last executing test programs: 48.53485811s ago: executing program 3 (id=21): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000002040)='mnt\x00', 0x0, &(0x7f0000002000)={[{@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x0, 0x25b, &(0x7f00000021c0)="$eJzs3T9oJFUcB/DfzO4akywhaiMIKoiIBkLsBJvYKAQkBBFBhYiIjZIIMcEusbKx0FollU0QO+PVacI1dxxcdX9S5JqDu3DFhSvuijl2Jzlylw23m93M5jKfDwyZmcx7vzfsfN9sM7MBlNZoRExGRCUixiKiFhHJwQNez5fRvc3Vwc3ZiCz75E7SPC7fzu23G46IlYh4LyI20iS+q0YsrX+xfe/KR2/9ulh78+/1zwcLPck9O9tbH+/+Nf3Lf1PvLl28fGs6icmoP3ZevZe02FdNIl48iWKnRFLt9whox8xP/15t5P6liHijmf9apJF/eL8tPLcxEu/8eVTb329feqXIsQK9l2W1xj1wJTuGyThOK+C0SCOiHkk6HhH5epqOj+ff4a9VhtLv5xd+HPt2fnHum37PVECv1CO2Pjw38P/wE/m/WcnzD5xdjfx/OrN2vbG+W+n3aIAiNfI/9tXy29Fe/rMixgQUo8P8A2eI/EN5yT+Ul/xDeck/lFdb+TcvwLPg+U4buP9Deck/lJf8Q3kdzD8AUC7ZQL+fQAb6pd/zDwAAAAAAAAAAAAAAAAAAcNjq4Obs/lJUzfN/ROx8EBHVVvUrzd8j3n+16dDdpHHYI0nerCtfvtZlB1365wSfvm7nlW4jN06ufjsuvNrL3uodt1iei1j5OSImqtXD11+yd/0d3wtP+X/t6y4LdOn9z/pb/8FacbVqLfZNZUm+MtFq/knj5ebf1vNP/Yg+O/HD/S47AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDAPAwAA//85q2u3") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003000300"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f0000000b80)={&(0x7f0000000280)={0x8d8, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x8a0, 0x8, 0x0, 0x1, [{0x5f0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x71}, @WGPEER_A_ALLOWEDIPS={0x5d0, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2b4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xa}]}, {0x290, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x284, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x40400d0}, 0x40000) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000000)='syz0\x00') 48.195809706s ago: executing program 3 (id=26): r0 = epoll_create1(0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2002}) epoll_pwait2(r0, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) 45.151767958s ago: executing program 3 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000180)="ba", 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000140)=""/17, &(0x7f00000000c0)=0x11) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'ip6gretap0\x00', 0x1000}) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x14b) r6 = syz_open_dev$vcsn(&(0x7f0000000480), 0x5, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x231, 0x25, &(0x7f0000000780)=""/37, 0x41000, 0x30, '\x00', 0x0, @fallback=0x1c, r6, 0x8, &(0x7f00000004c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x10, 0x9, 0xffffff81}, 0x10, 0xffffffffffffffff, r5, 0x5, &(0x7f0000000600)=[r7], &(0x7f0000000640)=[{0x1, 0x3, 0xd}, {0x2, 0x5, 0x1, 0xc}, {0x1, 0x2, 0x9, 0x87fca8b94a8c4de3}, {0x2, 0x5, 0x3, 0x4}, {0x1, 0x4, 0xb, 0x4}], 0x10, 0x58}, 0x94) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xa900000000000000, 0xffff1000, 0x4000000000009, 0x0, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20100, 0x4) ftruncate(r6, 0x8) openat$incfs(r8, &(0x7f0000000240)='.log\x00', 0x1, 0x161) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) 44.979750246s ago: executing program 3 (id=41): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xb) r1 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f00000001c0)={&(0x7f0000000080)=[{0x800, 0x0, 0x0, 0xfffffffffffffff1}, {0x7, 0x7, 0x3, 0x7}, {0x8, 0xd4, 0x4, 0xfffffffffffffff7}, {0x5, 0x2, 0x101, 0x8}, {0xb, 0x3, 0x5, 0x9}, {0x8000000000000001, 0x9, 0xff, 0xe}, {0x1, 0x8000, 0xffffffffffffffaa, 0x5}, {0xff, 0x8, 0x10000, 0x6}], 0x8, 0x20, 0x7, 0x80000000}) 44.978034387s ago: executing program 3 (id=42): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1, 0x105fc, &(0x7f0000010600)="$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") pipe2(0x0, 0x84000) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@dioread_lock}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$eJzs27tvHMUfAPDvrl/xL/lhE8IjD8AQEBYPO054pKCACCSKICFBQWvZThRyiVFsJBJFkCAUKkRDjyj5F6igQYgKiRZ6FClCaZJQHdq7XfvecS5nn5P7fKT1zezOeuZ7u3M3u3MbwMCayv4kEbsi4s+ImKhm6wtMVV9uXr+4cOv6xYUkyuX3/0kq5W5cv7hQFC3225lnptOI9Msk9reod+X8hdPzpdLSuTw/u3rm49mV8xdeOnVm/uTSyaWzh48effnI3GuvHn6lJ3Fmbbqx77PlA3vfSYbfPf51ti4t4m+Io0emOm18tlzucXX99f+adDLcx4ZwR4YiIjtcI5X+PxFDsX7wJuLtL/raOGBTlcvl8s72my+VgftYEvV5XR4GRfFFn13/FkvjIOCNzRt+9N21N6sXQFncN/OlumU40hivpEYarm97aSoiPrz073fZEptzHwIAoM5P2fjnxVbjvzQeqSn3QD43NBkRD0bE7oh4KCL2RMTDEZWyj0bEY3n58Q3W3zhJ0jz+Sa92HdwGZOO/1/O5rfrxX1oUmRyq5MYqY8DJGElOnCotHcrfk+kYGcvycx3q+PmtP75pt612/JctWf3FWDBvx9Xhsfp9FudX5+8m5lrXLkfsG24Vf7I2E5BExN6I2NdlHaee/+FAu223j7+DHswzlb+PeK56/C9FQ/yFpPP85OyOKC0dmi3Oima//X7lvXb131X8PZAd//+1PP/X4p9MaudrV+68jit/fdX2mqbb8380+aCSHs3XfTq/unpuLmI0OV5tdO36w+v7FvmifBb/9MHW/X93rL8T+yMiO4kfj4gnIuLJvO1PRcTTEXGwQ/y/Hnvmo+7j31xZ/It3dPzXE6PRuKZ1Yuj0Lz/WVTrZFP+tDsd/LTWdvzZ//g01xbWRdnV3NgMAAMC9J7u63hVJOrOWTtOZmerv5fdEpKXlldUXTix/cnax+ozAZERa3OmaqLkfOpdf1lfzlyOi+tOCYvuR/L7xt0PjlfzMwnJpsd/Bw4Db2ab/Z/5uvq0G3G88rwWDS/+HwXW7/v/5FrUD2Hrdf/8f2+jvPIFtqkX/169hIIy1/P435ofB0ND/TfvBAGno/zv61Q5g63V//2+0p+0Atp75fxhIK+Nx+4fkOyaK/9Tl7vdtIka2RTM2LRHptmjGtk2M3OP9on+fSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL30XwAAAP//cBbcWg==") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)={[{@rodir}, {@fat=@showexec}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@shortname_win95}, {@shortname_mixed}, {@utf8}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@errors_continue}, {@shortname_lower}, {@uni_xlate}]}, 