350] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 31.804336][ T350] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 31.813565][ T350] F2FS-fs (loop2): invalid crc value [ 31.821524][ T350] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 31.854383][ T350] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 31.861542][ T350] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 31.931063][ T300] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 31.942363][ T300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 31.956132][ T300] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 31.973883][ T300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.984997][ T300] usb 5-1: config 0 descriptor?? [ 32.048803][ T282] attempt to access beyond end of device [ 32.048803][ T282] loop2: rw=2049, want=45104, limit=40427 [ 33.078635][ T300] logitech 0003:046D:C295.0001: unknown main item tag 0x3 [ 33.079412][ T9] attempt to access beyond end of device [ 33.079412][ T9] loop0: rw=1, want=1041, limit=128 [ 33.087103][ T300] logitech 0003:046D:C295.0001: ignoring exceeding usage max [ 33.106143][ T300] logitech 0003:046D:C295.0001: unknown main item tag 0xe [ 33.108183][ T372] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.114323][ T300] logitech 0003:046D:C295.0001: unbalanced collection at end of report description [ 33.138868][ T300] logitech 0003:046D:C295.0001: parse failed [ 33.159107][ T300] logitech: probe of 0003:046D:C295.0001 failed with error -22 [ 33.168094][ T300] usb 5-1: USB disconnect, device number 2 [ 33.412007][ T376] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 33.424454][ T376] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 33.508035][ T376] F2FS-fs (loop2): invalid crc value [ 33.708980][ T376] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.259611][ T376] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 34.322793][ T376] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 34.646065][ T393] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 34.675620][ T24] kauditd_printk_skb: 32 callbacks suppressed [ 34.675640][ T24] audit: type=1400 audit(1791581219.490:142): avc: denied { create } for pid=371 comm="syz.2.14" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.689506][ T393] EXT4-fs (loop4): Test dummy encryption mode enabled [ 34.759071][ T393] EXT4-fs (loop4): Test dummy encryption mode enabled [ 34.776214][ T393] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 34.776214][ T393] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 34.776214][ T393] [ 34.794972][ T24] audit: type=1400 audit(1791581219.610:143): avc: denied { map } for pid=371 comm="syz.2.14" path="/3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.815156][ T393] EXT4-fs (loop4): Ignoring removed bh option [ 34.839849][ T24] audit: type=1400 audit(1791581219.610:144): avc: denied { write } for pid=371 comm="syz.2.14" path="/3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.897316][ T393] EXT4-fs (loop4): Ignoring removed orlov option [ 34.905049][ T382] F2FS-fs (loop3): invalid crc value [ 34.914498][ T393] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0002] [ 34.927749][ T393] System zones: 0-5 [ 34.945429][ T382] F2FS-fs (loop3): Found nat_bits in checkpoint [ 34.951871][ T393] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,inlinecrypt,usrquota,bh,orlov,,errors=continue [ 34.996724][ T24] audit: type=1400 audit(1791581219.810:145): avc: denied { write } for pid=371 comm="syz.2.14" name="001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.089938][ T382] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.163370][ T24] audit: type=1400 audit(1791581219.980:146): avc: denied { setattr } for pid=381 comm="syz.3.18" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.045248][ T24] audit: type=1400 audit(1791581220.060:147): avc: denied { bind } for pid=392 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.141364][ T382] attempt to access beyond end of device [ 36.141364][ T382] loop3: rw=2049, want=77960, limit=40427 [ 36.149524][ T24] audit: type=1400 audit(1791581220.080:148): avc: denied { setopt } for pid=392 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.306635][ T301] attempt to access beyond end of device [ 36.306635][ T301] loop2: rw=1, want=81920, limit=40427 [ 36.330070][ T301] attempt to access beyond end of device [ 36.330070][ T301] loop2: rw=1, want=53248, limit=40427 [ 36.337907][ T280] attempt to access beyond end of device [ 36.337907][ T280] loop3: rw=2049, want=45120, limit=40427 [ 36.368731][ T301] attempt to access beyond end of device [ 36.368731][ T301] loop2: rw=1, want=60856, limit=40427 [ 37.599254][ T320] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 37.705338][ T24] audit: type=1400 audit(1791581222.520:149): avc: denied { name_bind } for pid=419 comm="syz.3.23" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 37.726337][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 37.956889][ T418] F2FS-fs (loop0): fault_injection options not supported [ 38.029278][ T320] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.059377][ T418] F2FS-fs (loop0): fault_type options not supported [ 38.089473][ T320] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.149174][ T20] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.188877][ T418] F2FS-fs (loop0): invalid crc value [ 38.227078][ T20] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.331255][ T418] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.341142][ T320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 38.400235][ T20] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.409914][ T320] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 38.502799][ T20] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 38.521573][ T425] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.532729][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.541812][ T418] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 38.878954][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.887931][ T425] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 38.909399][ T320] usb 5-1: config 0 descriptor?? [ 38.917943][ T20] usb 2-1: config 0 descriptor?? [ 38.953262][ T425] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 38.979324][ T418] attempt to access beyond end of device [ 38.979324][ T418] loop0: rw=2049, want=45104, limit=40427 [ 39.071155][ T24] audit: type=1400 audit(1791581223.890:150): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 40.129660][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 40.137911][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.148636][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 40.163255][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.333233][ T320] usbhid 5-1:0.0: can't add hid device: -71 [ 40.345790][ T320] usbhid: probe of 5-1:0.0 failed with error -71 [ 40.559800][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.568042][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.576793][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.584981][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.601786][ T320] usb 5-1: USB disconnect, device number 3 [ 40.649058][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 40.656690][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 40.666865][ T20] usb 2-1: USB disconnect, device number 2 [ 40.767188][ T445] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.870185][ T445] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 40.889237][ T345] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 40.986132][ T445] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 41.211161][ T447] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 41.363445][ T447] EXT4-fs (loop1): Test dummy encryption mode enabled [ 41.459215][ T345] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.494987][ T447] EXT4-fs (loop1): Test dummy encryption mode enabled [ 41.547524][ T345] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.598567][ T447] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 41.598567][ T447] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 41.598567][ T447] [ 41.694284][ T345] usb 3-1: config 0 interface 0 has no altsetting 0 [ 41.755485][ T345] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 41.775572][ T447] EXT4-fs (loop1): Ignoring removed bh option [ 41.830617][ T447] EXT4-fs (loop1): Ignoring removed orlov option [ 41.845038][ T345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.885558][ T454] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 41.960970][ T447] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0002] [ 41.985309][ T345] usb 3-1: config 0 descriptor?? [ 41.999079][ T447] System zones: 0-5 [ 42.003833][ T454] EXT4-fs (loop0): Test dummy encryption mode enabled [ 42.011205][ T454] EXT4-fs (loop0): Test dummy encryption mode enabled [ 42.018083][ T454] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 42.018083][ T454] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 42.018083][ T454] [ 42.045137][ T454] EXT4-fs (loop0): Ignoring removed bh option [ 42.051476][ T454] EXT4-fs (loop0): Ignoring removed orlov option [ 42.079015][ T345] usb 3-1: can't set config #0, error -71 [ 42.084912][ T447] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,inlinecrypt,usrquota,bh,orlov,,errors=continue [ 42.109224][ T345] usb 3-1: USB disconnect, device number 2 [ 42.116344][ T454] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0002] [ 42.127775][ T454] System zones: 0-5 [ 42.139132][ T454] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,inlinecrypt,usrquota,bh,orlov,,errors=continue [ 42.297364][ T24] audit: type=1400 audit(1791581227.110:151): avc: denied { write } for pid=446 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.372221][ T463] EXT4-fs (loop2): Test dummy encryption mode enabled [ 42.382127][ T463] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.30: inode has both inline data and extents flags [ 42.395454][ T463] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.30: couldn't read orphan inode 15 (err -117) [ 42.407357][ T463] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 42.516692][ T463] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 42.527078][ T24] audit: type=1400 audit(1791581227.340:152): avc: denied { lock } for pid=462 comm="syz.2.30" path="/6/file1/cpuset.effective_cpus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.658992][ T320] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 42.709682][ T470] FAT-fs (loop2): Unrecognized mount option "zxÞ¸Âο”°T/7¯ñ–w)ê*'&%äké“H¡–«6kLDfÙäÒê×õÜüG9ÿ¦.¥“Ó$}8ݧ ¡æ×|¹é{ß„1á—-}—³D˜µã—£!Kö¤ ýÎC†ž–¡¯ µ¥Þï(—äaeä×ÓX>�áqeXÿÿ0xffffffffffffffff0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿ" or missing value [ 42.839485][ T473] F2FS-fs (loop0): invalid crc value [ 42.846276][ T473] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.879816][ T473] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.953834][ T345] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 43.059139][ T320] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 43.122605][ T320] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 43.190017][ T320] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 43.218122][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.259907][ T320] usb 5-1: config 0 descriptor?? [ 43.349344][ T345] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 43.388949][ T473] attempt to access beyond end of device [ 43.388949][ T473] loop0: rw=2049, want=77960, limit=40427 [ 43.400664][ T345] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 43.429036][ T345] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 43.455912][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.859585][ T345] usb 2-1: config 0 descriptor?? [ 43.943402][ T281] attempt to access beyond end of device [ 43.943402][ T281] loop0: rw=2049, want=45120, limit=40427 [ 44.119954][ T320] logitech 0003:046D:C295.0002: unknown main item tag 0x3 [ 44.127308][ T320] logitech 0003:046D:C295.0002: ignoring exceeding usage max [ 44.135015][ T484] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 44.139813][ T320] logitech 0003:046D:C295.0002: unknown main item tag 0xe [ 44.151842][ T320] logitech 0003:046D:C295.0002: unbalanced collection at end of report description [ 44.159513][ T484] EXT4-fs (loop2): Test dummy encryption mode enabled [ 44.161802][ T320] logitech 0003:046D:C295.0002: parse failed [ 44.168604][ T484] EXT4-fs (loop2): Test dummy encryption mode enabled [ 44.175307][ T320] logitech: probe of 0003:046D:C295.0002 failed with error -22 [ 44.206787][ T484] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 44.206787][ T484] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 44.206787][ T484] [ 44.249420][ T489] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.269945][ T489] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 44.278720][ T484] EXT4-fs (loop2): Ignoring removed bh option [ 44.288227][ T484] EXT4-fs (loop2): Ignoring removed orlov option [ 44.307286][ T489] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 44.339652][ T484] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0002] [ 44.348706][ T345] logitech 0003:046D:C295.0003: unknown main item tag 0x3 [ 44.351595][ T484] System zones: 0-5 [ 44.357733][ T345] logitech 0003:046D:C295.0003: ignoring exceeding usage max [ 44.363510][ T484] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,inlinecrypt,usrquota,bh,orlov,,errors=continue [ 44.372037][ T345] logitech 0003:046D:C295.0003: unknown main item tag 0xe [ 44.394962][ T345] logitech 0003:046D:C295.0003: unbalanced collection at end of report description [ 44.405473][ T345] logitech 0003:046D:C295.0003: parse failed [ 44.500827][ T345] logitech: probe of 0003:046D:C295.0003 failed with error -22 [ 44.561658][ T320] usb 5-1: USB disconnect, device number 4 [ 44.611830][ T345] usb 2-1: USB disconnect, device number 3 [ 46.211430][ T24] audit: type=1400 audit(1791581231.030:153): avc: denied { block_suspend } for pid=501 comm="syz.4.40" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.356903][ T24] audit: type=1400 audit(1791581231.060:154): avc: denied { read } for pid=501 comm="syz.4.40" dev="nsfs" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.486351][ T506] Zero length message leads to an empty skb [ 46.704058][ T24] audit: type=1400 audit(1791581231.060:155): avc: denied { open } for pid=501 comm="syz.4.40" path="net:[4026532546]" dev="nsfs" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.988460][ T24] audit: type=1400 audit(1791581231.060:156): avc: denied { create } for pid=501 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.119541][ T24] audit: type=1400 audit(1791581231.150:157): avc: denied { ioctl } for pid=501 comm="syz.4.40" path="socket:[15969]" dev="sockfs" ino=15969 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.144574][ T24] audit: type=1400 audit(1791581231.200:158): avc: denied { create } for pid=505 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.163943][ T24] audit: type=1400 audit(1791581231.200:159): avc: denied { connect } for pid=505 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.363722][ T24] audit: type=1400 audit(1791581231.260:160): avc: denied { write } for pid=502 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.565092][ T24] audit: type=1400 audit(1791581233.380:161): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.646545][ T513] FAT-fs (loop4): Unrecognized mount option "zxÞ¸Âο”°T/7¯ñ–w)ê*'&%äké“H¡–«6kLDfÙäÒê×õÜüG9ÿ¦.