0x0, 0x2c7, &(0x7f0000002b80)="$eJzs3EFrE1sUwPHTTJumLW2yKA/eg4cH3ehmaOMnCNKCGFBqI+pCmNqJhoxJmImRiNjuxJ2fo7h0paB+gW7cuRc3RRDcdCGONJmJMR2btFqnbf4/KHM7Z87MHe69cKbQu3X92b1y0TOLVl0SKZWEyLpsi2R2WoGR4JhotZPSbV3OTX15///VGzcv5fL5hSXVxdzy+ayqzpx6/eDR89Nv61PXXsy8GpfNzK2tz9kPm/9s/rv1bTm8e1XE0pVqtW6tOLaulryyqXrFsS3P1lLFs926WuqG8aJTrdWaalVWpydrru15alWaWrabWq9q3W2qdccqVdQ0TZ2elGFj7DujsLG0ZOUOpTOIw0TUSdfNWUZksLDxNzoFAACOlrjq/7slT0ueVqo79f0e9X9CuuN96n+Roa7/D6r261BkPYnjZCRcvl0rOkT9DwAAAAAAAAAAAAAAAAAAAADAcbDt+2nf99PhMfwZF5GUiIS/x91PHI4Bxt9g/E+urn/cS4k4TxqFRqF9bMc7m0PMjYl8bc2HQLu9eDG/MKctGXnjrAX5a42CITtzKFeUUudhmej8+Xa+duevyZhMhvmO2JKVtMxG52cj8huFpJw9448HT7bFlLS8uy1VcWS1Na9/5D+eV71wOd+TP9G6DgAAAACAk8DUjl3f7624qeG2IT3x9snO9/mcpPv8faDn+3pU/huN770BAAAAABgmXlLKluPYrtd82K/xNMgZ6OIj2Ag3s/0jNxSJ+3VSg148KiLBmZfx9dnYd1ZCRHpDY7vORDeM3xvlTyI/r4vZ2Ic7qiFJkb4X+0Znrn68314Be9159y7BAAAAAE6GsPofibsjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMsYF3GgscZKOyrscZ8bwlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDR8DwAA//9KIAfL") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200100, 0x182) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f00000002c0)=[@ip_tos_u8={{0x18, 0x0, 0x1, 0xf8}}], 0x18}, 0x2404c890) r4 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@bsdgroups}, {@quota}], [{@seclabel}, {@euid_eq={'euid', 0x3d, r4}}, {@audit}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x66, 0x32, 0x53, 0x66, 0x32, 0x32, 0x30], 0x2d, [0x36, 0x62, 0x4, 0x37], 0x2d, [0x39, 0x38, 0x5f, 0x64], 0x2d, [0x63, 0x35, 0x32, 0x63], 0x2d, [0x31, 0x64, 0x39, 0x37, 0x64, 0x35, 0x30, 0x30]}}}, {@uid_lt={'uid<', r5}}]}, 0x1, 0x506, &(0x7f0000001d00)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHFZDkj8iEAbJA5TzXiS9WbtTbRJ7Cj+fKTRzJvnne97a817mW9ivwBG1s2I2I+IiYj4MCJm8/OFfIv3Olv6ukcHD1YODx6sFCJJPvhXIatPz0XXv0ndyK9ZjogffS/ip4Wn47Z29zaW6/Xadl6ebze25lu7e3fWG8trtbXaZrW6tLi08M7dt6sX1tfXGhP50Vcf/nH/Wz9PmzWTn+nux0XqdL10HCc1HhE/uIxgQzCW92di2A3huRQj4uWIeD27/2djLHs3AYDrLElmI5ntLgMA110xy4EVipU8FzATxWKl0snhvRLTxXqz1b59v7mzudrJlc1FqXh/vV5byHOFc1EqpOXF7PhxuXqifDciXoqIX05OZeXKSrO+OswffABghN04Mf//d7Iz/wMA11x52A0AAAbO/A8Ao8f8DwCjx/wPAKOnM/9PDbsZAMAAef4HgNFj/geAkfLD999Pt+Qw//7r1Y92dzaaH91ZrbU2Ko2dlcpKc3urstZsrmXf2dM47Xr1ZnNr8a3Y+Xju21ut9nxrd+9eo7mz2b6Xfa/3vVope9X+AHoGAPTz0muf/aWQzsjvTmVbdK3lUBpqy4DLVhx2A4ChGRt2A4ChsdoXjK5zPONLD8A10WOJ3ieUe31AKEmS5PKaBFyyW1+S/4dR1ZX/91fAMGLk/2F0yf/D6EqSwlnX/I+zvhAAuNrk+IE+v/9/Od//Lv/lwE9WT77i09Ov7TMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFdH6/9W8nU6ZqJYrFQiXoiIuSgV7q/XawsR8WJE/HmyNJmWF4fcZgDgvIp/L+Trf92afXPmiapXbxwfTkTEz379wa8+Xm63t/8UMVH49+TR+fan+fnq4FsPAJzuaJ7O9l0P8o8OHqwcbYNszz++GxHlTvzDg4k4PI4/HuPZvhyliJj+TyEvdxS6chfnsf9JRHyxV/8LMZPlQDorn56Mn8Z+YaDxi0/EL2Z1nX36f/GFC2gLjJrP0vHnvV73XzFuZvve9385G6HOLx//0kutHGZj4OP4R+PfWJ/x7+ZZY7z1h+93jqaervsk4svjEUexD7vGn6P4hT7x3zxj/L9+5dXX+9Ulv4m4Fb3jd8eabze25lu7e3fWG8trtbXaZrW6tLi08M7dt6vzWY56vjMbJD0mhX++e/vFfvHT/k/3iV8+pf9fP2P/f/v/D3/8tWfE/+YbveIX45VnxE+fzL9xxvjL078v96tL46/26f9p7//tM8RO56eHf9t7atlwAGB4Wrt7G8v1em37Gh+kP6tcgWY4OP9BXOG38juDijURvat+8Ubnnj5RlSTPFavfiHERWTfgKji+6SPif8NuDAAAAAAAAAAAAAAA0NMgPrE07D4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfX0eAAD//yjlzow=") quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, r5, &(0x7f0000000300)) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) getcwd(&(0x7f0000000680)=""/118, 0x76) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'macvlan1\x00', 0x2000}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 43.431623709s ago: executing program 3 (id=50): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) (async) openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000001c0), 0x3, 0x58c, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) r2 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x3c040, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000000000e00000000001801000000000000000086939677fba3535b5972fbc490ea59e4930381e34e0588a3479d7cadb69103414256dbdc68eaa291b4901be2aa4963d77e17f679ec2962d9e16ffc77325aef0bae9c0ab996fe6dd850a0694b1fcabb0500000027251add7b1c7f213c46d8d57bb3f2e76f3adb84d76abd85e0010bda46040bf8d8607249efa51fbf5bc291d7b536aadba1a8973edaacaa8b8a6158916e944c464b852d6fb9c6653392b8f2f5f902442f46eabfe1683f1fe39b6df58192ab84030ae7a866375dcf461c10edb0e337a74c73a2e5c36ea0375eec948a07"], 0x24, 0x3) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000000000e00000000001801000000000000000086939677fba3535b5972fbc490ea59e4930381e34e0588a3479d7cadb69103414256dbdc68eaa291b4901be2aa4963d77e17f679ec2962d9e16ffc77325aef0bae9c0ab996fe6dd850a0694b1fcabb0500000027251add7b1c7f213c46d8d57bb3f2e76f3adb84d76abd85e0010bda46040bf8d8607249efa51fbf5bc291d7b536aadba1a8973edaacaa8b8a6158916e944c464b852d6fb9c6653392b8f2f5f902442f46eabfe1683f1fe39b6df58192ab84030ae7a866375dcf461c10edb0e337a74c73a2e5c36ea0375eec948a07"], 0x24, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRES16=r3, @ANYRES8=r2], 0x74}, 0x1, 0x0, 0x0, 0xcc93f1266b73b8aa}, 0x90ce9ffc2264e63b) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRES16=r3, @ANYRES8=r2], 0x74}, 0x1, 0x0, 0x0, 0xcc93f1266b73b8aa}, 0x90ce9ffc2264e63b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = gettid() ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) setitimer(0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) preadv(r3, &(0x7f0000000380), 0x1cd, 0xffff7ffe, 0xfffffffd) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x1, 0x40) (async) open(&(0x7f0000000000)='./file1\x00', 0x1, 0x40) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x5) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x5) 28.356984174s ago: executing program 32 (id=50): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) (async) openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000001c0), 0x3, 0x58c, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) r2 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x3c040, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000000000e00000000001801000000000000000086939677fba3535b5972fbc490ea59e4930381e34e0588a3479d7cadb69103414256dbdc68eaa291b4901be2aa4963d77e17f679ec2962d9e16ffc77325aef0bae9c0ab996fe6dd850a0694b1fcabb0500000027251add7b1c7f213c46d8d57bb3f2e76f3adb84d76abd85e0010bda46040bf8d8607249efa51fbf5bc291d7b536aadba1a8973edaacaa8b8a6158916e944c464b852d6fb9c6653392b8f2f5f902442f46eabfe1683f1fe39b6df58192ab84030ae7a866375dcf461c10edb0e337a74c73a2e5c36ea0375eec948a07"], 0x24, 0x3) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000000000e00000000001801000000000000000086939677fba3535b5972fbc490ea59e4930381e34e0588a3479d7cadb69103414256dbdc68eaa291b4901be2aa4963d77e17f679ec2962d9e16ffc77325aef0bae9c0ab996fe6dd850a0694b1fcabb0500000027251add7b1c7f213c46d8d57bb3f2e76f3adb84d76abd85e0010bda46040bf8d8607249efa51fbf5bc291d7b536aadba1a8973edaacaa8b8a6158916e944c464b852d6fb9c6653392b8f2f5f902442f46eabfe1683f1fe39b6df58192ab84030ae7a866375dcf461c10edb0e337a74c73a2e5c36ea0375eec948a07"], 0x24, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRES16=r3, @ANYRES8=r2], 0x74}, 0x1, 0x0, 0x0, 0xcc93f1266b73b8aa}, 0x90ce9ffc2264e63b) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRES16=r3, @ANYRES8=r2], 0x74}, 0x1, 0x0, 0x0, 0xcc93f1266b73b8aa}, 0x90ce9ffc2264e63b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = gettid() ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) setitimer(0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) preadv(r3, &(0x7f0000000380), 0x1cd, 0xffff7ffe, 0xfffffffd) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x1, 0x40) (async) open(&(0x7f0000000000)='./file1\x00', 0x1, 0x40) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x5) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x5) 24.251315116s ago: executing program 1 (id=127): socket$inet6(0xa, 0x1, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d50a00", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfa, 0x1000}}}}}}}, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000000)={0x28, 0x14, 0x940e2689cab82739, 0x0, 0x25dfdbff, {0x28}}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0xc8c0) exit(0x7ffd) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 23.186359045s ago: executing program 1 (id=136): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xc, 0x9, 0xd, 0x426}, {0x1, 0x7, 0x6, 0xb}, {0x9, 0xd, 0x9b, 0x3a9}]}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000a0000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000000000c02000000000000000100000d0100000000000000000000000000005f"], &(0x7f0000000340)=""/220, 0x3d, 0xdc, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000400)="b9ff03318944268cb89904f086dd", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200841e, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x5547, &(0x7f0000007a00)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x1000) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0x0, 