¥“Ó$}8ݧ ¡æ×|¹é{ß„1á—-}—³D˜µã—£!Kö¤ ýÎC†ž–¡¯ µ¥Þï(—äaeä×ÓX>�áqeXÿÿ0xffffffffffffffff0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿ" or missing value [ 48.709042][ T24] audit: type=1400 audit(1791581233.430:162): avc: denied { read } for pid=134 comm="dhcpcd" name="n15" dev="tmpfs" ino=833 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.730582][ T24] audit: type=1400 audit(1791581233.430:163): avc: denied { open } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=833 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.753612][ T24] audit: type=1400 audit(1791581233.430:164): avc: denied { getattr } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=833 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.771021][ T516] FAT-fs (loop3): Unrecognized mount option "zxÞ¸Âο”°T/7¯ñ–w)ê*'&%äké“H¡–«6kLDfÙäÒê×õÜüG9ÿ¦.¥“Ó$}8ݧ ¡æ×|¹é{ß„1á—-}—³D˜µã—£!Kö¤ ýÎC†ž–¡¯ µ¥Þï(—äaeä×ÓX>�áqeXÿÿ0xffffffffffffffff0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿ" or missing value [ 48.801624][ T518] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 48.807993][ T518] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 48.912227][ T518] F2FS-fs (loop2): invalid crc value [ 50.079483][ T518] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 50.162131][ T537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=537 comm=syz.1.47 [ 50.559040][ T24] audit: type=1400 audit(1791581235.350:165): avc: denied { create } for pid=525 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.604278][ T24] audit: type=1400 audit(1791581235.350:166): avc: denied { write } for pid=525 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.syzkaller1.link" dev="tmpfs" ino=852 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.694072][ T24] audit: type=1400 audit(1791581235.350:167): avc: denied { append } for pid=525 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller1.link" dev="tmpfs" ino=852 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.797833][ T24] audit: type=1400 audit(1791581235.400:168): avc: denied { create } for pid=534 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.827820][ T24] audit: type=1400 audit(1791581235.410:169): avc: denied { unlink } for pid=547 comm="rm" name="resolv.conf.syzkaller1.link" dev="tmpfs" ino=852 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.909711][ T537] FAT-fs (loop1): Unrecognized mount option "gid=" or missing value [ 50.940816][ T528] F2FS-fs (loop0): invalid crc value [ 51.179172][ T528] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.354967][ T528] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 52.514424][ T528] attempt to access beyond end of device [ 52.514424][ T528] loop0: rw=2049, want=77960, limit=40427 [ 52.787805][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 52.787817][ T24] audit: type=1400 audit(1791581237.600:174): avc: denied { write } for pid=589 comm="syz.3.52" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.904095][ T24] audit: type=1400 audit(1791581238.720:175): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.955947][ T281] attempt to access beyond end of device [ 53.955947][ T281] loop0: rw=2049, want=45120, limit=40427 [ 54.037058][ T24] audit: type=1400 audit(1791581238.850:176): avc: denied { ioctl } for pid=589 comm="syz.3.52" path="socket:[15146]" dev="sockfs" ino=15146 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.113971][ T610] F2FS-fs (loop1): fault_injection options not supported [ 54.122346][ T610] F2FS-fs (loop1): fault_type options not supported [ 54.130022][ T610] F2FS-fs (loop1): invalid crc value [ 54.137076][ T610] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.188539][ T610] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.403405][ T610] attempt to access beyond end of device [ 54.403405][ T610] loop1: rw=2049, want=45104, limit=40427 [ 55.698544][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 55.752707][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.765073][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 55.774408][ T646] FAT-fs (loop2): Unrecognized mount option "zxÞ¸Âο”°T/7¯ñ–w)ê*'&%äké“H¡–«6kLDfÙäÒê×õÜüG9ÿ¦.¥“Ó$}8ݧ ¡æ×|¹é{ß„1á—-}—³D˜µã—£!Kö¤ ýÎC†ž–¡¯ µ¥Þï(—äaeä×ÓX>�áqeXÿÿ0xffffffffffffffff0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿ" or missing value [ 55.803098][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.811659][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.820477][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.829164][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.837477][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.920006][ T612] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 56.199250][ T500] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.309382][ T612] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.351124][ T612] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.418757][ T612] usb 4-1: config 0 interface 0 has no altsetting 0 [ 56.453217][ T612] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 56.499987][ T612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.548045][ T612] usb 4-1: config 0 descriptor?? [ 56.569181][ T500] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.690462][ T500] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.759813][ T500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 56.793473][ T500] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 56.844273][ T500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.915443][ T500] usb 1-1: config 0 descriptor?? [ 56.921031][ T612] usbhid 4-1:0.0: can't add hid device: -71 [ 56.927749][ T612] usbhid: probe of 4-1:0.0 failed with error -71 [ 57.015287][ T612] usb 4-1: USB disconnect, device number 3 [ 57.358992][ T500] usbhid 1-1:0.0: can't add hid device: -71 [ 57.365148][ T500] usbhid: probe of 1-1:0.0 failed with error -71 [ 57.408700][ T500] usb 1-1: USB disconnect, device number 2 [ 57.611511][ T649] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 57.665206][ T649] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 57.797431][ T665] SELinux: duplicate or incompatible mount options [ 57.887943][ T649] F2FS-fs (loop4): invalid crc value [ 58.336278][ T649] F2FS-fs (loop4): Found nat_bits in checkpoint [ 58.504666][ T674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=674 comm=syz.2.65 [ 58.528495][ T24] audit: type=1400 audit(1791581243.340:177): avc: denied { create } for pid=664 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.547759][ T24] audit: type=1400 audit(1791581243.340:178): avc: denied { write } for pid=664 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.605601][ T680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'. [ 58.614616][ T24] audit: type=1400 audit(1791581243.420:179): avc: denied { nlmsg_write } for pid=679 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.637628][ T649] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 58.648364][ T674] FAT-fs (loop2): Unrecognized mount option "gid=" or missing value [ 58.651832][ T649] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 58.696001][ T24] audit: type=1400 audit(1791581243.430:180): avc: denied { create } for pid=679 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.855869][ T24] audit: type=1400 audit(1791581243.440:181): avc: denied { write } for pid=679 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.920874][ T24] audit: type=1400 audit(1791581243.440:182): avc: denied { read } for pid=679 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.948998][ T24] audit: type=1400 audit(1791581243.450:183): avc: denied { ioctl } for pid=679 comm="syz.1.66" path="socket:[16205]" dev="sockfs" ino=16205 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.020205][ T691] netlink: 156 bytes leftover after parsing attributes in process `syz.2.70'. [ 60.271279][ T24] audit: type=1400 audit(1791581244.970:184): avc: denied { read write } for pid=681 comm="syz.0.67" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.050975][ T24] audit: type=1400 audit(1791581244.980:185): avc: denied { open } for pid=681 comm="syz.0.67" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.119450][ T24] audit: type=1400 audit(1791581245.010:186): avc: denied { ioctl } for pid=681 comm="syz.0.67" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.159714][ T698] ip_tables: iptables: counters copy to user failed while replacing table [ 61.309274][ T706] FAT-fs (loop2): Unrecognized mount option "zxÞ¸Âο”°T/7¯ñ–w)ê*'&%äké“H¡–«6kLDfÙäÒê×õÜüG9ÿ¦.¥“Ó$}8ݧ ¡æ×|¹é{ß„1á—-}—³D˜µã—£!Kö¤ ýÎC†ž–¡¯ µ¥Þï(—äaeä×ÓX>�áqeXÿÿ0xffffffffffffffff0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿ" or missing value [ 61.922792][ T686] F2FS-fs (loop1): fault_injection options not supported [ 62.031002][ T686] F2FS-fs (loop1): fault_type options not supported [ 62.412575][ T686] F2FS-fs (loop1): invalid crc value [ 62.419218][ T686] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.007050][ T739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.78'. [ 63.103819][ T739] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 63.269002][ T416] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 63.550528][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 63.550553][ T24] audit: type=1400 audit(1791581248.370:199): avc: denied { append } for pid=764 comm="syz.2.83" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.628991][ T759] FAULT_INJECTION: forcing a failure. [ 63.628991][ T759] name failslab, interval 1, probability 0, space 0, times 1 [ 63.643190][ T759] CPU: 0 PID: 759 Comm: syz.1.81 Not tainted syzkaller #0 [ 63.650444][ T759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.660541][ T759] Call Trace: [ 63.663879][ T759] __dump_stack+0x21/0x24 [ 63.668248][ T759] dump_stack_lvl+0x1a7/0x208 [ 63.672954][ T759] ? show_regs_print_info+0x18/0x18 [ 63.678182][ T759] ? kasan_unpoison+0x67/0x90 [ 63.682892][ T759] dump_stack+0x15/0x1c [ 63.687449][ T759] should_fail+0x3ab/0x500 [ 63.691886][ T759] ? netlink_trim+0x193/0x230 [ 63.696595][ T759] __should_failslab+0xa4/0xe0 [ 63.701386][ T759] should_failslab+0x9/0x20 [ 63.705916][ T759] __kmalloc_track_caller+0x5f/0x310 [ 63.711225][ T759] ? netlink_trim+0x193/0x230 [ 63.715929][ T759] pskb_expand_head+0x123/0x11c0 [ 63.721265][ T759] netlink_trim+0x193/0x230 [ 63.725798][ T759] netlink_broadcast_filtered+0x75/0x12c0 [ 63.731632][ T759] ? tc_chain_fill_node+0x494/0x790 [ 63.736866][ T759] ? __tcf_chain_put+0x208/0x6f0 [ 63.741830][ T759] netlink_broadcast+0x3a/0x50 [ 63.746629][ T759] rtnetlink_send+0x11a/0x170 [ 63.751731][ T759] __tcf_chain_put+0x264/0x6f0 [ 63.756530][ T759] tcf_proto_destroy+0x1e6/0x260 [ 63.761582][ T759] tc_new_tfilter+0xee7/0x1ab0 [ 63.766380][ T759] ? flow_get+0xc0/0xc0 [ 63.770753][ T759] ? tcf_gate_entry_destructor+0x20/0x20 [ 63.776413][ T759] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 63.782075][ T759] ? tcf_gate_entry_destructor+0x20/0x20 [ 63.788119][ T759] ? rtnetlink_rcv_msg+0x7ff/0xca0 [ 63.793259][ T759] ? tcf_gate_entry_destructor+0x20/0x20 [ 63.798911][ T759] rtnetlink_rcv_msg+0x811/0xca0 [ 63.803880][ T759] ? __switch_to+0x53e/0x10a0 [ 63.808594][ T759] ? rtnetlink_bind+0x80/0x80 [ 63.813321][ T759] ? compat_start_thread+0x80/0x80 [ 63.818462][ T759] ? native_set_ldt+0x370/0x370 [ 63.823714][ T759] ? _raw_spin_unlock_irq+0x4e/0x70 [ 63.828975][ T759] ? finish_task_switch+0x12e/0x5a0 [ 63.834198][ T759] ? switch_mm_irqs_off+0x752/0x990 [ 63.839423][ T759] ? __switch_to_asm+0x3a/0x60 [ 63.844220][ T759] ? __kasan_check_write+0x14/0x20 [ 63.849354][ T759] ? _raw_spin_lock+0x94/0xf0 [ 63.854411][ T759] ? _raw_spin_trylock_bh+0x150/0x150 [ 63.859916][ T759] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 63.865752][ T759] ? rcu_preempt_deferred_qs_irqrestore+0x637/0x910 [ 63.872364][ T759] netlink_rcv_skb+0x1e9/0x430 [ 63.877151][ T759] ? rtnetlink_bind+0x80/0x80 [ 63.881853][ T759] ? netlink_ack+0xb30/0xb30 [ 63.886470][ T759] rtnetlink_rcv+0x1c/0x20 [ 63.891235][ T759] netlink_unicast+0x86c/0xa30 [ 63.896064][ T759] netlink_sendmsg+0x949/0xb70 [ 63.900943][ T759] ? __kasan_check_read+0x11/0x20 [ 63.906003][ T759] ? netlink_getsockopt+0x530/0x530 [ 63.911231][ T759] ? irqentry_exit+0x56/0x60 [ 63.915843][ T759] ? security_socket_sendmsg+0x82/0xa0 [ 63.921321][ T759] ? netlink_getsockopt+0x530/0x530 [ 63.926554][ T759] ____sys_sendmsg+0x5be/0x8f0 [ 63.931343][ T759] ? __import_iovec+0x25b/0x390 [ 63.936219][ T759] ? __sys_sendmsg_sock+0x40/0x40 [ 63.941805][ T759] ? import_iovec+0x7c/0xb0 [ 63.946339][ T759] ___sys_sendmsg+0x236/0x2e0 [ 63.951078][ T759] ? __sys_sendmsg+0x280/0x280 [ 63.955873][ T759] ? __fdget+0x1a1/0x230 [ 63.960142][ T759] __x64_sys_sendmsg+0x201/0x2d0 [ 63.965114][ T759] ? __kasan_check_write+0x14/0x20 [ 63.970606][ T759] ? ___sys_sendmsg+0x2e0/0x2e0 [ 63.975575][ T759] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 