0x1, 0xeb, 0x84}, 'syz1\x00', 0x26}) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 21.843565509s ago: executing program 1 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_pidfd_open(r0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0xc) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d03f, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsmount(0xffffffffffffffff, 0x1, 0x7a) socket(0x9, 0x5, 0x972d) socket$netlink(0x10, 0x3, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x402e9) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f0000003a40)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) 20.662675144s ago: executing program 1 (id=153): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getdents(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) (async) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_buf(r4, 0x0, 0x11, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x54, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x54}}, 0x0) (async) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 20.199503625s ago: executing program 1 (id=157): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)={[{@fat=@nfs}, {@fat=@time_offset={'time_offset', 0x3d, 0x10000000002b3}}, {@utf8}, {@utf8}, {@nonumtail}, {@numtail}, {@uni_xlate}, {@rodir}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_lower}, {@rodir}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp860'}}], [{@smackfsdef={'smackfsdef', 0x3d, '\xf8]$/@.'}}, {@appraise_type}, {@fsname={'fsname', 0x3d, '[!\\\''}}]}, 0x41, 0x394, &(0x7f0000000840)="$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") r0 = syz_usb_connect$midi(0x5, 0x9f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x1, 0x1, 0x6, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x5, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x4, 0x4}, @ms_header={0x7, 0x24, 0x1, 0xfffc, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x2, 0xa2}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0x1, 0x5, {0xb, 0x25, 0x1, 0x7, "d8fb502ce5352e"}}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0xff, 0x9, 0x81, {0xb, 0x25, 0x1, 0x7, "c3a4e8ae96b1bf"}}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x9, 0x3, 0x7, {0xd, 0x25, 0x1, 0x9, "f87d8b1d5f9175772d"}}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x2e, 0x1, 0xfd, {0x5, 0x25, 0x1, 0x1, "a7"}}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x7, 0xf, 0x7, {0x13, 0x25, 0x1, 0xf, "b5811222b719bd5d40887e595d8305"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xf6, 0x0, 0x5, 0x20, 0xff}, 0x60, &(0x7f00000002c0)={0x5, 0xf, 0x60, 0x2, [@generic={0x47, 0x10, 0x8, "c8897d06f952e6c66e504f20bc6a3906643196ab04d2224576c67ad3de08f47e79f1948b40645061ed9ff238d9ca21866da6524e57940ce0fac1b2459e3f4cf8fafd887d"}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "267fdf4881440def1aff19b70b615e9b"}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4cc960be52f8b5d4}}, {0x13, &(0x7f0000000380)=@string={0x13, 0x3, "66e2d38d247d9a8e4986ec1ec6ef932179"}}, {0xf7, &(0x7f00000003c0)=@string={0xf7, 0x3, "ec36f8bf8328f244b849c0731b7b69bdd5d22f4ad64760a46705de619960f10639fb560f8c32de4e46648b183c2cac528e50eaba89a23d39fbcf3e12004d6f0381ddc3c71dc20dbc451f1dc6fdd5a466b9fef5557affa01a98a9c526d7fcb94d0992ec2e1389cd5e38857aff5dd2f21d31b840d0e8147394344df5178d21a572dba866f83bf88631095fd405b1cf6f5b600604082845bc1d21cbd44fea5873dcb858e7b337bb2153813ec9dcb194ec6aa6cca7be070aaff6658c041826a1ba5059973f48ba0011becb53aeb3ccc85009800ddd6d30837525c2934b536eb2f2993a3bc2f587a2bf7fa3687403eb11d3740558a5bd89"}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r6, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write$FUSE_LSEEK(r8, &(0x7f0000002700)={0x59, 0x0, 0x0, {0xfff}}, 0x18) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000500)={0x40, 0x5, 0x12, {0x12, 0x22, "6ef2d5c84fd8fdea0486f1d1319ea23b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f0000000580)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "c1a08278d6aba931a67083d41ab475e1"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x65, 0x7, 0x7fff}, @ptm_cap={0x3}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x8, 0xdb, "a7a6b877", '-:dH'}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x77, 0x80, 0x81, 0xfa, 0x4, 0xc, 0x8}}}, &(0x7f0000000f00)={0x84, &(0x7f0000000fc0)={0x20, 0x16, 0xf8, "b35ec6d2d1110043ce6307178f875c7e412c3af140454e5720ae64c638248d61e8ac03da4216078f5414062747dd6a49965b7329d55cec31e49b742a1d2ba09e6d59a08b74e1c41a2fefd69271de40e8172a92c913d8debaacc6441d1a5abea35aa76302f3f44fed967b95773d37fd80ef59afe0fda53e3ab3db8edd9f3643c32a4b0f18ebcab0ba81928eb60a8f41d91b01d8af0a8e72f46c99c5369954aedf67439e07c8497d1d6ae6cfc6fc0b9b08cb14f6615af8e29a18cc0ea7e8e46ca88320f00172af92de59b975bd466a12fc243a69e6f6ec1d02256dd4da8cfea06243e680bd44da8d228d8177d97106b8913dce978e3325bd6c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000c00)={0x20, 