63.981426][ T759] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 63.987092][ T759] do_syscall_64+0x31/0x40 [ 63.991542][ T759] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 63.997471][ T759] RIP: 0033:0x7f47a904d1d9 [ 64.002309][ T759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.021947][ T759] RSP: 002b:00007f47a7aa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.030557][ T759] RAX: ffffffffffffffda RBX: 00007f47a92d4fa0 RCX: 00007f47a904d1d9 [ 64.038934][ T759] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 64.046935][ T759] RBP: 00007f47a7aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 64.054932][ T759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.062929][ T759] R13: 00007f47a92d5038 R14: 00007f47a92d4fa0 R15: 00007ffd95ba70e8 [ 64.087768][ T416] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.099067][ T416] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.112544][ T416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.119275][ T24] audit: type=1400 audit(1791581248.930:200): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 64.139884][ T416] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 64.148987][ T416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.161285][ T416] usb 5-1: config 0 descriptor?? [ 64.195379][ T24] audit: type=1400 audit(1791581249.010:201): avc: denied { mount } for pid=782 comm="syz.0.84" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 64.227607][ T24] audit: type=1400 audit(1791581249.010:202): avc: denied { search } for pid=782 comm="syz.0.84" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 64.250816][ T24] audit: type=1400 audit(1791581249.010:203): avc: denied { write } for pid=782 comm="syz.0.84" name="trace_marker" dev="tracefs" ino=12657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 64.273689][ T24] audit: type=1400 audit(1791581249.010:204): avc: denied { open } for pid=782 comm="syz.0.84" path="/18/mnt/trace_marker" dev="tracefs" ino=12657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 64.319357][ T24] audit: type=1400 audit(1791581249.010:205): avc: denied { read } for pid=782 comm="syz.0.84" name="trace_pipe" dev="tracefs" ino=12653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 64.418587][ T24] audit: type=1400 audit(1791581249.010:206): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 64.438675][ T24] audit: type=1400 audit(1791581249.210:207): avc: denied { create } for pid=789 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.458453][ T24] audit: type=1400 audit(1791581249.210:208): avc: denied { setopt } for pid=789 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.521628][ T792] loop3: p3 < > p4 < > [ 64.526374][ T792] loop3: partition table partially beyond EOD, truncated [ 64.533620][ T792] loop3: p3 start 4284289 is beyond EOD, truncated [ 65.050202][ T790] SELinux: Context system_u:object_r:dhcpd_unit_file_t:s0 is not valid (left unmapped). [ 66.068962][ T416] usbhid 5-1:0.0: can't add hid device: -71 [ 66.075019][ T416] usbhid: probe of 5-1:0.0 failed with error -71 [ 66.090619][ T416] usb 5-1: USB disconnect, device number 5 [ 66.126045][ T522] udevd[522]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 66.199786][ T821] netlink: 'syz.0.92': attribute type 1 has an invalid length. [ 66.207419][ T821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 66.280820][ T822] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 66.593793][ T299] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 66.739474][ T833] FAT-fs (loop3): Unrecognized mount option "zxÞ¸Âο”°T/7¯ñ–w)ê*'&%äké“H¡–«6kLDfÙäÒê×õÜüG9ÿ¦.¥“Ó$}8ݧ ¡æ×|¹é{ß„1á—-}—³D˜µã—£!Kö¤ ýÎC†ž–¡¯ µ¥Þï(—äaeä×ÓX>�áqeXÿÿ0xffffffffffffffff0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿ" or missing value [ 66.969016][ T299] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.991301][ T299] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.025714][ T299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 67.040700][ T299] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 67.057104][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.098037][ T299] usb 2-1: config 0 descriptor?? [ 67.114137][ T846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=846 comm=syz.0.97 [ 67.399034][ T843] FAULT_INJECTION: forcing a failure. [ 67.399034][ T843] name failslab, interval 1, probability 0, space 0, times 0 [ 67.464909][ T843] CPU: 1 PID: 843 Comm: syz.2.99 Not tainted syzkaller #0 [ 67.472068][ T843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.482140][ T843] Call Trace: [ 67.485450][ T843] __dump_stack+0x21/0x24 [ 67.489800][ T843] dump_stack_lvl+0x1a7/0x208 [ 67.494490][ T843] ? show_regs_print_info+0x18/0x18 [ 67.499727][ T843] ? __schedule+0xc0b/0x13e0 [ 67.504345][ T843] dump_stack+0x15/0x1c [ 67.508518][ T843] should_fail+0x3ab/0x500 [ 67.512953][ T843] ? netlink_trim+0x193/0x230 [ 67.517652][ T843] __should_failslab+0xa4/0xe0 [ 67.522451][ T843] should_failslab+0x9/0x20 [ 67.526974][ T843] __kmalloc_track_caller+0x5f/0x310 [ 67.532290][ T843] ? preempt_schedule_irq+0xca/0x120 [ 67.537594][ T843] ? netlink_trim+0x193/0x230 [ 67.542305][ T843] pskb_expand_head+0x123/0x11c0 [ 67.547259][ T843] ? irqentry_exit+0x56/0x60 [ 67.551952][ T843] ? sysvec_reschedule_ipi+0x69/0x70 [ 67.557261][ T843] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 67.562913][ T843] netlink_trim+0x193/0x230 [ 67.567434][ T843] netlink_broadcast_filtered+0x75/0x12c0 [ 67.573180][ T843] ? tc_chain_fill_node+0x494/0x790 [ 67.578401][ T843] netlink_broadcast+0x3a/0x50 [ 67.583180][ T843] rtnetlink_send+0x11a/0x170 [ 67.587877][ T843] __tcf_chain_put+0x264/0x6f0 [ 67.592741][ T843] tcf_proto_destroy+0x1e6/0x260 [ 67.597725][ T843] tc_new_tfilter+0xee7/0x1ab0 [ 67.602511][ T843] ? flow_get+0xc0/0xc0 [ 67.606699][ T843] ? tcf_gate_entry_destructor+0x20/0x20 [ 67.612459][ T843] ? security_capable+0x87/0xb0 [ 67.617324][ T843] ? ns_capable+0x8c/0xf0 [ 67.621698][ T843] ? netlink_net_capable+0x125/0x160 [ 67.627016][ T843] ? tcf_gate_entry_destructor+0x20/0x20 [ 67.632767][ T843] rtnetlink_rcv_msg+0x811/0xca0 [ 67.637724][ T843] ? unwind_get_return_address+0x4d/0x90 [ 67.643371][ T843] ? rtnetlink_bind+0x80/0x80 [ 67.648066][ T843] ? stack_trace_save+0xa6/0xf0 [ 67.652950][ T843] ? stack_trace_snprint+0xe0/0xe0 [ 67.658074][ T843] ? avc_has_perm+0x168/0x3d0 [ 67.662773][ T843] ? memcpy+0x56/0x70 [ 67.666783][ T843] ? avc_has_perm+0x27f/0x3d0 [ 67.671480][ T843] ? __kasan_slab_alloc+0xc9/0xe0 [ 67.676535][ T843] ? avc_has_perm_noaudit+0x260/0x260 [ 67.681927][ T843] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 67.688015][ T843] ? selinux_nlmsg_lookup+0x398/0x430 [ 67.693403][ T843] netlink_rcv_skb+0x1e9/0x430 [ 67.698181][ T843] ? rtnetlink_bind+0x80/0x80 [ 67.702873][ T843] ? netlink_ack+0xb30/0xb30 [ 67.707486][ T843] ? __netlink_lookup+0x387/0x3b0 [ 67.712613][ T843] rtnetlink_rcv+0x1c/0x20 [ 67.717034][ T843] netlink_unicast+0x86c/0xa30 [ 67.721815][ T843] netlink_sendmsg+0x949/0xb70 [ 67.726940][ T843] ? netlink_getsockopt+0x530/0x530 [ 67.732147][ T843] ? kasan_set_track+0x5b/0x70 [ 67.736922][ T843] ? slab_free_freelist_hook+0xc5/0x190 [ 67.742485][ T843] ? security_socket_sendmsg+0x82/0xa0 [ 67.747954][ T843] ? netlink_getsockopt+0x530/0x530 [ 67.753157][ T843] ____sys_sendmsg+0x5be/0x8f0 [ 67.757940][ T843] ? __sys_sendmsg_sock+0x40/0x40 [ 67.762974][ T843] ? import_iovec+0x7c/0xb0 [ 67.767484][ T843] ___sys_sendmsg+0x236/0x2e0 [ 67.772169][ T843] ? __sys_sendmsg+0x280/0x280 [ 67.776939][ T843] ? rw_verify_area+0x1c0/0x360 [ 67.781805][ T843] ? __fdget+0x1a1/0x230 [ 67.786059][ T843] __x64_sys_sendmsg+0x201/0x2d0 [ 67.791006][ T843] ? fput+0x1a/0x20 [ 67.794822][ T843] ? ___sys_sendmsg+0x2e0/0x2e0 [ 67.799706][ T843] ? debug_smp_processor_id+0x17/0x20 [ 67.805179][ T843] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 67.811256][ T843] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 67.816900][ T843] do_syscall_64+0x31/0x40 [ 67.821345][ T843] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 67.827245][ T843] RIP: 0033:0x7f41784901d9 [ 67.831677][ T843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.851292][ T843] RSP: 002b:00007f4176ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.859719][ T843] RAX: ffffffffffffffda RBX: 00007f4178717fa0 RCX: 00007f41784901d9 [ 67.867723][ T843] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 67.875715][ T843] RBP: 00007f4176ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 67.883733][ T843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.891730][ T843] R13: 00007f4178718038 R14: 00007f4178717fa0 R15: 00007ffc10912ea8 [ 67.931066][ T299] usbhid 2-1:0.0: can't add hid device: -71 [ 67.937182][ T299] usbhid: probe of 2-1:0.0 failed with error -71 [ 67.944501][ T299] usb 2-1: USB disconnect, device number 4 [ 68.015711][ T862] process 'syz.1.103' launched './file0' with NULL argv: empty string added [ 68.187727][ T869] syz.2.107 (869): drop_caches: 2 [ 68.221196][ T870] FAT-fs (loop1): Unrecognized mount option "zxÞ¸Âο”°T/7¯ñ–w)ê*'&%äké“H¡–«6kLDfÙäÒê×õÜüG9ÿ¦.¥“Ó$}8ݧ ¡æ×|¹é{ß„1á—-}—³D˜µã—£!Kö¤ ýÎC†ž–¡¯ µ¥Þï(—äaeä×ÓX>�áqeXÿÿ0xffffffffffffffff0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿ" or missing value [ 68.289045][ T345] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.557665][ T882] SELinux: duplicate or incompatible mount options [ 68.718979][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 68.718993][ T24] audit: type=1326 audit(1791581253.530:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.4.110" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867610f1d9 code=0x7ffc0000 [ 68.749249][ T345] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.767981][ T345] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.788936][ T345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 68.795602][ T345] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 68.809818][ T24] audit: type=1326 audit(1791581253.530:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.4.110" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f867610f1d9 code=0x7ffc0000 [ 68.859864][ T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.221342][ T345] usb 1-1: config 0 descriptor?? [ 69.287335][ T24] audit: type=1326 audit(1791581253.530:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.4.110" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867610f1d9 code=0x7ffc0000 [ 69.541966][ T24] audit: type=1326 audit(1791581253.530:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.4.110" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f867610f1d9 code=0x7ffc0000 [ 69.644451][ T24] audit: type=1400 audit(1791581253.530:229): avc: denied { getopt } for pid=884 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.723302][ T24] audit: type=1326 audit(1791581253.530:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.4.110" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867610f1d9 code=0x7ffc0000 [ 69.795921][ T24] audit: type=1326 audit(1791581253.570:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.4.110" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867610f1d9 code=0x7ffc0000 [ 69.803071][ T345] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 69.858984][ T345] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 69.873553][ T345] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 69.888494][ T345] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 69.895664][ T345] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 69.902749][ T345] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 69.909993][ T345] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 69.916954][ T345] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 69.917498][ T885] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 69.924100][ T345] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 69.941781][ T345] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 69.948913][ T345] acrux 0003:1A34:0802.0004: unbalanced collection at end of report description [ 69.954489][ T885] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 69.958653][ T345] acrux 0003:1A34:0802.0004: parse failed [ 69.972152][ T345] acrux: probe of 0003:1A34:0802.0004 failed with error -22 [ 69.984924][ T885] F2FS-fs (loop4): invalid crc value [ 70.005630][ T885] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.029574][ T24] audit: type=1400 audit(1791581254.850:232): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 70.051423][ T345] usb 1-1: USB disconnect, device number 3 [ 70.072455][ T24] audit: type=1400 audit(1791581254.870:233): avc: denied { connect } for pid=859 comm="syz.0.102" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.094115][ T885] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.101843][ T885] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.162846][ T24] audit: type=1400 audit(1791581254.980:234): avc: denied { create } for pid=900 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.208346][ T907] tmpfs: Bad value for 'size' [ 70.252346][ T896] EXT4-fs (loop2): 1 truncate cleaned up [ 70.258089][ T896] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,resgid=0x0000000000000000,debug_want_extra_isize=0x000000000000006a,inlinecrypt,nojournal_checksum,grpjquota=,,errors=continue [ 70.619615][ T283] attempt to access beyond end of device [ 70.619615][ T283] loop4: rw=2049, want=45104, limit=40427 [ 70.791194][ T934] EXT4-fs (loop4): Test dummy encryption mode enabled [ 70.806636][ T934] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.123: inode has both inline data and extents flags [ 70.819996][ T934] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.123: couldn't read orphan inode 15 (err -117) [ 70.832056][ T879] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 70.836346][ T934] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 70.851904][ T937] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 70.859103][ T345] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 70.869001][ T937] EXT4-fs (loop1): Test dummy encryption mode enabled [ 70.876005][ T937] EXT4-fs (loop1): Test dummy encryption mode enabled [ 70.883365][ T937] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 