0x0, 0x8, {0x140, 0x20, [0xff0f]}}, &(0x7f0000000c40)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000c80)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000000cc0)={0x40, 0xb, 0x2, "13cd"}, &(0x7f0000000d00)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000d40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, &(0x7f0000000d80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000dc0)={0x40, 0x19, 0x2, "47f6"}, &(0x7f0000000e00)={0x40, 0x1a, 0x2, 0xac}, &(0x7f0000000e40)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000e80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000ec0)={0x40, 0x21, 0x1, 0x5}}) 17.863706854s ago: executing program 1 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e0000002080007400000000010000580"], 0x74}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) ioctl(r1, 0xc138fd06, &(0x7f0000000000)) 17.33401907s ago: executing program 4 (id=173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x52) fadvise64(r1, 0x54056, 0x55156, 0x3) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000200)={0x2, 0x67, &(0x7f0000000180)="f02a1bf54178ab8d059919794701fb2c509c05edb20b4f4746484a9a1366de4418ca0cc388caf84750f3a0ad28cdd1da38e779693eb33707747a7192373de227051727451255efb9bd845c4c53b24250ca6cef84e518238c70b57cf71bf93dad1e3c738b540e6e"}) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 16.414535232s ago: executing program 4 (id=177): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x4000002}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000100)={0xf, 0x2}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000580)={0x9, {{0xa, 0x4e24, 0x2, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x3, @loopback, 0x9}}}, 0x108) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='mnt/encrypted_dir\x00', 0x2094c05, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x36000000}}]}}, &(0x7f0000000000)=""/144, 0x4e, 0x90, 0x1}, 0x20) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0x4f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x5, '\x00', @a}) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, '\x00', 0x3f6f, 0xff, 0x0, @mcast2, @loopback, [], "554001294af7376b"}}}}}}}, 0x0) syz_usb_connect$uac1(0x5, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000106b1d01014000010203010902930003010010030904000000010100000a24010000020201020c240201050205030600060806240406077508240706020009a50b240605060205000a000609040100000102000009040101010102000009050109ff030605020725018207500a0904020000010200000904020101010200000824020105030903072401050600000905820940000002f20625"], 0x0) 14.54848966s ago: executing program 4 (id=187): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/config\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x20000007c, 0x0) r4 = dup3(r2, r3, 0x0) read(r4, &(0x7f0000000280)=""/200, 0xc8) (async) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f0000000180)="3106f30a3a") 14.463019814s ago: executing program 4 (id=188): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file1\x00', 0x8c6, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@uni_xlateno}, {@fat=@flush}, {@rodir}, {@utf8}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@fat=@discard}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a8, &(0x7f0000000200)="$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") open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002a00)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43c554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4c9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce64e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a0d000000e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909190000000000000000c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9ef7d5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5e666c438f5d0f40f911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfd00d9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6eafaf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f00064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b2e4e552cc9e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a456281d18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4ed8830d00008998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd59fde0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb890d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab53391af2fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc75949424310dff81116b8f2076b8ecace84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a70bed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815d928bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4260093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a3cfafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8a3f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd06, &(0x7f0000003000)="04000000000000000000000038010000") sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in=@multicast2, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x9, 