70.883365][ T937] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 70.883365][ T937] [ 70.901447][ T937] EXT4-fs (loop1): Ignoring removed bh option [ 70.907604][ T937] EXT4-fs (loop1): Ignoring removed orlov option [ 70.918390][ T937] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0002] [ 70.927427][ T937] System zones: 0-5 [ 70.939327][ T937] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,inlinecrypt,usrquota,bh,orlov,,errors=continue [ 72.138972][ T345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.158901][ T345] usb 1-1: config 0 has no interfaces? [ 72.268985][ T879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.293452][ T950] TCP: TCP_TX_DELAY enabled [ 72.308988][ T879] usb 3-1: not running at top speed; connect to a high speed hub [ 72.358993][ T345] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 72.368070][ T345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.388966][ T345] usb 1-1: Product: syz [ 72.389148][ T879] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 72.393169][ T345] usb 1-1: Manufacturer: syz [ 72.393179][ T345] usb 1-1: SerialNumber: syz [ 72.420656][ T345] usb 1-1: config 0 descriptor?? [ 72.464816][ T965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 72.568990][ T879] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 72.588809][ T879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.607103][ T879] usb 3-1: Product: syz [ 72.611496][ T879] usb 3-1: Manufacturer: syz [ 72.616115][ T879] usb 3-1: SerialNumber: syz [ 72.664663][ T928] cgroup: syz.0.121 (928) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 72.686944][ T928] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 72.697524][ T928] udc-core: couldn't find an available UDC or it's busy [ 72.714780][ T928] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.731555][ T928] device-mapper: ioctl: ioctl interface mismatch: kernel(4.44.0), user(4.1073741824.269164556), cmd(5) [ 72.743425][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 72.753523][ T880] usb 1-1: USB disconnect, device number 4 [ 72.764135][ T986] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 72.919978][ T879] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 72.939030][ T879] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 72.947694][ T879] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 72.955789][ T879] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 72.965770][ T879] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 72.974470][ T879] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 72.982737][ T879] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 73.029003][ T879] usb 3-1: 2:1: cannot set enable PITCH (v2) [ 73.070920][ T879] usb 3-1: USB disconnect, device number 3 [ 74.298958][ T345] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 74.538986][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 74.539018][ T24] audit: type=1400 audit(1791581259.290:250): avc: denied { connect } for pid=1006 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.705254][ T1001] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.746367][ T345] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.758208][ T345] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.786789][ T345] usb 1-1: config 0 interface 0 has no altsetting 0 [ 74.793749][ T345] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 74.802956][ T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.812088][ T345] usb 1-1: config 0 descriptor?? [ 74.821953][ T1025] EXT4-fs (loop3): Test dummy encryption mode enabled [ 74.862566][ T1025] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.148: inode has both inline data and extents flags [ 74.876812][ T1025] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.148: couldn't read orphan inode 15 (err -117) [ 74.907745][ T1025] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 75.169203][ T416] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.361552][ T24] audit: type=1400 audit(1791581260.180:251): avc: denied { mounton } for pid=1036 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 75.507193][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.525145][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.540297][ T1036] device bridge_slave_0 entered promiscuous mode [ 75.548949][ T416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 75.560411][ T416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 75.566760][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.578952][ T416] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.592020][ T416] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.601413][ T416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.611724][ T416] usb 3-1: config 0 descriptor?? [ 75.615813][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.629027][ T1031] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 75.643662][ T1036] device bridge_slave_1 entered promiscuous mode [ 75.767200][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.774319][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.781641][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.788687][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.812604][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.821361][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.828733][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.837299][ T49] device bridge_slave_1 left promiscuous mode [ 75.844468][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.852335][ T49] device bridge_slave_0 left promiscuous mode [ 75.858527][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.867621][ T49] device veth1_macvtap left promiscuous mode [ 75.873761][ T49] device veth0_vlan left promiscuous mode [ 75.986266][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.994992][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.002103][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.009706][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.017983][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.025091][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.041923][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.058064][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.072939][ T1036] device veth0_vlan entered promiscuous mode [ 76.080477][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.088804][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.091955][ T416] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 76.097672][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.112673][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.122212][ T416] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 76.132836][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.142522][ T1036] device veth1_macvtap entered promiscuous mode [ 76.153811][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.159948][ T416] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 76.186856][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.220493][ T24] audit: type=1400 audit(1791581261.040:252): avc: denied { mounton } for pid=1036 comm="syz-executor" path="/root/syzkaller.VL9aOF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.342527][ T1044] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 76.398624][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 76.407578][ T345] usbhid 1-1:0.0: can't add hid device: -71 [ 76.418997][ T345] usbhid: probe of 1-1:0.0 failed with error -71 [ 76.447448][ T345] usb 1-1: USB disconnect, device number 5 [ 76.670158][ T1031] F2FS-fs (loop2): invalid crc value [ 76.682003][ T1053] capability: warning: `syz.0.155' uses deprecated v2 capabilities in a way that may be insecure [ 76.699906][ T1031] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 76.731913][ T24] audit: type=1400 audit(1791581261.550:253): avc: denied { read write } for pid=1056 comm="syz.3.156" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.761350][ T1031] F2FS-fs (loop2): Start checkpoint disabled! [ 76.768310][ T1031] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 76.831006][ T24] audit: type=1400 audit(1791581261.570:254): avc: denied { open } for pid=1056 comm="syz.3.156" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.880454][ T24] audit: type=1400 audit(1791581261.700:255): avc: denied { ioctl } for pid=1030 comm="syz.2.149" path="/30/bus/cgroup.controllers" dev="loop2" ino=15 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.906117][ T1057] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 76.916493][ T345] usb 3-1: USB disconnect, device number 4 [ 76.921002][ T1057] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.089189][ T24] audit: type=1400 audit(1791581261.910:256): avc: denied { search } for pid=1064 comm="syz.0.157" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 77.144503][ T24] audit: type=1400 audit(1791581261.930:257): avc: denied { setattr } for pid=1064 comm="syz.0.157" name="trace_pipe" dev="tracefs" ino=12653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 77.172273][ T24] audit: type=1400 audit(1791581261.940:258): avc: denied { ioctl } for pid=1064 comm="syz.0.157" path="/newroot/29/mnt/trace_pipe" dev="tracefs" ino=12653 ioctlcmd=0x457f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 77.316127][ T1070] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.156: Corrupt inode bitmap - block_group = 0, inode_bitmap = 3 [ 77.433930][ T49] attempt to access beyond end of device [ 77.433930][ T49] loop1: rw=1, want=1041, limit=128 [ 77.658745][ T49] attempt to access beyond end of device [ 77.658745][ T49] loop2: rw=2049, want=40984, limit=40427 [ 78.291866][ T24] audit: type=1400 audit(1791581263.110:259): avc: denied { bind } for pid=1092 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.108822][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 178.115471][ C0] rcu: 0-...!: (10000 ticks this GP) idle=98e/1/0x4000000000000000 softirq=5784/5784 fqs=0 last_accelerate: a86d/d00f dyntick_enabled: 1 [ 178.129687][ C0] (t=10000 jiffies g=5385 q=1548) [ 178.134792][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g5385 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 178.146052][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 178.156010][ C0] rcu: RCU grace-period kthread stack dump: [ 178.161890][ C0] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 178.171079][ C0] Call Trace: [ 178.174455][ C0] __schedule+0xc03/0x13e0 [ 178.178894][ C0] ? enqueue_timer+0x1b6/0x480 [ 178.183685][ C0] ? __sched_text_start+0x8/0x8 [ 178.188538][ C0] ? __mod_timer+0x7c0/0xb40 [ 178.193150][ C0] schedule+0x13c/0x1d0 [ 178.197343][ C0] schedule_timeout+0x159/0x330 [ 178.202203][ C0] ? console_conditional_schedule+0x10/0x10 [ 178.208093][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 178.213547][ C0] ? run_local_timers+0x160/0x160 [ 178.218567][ C0] ? prepare_to_swait_event+0x34d/0x360 [ 178.224116][ C0] rcu_gp_kthread+0x109a/0x2810 [ 178.228962][ C0] ? finish_task_switch+0x12e/0x5a0 [ 178.234175][ C0] ? rcu_barrier_callback+0x50/0x50 [ 178.239377][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 178.244852][ C0] ? __kasan_check_read+0x11/0x20 [ 178.249872][ C0] ? __kthread_parkme+0xb3/0x1b0 [ 178.254802][ C0] kthread+0x324/0x3b0 [ 178.258867][ C0] ? rcu_barrier_callback+0x50/0x50 [ 178.264059][ C0] ? kthread_blkcg+0xd0/0xd0 [ 178.268647][ C0] ret_from_fork+0x1f/0x30 [ 178.273101][ C0] NMI backtrace for cpu 0 [ 178.277447][ C0] CPU: 0 PID: 1093 Comm: syz.2.165 Not tainted syzkaller #0 [ 178.284727][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.294784][ C0] Call Trace: [ 178.298093][ C0] [ 178.300956][ C0] __dump_stack+0x21/0x24 [ 178.305280][ C0] dump_stack_lvl+0x1a7/0x208 [ 178.309967][ C0] ? show_regs_print_info+0x18/0x18 [ 178.315336][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 178.320883][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 178.325552][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 178.331764][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 178.337846][ C0] dump_stack+0x15/0x1c [ 178.342027][ C0] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 178.348015][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 178.353998][ C0] rcu_dump_cpu_stacks+0x1a2/0x2c0 [ 178.359119][ C0] rcu_sched_clock_irq+0xf89/0x1880 [ 178.364373][ C0] ? rcutree_dead_cpu+0x310/0x310 [ 178.369426][ C0] ? debug_smp_processor_id+0x17/0x20 [ 178.374792][ C0] ? hrtimer_run_queues+0x166/0x420 [ 178.380346][ C0] update_process_times+0x198/0x200 [ 178.385538][ C0] tick_sched_timer+0x17c/0x240 [ 178.390381][ C0] ? tick_setup_sched_timer+0x460/0x460 [ 178.395923][ C0] __hrtimer_run_queues+0x33a/0x7d0 [ 178.401116][ C0] ? hrtimer_interrupt+0xc80/0xc80 [ 178.406222][ C0] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 178.412286][ C0] hrtimer_interrupt+0x313/0xc80 [ 178.417220][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 178.423218][ C0] asm_call_irq_on_stack+0xf/0x20 [ 178.428403][ C0] [ 178.431368][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 178.437007][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 178.443005][ C0] RIP: 0010:qdisc_lookup+0x4a/0x4d0 [ 178.448212][ C0] Code: fd 85 db 0f 84 dc 00 00 00 49 bd 00 00 00 00 00 fc ff df 4c 89 75 d0 49 81 c6 d0 03 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 f7 e8 6c e6 ec fd 4d 8b 36 4d 8d 66 40 4c 89 e0 48 c1 [ 178.467823][ C0] RSP: 0018:ffffc90000e26ee8 EFLAGS: 00000246 [ 178.473992][ C0] RAX: 1ffff11024cef87a RBX: 00000000ffff0000 RCX: 0000000000000002 [ 178.481980][ C0] RDX: ffff888111b4d000 RSI: 00000000ffff0000 RDI: 0000000000000000 [ 178.489958][ C0] RBP: ffffc90000e26f18 R08: 1ffff110207f2e02 R09: 1ffff110207f2e12 [ 178.497935][ C0] R10: 1ffff110207f2e01 R11: fffff520001c4de0 R12: 00000000fffffff1 [ 178.505924][ C0] R13: dffffc0000000000 R14: ffff88812677c3d0 R15: ffff88812877b840 [ 178.513906][ C0] ? qdisc_lookup+0x21/0x4d0 [ 178.518495][ C0] qdisc_tree_reduce_backlog+0x10b/0x380 [ 178.524125][ C0] fq_codel_change+0xa6d/0xeb0 [ 178.528889][ C0] ? fq_codel_destroy+0x90/0x90 [ 178.533735][ C0] fq_codel_init+0x33f/0xa40 [ 178.538332][ C0] ? fq_codel_peek+0x360/0x360 [ 178.543091][ C0] qdisc_create+0x84c/0x1220 [ 178.547780][ C0] ? qdisc_notify+0x350/0x350 [ 178.552451][ C0] ? __nla_parse+0x42/0x60 [ 178.556900][ C0] tc_modify_qdisc+0x8c2/0x1470 [ 178.561857][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 178.567847][ C0] ? cap_capable+0x19c/0x220 [ 178.572439][ C0] ? ns_capable+0x8c/0xf0 [ 178.576860][ C0] ? netlink_net_capable+0x125/0x160 [ 178.582141][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 178.588038][ C0] rtnetlink_rcv_msg+0x9e9/0xca0 [ 178.592993][ C0] ? unwind_get_return_address+0x4d/0x90 [ 178.598619][ C0] ? rtnetlink_bind+0x80/0x80 [ 178.603293][ C0] ? stack_trace_save+0xa6/0xf0 [ 178.608172][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 178.613283][ C0] ? avc_has_perm+0x168/0x3d0 [ 178.617951][ C0] ? memcpy+0x56/0x70 [ 178.621938][ C0] ? avc_has_perm+0x27f/0x3d0 [ 178.626627][ C0] ? __kasan_slab_alloc+0xc9/0xe0 [ 178.631668][ C0] ? avc_has_perm_noaudit+0x260/0x260 [ 178.637066][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 178.643147][ C0] ? selinux_nlmsg_lookup+0x37e/0x430 [ 178.648554][ C0] netlink_rcv_skb+0x1e9/0x430 [ 178.653321][ C0] ? rtnetlink_bind+0x80/0x80 [ 178.658009][ C0] ? netlink_ack+0xb30/0xb30 [ 178.662599][ C0] ? __netlink_lookup+0x387/0x3b0 [ 178.667613][ C0] rtnetlink_rcv+0x1c/0x20 [ 178.672024][ C0] netlink_unicast+0x86c/0xa30 [ 178.676792][ C0] netlink_sendmsg+0x949/0xb70 [ 178.681574][ C0] ? netlink_getsockopt+0x530/0x530 [ 178.686765][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 178.692316][ C0] ? netlink_getsockopt+0x530/0x530 [ 178.697518][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 178.702309][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 178.707350][ C0] ? import_iovec+0x7c/0xb0 [ 178.711869][ C0] ___sys_sendmsg+0x236/0x2e0 [ 178.716542][ C0] ? __sys_sendmsg+0x280/0x280 [ 178.721337][ C0] ? alloc_file+0x82/0x580 [ 178.725750][ C0] ? __fdget+0x1a1/0x230 [ 178.729990][ C0] __x64_sys_sendmsg+0x201/0x2d0 [ 178.734922][ C0] ? __kasan_check_write+0x14/0x20 [ 178.740027][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 178.744871][ C0] ? __kasan_check_read+0x11/0x20 [ 178.749903][ C0] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 178.755621][ C0] do_syscall_64+0x31/0x40 [ 178.760041][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 178.765931][ C0] RIP: 0033:0x7f41784901d9 [ 178.770403][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.790024][ C0] RSP: 002b:00007f4176ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.798721][ C0] RAX: ffffffffffffffda RBX: 00007f4178717fa0 RCX: 00007f41784901d9 [ 178.806692][ C0] RDX: 0000000000008840 RSI: 0000200000000f80 RDI: 0000000000000003 [ 178.814657][ C0] RBP: 00007f4178527888 R08: 0000000000000000 R09: 0000000000000000 [ 178.822635][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.830605][ C0] R13: 00007f4178718038 R14: 00007f4178717fa0 R15: 00007ffc10912ea8 [ 183.079074][ T345] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10295 jiffies s: 2369 root: 0x1/. [ 183.091489][ T345] rcu: blocking rcu_node structures: [ 183.096806][ T345] Task dump for CPU 0: [ 183.101118][ T345] task:syz.2.165 state:R running task stack: 0 pid: 1093 ppid: 282 flags:0x0000000c [ 183.112106][ T345] Call Trace: [ 183.115420][ T345] ? netlink_ack+0xb30/0xb30 [ 183.120043][ T345] ? __netlink_lookup+0x387/0x3b0 [ 183.125316][ T345] ? rtnetlink_rcv+0x1c/0x20 [ 183.129936][ T345] ? netlink_unicast+0x86c/0xa30 [ 183.134979][ T345] ? netlink_sendmsg+0x949/0xb70 [ 183.139953][ T345] ? netlink_getsockopt+0x530/0x530 [ 183.145166][ T345] ? security_socket_sendmsg+0x82/0xa0 [ 183.150771][ T345] ? netlink_getsockopt+0x530/0x530 [ 183.155999][ T345] ? ____sys_sendmsg+0x5be/0x8f0 [ 183.160978][ T345] ? __sys_sendmsg_sock+0x40/0x40 [ 183.166018][ T345] ? import_iovec+0x7c/0xb0 [ 183.170550][ T345] ? ___sys_sendmsg+0x236/0x2e0 [ 183.175418][ T345] ? __sys_sendmsg+0x280/0x280 [ 183.180216][ T345] ? alloc_file+0x82/0x580 [ 183.184653][ T345] ? __fdget+0x1a1/0x230 [ 183.188926][ T345] ? __x64_sys_sendmsg+0x201/0x2d0 [ 183.194071][ T345] ? __kasan_check_write+0x14/0x20 [ 183.199221][ T345] ? ___sys_sendmsg+0x2e0/0x2e0 [ 183.204087][ T345] ? __kasan_check_read+0x11/0x20 [ 183.209137][ T345] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 183.214784][ T345] ? do_syscall_64+0x31/0x40 [ 183.219399][ T345] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 207.399263][ T26] INFO: task udevd:95 blocked for more than 122 seconds. [ 207.406337][ T26] Not tainted syzkaller #0 [ 207.412748][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.421689][ T26] task:udevd state:D stack: 0 pid: 95 ppid: 1 flags:0x00004000 [ 207.431067][ T26] Call Trace: [ 207.434380][ T26] __schedule+0xc03/0x13e0 [ 207.439091][ T26] ? __sched_text_start+0x8/0x8 [ 207.443960][ T26] ? __mutex_add_waiter+0x184/0x280 [ 207.449347][ T26] ? __kasan_check_write+0x14/0x20 [ 207.454477][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 207.460499][ T26] schedule+0x13c/0x1d0 [ 207.464674][ T26] schedule_preempt_disabled+0x13/0x20 [ 207.470313][ T26] __mutex_lock+0x5d4/0xc40 [ 207.474940][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 207.481883][ T26] ? bdev_check_media_change+0x340/0x340 [ 207.487540][ T26] ? __kasan_check_write+0x14/0x20 [ 207.492864][ T26] __mutex_lock_slowpath+0xe/0x10 [ 207.497910][ T26] mutex_lock+0xdb/0xf0 [ 207.502230][ T26] ? mutex_trylock+0xb0/0xb0 [ 207.506837][ T26] ? __kasan_check_write+0x14/0x20 [ 207.512130][ T26] ? disk_block_events+0xab/0x110 [ 207.517171][ T26] ? get_gendisk+0x2a4/0x350 [ 207.522046][ T26] __blkdev_get+0x2dd/0x13c0 [ 207.526671][ T26] ? blkdev_bio_end_io+0x470/0x470 [ 207.532040][ T26] ? selinux_file_receive+0x130/0x130 [ 207.537450][ T26] ? selinux_inode_permission+0x406/0x5f0 [ 207.543424][ T26] blkdev_open+0x23b/0x490 [ 207.547861][ T26] ? block_ioctl+0x100/0x100 [ 207.552720][ T26] do_dentry_open+0x7a5/0x10a0 [ 207.557500][ T26] vfs_open+0x73/0x80 [ 207.562710][ T26] path_openat+0x26c3/0x3040 [ 207.567584][ T26] ? __kasan_slab_alloc+0xc9/0xe0 [ 207.572786][ T26] ? getname_flags+0xba/0x510 [ 207.577495][ T26] ? getname+0x19/0x20 [ 207.581759][ T26] ? do_sys_openat2+0xde/0x750 [ 207.586569][ T26] ? do_filp_open+0x400/0x400 [ 207.591410][ T26] do_filp_open+0x1df/0x400 [ 207.595924][ T26] ? vfs_tmpfile+0x2c0/0x2c0 [ 207.600669][ T26] ? get_unused_fd_flags+0x92/0xa0 [ 207.605798][ T26] do_sys_openat2+0x19f/0x750 [ 207.610652][ T26] ? percpu_counter_add_batch+0x13c/0x160 [ 207.616405][ T26] ? blkcg_maybe_throttle_current+0x1e0/0x9e0 [ 207.622635][ T26] ? do_sys_open+0xe0/0xe0 [ 207.627068][ T26] ? __blkcg_punt_bio_submit+0x170/0x170 [ 207.632996][ T26] ? ____fput+0x15/0x20 [ 207.637193][ T26] __x64_sys_openat+0x136/0x160 [ 207.642287][ T26] do_syscall_64+0x31/0x40 [ 207.646754][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 207.652847][ T26] RIP: 0033:0x7f5690417407 [ 207.657278][ T26] RSP: 002b:00007ffd73de6dc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 207.665873][ T26] RAX: ffffffffffffffda RBX: 00007f5690329880 RCX: 00007f5690417407 [ 207.674102][ T26] RDX: 00000000000a0800 RSI: 00005626302666c0 RDI: ffffffffffffff9c [ 207.682233][ T26] RBP: 00000000000000c1 R08: 0000000000000000 R09: 0000000000000000 [ 207.690580][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 207.698583][ T26] R13: 0000562617fb9100 R14: 0000000000000000 R15: 00007ffd73de7050 [ 207.706882][ T26] INFO: task udevd:305 blocked for more than 123 seconds. [ 207.714342][ T26] Not tainted syzkaller #0 [ 207.719411][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.728108][ T26] task:udevd state:D stack: 0 pid: 305 ppid: 95 flags:0x00004000 [ 207.737633][ T26] Call Trace: [ 207.741129][ T26] __schedule+0xc03/0x13e0 [ 207.745595][ T26] ? __sched_text_start+0x8/0x8 [ 207.750712][ T26] ? __mutex_add_waiter+0xcd/0x280 [ 207.756085][ T26] ? __kasan_check_write+0x14/0x20 [ 207.761597][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 207.767443][ T26] schedule+0x13c/0x1d0 [ 207.771797][ T26] schedule_preempt_disabled+0x13/0x20 [ 207.777293][ T26] __mutex_lock+0x5d4/0xc40 [ 207.782080][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 207.789027][ T26] ? bdev_check_media_change+0x340/0x340 [ 207.794677][ T26] ? __kasan_check_write+0x14/0x20 [ 207.799983][ T26] __mutex_lock_slowpath+0xe/0x10 [ 207.805040][ T26] mutex_lock+0xdb/0xf0 [ 207.809380][ T26] ? mutex_trylock+0xb0/0xb0 [ 207.813992][ T26] ? __kasan_check_write+0x14/0x20 [ 207.819283][ T26] ? disk_block_events+0xab/0x110 [ 207.824472][ T26] ? get_gendisk+0x2a4/0x350 [ 207.829247][ T26] __blkdev_get+0x2dd/0x13c0 [ 207.833864][ T26] ? blkdev_bio_end_io+0x470/0x470 [ 207.839268][ T26] ? selinux_file_receive+0x130/0x130 [ 207.844672][ T26] ? selinux_inode_permission+0x406/0x5f0 [ 207.850702][ T26] blkdev_open+0x23b/0x490 [ 207.855146][ T26] ? block_ioctl+0x100/0x100 [ 207.859927][ T26] do_dentry_open+0x7a5/0x10a0 [ 207.864721][ T26] vfs_open+0x73/0x80 [ 207.868779][ T26] path_openat+0x26c3/0x3040 [ 207.873777][ T26] ? __kasan_slab_alloc+0xc9/0xe0 [ 207.879094][ T26] ? getname_flags+0xba/0x510 [ 207.883799][ T26] ? getname+0x19/0x20 [ 207.888087][ T26] ? do_sys_openat2+0xde/0x750 [ 207.893097][ T26] ? do_filp_open+0x400/0x400 [ 207.897796][ T26] do_filp_open+0x1df/0x400 [ 207.902545][ T26] ? vfs_tmpfile+0x2c0/0x2c0 [ 207.907283][ T26] ? get_unused_fd_flags+0x92/0xa0 [ 207.912682][ T26] do_sys_openat2+0x19f/0x750 [ 207.917530][ T26] ? __fdget+0x15b/0x230 [ 207.922346][ T26] ? do_sys_open+0xe0/0xe0 [ 207.926791][ T26] ? __x64_sys_recvmsg+0x216/0x2d0 [ 207.932102][ T26] ? __kasan_check_write+0x14/0x20 [ 207.937249][ T26] __x64_sys_openat+0x136/0x160 [ 207.942304][ T26] do_syscall_64+0x31/0x40 [ 207.946828][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 207.952913][ T26] RIP: 0033:0x7f5690417407 [ 207.957347][ T26] RSP: 002b:00007ffd73de6c00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 207.965947][ T26] RAX: ffffffffffffffda RBX: 00007f5690329880 RCX: 00007f5690417407 [ 207.974068][ T26] RDX: 00000000000a0800 RSI: 0000562630027460 RDI: ffffffffffffff9c [ 207.982176][ T26] RBP: 00005626300242c0 R08: 0000000000000000 R09: 0000000000000000 [ 207.990278][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562630275440 [ 207.998275][ T26] R13: 0000562630269920 R14: 0000000000000000 R15: 0000562630275440 [ 208.006470][ T26] INFO: task syz.1.154:1059 blocked for more than 123 seconds. [ 208.014226][ T26] Not tainted syzkaller #0 [ 208.019295][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 208.027991][ T26] task:syz.1.154 state:D stack: 0 pid: 1059 ppid: 279 flags:0x00004006 [ 208.037429][ T26] Call Trace: [ 208.040846][ T26] __schedule+0xc03/0x13e0 [ 208.045285][ T26] ? __sched_text_start+0x8/0x8 [ 208.050315][ T26] ? prepare_to_wait_event+0x306/0x410 [ 208.055797][ T26] schedule+0x13c/0x1d0 [ 208.060134][ T26] synchronize_rcu_expedited+0x4ca/0x640 [ 208.066012][ T26] ? synchronize_rcu+0x140/0x140 [ 208.071217][ T26] ? __kasan_check_write+0x14/0x20 [ 208.076347][ T26] ? _raw_spin_lock_bh+0x94/0xf0 [ 208.081549][ T26] ? rcu_exp_handler+0x370/0x370 [ 208.086524][ T26] ? __local_bh_enable_ip+0x53/0x80 [ 208.091966][ T26] ? local_bh_enable+0x1f/0x30 [ 208.096842][ T26] ? io_schedule+0xe0/0xe0 [ 208.101428][ T26] ? mutex_trylock+0xb0/0xb0 [ 208.106048][ T26] ? __kasan_check_read+0x11/0x20 [ 208.111280][ T26] synchronize_net+0x28/0x40 [ 208.115889][ T26] packet_release+0x997/0xcd0 [ 208.120741][ T26] sock_close+0xb8/0x200 [ 208.125005][ T26] ? sock_mmap+0xa0/0xa0 [ 208.129413][ T26] __fput+0x2dc/0x730 [ 208.133520][ T26] ____fput+0x15/0x20 [ 208.137521][ T26] task_work_run+0x127/0x190 [ 208.142518][ T26] do_exit+0xa7c/0x24e0 [ 208.146700][ T26] ? put_task_struct+0x90/0x90 [ 208.151742][ T26] ? __sys_recvmsg+0x280/0x280 [ 208.156528][ T26] ? __kasan_check_write+0x14/0x20 [ 208.161797][ T26] ? _raw_spin_lock_irq+0x95/0xf0 [ 208.166841][ T26] do_group_exit+0x149/0x310 [ 208.171719][ T26] ? __kasan_check_write+0x14/0x20 [ 208.176853][ T26] ? recalc_sigpending+0x1c4/0x230 [ 208.182180][ T26] get_signal+0xfb1/0x1300 [ 208.186632][ T26] ? __kasan_check_write+0x14/0x20 [ 208.191926][ T26] arch_do_signal_or_restart+0xe7/0x11b0 [ 208.197593][ T26] ? commit_creds+0x6b6/0xa70 [ 208.202438][ T26] ? __sys_recvmmsg+0x290/0x290 [ 208.207307][ T26] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 208.213135][ T26] ? __x64_sys_recvmmsg+0x195/0x250 [ 208.218359][ T26] exit_to_user_mode_loop+0xa2/0xe0 [ 208.223718][ T26] exit_to_user_mode_prepare+0x76/0xa0 [ 208.229336][ T26] syscall_exit_to_user_mode+0x1d/0x40 [ 208.234819][ T26] do_syscall_64+0x3d/0x40 [ 208.239447][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 208.245453][ T26] RIP: 0033:0x7f47a904d1d9 [ 208.250050][ T26] RSP: 002b:00007f47a7a85028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 208.258489][ T26] RAX: 000000000003ffcb RBX: 00007f47a92d5090 RCX: 00007f47a904d1d9 [ 208.266731][ T26] RDX: 0000000004000087 RSI: 0000200000000d40 RDI: 0000000000000003 [ 208.275092][ T26] RBP: 00007f47a90e4888 R08: 0000000000000000 R09: 0000000000000000 [ 208.283220][ T26] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 208.291383][ T26] R13: 00007f47a92d5128 R14: 00007f47a92d5090 R15: 00007ffd95ba70e8 [ 208.299624][ T26] INFO: task syz.5.161:1082 blocked for more than 123 seconds. [ 208.307187][ T26] Not tainted syzkaller #0 [ 208.312307][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 208.321109][ T26] task:syz.5.161 state:D stack: 0 pid: 1082 ppid: 1036 flags:0x00004004 [ 208.331104][ T26] Call Trace: [ 208.334421][ T26] __schedule+0xc03/0x13e0 [ 208.339033][ T26] ? __sched_text_start+0x8/0x8 [ 208.343908][ T26] schedule+0x13c/0x1d0 [ 208.348108][ T26] blk_mq_freeze_queue_wait+0xef/0x180 [ 208.353795][ T26] ? blk_mq_run_hw_queues+0x4b0/0x4b0 [ 208.359350][ T26] ? io_schedule+0xe0/0xe0 [ 208.363883][ T26] ? blk_mq_run_hw_queues+0x3ec/0x4b0 [ 208.369429][ T26] blk_freeze_queue+0xc3/0xf0 [ 208.374169][ T26] blk_mq_freeze_queue+0x15/0x20 [ 208.379296][ T26] lo_release+0x10b/0x1f0 [ 208.383649][ T26] ? lo_open+0xd0/0xd0 [ 208.387739][ T26] __blkdev_put+0x55b/0x7c0 [ 208.392461][ T26] ? blkdev_get_by_dev+0x540/0x540 [ 208.397586][ T26] ? mutex_lock+0x92/0xf0 [ 208.402107][ T26] ? mutex_trylock+0xb0/0xb0 [ 208.406719][ T26] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 208.413476][ T26] blkdev_put+0x2cf/0x3d0 [ 208.417822][ T26] blkdev_close+0x76/0xa0 [ 208.422314][ T26] ? blkdev_open+0x490/0x490 [ 208.426923][ T26] __fput+0x2dc/0x730 [ 208.431078][ T26] ____fput+0x15/0x20 [ 208.435080][ T26] task_work_run+0x127/0x190 [ 208.441003][ T26] exit_to_user_mode_loop+0xcb/0xe0 [ 208.446226][ T26] exit_to_user_mode_prepare+0x76/0xa0 [ 208.451886][ T26] syscall_exit_to_user_mode+0x1d/0x40 [ 208.457359][ T26] do_syscall_64+0x3d/0x40 [ 208.461932][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 208.467839][ T26] RIP: 0033:0x7f9b5613ca0e [ 208.472410][ T26] RSP: 002b:00007f9b54bb3df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 208.480952][ T26] RAX: 0000000000000000 RBX: 00007f9b54bb46c0 RCX: 00007f9b5613ca0e [ 208.489046][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 208.497032][ T26] RBP: 0000200000000140 R08: 0000000000000000 R09: 0000000000000000 [ 208.505176][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240 [ 208.513334][ T26] R13: 00007f9b54bb3ea0 R14: 000000000000552d R15: 0000200000000280 [ 208.521430][ T26] INFO: task syz.3.163:1079 blocked for more than 124 seconds. [ 208.529102][ T26] Not tainted syzkaller #0 [ 208.534052][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 208.542903][ T26] task:syz.3.163 state:D stack: 0 pid: 1079 ppid: 280 flags:0x00004004 [ 208.552242][ T26] Call Trace: [ 208.555555][ T26] __schedule+0xc03/0x13e0 [ 208.560133][ T26] ? __sched_text_start+0x8/0x8 [ 208.565013][ T26] ? __mutex_add_waiter+0x184/0x280 [ 208.570395][ T26] ? __kasan_check_write+0x14/0x20 [ 208.575532][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 208.581493][ T26] schedule+0x13c/0x1d0 [ 208.585668][ T26] schedule_preempt_disabled+0x13/0x20 [ 208.591306][ T26] __mutex_lock+0x5d4/0xc40 [ 208.595833][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 208.603778][ T26] ? cap_capable+0x19c/0x220 [ 208.608400][ T26] __mutex_lock_slowpath+0xe/0x10 [ 208.613616][ T26] mutex_lock+0xdb/0xf0 [ 208.617796][ T26] ? mutex_trylock+0xb0/0xb0 [ 208.623116][ T26] ? ns_capable+0x8c/0xf0 [ 208.627478][ T26] ? netlink_net_capable+0x125/0x160 [ 208.632942][ T26] rtnetlink_rcv_msg+0x540/0xca0 [ 208.637905][ T26] ? unwind_get_return_address+0x4d/0x90 [ 208.643685][ T26] ? rtnetlink_bind+0x80/0x80 [ 208.648380][ T26] ? stack_trace_save+0xa6/0xf0 [ 208.653395][ T26] ? stack_trace_snprint+0xe0/0xe0 [ 208.658539][ T26] ? avc_has_perm+0x168/0x3d0 [ 208.663384][ T26] ? memcpy+0x56/0x70 [ 208.667486][ T26] ? avc_has_perm+0x27f/0x3d0 [ 208.672345][ T26] ? __kasan_slab_alloc+0xc9/0xe0 [ 208.677389][ T26] ? avc_has_perm_noaudit+0x260/0x260 [ 208.682934][ T26] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 208.689139][ T26] ? selinux_nlmsg_lookup+0x39f/0x430 [ 208.694535][ T26] netlink_rcv_skb+0x1e9/0x430 [ 208.699445][ T26] ? rtnetlink_bind+0x80/0x80 [ 208.704141][ T26] ? netlink_ack+0xb30/0xb30 [ 208.708752][ T26] ? __netlink_lookup+0x387/0x3b0 [ 208.713967][ T26] rtnetlink_rcv+0x1c/0x20 [ 208.718400][ T26] netlink_unicast+0x86c/0xa30 [ 208.723323][ T26] netlink_sendmsg+0x949/0xb70 [ 208.728191][ T26] ? netlink_getsockopt+0x530/0x530 [ 208.733601][ T26] ? security_socket_sendmsg+0x82/0xa0 [ 208.739222][ T26] ? netlink_getsockopt+0x530/0x530 [ 208.744445][ T26] ____sys_sendmsg+0x5be/0x8f0 [ 208.749387][ T26] ? __sys_sendmsg_sock+0x40/0x40 [ 208.754436][ T26] ? import_iovec+0x7c/0xb0 [ 208.759106][ T26] ___sys_sendmsg+0x236/0x2e0 [ 208.763862][ T26] ? __sys_sendmsg+0x280/0x280 [ 208.768662][ T26] ? dst_negative_advice+0x150/0x150 [ 208.774177][ T26] ? __fdget+0x1a1/0x230 [ 208.778442][ T26] __x64_sys_sendmsg+0x201/0x2d0 [ 208.783646][ T26] ? __kasan_check_write+0x14/0x20 [ 208.788785][ T26] ? ___sys_sendmsg+0x2e0/0x2e0 [ 208.794028][ T26] ? __kasan_check_read+0x11/0x20 [ 208.799186][ T26] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 208.804836][ T26] do_syscall_64+0x31/0x40 [ 208.809440][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 208.815352][ T26] RIP: 0033:0x7f81ff2371d9 [ 208.819971][ T26] RSP: 002b:00007f81fdc90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.828406][ T26] RAX: ffffffffffffffda RBX: 00007f81ff4befa0 RCX: 00007f81ff2371d9 [ 208.836560][ T26] RDX: 00000000040000c0 RSI: 0000200000001d80 RDI: 0000000000000006 [ 208.844686][ T26] RBP: 00007f81ff2ce888 R08: 0000000000000000 R09: 0000000000000000 [ 208.852819][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.860914][ T26] R13: 00007f81ff4bf038 R14: 00007f81ff4befa0 R15: 00007ffec0cb6228 [ 208.869064][ T26] NMI backtrace for cpu 1 [ 208.873413][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 [ 208.880647][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.890717][ T26] Call Trace: [ 208.894028][ T26] __dump_stack+0x21/0x24 [ 208.898382][ T26] dump_stack_lvl+0x1a7/0x208 [ 208.903075][ T26] ? show_regs_print_info+0x18/0x18 [ 208.908397][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 208.914053][ T26] ? sched_show_task+0x31c/0x480 [ 208.919009][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 208.923976][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 208.930063][ T26] dump_stack+0x15/0x1c [ 208.934233][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 208.940244][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 208.946161][ T26] watchdog+0xe14/0xf60 [ 208.950344][ T26] ? hungtask_pm_notify+0x50/0x50 [ 208.955383][ T26] ? __kasan_check_read+0x11/0x20 [ 208.960424][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 208.965476][ T26] kthread+0x324/0x3b0 [ 208.969568][ T26] ? hungtask_pm_notify+0x50/0x50 [ 208.974632][ T26] ? kthread_blkcg+0xd0/0xd0 [ 208.979243][ T26] ret_from_fork+0x1f/0x30 [ 208.983774][ T26] Sending NMI from CPU 1 to CPUs 0: [ 208.989648][ C0] NMI backtrace for cpu 0 [ 208.989655][ C0] CPU: 0 PID: 1093 Comm: syz.2.165 Not tainted syzkaller #0 [ 208.989663][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.989668][ C0] RIP: 0010:qdisc_tree_reduce_backlog+0x114/0x380 [ 208.989681][ C0] Code: 28 00 74 08 4c 89 f7 e8 fa c1 ec fd 49 8b 3e 4c 89 65 b8 44 89 e6 81 e6 00 00 ff ff e8 25 db ff ff 48 85 c0 0f 84 26 02 00 00 <49> 89 c4 31 ff 89 de e8 f0 40 b2 fd 4d 8d 74 24 18 4c 89 f0 48 c1 [ 208.989686][ C0] RSP: 0018:ffffc90000e26f28 EFLAGS: 00000286 [ 208.989695][ C0] RAX: ffff88812877b800 RBX: 0000000000000000 RCX: 0000000000080000 [ 208.989701][ C0] RDX: ffffc90002920000 RSI: 000000000007ffff RDI: 0000000000080000 [ 208.989707][ C0] RBP: ffffc90000e26f70 R08: 1ffff110207f2e02 R09: 1ffff110207f2e12 [ 208.989713][ C0] R10: 1ffff110207f2e01 R11: fffff520001c4de0 R12: 00000000fffffff1 [ 208.989719][ C0] R13: dffffc0000000000 R14: ffff88812877a000 R15: ffff88812877b840 [ 208.989726][ C0] FS: 00007f4176ee96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 208.989731][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.989737][ C0] CR2: 0000200000001000 CR3: 000000011e966000 CR4: 00000000003506b0 [ 208.989742][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.989748][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 208.989751][ C0] Call Trace: [ 208.989755][ C0] fq_codel_change+0xa6d/0xeb0 [ 208.989759][ C0] ? fq_codel_destroy+0x90/0x90 [ 208.989763][ C0] fq_codel_init+0x33f/0xa40 [ 208.989767][ C0] ? fq_codel_peek+0x360/0x360 [ 208.989770][ C0] qdisc_create+0x84c/0x1220 [ 208.989774][ C0] ? qdisc_notify+0x350/0x350 [ 208.989777][ C0] ? __nla_parse+0x42/0x60 [ 208.989781][ C0] tc_modify_qdisc+0x8c2/0x1470 [ 208.989785][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 208.989789][ C0] ? cap_capable+0x19c/0x220 [ 208.989792][ C0] ? ns_capable+0x8c/0xf0 [ 208.989797][ C0] ? netlink_net_capable+0x125/0x160 [ 208.989801][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 208.989805][ C0] rtnetlink_rcv_msg+0x9e9/0xca0 [ 208.989810][ C0] ? unwind_get_return_address+0x4d/0x90 [ 208.989813][ C0] ? rtnetlink_bind+0x80/0x80 [ 208.989817][ C0] ? stack_trace_save+0xa6/0xf0 [ 208.989821][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 208.989825][ C0] ? avc_has_perm+0x168/0x3d0 [ 208.989828][ C0] ? memcpy+0x56/0x70 [ 208.989832][ C0] ? avc_has_perm+0x27f/0x3d0 [ 208.989836][ C0] ? __kasan_slab_alloc+0xc9/0xe0 [ 208.989840][ C0] ? avc_has_perm_noaudit+0x260/0x260 [ 208.989844][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 208.989848][ C0] ? selinux_nlmsg_lookup+0x37e/0x430 [ 208.989852][ C0] netlink_rcv_skb+0x1e9/0x430 [ 208.989855][ C0] ? rtnetlink_bind+0x80/0x80 [ 208.989859][ C0] ? netlink_ack+0xb30/0xb30 [ 208.989863][ C0] ? __netlink_lookup+0x387/0x3b0 [ 208.989866][ C0] rtnetlink_rcv+0x1c/0x20 [ 208.989870][ C0] netlink_unicast+0x86c/0xa30 [ 208.989874][ C0] netlink_sendmsg+0x949/0xb70 [ 208.989878][ C0] ? netlink_getsockopt+0x530/0x530 [ 208.989882][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 208.989886][ C0] ? netlink_getsockopt+0x530/0x530 [ 208.989890][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 208.989893][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 208.989897][ C0] ? import_iovec+0x7c/0xb0 [ 208.989900][ C0] ___sys_sendmsg+0x236/0x2e0 [ 208.989904][ C0] ? __sys_sendmsg+0x280/0x280 [ 208.989908][ C0] ? alloc_file+0x82/0x580 [ 208.989911][ C0] ? __fdget+0x1a1/0x230 [ 208.989915][ C0] __x64_sys_sendmsg+0x201/0x2d0 [ 208.989919][ C0] ? __kasan_check_write+0x14/0x20 [ 208.989922][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 208.989926][ C0] ? __kasan_check_read+0x11/0x20 [ 208.989931][ C0] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 208.989934][ C0] do_syscall_64+0x31/0x40 [ 208.989939][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 208.989942][ C0] RIP: 0033:0x7f41784901d9 [ 208.989956][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.989960][ C0] RSP: 002b:00007f4176ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.989971][ C0] RAX: ffffffffffffffda RBX: 00007f4178717fa0 RCX: 00007f41784901d9 [ 208.989976][ C0] RDX: 0000000000008840 RSI: 0000200000000f80 RDI: 0000000000000003 [ 208.989982][ C0] RBP: 00007f4178527888 R08: 0000000000000000 R09: 0000000000000000 [ 208.989988][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.989993][ C0] R13: 00007f4178718038 R14: 00007f4178717fa0 R15: 00007ffc10912ea8 [ 229.159238][ T26] INFO: task udevd:95 blocked for more than 144 seconds. [ 229.166317][ T26] Not tainted syzkaller #0 [ 229.172174][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.181005][ T26] task:udevd state:D stack: 0 pid: 95 ppid: 1 flags:0x00004000 [ 229.190341][ T26] Call Trace: [ 229.193654][ T26] __schedule+0xc03/0x13e0 [ 229.198177][ T26] ? __sched_text_start+0x8/0x8 [ 229.203275][ T26] ? __mutex_add_waiter+0x184/0x280 [ 229.208494][ T26] ? __kasan_check_write+0x14/0x20 [ 229.213793][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 229.219828][ T26] schedule+0x13c/0x1d0 [ 229.224023][ T26] schedule_preempt_disabled+0x13/0x20 [ 229.229648][ T26] __mutex_lock+0x5d4/0xc40 [ 229.234170][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 229.242264][ T26] ? bdev_check_media_change+0x340/0x340 [ 229.247916][ T26] ? __kasan_check_write+0x14/0x20 [ 229.253217][ T26] __mutex_lock_slowpath+0xe/0x10 [ 229.258264][ T26] mutex_lock+0xdb/0xf0 [ 229.262588][ T26] ? mutex_trylock+0xb0/0xb0 [ 229.267198][ T26] ? __kasan_check_write+0x14/0x20 [ 229.272490][ T26] ? disk_block_events+0xab/0x110 [ 229.277536][ T26] ? get_gendisk+0x2a4/0x350 [ 229.282315][ T26] __blkdev_get+0x2dd/0x13c0 [ 229.286928][ T26] ? blkdev_bio_end_io+0x470/0x470 [ 229.292197][ T26] ? selinux_file_receive+0x130/0x130 [ 229.297584][ T26] ? selinux_inode_permission+0x406/0x5f0 [ 229.303456][ T26] blkdev_open+0x23b/0x490 [ 229.307886][ T26] ? block_ioctl+0x100/0x100 [ 229.312649][ T26] do_dentry_open+0x7a5/0x10a0 [ 229.317546][ T26] vfs_open+0x73/0x80 [ 229.321732][ T26] path_openat+0x26c3/0x3040 [ 229.326356][ T26] ? __kasan_slab_alloc+0xc9/0xe0 [ 229.331544][ T26] ? getname_flags+0xba/0x510 [ 229.336242][ T26] ? getname+0x19/0x20 [ 229.340486][ T26] ? do_sys_openat2+0xde/0x750 [ 229.345268][ T26] ? do_filp_open+0x400/0x400 [ 229.350098][ T26] do_filp_open+0x1df/0x400 [ 229.354631][ T26] ? vfs_tmpfile+0x2c0/0x2c0 [ 229.359400][ T26] ? get_unused_fd_flags+0x92/0xa0 [ 229.364556][ T26] do_sys_openat2+0x19f/0x750 [ 229.369431][ T26] ? percpu_counter_add_batch+0x13c/0x160 [ 229.375167][ T26] ? blkcg_maybe_throttle_current+0x1e0/0x9e0 [ 229.381786][ T26] ? do_sys_open+0xe0/0xe0 [ 229.386221][ T26] ? __blkcg_punt_bio_submit+0x170/0x170 [ 229.392027][ T26] ? ____fput+0x15/0x20 [ 229.396200][ T26] __x64_sys_openat+0x136/0x160 [ 229.401297][ T26] do_syscall_64+0x31/0x40 [ 229.405742][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 229.411802][ T26] RIP: 0033:0x7f5690417407 [ 229.416237][ T26] RSP: 002b:00007ffd73de6dc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 229.424809][ T26] RAX: ffffffffffffffda RBX: 00007f5690329880 RCX: 00007f5690417407 [ 229.433005][ T26] RDX: 00000000000a0800 RSI: 00005626302666c0 RDI: ffffffffffffff9c [ 229.441085][ T26] RBP: 00000000000000c1 R08: 0000000000000000 R09: 0000000000000000 [ 229.449277][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 229.457269][ T26] R13: 0000562617fb9100 R14: 0000000000000000 R15: 00007ffd73de7050 [ 229.465450][ T26] INFO: task syz-executor:279 blocked for more than 124 seconds. [ 229.473291][ T26] Not tainted syzkaller #0 [ 229.478239][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.487064][ T26] task:syz-executor state:D stack: 0 pid: 279 ppid: 1 flags:0x00004006 [ 229.496402][ T26] Call Trace: [ 229.499810][ T26] __schedule+0xc03/0x13e0 [ 229.504244][ T26] ? __sched_text_start+0x8/0x8 [ 229.509260][ T26] ? __mutex_add_waiter+0x184/0x280 [ 229.514511][ T26] ? __kasan_check_write+0x14/0x20 [ 229.519805][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 229.525634][ T26] schedule+0x13c/0x1d0 [ 229.529969][ T26] schedule_preempt_disabled+0x13/0x20 [ 229.535448][ T26] __mutex_lock+0x5d4/0xc40 [ 229.540113][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 229.546888][ T26] ? ____kasan_slab_free+0x125/0x160 [ 229.552348][ T26] ? __kasan_slab_free+0x11/0x20 [ 229.557301][ T26] ? slab_free_freelist_hook+0xc5/0x190 [ 229.562992][ T26] ? kfree+0xc0/0x270 [ 229.566994][ T26] ? umount_tree+0xcbf/0xe30 [ 229.571779][ T26] ? put_mnt_ns+0x8b/0x1d0 [ 229.576218][ T26] ? free_nsproxy+0x4c/0x260 [ 229.580962][ T26] ? exit_task_namespaces+0x93/0xb0 [ 229.586177][ T26] ? do_exit+0xa77/0x24e0 [ 229.590675][ T26] ? do_group_exit+0x149/0x310 [ 229.595454][ T26] __mutex_lock_slowpath+0xe/0x10 [ 229.600815][ T26] mutex_lock+0xdb/0xf0 [ 229.604985][ T26] ? mutex_trylock+0xb0/0xb0 [ 229.609755][ T26] ? __kasan_check_read+0x11/0x20 [ 229.614796][ T26] synchronize_rcu_expedited+0x312/0x640 [ 229.620584][ T26] ? synchronize_rcu+0x140/0x140 [ 229.625551][ T26] ? kfree+0xc0/0x270 [ 229.629706][ T26] ? ____kasan_slab_free+0x130/0x160 [ 229.635007][ T26] ? __kasan_slab_free+0x11/0x20 [ 229.640110][ T26] ? slab_free_freelist_hook+0xc5/0x190 [ 229.645677][ T26] ? __put_mountpoint+0x1c3/0x220 [ 229.650863][ T26] ? kfree+0xc0/0x270 [ 229.654859][ T26] ? fast_dput+0x16a/0x290 [ 229.659421][ T26] ? shrink_dentry_list+0x4e8/0x500 [ 229.664643][ T26] ? __kasan_check_write+0x14/0x20 [ 229.669930][ T26] namespace_unlock+0x23f/0x440 [ 229.674823][ T26] ? umount_tree+0xdd0/0xe30 [ 229.679585][ T26] ? umount_tree+0xe30/0xe30 [ 229.684194][ T26] ? umount_mnt+0x310/0x310 [ 229.688709][ T26] put_mnt_ns+0xa2/0x1d0 [ 229.693186][ T26] free_nsproxy+0x4c/0x260 [ 229.697721][ T26] exit_task_namespaces+0x93/0xb0 [ 229.702932][ T26] do_exit+0xa77/0x24e0 [ 229.707129][ T26] ? put_task_struct+0x90/0x90 [ 229.712059][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 229.717534][ T26] ? _raw_spin_lock+0xf0/0xf0 [ 229.722375][ T26] ? __kasan_check_write+0x14/0x20 [ 229.727504][ T26] ? _raw_spin_lock_irq+0x95/0xf0 [ 229.732813][ T26] do_group_exit+0x149/0x310 [ 229.737433][ T26] ? __kasan_check_write+0x14/0x20 [ 229.742753][ T26] ? recalc_sigpending+0x1c4/0x230 [ 229.747897][ T26] get_signal+0xfb1/0x1300 [ 229.752565][ T26] arch_do_signal_or_restart+0xe7/0x11b0 [ 229.758219][ T26] ? kernel_waitid+0x3d0/0x3d0 [ 229.763254][ T26] ? security_file_free+0xc7/0xe0 [ 229.768304][ T26] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 229.774205][ T26] ? __x64_sys_wait4+0x1b4/0x230 [ 229.779271][ T26] ? kernel_wait+0x1c0/0x1c0 [ 229.783889][ T26] exit_to_user_mode_loop+0xa2/0xe0 [ 229.789565][ T26] exit_to_user_mode_prepare+0x76/0xa0 [ 229.795049][ T26] syscall_exit_to_user_mode+0x1d/0x40 [ 229.801061][ T26] do_syscall_64+0x3d/0x40 [ 229.805510][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 229.811606][ T26] RIP: 0033:0x7f47a9008357 [ 229.816042][ T26] RSP: 002b:00007ffd95ba7400 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 229.824657][ T26] RAX: fffffffffffffe00 RBX: 000055557c2a9500 RCX: 00007f47a9008357 [ 229.832802][ T26] RDX: 0000000040000000 RSI: 00007ffd95ba748c RDI: ffffffffffffffff [ 229.840987][ T26] RBP: 00007ffd95ba748c R08: 0000000000000000 R09: 0000000000000000 [ 229.849229][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000023 [ 229.857236][ T26] R13: 000055557c2bc8d0 R14: 0000000000012f04 R15: 00007ffd95ba74e0 [ 229.865422][ T26] INFO: task syz-executor:281 blocked for more than 124 seconds. [ 229.873360][ T26] Not tainted syzkaller #0 [ 229.878316][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.887218][ T26] task:syz-executor state:D stack: 0 pid: 281 ppid: 1 flags:0x00004006 [ 229.896560][ T26] Call Trace: [ 229.899995][ T26] __schedule+0xc03/0x13e0 [ 229.904429][ T26] ? exit_task_namespaces+0x93/0xb0 [ 229.909810][ T26] ? __sched_text_start+0x8/0x8 [ 229.914686][ T26] ? prepare_to_wait_event+0x306/0x410 [ 229.920312][ T26] schedule+0x13c/0x1d0 [ 229.924485][ T26] synchronize_rcu_expedited+0x56c/0x640 [ 229.930287][ T26] ? synchronize_rcu+0x140/0x140 [ 229.935239][ T26] ? io_schedule+0xe0/0xe0 [ 229.939838][ T26] ? kfree+0xc0/0x270 [ 229.943851][ T26] ? ____kasan_slab_free+0x130/0x160 [ 229.949324][ T26] ? __kasan_slab_free+0x11/0x20 [ 229.954280][ T26] ? slab_free_freelist_hook+0xc5/0x190 [ 229.960049][ T26] ? __put_mountpoint+0x1c3/0x220 [ 229.965107][ T26] ? kfree+0xc0/0x270 [ 229.969345][ T26] ? fast_dput+0x16a/0x290 [ 229.973787][ T26] ? shrink_dentry_list+0x4e8/0x500 [ 229.979160][ T26] ? __kasan_check_write+0x14/0x20 [ 229.984297][ T26] namespace_unlock+0x23f/0x440 [ 229.989333][ T26] ? umount_tree+0xdd0/0xe30 [ 229.993938][ T26] ? umount_tree+0xe30/0xe30 [ 229.998538][ T26] ? umount_mnt+0x310/0x310 [ 230.003282][ T26] put_mnt_ns+0xa2/0x1d0 [ 230.007538][ T26] free_nsproxy+0x4c/0x260 [ 230.012145][ T26] exit_task_namespaces+0x93/0xb0 [ 230.017186][ T26] do_exit+0xa77/0x24e0 [ 230.021510][ T26] ? security_file_free+0xc7/0xe0 [ 230.026571][ T26] ? put_task_struct+0x90/0x90 [ 230.031548][ T26] ? __fput+0x56e/0x730 [ 230.035731][ T26] ? __kasan_check_write+0x14/0x20 [ 230.041003][ T26] ? _raw_spin_lock_irq+0x95/0xf0 [ 230.046043][ T26] do_group_exit+0x149/0x310 [ 230.050816][ T26] ? __kasan_check_write+0x14/0x20 [ 230.055947][ T26] ? recalc_sigpending+0x1c4/0x230 [ 230.061246][ T26] get_signal+0xfb1/0x1300 [ 230.065686][ T26] arch_do_signal_or_restart+0xe7/0x11b0 [ 230.071530][ T26] ? putname+0xfe/0x150 [ 230.075780][ T26] ? do_sys_openat2+0x68e/0x750 [ 230.080779][ T26] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 230.086424][ T26] ? mntput_no_expire+0x100/0x6b0 [ 230.091636][ T26] ? vfs_submount+0xb0/0xb0 [ 230.096163][ T26] ? mntput+0x5f/0xc0 [ 230.100316][ T26] exit_to_user_mode_loop+0xa2/0xe0 [ 230.105527][ T26] exit_to_user_mode_prepare+0x76/0xa0 [ 230.111158][ T26] syscall_exit_to_user_mode+0x1d/0x40 [ 230.116639][ T26] do_syscall_64+0x3d/0x40 [ 230.121249][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.127153][ T26] RIP: 0033:0x7f9e8a9ec357 [ 230.131751][ T26] RSP: 002b:00007ffc94e08fb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 230.140293][ T26] RAX: fffffffffffffffc RBX: 000055556d3bc500 RCX: 00007f9e8a9ec357 [ 230.148285][ T26] RDX: 0000000000000000 RSI: 00007ffc94e090e0 RDI: ffffffffffffff9c [ 230.156618][ T26] RBP: 00007ffc94e0908c R08: 0000000000000000 R09: 0000000000000000 [ 230.164752][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000001f [ 230.172895][ T26] R13: 00000000000927c0 R14: 000000000001340d R15: 00007ffc94e090e0 [ 230.181029][ T26] INFO: task udevd:305 blocked for more than 145 seconds. [ 230.188149][ T26] Not tainted syzkaller #0 [ 230.193309][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.202107][ T26] task:udevd state:D stack: 0 pid: 305 ppid: 95 flags:0x00004000 [ 230.211471][ T26] Call Trace: [ 230.214787][ T26] __schedule+0xc03/0x13e0 [ 230.219500][ T26] ? __sched_text_start+0x8/0x8 [ 230.224369][ T26] ? __mutex_add_waiter+0xcd/0x280 [ 230.229727][ T26] ? __kasan_check_write+0x14/0x20 [ 230.234864][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 230.240900][ T26] schedule+0x13c/0x1d0 [ 230.245088][ T26] schedule_preempt_disabled+0x13/0x20 [ 230.250734][ T26] __mutex_lock+0x5d4/0xc40 [ 230.255352][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 230.262269][ T26] ? bdev_check_media_change+0x340/0x340 [ 230.267918][ T26] ? __kasan_check_write+0x14/0x20 [ 230.273217][ T26] __mutex_lock_slowpath+0xe/0x10 [ 230.278259][ T26] mutex_lock+0xdb/0xf0 [ 230.283766][ T26] ? mutex_trylock+0xb0/0xb0 [ 230.288375][ T26] ? __kasan_check_write+0x14/0x20 [ 230.293648][ T26] ? disk_block_events+0xab/0x110 [ 230.298688][ T26] ? get_gendisk+0x2a4/0x350 [ 230.303452][ T26] __blkdev_get+0x2dd/0x13c0 [ 230.308061][ T26] ? blkdev_bio_end_io+0x470/0x470 [ 230.313439][ T26] ? selinux_file_receive+0x130/0x130 [ 230.318928][ T26] ? selinux_inode_permission+0x406/0x5f0 [ 230.324693][ T26] blkdev_open+0x23b/0x490 [ 230.329307][ T26] ? block_ioctl+0x100/0x100 [ 230.333919][ T26] do_dentry_open+0x7a5/0x10a0 [ 230.338702][ T26] vfs_open+0x73/0x80 [ 230.342908][ T26] path_openat+0x26c3/0x3040 [ 230.347519][ T26] ? __kasan_slab_alloc+0xc9/0xe0 [ 230.352731][ T26] ? getname_flags+0xba/0x510 [ 230.357425][ T26] ? getname+0x19/0x20 [ 230.361661][ T26] ? do_sys_openat2+0xde/0x750 [ 230.366446][ T26] ? do_filp_open+0x400/0x400 [ 230.371277][ T26] do_filp_open+0x1df/0x400 [ 230.375798][ T26] ? vfs_tmpfile+0x2c0/0x2c0 [ 230.380534][ T26] ? get_unused_fd_flags+0x92/0xa0 [ 230.385661][ T26] do_sys_openat2+0x19f/0x750 [ 230.390514][ T26] ? __fdget+0x15b/0x230 [ 230.394776][ T26] ? do_sys_open+0xe0/0xe0 [ 230.399383][ T26] ? __x64_sys_recvmsg+0x216/0x2d0 [ 230.404509][ T26] ? __kasan_check_write+0x14/0x20 [ 230.409798][ T26] __x64_sys_openat+0x136/0x160 [ 230.414673][ T26] do_syscall_64+0x31/0x40 [ 230.419255][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.425164][ T26] RIP: 0033:0x7f5690417407 [ 230.429743][ T26] RSP: 002b:00007ffd73de6c00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 230.438175][ T26] RAX: ffffffffffffffda RBX: 00007f5690329880 RCX: 00007f5690417407 [ 230.447306][ T26] RDX: 00000000000a0800 RSI: 0000562630027460 RDI: ffffffffffffff9c [ 230.455455][ T26] RBP: 00005626300242c0 R08: 0000000000000000 R09: 0000000000000000 [ 230.463543][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562630275440 [ 230.471639][ T26] R13: 0000562630269920 R14: 0000000000000000 R15: 0000562630275440 [ 230.479871][ T26] INFO: task syz.1.154:1059 blocked for more than 145 seconds. [ 230.487428][ T26] Not tainted syzkaller #0 [ 230.492750][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.501568][ T26] task:syz.1.154 state:D stack: 0 pid: 1059 ppid: 279 flags:0x00004006 [ 230.510947][ T26] Call Trace: [ 230.514258][ T26] __schedule+0xc03/0x13e0 [ 230.518702][ T26] ? __sched_text_start+0x8/0x8 [ 230.523779][ T26] ? prepare_to_wait_event+0x306/0x410 [ 230.529356][ T26] schedule+0x13c/0x1d0 [ 230.533527][ T26] synchronize_rcu_expedited+0x4ca/0x640 [ 230.539336][ T26] ? synchronize_rcu+0x140/0x140 [ 230.544292][ T26] ? __kasan_check_write+0x14/0x20 [ 230.549589][ T26] ? _raw_spin_lock_bh+0x94/0xf0 [ 230.554545][ T26] ? rcu_exp_handler+0x370/0x370 [ 230.559644][ T26] ? __local_bh_enable_ip+0x53/0x80 [ 230.564860][ T26] ? local_bh_enable+0x1f/0x30 [ 230.569806][ T26] ? io_schedule+0xe0/0xe0 [ 230.574237][ T26] ? mutex_trylock+0xb0/0xb0 [ 230.579106][ T26] ? __kasan_check_read+0x11/0x20 [ 230.584163][ T26] synchronize_net+0x28/0x40 [ 230.588764][ T26] packet_release+0x997/0xcd0 [ 230.593640][ T26] sock_close+0xb8/0x200 [ 230.597923][ T26] ? sock_mmap+0xa0/0xa0 [ 230.602332][ T26] __fput+0x2dc/0x730 [ 230.606330][ T26] ____fput+0x15/0x20 [ 230.610476][ T26] task_work_run+0x127/0x190 [ 230.615088][ T26] do_exit+0xa7c/0x24e0 [ 230.619396][ T26] ? put_task_struct+0x90/0x90 [ 230.624204][ T26] ? __sys_recvmsg+0x280/0x280 [ 230.629218][ T26] ? __kasan_check_write+0x14/0x20 [ 230.634353][ T26] ? _raw_spin_lock_irq+0x95/0xf0 [ 230.639524][ T26] do_group_exit+0x149/0x310 [ 230.644126][ T26] ? __kasan_check_write+0x14/0x20 [ 230.649564][ T26] ? recalc_sigpending+0x1c4/0x230 [ 230.654724][ T26] get_signal+0xfb1/0x1300 [ 230.659303][ T26] ? __kasan_check_write+0x14/0x20 [ 230.664434][ T26] arch_do_signal_or_restart+0xe7/0x11b0 [ 230.670236][ T26] ? commit_creds+0x6b6/0xa70 [ 230.674928][ T26] ? __sys_recvmmsg+0x290/0x290 [ 230.680177][ T26] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 230.685849][ T26] ? __x64_sys_recvmmsg+0x195/0x250 [ 230.691307][ T26] exit_to_user_mode_loop+0xa2/0xe0 [ 230.696531][ T26] exit_to_user_mode_prepare+0x76/0xa0 [ 230.702173][ T26] syscall_exit_to_user_mode+0x1d/0x40 [ 230.707650][ T26] do_syscall_64+0x3d/0x40 [ 230.712383][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.718293][ T26] RIP: 0033:0x7f47a904d1d9 [ 230.722885][ T26] RSP: 002b:00007f47a7a85028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 230.731440][ T26] RAX: 000000000003ffcb RBX: 00007f47a92d5090 RCX: 00007f47a904d1d9 [ 230.739538][ T26] RDX: 0000000004000087 RSI: 0000200000000d40 RDI: 0000000000000003 [ 230.747545][ T26] RBP: 00007f47a90e4888 R08: 0000000000000000 R09: 0000000000000000 [ 230.755800][ T26] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 230.763901][ T26] R13: 00007f47a92d5128 R14: 00007f47a92d5090 R15: 00007ffd95ba70e8 [ 230.772047][ T26] NMI backtrace for cpu 1 [ 230.776396][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 [ 230.783597][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.793894][ T26] Call Trace: [ 230.797207][ T26] __dump_stack+0x21/0x24 [ 230.801564][ T26] dump_stack_lvl+0x1a7/0x208 [ 230.806264][ T26] ? show_regs_print_info+0x18/0x18 [ 230.811481][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 230.817128][ T26] ? sched_show_task+0x31c/0x480 [ 230.822104][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 230.827057][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 230.833134][ T26] dump_stack+0x15/0x1c [ 230.837303][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 230.843315][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 230.849222][ T26] watchdog+0xe14/0xf60 [ 230.853396][ T26] ? hungtask_pm_notify+0x50/0x50 [ 230.858437][ T26] ? __kasan_check_read+0x11/0x20 [ 230.863475][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 230.868427][ T26] kthread+0x324/0x3b0 [ 230.872506][ T26] ? hungtask_pm_notify+0x50/0x50 [ 230.877557][ T26] ? kthread_blkcg+0xd0/0xd0 [ 230.882158][ T26] ret_from_fork+0x1f/0x30 [ 230.886647][ T26] Sending NMI from CPU 1 to CPUs 0: [ 230.892489][ C0] NMI backtrace for cpu 0 [ 230.892496][ C0] CPU: 0 PID: 1093 Comm: syz.2.165 Not tainted syzkaller #0 [ 230.892503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.892509][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 230.892523][ C0] Code: ff c2 48 89 11 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 48 8b 45 08 65 48 8b 15 30 b1 9d 7e 65 8b 0d 35 b1 9d 7e c1 00 01 ff 00 74 11 f7 c1 00 01 00 00 74 5b 83 ba dc 0a 00 00 [ 230.892527][ C0] RSP: 0018:ffffc90000e26ed8 EFLAGS: 00000246 [ 230.892537][ C0] RAX: ffffffff83b25681 RBX: 00000000ffff0000 RCX: 0000000000000201 [ 230.892543][ C0] RDX: ffff888111b4d000 RSI: 00000000ffff0000 RDI: 0000000000000000 [ 230.892550][ C0] RBP: ffffc90000e26ed8 R08: 1ffff110207f2e02 R09: 1ffff110207f2e12 [ 230.892556][ C0] R10: 1ffff110207f2e01 R11: fffff520001c4de0 R12: 00000000fffffff1 [ 230.892561][ C0] R13: dffffc0000000000 R14: ffff88812677c000 R15: ffff88812877b840 [ 230.892568][ C0] FS: 00007f4176ee96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 230.892573][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.892579][ C0] CR2: 0000200000001000 CR3: 000000011e966000 CR4: 00000000003506b0 [ 230.892585][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.892590][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.892593][ C0] Call Trace: [ 230.892597][ C0] qdisc_lookup+0x21/0x4d0 [ 230.892601][ C0] qdisc_tree_reduce_backlog+0x10b/0x380 [ 230.892605][ C0] fq_codel_change+0xa6d/0xeb0 [ 230.892609][ C0] ? fq_codel_destroy+0x90/0x90 [ 230.892613][ C0] fq_codel_init+0x33f/0xa40 [ 230.892617][ C0] ? fq_codel_peek+0x360/0x360 [ 230.892620][ C0] qdisc_create+0x84c/0x1220 [ 230.892624][ C0] ? qdisc_notify+0x350/0x350 [ 230.892627][ C0] ? __nla_parse+0x42/0x60 [ 230.892631][ C0] tc_modify_qdisc+0x8c2/0x1470 [ 230.892635][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 230.892639][ C0] ? cap_capable+0x19c/0x220 [ 230.892642][ C0] ? ns_capable+0x8c/0xf0 [ 230.892647][ C0] ? netlink_net_capable+0x125/0x160 [ 230.892651][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 230.892655][ C0] rtnetlink_rcv_msg+0x9e9/0xca0 [ 230.892664][ C0] ? unwind_get_return_address+0x4d/0x90 [ 230.892668][ C0] ? rtnetlink_bind+0x80/0x80 [ 230.892672][ C0] ? stack_trace_save+0xa6/0xf0 [ 230.892676][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 230.892679][ C0] ? avc_has_perm+0x168/0x3d0 [ 230.892682][ C0] ? memcpy+0x56/0x70 [ 230.892686][ C0] ? avc_has_perm+0x27f/0x3d0 [ 230.892690][ C0] ? __kasan_slab_alloc+0xc9/0xe0 [ 230.892694][ C0] ? avc_has_perm_noaudit+0x260/0x260 [ 230.892699][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.892703][ C0] ? selinux_nlmsg_lookup+0x37e/0x430 [ 230.892707][ C0] netlink_rcv_skb+0x1e9/0x430 [ 230.892711][ C0] ? rtnetlink_bind+0x80/0x80 [ 230.892714][ C0] ? netlink_ack+0xb30/0xb30 [ 230.892718][ C0] ? __netlink_lookup+0x387/0x3b0 [ 230.892721][ C0] rtnetlink_rcv+0x1c/0x20 [ 230.892725][ C0] netlink_unicast+0x86c/0xa30 [ 230.892729][ C0] netlink_sendmsg+0x949/0xb70 [ 230.892733][ C0] ? netlink_getsockopt+0x530/0x530 [ 230.892737][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 230.892741][ C0] ? netlink_getsockopt+0x530/0x530 [ 230.892745][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 230.892749][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 230.892752][ C0] ? import_iovec+0x7c/0xb0 [ 230.892756][ C0] ___sys_sendmsg+0x236/0x2e0 [ 230.892760][ C0] ? __sys_sendmsg+0x280/0x280 [ 230.892763][ C0] ? alloc_file+0x82/0x580 [ 230.892766][ C0] ? __fdget+0x1a1/0x230 [ 230.892770][ C0] __x64_sys_sendmsg+0x201/0x2d0 [ 230.892774][ C0] ? __kasan_check_write+0x14/0x20 [ 230.892778][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 230.892782][ C0] ? __kasan_check_read+0x11/0x20 [ 230.892786][ C0] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 230.892790][ C0] do_syscall_64+0x31/0x40 [ 230.892794][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.892798][ C0] RIP: 0033:0x7f41784901d9 [ 230.892812][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.892816][ C0] RSP: 002b:00007f4176ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.892826][ C0] RAX: ffffffffffffffda RBX: 00007f4178717fa0 RCX: 00007f41784901d9 [ 230.892832][ C0] RDX: 0000000000008840 RSI: 0000200000000f80 RDI: 0000000000000003 [ 230.892838][ C0] RBP: 00007f4178527888 R08: 0000000000000000 R09: 0000000000000000 [ 230.892843][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.892849][ C0] R13: 00007f4178718038 R14: 00007f4178717fa0 R15: 00007ffc10912ea8 [ 375.047032][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz.2.165:1093] [ 375.055372][ C0] Modules linked in: [ 375.059280][ C0] CPU: 0 PID: 1093 Comm: syz.2.165 Not tainted syzkaller #0 [ 375.066574][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.076722][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x60 [ 375.082889][ C0] Code: f7 c2 00 01 00 00 74 35 83 b9 dc 0a 00 00 00 74 2c 8b 91 b8 0a 00 00 83 fa 02 75 21 48 8b 91 c0 0a 00 00 48 8b 32 48 8d 7e 01 <8b> 89 bc 0a 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 5d c3 66 [ 375.102926][ C0] RSP: 0018:ffffc90000e26f18 EFLAGS: 00000246 [ 375.109010][ C0] RAX: ffffffff83b27cb4 RBX: 1ffffffff0ae1078 RCX: ffff888111b4d000 [ 375.116978][ C0] RDX: ffffc90002920000 RSI: 000000000007ffff RDI: 0000000000080000 [ 375.124948][ C0] RBP: ffffc90000e26f18 R08: 1ffff110207f2e02 R09: 1ffff110207f2e12 [ 375.132915][ C0] R10: 1ffff110207f2e01 R11: fffff520001c4de0 R12: 00000000fffffff1 [ 375.140895][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88812877b800 [ 375.148884][ C0] FS: 00007f4176ee96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 375.158544][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.165139][ C0] CR2: 0000200000001000 CR3: 000000011e966000 CR4: 00000000003506b0 [ 375.173113][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.181082][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.189049][ C0] Call Trace: [ 375.192402][ C0] qdisc_tree_reduce_backlog+0x284/0x380 [ 375.198065][ C0] fq_codel_change+0xa6d/0xeb0 [ 375.202828][ C0] ? fq_codel_destroy+0x90/0x90 [ 375.207676][ C0] fq_codel_init+0x33f/0xa40 [ 375.212261][ C0] ? fq_codel_peek+0x360/0x360 [ 375.217016][ C0] qdisc_create+0x84c/0x1220 [ 375.221645][ C0] ? qdisc_notify+0x350/0x350 [ 375.226384][ C0] ? __nla_parse+0x42/0x60 [ 375.230804][ C0] tc_modify_qdisc+0x8c2/0x1470 [ 375.235663][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 375.241620][ C0] ? cap_capable+0x19c/0x220 [ 375.246249][ C0] ? ns_capable+0x8c/0xf0 [ 375.250611][ C0] ? netlink_net_capable+0x125/0x160 [ 375.255910][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 375.261857][ C0] rtnetlink_rcv_msg+0x9e9/0xca0 [ 375.266832][ C0] ? unwind_get_return_address+0x4d/0x90 [ 375.272548][ C0] ? rtnetlink_bind+0x80/0x80 [ 375.277256][ C0] ? stack_trace_save+0xa6/0xf0 [ 375.282220][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 375.287383][ C0] ? avc_has_perm+0x168/0x3d0 [ 375.292115][ C0] ? memcpy+0x56/0x70 [ 375.296098][ C0] ? avc_has_perm+0x27f/0x3d0 [ 375.300775][ C0] ? __kasan_slab_alloc+0xc9/0xe0 [ 375.305800][ C0] ? avc_has_perm_noaudit+0x260/0x260 [ 375.311224][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 375.317331][ C0] ? selinux_nlmsg_lookup+0x37e/0x430 [ 375.322702][ C0] netlink_rcv_skb+0x1e9/0x430 [ 375.327471][ C0] ? rtnetlink_bind+0x80/0x80 [ 375.332155][ C0] ? netlink_ack+0xb30/0xb30 [ 375.336754][ C0] ? __netlink_lookup+0x387/0x3b0 [ 375.342122][ C0] rtnetlink_rcv+0x1c/0x20 [ 375.346746][ C0] netlink_unicast+0x86c/0xa30 [ 375.351515][ C0] netlink_sendmsg+0x949/0xb70 [ 375.356294][ C0] ? netlink_getsockopt+0x530/0x530 [ 375.361507][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 375.366999][ C0] ? netlink_getsockopt+0x530/0x530 [ 375.372250][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 375.377016][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 375.382073][ C0] ? import_iovec+0x7c/0xb0 [ 375.386576][ C0] ___sys_sendmsg+0x236/0x2e0 [ 375.391257][ C0] ? __sys_sendmsg+0x280/0x280 [ 375.396074][ C0] ? alloc_file+0x82/0x580 [ 375.400534][ C0] ? __fdget+0x1a1/0x230 [ 375.404774][ C0] __x64_sys_sendmsg+0x201/0x2d0 [ 375.409712][ C0] ? __kasan_check_write+0x14/0x20 [ 375.414819][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 375.419687][ C0] ? __kasan_check_read+0x11/0x20 [ 375.424711][ C0] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 375.430410][ C0] do_syscall_64+0x31/0x40 [ 375.434824][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 375.440710][ C0] RIP: 0033:0x7f41784901d9 [ 375.445142][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.464874][ C0] RSP: 002b:00007f4176ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.473386][ C0] RAX: ffffffffffffffda RBX: 00007f4178717fa0 RCX: 00007f41784901d9 [ 375.481355][ C0] RDX: 0000000000008840 RSI: 0000200000000f80 RDI: 0000000000000003 [ 375.489329][ C0] RBP: 00007f4178527888 R08: 0000000000000000 R09: 0000000000000000 [ 375.497306][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.505275][ C0] R13: 00007f4178718038 R14: 00007f4178717fa0 R15: 00007ffc10912ea8 [ 375.513250][ C0] Sending NMI from CPU 0 to CPUs 1: [ 375.518567][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0x12/0x20 [ 375.519507][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 375.533275][ C0] CPU: 0 PID: 1093 Comm: syz.2.165 Tainted: G L syzkaller #0 [ 375.535859][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 375.535901][ T24] audit: type=1400 audit(1791581560.330:263): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 375.541981][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.541985][ C0] Call Trace: [ 375.541990][ C0] [ 375.542051][ C0] __dump_stack+0x21/0x24 [ 375.542087][ C0] dump_stack_lvl+0x1a7/0x208 [ 375.557149][ T24] audit: type=1400 audit(1791581560.330:264): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.569791][ C0] ? show_regs_print_info+0x18/0x18 [ 375.569802][ C0] dump_stack+0x15/0x1c [ 375.569867][ C0] panic+0x2d5/0x800 [ 375.569913][ C0] ? find_next_bit+0xc9/0x100 [ 375.580921][ T24] audit: type=1400 audit(1791581560.330:265): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.583377][ C0] ? bpf_jit_dump+0xe0/0xe0 [ 375.586226][ T24] audit: type=1400 audit(1791581560.330:266): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.590527][ C0] watchdog_timer_fn+0x591/0x5a0 [ 375.590538][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 375.590606][ C0] __hrtimer_run_queues+0x33a/0x7d0 [ 375.590651][ C0] ? hrtimer_interrupt+0xc80/0xc80 [ 375.596558][ T24] audit: type=1400 audit(1791581560.330:267): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.616662][ C0] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 375.616676][ C0] hrtimer_interrupt+0x313/0xc80 [ 375.616773][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 375.622588][ T24] audit: type=1400 audit(1791581560.330:268): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.626133][ C0] asm_call_irq_on_stack+0xf/0x20 [ 375.630569][ T24] audit: type=1400 audit(1791581560.330:269): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.634690][ C0] [ 375.791997][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 375.797627][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 375.803696][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x60 [ 375.809969][ C0] Code: f7 c2 00 01 00 00 74 35 83 b9 dc 0a 00 00 00 74 2c 8b 91 b8 0a 00 00 83 fa 02 75 21 48 8b 91 c0 0a 00 00 48 8b 32 48 8d 7e 01 <8b> 89 bc 0a 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 5d c3 66 [ 375.829749][ C0] RSP: 0018:ffffc90000e26f18 EFLAGS: 00000246 [ 375.835816][ C0] RAX: ffffffff83b27cb4 RBX: 1ffffffff0ae1078 RCX: ffff888111b4d000 [ 375.843811][ C0] RDX: ffffc90002920000 RSI: 000000000007ffff RDI: 0000000000080000 [ 375.851907][ C0] RBP: ffffc90000e26f18 R08: 1ffff110207f2e02 R09: 1ffff110207f2e12 [ 375.860080][ C0] R10: 1ffff110207f2e01 R11: fffff520001c4de0 R12: 00000000fffffff1 [ 375.868047][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88812877b800 [ 375.876031][ C0] ? qdisc_tree_reduce_backlog+0x284/0x380 [ 375.881999][ C0] qdisc_tree_reduce_backlog+0x284/0x380 [ 375.887654][ C0] fq_codel_change+0xa6d/0xeb0 [ 375.892424][ C0] ? fq_codel_destroy+0x90/0x90 [ 375.897277][ C0] fq_codel_init+0x33f/0xa40 [ 375.901875][ C0] ? fq_codel_peek+0x360/0x360 [ 375.906640][ C0] qdisc_create+0x84c/0x1220 [ 375.911259][ C0] ? qdisc_notify+0x350/0x350 [ 375.915953][ C0] ? __nla_parse+0x42/0x60 [ 375.920372][ C0] tc_modify_qdisc+0x8c2/0x1470 [ 375.925257][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 375.931147][ C0] ? cap_capable+0x19c/0x220 [ 375.935749][ C0] ? ns_capable+0x8c/0xf0 [ 375.940078][ C0] ? netlink_net_capable+0x125/0x160 [ 375.945538][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 375.951426][ C0] rtnetlink_rcv_msg+0x9e9/0xca0 [ 375.956451][ C0] ? unwind_get_return_address+0x4d/0x90 [ 375.962176][ C0] ? rtnetlink_bind+0x80/0x80 [ 375.966851][ C0] ? stack_trace_save+0xa6/0xf0 [ 375.971837][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 375.976957][ C0] ? avc_has_perm+0x168/0x3d0 [ 375.981727][ C0] ? memcpy+0x56/0x70 [ 375.985716][ C0] ? avc_has_perm+0x27f/0x3d0 [ 375.990418][ C0] ? __kasan_slab_alloc+0xc9/0xe0 [ 375.995446][ C0] ? avc_has_perm_noaudit+0x260/0x260 [ 376.001010][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 376.007086][ C0] ? selinux_nlmsg_lookup+0x37e/0x430 [ 376.012469][ C0] netlink_rcv_skb+0x1e9/0x430 [ 376.017335][ C0] ? rtnetlink_bind+0x80/0x80 [ 376.022019][ C0] ? netlink_ack+0xb30/0xb30 [ 376.026627][ C0] ? __netlink_lookup+0x387/0x3b0 [ 376.031669][ C0] rtnetlink_rcv+0x1c/0x20 [ 376.036095][ C0] netlink_unicast+0x86c/0xa30 [ 376.040861][ C0] netlink_sendmsg+0x949/0xb70 [ 376.045630][ C0] ? netlink_getsockopt+0x530/0x530 [ 376.050863][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 376.056403][ C0] ? netlink_getsockopt+0x530/0x530 [ 376.061612][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 376.066383][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 376.071497][ C0] ? import_iovec+0x7c/0xb0 [ 376.076009][ C0] ___sys_sendmsg+0x236/0x2e0 [ 376.080695][ C0] ? __sys_sendmsg+0x280/0x280 [ 376.085471][ C0] ? alloc_file+0x82/0x580 [ 376.089890][ C0] ? __fdget+0x1a1/0x230 [ 376.094139][ C0] __x64_sys_sendmsg+0x201/0x2d0 [ 376.099077][ C0] ? __kasan_check_write+0x14/0x20 [ 376.104185][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 376.109116][ C0] ? __kasan_check_read+0x11/0x20 [ 376.114136][ C0] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 376.119768][ C0] do_syscall_64+0x31/0x40 [ 376.124181][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 376.130066][ C0] RIP: 0033:0x7f41784901d9 [ 376.134477][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.154082][ C0] RSP: 002b:00007f4176ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.162492][ C0] RAX: ffffffffffffffda RBX: 00007f4178717fa0 RCX: 00007f41784901d9 [ 376.170467][ C0] RDX: 0000000000008840 RSI: 0000200000000f80 RDI: 0000000000000003 [ 376.178434][ C0] RBP: 00007f4178527888 R08: 0000000000000000 R09: 0000000000000000 [ 376.186403][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.194371][ C0] R13: 00007f4178718038 R14: 00007f4178717fa0 R15: 00007ffc10912ea8 [ 376.202734][ C0] Kernel Offset: disabled [ 376.207124][ C0] Rebooting in 86400 seconds..