0x200000000000000, 0x4}, 0xffffffff, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 14.272705793s ago: executing program 4 (id=190): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000240)='./bus\x00', 0x10e, &(0x7f0000000800)={[{@errors_remount}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@nolazytime}, {@stripe}, {@errors_continue}, {@data_err_abort}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@commit={'commit', 0x3d, 0xc00009}}, {@nodioread_nolock}]}, 0x3, 0x467, &(0x7f0000001440)="$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") 13.987661756s ago: executing program 4 (id=192): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002bbd700001dcdf2507000000", @ANYRES32=r2, @ANYBLOB="060001"], 0x38}, 0x1, 0x0, 0x0, 0x2008000}, 0x40080c0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan1\x00', 0x8000}) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x1, 0x153b, &(0x7f0000000a00)="$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") setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) (async) write$tun(r3, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0xfd7) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x4004455) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e0000002000000000000000000000000000000000036d263e8000000000000000000001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000003"], 0xb8}}, 0x4004) (async) syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x8, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f00000008c0)={[{@index_on}, {@uuid_auto}, {@index_off}, {@index_off}, {@uuid_off}, {@nfs_export_on}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@uid_eq}]}) chdir(&(0x7f00000003c0)='./bus\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305828, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x9, 0xa4af, 0x2, 0x26a}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_NMI(r8, 0xae9a) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000e844) 13.980744276s ago: executing program 33 (id=192): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002bbd700001dcdf2507000000", @ANYRES32=r2, @ANYBLOB="060001"], 0x38}, 0x1, 0x0, 0x0, 0x2008000}, 0x40080c0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan1\x00', 0x8000}) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c696f636861727365743d63703933362c6572726f72733d72656d6f756e742d726f2c757466382c6572726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303030342c74696d655f6f66667365743d30783030f6331730303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c007718493fa5e1236995baf2ad873ae8a6dcba132eaa9b3fc33fca0eae1117284d531e0b15de5920ba8a9def72ef71fa641ef945666de6243e41bb8a0d9891ba7da5b33fb6bf7c7523288c5ee3cd60a48fa5e511de63ffdaff0aee632ad6e89f82002b43d5905fc4d2f43254f8930172f330adcd3cc857a05479d5b30736918a2cadb61c826243c33db0e3bf385b005236710fa3aef32a9eca8f6978e6f582ddb2514f7178088106458bf95f327c8ec213f75eb9a7942bdef6afca47a252fe8d2e6dca8f25704e6e7031521fa0f8aad51387e033e016b1a9c460000adcc8edcd0a55dbccfd9a9dbfb02b90bb074bbc611070ef3f6ec576ba9c4f8f3d8c379ca3948c80bd73b21cd36a0684cf426ff4d307e2bd5cab31b28f48eb5bd3ec2a5f45972364fe4673047bc68da2d44eed8d598542d833330e292fef6fcea228fc74ed5943ba3d3a9c764516afda7c189b63266f9c1029da536aa86dad48da9df4729f0de8eb1cb0de0a1140146569544b4d5a4d2e2fc161bc110d04198221ee769db5b582b749e656a1c084cf14cd49", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x1, 0x153b, &(0x7f0000000a00)="$eJzs3AmYjlX7APD7Puc8Y0h6m2QZzjn3w5sshyTJkiRLkiRJki0haZJPEhJDtqQhCckyJMsQkmVi0tj3fUlIkiZJsmVLzv+a4lP/+r6vb/Vd39y/63ou537Oc5/nPO/9Pp5lrplvOg+p0ahm1QZEBP8U/PmfRACIBYABAHANAAQAUDaubFxmf3aJif/cTti/1kMpV3oG7Eri+mdtXP+sjeuftXH9szauf9bG9c/auP5ZG9efsaxs07T81/KSdRd+/5+V8fX/f0hGyTFfrCl5fReAmD+awvXP2rj+/7OCP7IR1z9r4/pnVbFXegLsvwCf/1lBtr/Yw/XP2rj+jGVlV/r9879/kX+1HyJZ4TP4K8fPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9B5zxlykAuNS+0vNijDHGGGOMMcbYv47PdqVnwBhjjDHGGGOMsX8/BAESFAQQA9kgFrJDDhAAcDXkgmsgAtdCHFwHueF6yAN5IR/kh3goAAVBgwELBCEUgsIQhRugCNwIRaEYFIcS4KAklIKboDTcDGXgFigLt0I5uA3KQwWoCJXgdqgMd0AVuBOqwl1QDapDDagJd0MtuAdqw71QB+6DunA/1IMHoD48CA3gIWgID0MjeAQaw6PQBJpCM2gOLf6h/BegO7wIPaAnJEIv6A0vQR/oC/2gPwyAl2EgvAKD4FVIgsEwBF6DofA6DIM3YDiMgJHwJoyCt2A0jIGxMA6SYTxMgLdhIrwDk2AyTIGpkALTYDq8CzNgJsyC92A2vA9zYC7Mg/mQCh/AAlgIafAhLIKPIB0WwxJYCstgOayAlbAKVsMaWAvrYD1sgI2wCTbDFtgK22A77ICPYSd8ArtgN+z5c/3+nvzTv8j/FPZCFwQEFChQocIYjMFYjMUcmANzYk7MhbkwghGMwzjMjbkxD+bBfJgP4zEeC2JBNGiQkLAQFsIoRrEIFsGiWBSLY3F06LAUlsLSeDOWwTJYFstiOSyH5bECVsBKWAkrY2WsglWwKlbFalgNa2ANvBvvxl5YG2tjHayDdbHupddT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN2mIAJ2B7bYwfsgB2xI3bCTtgZO2MX7IpdM17IBvgivog9sZrohb2xN/bBpGz9sD/2x5dxIL6Cr+CrmISDcQi+hq/h6zgMT+FwHIEjcSRWFm/haByDJMZhMibjBJyAE3EiTsLJOBmnYgpOw+k4HWfgTJyJ7+FsfB/fx7k4F+djKqbiAlyIaZiGi/A0puNiXIJLcRkux2W4ElfhSlyDa3ENrsf1uBE34mbcjFtxK27H7fgxKgD8BHfjbkzCvbgX9+E+3I/78QAewAzMwIN4EA/hITyMh/EIHsGjeAyP4zE8iSfxFJ7GM3gGz+E5PI/PxX/V8ONiq5NAZFJCiRgRI2JFrMghcoicIqfIJXKJiIiIOBEncovcIo/II/KJfCJexIuCoqAwwggSYQwAiKiIiiKiiCgqioriorhwwolSopQoLUqLMqKMKCtuFeXEbaK8qCBau0qikqgs2rgq4k5RVVQV1UR1UUPUFDVFLVFL1Ba1RR1RR9QVdUU98YCoL3phP3xIZFamkRiMjcUQbCKaCnnxDGgphmEr0Vq0EU+IETgc24mWLkE8LdqL0dhB/EmMwWdFJzEOO4vnRRfRVXQTL4juopXrIXqKSdhL9BZTsY/oK/qJ/mIGVhfv4ezsNcSrIkkMFkPEa2I+vi6GiTfEcDFCjBRvilHiLTFajBFjxTiRLMaLCeJtMVG8IyaJyWKKmCpSxDQxXbwrZoiZYpZ4T8wW74s5Yq6YJ+aLVPGBWCAWijTxoVgkPhLpYrFYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghPhY7xSdil9gt9ohPxV7xmdgnPhf7xRfigPhSZIivxEHxtTgkvhGHxbfiiPhOHBXHxHFxQpwU34tT4rQ4I86Kc+IHcV78KC4IL0CiFFJKJQMZI7PJWJld5pBXyZwygF4/fbrXyjh5ncwtr5d5ZF6ZT+aX8bKALCi1NNJKkqEsJAvLqLxBFpE3yqKymCwuS0gnS8pS8iZZWt4sy8hbZFl5qywnb5PlZQVZUVaSt8vK8g4JkZ8rWE1WlzVkTXm3TIR7ZG15r6wj75N15f2ynnxA1pcPygbyIdlQPiwbyUdkY/mobCKbymayuWwhH5Mt5eOylWwt28gnZFv5pGwnn5IJ8mnZXvqLX5FnZSf5nOwsn5ddZFfZTf4oL0gve8ieEnqB7C1fkn1kX9lP9pcD5MtyoHxFDpKvyiQ5WA6Rr8mh8nU5TL4hh8sRcqR8U46Sb8nRcowcK8fJZDleTpBvy4nyHTlJTpZT5FSZIqfJfhdHmiXl38x/+5f5mZdeOU0O+mnvG+UmuVlukVvlNrld7pAfy51yp9wld8k9co/cK/fKfXKf3C/3ywPygMyQGfKgPCgPyUPysDwsj8gj8qg8Js/KE/Kk/F6ekqflaXlWnpPn5PmLnwEoVEJJpVSgYlQ2FauyqxzqKpVTXa1yqWtURF2r4tR1Kre6XuVReVU+lV/FqwKqoNLKKKtIhaqQKqyi6ga8eDqq4qqEcqqkKqVu+nvyVRF1oyqqiv0q/9L8Ev/C/FqoFqqlaqlaqVaqjWqj2qq2qp1qpxJUgmqv2qsOqoPqqDqqTqqT6qw6qy6qi+qmuqnuqrvqoXqoRJWoequXVB/VV/VT/dUA9bIaqAaqQWqQSlJJaogaooaqoWqYGqaGq+FqpBqpRqlRarQarcaqsSpZJasJaoKaqCaqSWqSmqKmqBSVoqar6WqGmqFmqVlqtpqt5qg5ap6ap1JVqlqgFqg0laYWqUUqXS1Wi9VStVQtV8vVSrVSrVar1Vq1Vq1X61W62qQ2qS1qi9qmtqkdaofaqXaqXWqX2qP2qL1qr9qn9qn9ar86oA6oDJWhDqqD6pA6pA6rw+qIOqKOqqPquDquTqqT6pQ6pc6oM+qcOqfOq/PqgrqgIBAgAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4mLRo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf0g86v1UNAweDhoFDwSNA4eDZoETYNmQfOgxb9k/AeDBkHm+N6fyvu466F76kTdS/fWL+k+uq/up/vrAfplPVC/ogfpV3WSHqyH6Nf0UP26Hqbf0MP1CD1Sv6lH6bf0aD1Gj9XjdLIeryfot/VE/Y6epCfrKXqqTtHT9HT9rp6hZ+pZ+j09W7+v5+i5ep6er1P1B3qBXqjT9Id6kf5Ip+vFeoleqpfp5XqFXqlX6dV6jV6r1+n1eoPeqDfpzXqL3qq36e16h/5Y79Sf6F16t96jP9V79Wd6n/5c79df6AP6S52hv9IH9df6kP5GH9bf6iP6O31UH9PH9Ql9Un+vT+nT+ow+q8/pH/R5/aO+oH3mzX3m5d0oo0yMiTGxJtbkMDlMTpPT5DK5TMRETJyJM7lNbpPH5DH5TD4Tb+JNQVPQZCJDppApZKImaoqYIqaoKWqKm+LGGWdKmVKmtCltypgypqwpa8qZcqa8KW8qmormdnO7ucPcYe40d5q7zF2muqluapqappapZWqb2qaOqWPqmrqmnqln6pv6poFpYBqahqaRaWQam8amiWlimplmpoVpYVqalqaVaWXamDamrWlr2pl2JsEkmPamvelgOpiOpqPpZDqZzqaz6WK6mG6mm+luupsepodJNImmt+lt+pg+pp/pZwaYAWagGWgGmUEmySSZIWaIGWqGmmFmmBluRpiRmTeq5i0z2owxY804k2ySzQQzwUw0E80kM8lMMVNMikkx0810M8PMMLPMLDPbzDZzzBwzz8wzqSbVLDALTJpJM4vMIpNu0s0Ss8QsM8vMCrPCrDKrzBqzxqyDdWaD2WA2mU1mi9litpltZofZYXaanWaX2WX2mD1mr9lr9pl9Zr/Zbw6YAybDZJiD5qA5ZA6Zw+awOWKOmKPmqDlujpuT5qQ5ZU6ZM+aMOWfyXrxeehNrs9sc9iqb015tc9lr7P+P89n8Nt4WsAWttnls3l/Fxlpb1BazxW0J62xJW8re9Ju4vK1gK9pK9nZb2d5hq/wmrmXvsbXtvbaOvc/WtHf/Kq5r77f17CO2PiKAbWob2ua2kX3ENraP2ia2qW1mm9u29knbzj5lE+zTtr195jfxArvQrrKr7Rq71u6yu+0Ze9Yest/Yc/YH28P2tAPsy3agfcUOsq/aJDv4N/FI+6YdZd+yo+0YO9aO+008xU61KXaanW7ftTPszN/EqfYDO9um2Tl2rp1n5/8UZ84pzX5oF9mPbLoNYIldapfZ5XaFXfnnuS616+0Gu9HutJ/YLXar3Wa32x2XboTtbrvHfmr32s/sQfu13W+/sAfsYZthv/opzjy+w/Zbe8R+Z4/aY/a4PWFP2u/VpezMYz9hf7QXrLdASECSFAUUQ9kolrJTDrqKctLVlIuuoQhdS3F0HeWm6ykP5aV8lJ/iqQAVJE2GLBGFVIgKU5RuoEvTK04lyFFJKkU3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0NPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSIvWi3vQS9aG+1I/60wB6mQbSKzSIXqUkGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiZxtMEepsm0js0iSbTFJpKKTSNptO7NINm0ix6j2bT+zSH5tI8mk+p9AEtoIWURh/SIvqI0mkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pg76ig/Q1HaJv6DB963vSd3SUjtFxOkEn6Xs6RafpDJ2lc/QDnacf6QJ5ghBDEcpQhUEYE2YLY8PsYY7wqjBneHWYK7wmjITXhnHhdWHu8PowT5g3zBfmD+PDAmHBUIcmtCGFYVgoLBxGwxvCIuGNYdGwWFg8LBG6sGRYKrwpLB3eHJYJbwnLhreG5cLbwvJhhfCR+yqFt4eVwzvCKuGdYdXwrrBaWD2sEdYM7w5rhfeEtcN7wzrhfWGZ8P6wXvhAWD98MGwQPhQ2DB8OG4WPhI3DR8MmYdOwWdg8bBE+FrYMHw9bha3DNuETYdvwybBd+FSYED4dtg+f+an//oV/uT8x7BX2Dl8KXwq9v1fOi86PpkY/iC6ILoymRT+MLop+FE2PLo4uiS6NLosuj66Iroyuiq6Oromuja6Lro9uiG6Mel8zGzh0wkmnXOBiXDYX67K7HO4ql9Nd7XK5a1zEXevi3HUut7ve5XF5XT6X38W7Aq6g084468iFrpAr7KLuBlfE3eiKumKuuCvhnCvpSrnmroVr4Vq6x10r19q1cU+4J9yT7kn3lHvKPe3au2dcB/cn19E96zq559xz7nnXxXV13dwLrrsbn+vnczLR9Xa9XR/Xx/Vz/dwAN8ANdAPdIDfIJbkkN8QNcUPdUDfMDXPD3XA30o10o9woN9qNdmPdWJfskt0EN8FNdBPdJDfJTXFTXIpLcdPddDfDzXCVZ/68lzlujpvn5rlUl+oWuMx7xjS3yC1y6S7dLXFL3DK3zK1wK9wqt8qtcWvcOrfObXAb3Ca3yW1xW9w2t83tcDvcTrfT7fLX/Dyo2+v2uX1uv9vvDrgvXYb7yh10X7tD7ht32H3rjrjv3FF3zB13J9xJ97075U67M+6sO+d+cOfdj+6C8y45Mj4yIfJ2ZGLkncikyOTIlMjUSEpkWmR65N3IjMjMyKzIe5HZkfcjcyJzI/Mi8yOpkQ8iCyILI2mRDyOLIh9F0iOLI0siSyPLIssj3hfYEvpCvrCP+ht8EX+jL+qL+eK+hHe+pC/lb/Kl/c2+jL/Fl/W3+nL+Nl/eV/AV/aO+iW/qm/nmvoV/zLf0j/tWvrVv45/wbf2Tvp1/yif4p317/4zv4P/kO/pnfSf/nO/sn/ddfFffzb/gu/sXfQ/f0yf6Xr63f8n38X19P9/fD/Av+4H+FT/Iv+qT/GA/xL/mh/rX/TD/hh/uR/iRMW/6UZcekWGcT/bj/QT/tp/o3/GT/GQ/xU/1KX6an+7f9TP8TD/Lv+dn+/f9HD/Xz/Pzfar/wC/wC32a/9Av8h/5dL/40ktJv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+x3+k/8Lr/b7/Gf+r3+M7/Pf+73+y/8Af+lz/Bf+YP+a3/If+MP+2/9Ef+dP+qP+eP+hD/pv/en/Gl/xp/15/wP/rz/0V/g31ljjDHGGPtDxl9uil/3/Pw6v9fv5IhfbNwbAK7emj/jl/2Zd5Tr8vzc7ivi20YA4OmenR+6tFSrlpiYeHHbdAlB4bkAl34SlCkGLseLoQ08CQnQGkr/7vz7iq7n6G+MH70VIMcvcmLhcnx5/M8BMPF3xn/siZELyoVn4v7K+HMBiha+nJMdLseLoc1P71daQ5m/MP+8Lf/G/LN/kQzQ6hc5OeFyfHn+peBxeAYSfrXlX9H2j23GGGOMMcYYY+x/Q19RseOl58/g4rrfez6PV5dzssHl+G89nzPGGGOMMcYYY+zKe7Zrt6ceS0ho3fHvb1T5h7L+cKMx/F4XwL91p1m54T3ApTUKAP7JAQEyG/I/eRSb/yP7Srp46vz/rmVnfQD/HaX8xxtj/7zmCv/HxBhjjDHGGPuXu3z3/+v16kpNiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+E39X7EofI2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMXal/V8AAAD///9W/fM=") setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) (async) write$tun(r3, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0xfd7) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x4004455) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e0000002000000000000000000000000000000000036d263e8000000000000000000001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000003"], 0xb8}}, 0x4004) (async) syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x8, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f00000008c0)={[{@index_on}, {@uuid_auto}, {@index_off}, {@index_off}, {@uuid_off}, {@nfs_export_on}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@uid_eq}]}) chdir(&(0x7f00000003c0)='./bus\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305828, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x9, 0xa4af, 0x2, 0x26a}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_NMI(r8, 0xae9a) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000e844) 10.767522946s ago: executing program 2 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f4}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@ipv6_newroute={0x28, 0x18, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x20, 0x94, 0x0, 0xfd, 0x0, 0xff, 0x5, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000) 10.655683911s ago: executing program 2 (id=203): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x40040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8008804}, 0x20008840) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000800)=ANY=[@ANYBLOB='time_offset=0x00000000000004f8,nocase,nodots,flush,allow_utime=00000000000000000077777,dots,dots,dots,quiet,dots,allow_utime=00000000000000000000011,check=strict,errors=remount-ro,fmask=00000000000000000120000,usefree,tz=UTC,uid=', @ANYRES8, @ANYBLOB=',fowner=', @ANYRES8, @ANYBLOB="2c66756e633d46494c455f434845434b2c646f6e745ffe6561737572d02c7569641d4403fd4a65e4823d8a1f2b92", @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0x0, @ANYBLOB="2c02dcb08feac37382bd24fe2316fc35474289b6c5827a3bc50fc8dc4a91b2cfc7b258298beb5b51767a206f9f008dd17a1f9eba7b73c5ef8e118c09c3eb70304538427bc2728754628efd69f5c5b24851d080b7d5c97b74e37b06e6735e1a0ed749329c7908a315a49d22ecdf4c6f5b73f41755c7ee823113a52b68b70cd183e111cb93b6a443"], 0x1, 0x23d, &(0x7f0000000a40)="$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") r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) 9.793162542s ago: executing program 2 (id=205): syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004"], 0x0) (async) process_madvise(0xffffffffffffffff, &(0x7f0000000140), 0x200000000000020e, 0x9, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000380)=0x8, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x34}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="3bf1", 0x2, 0x4010, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x102, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) process_vm_readv(r1, &(0x7f0000001800)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/91, 0x5b}, {&(0x7f0000001700)=""/5, 0x5}, {&(0x7f0000001740)=""/145, 0x91}], 0x4, &(0x7f0000001bc0)=[{&(0x7f0000001840)=""/117, 0x75}, {&(0x7f00000018c0)=""/245, 0xf5}, {&(0x7f00000019c0)=""/45, 0x2d}, {&(0x7f0000001a00)=""/171, 0xab}, {&(0x7f0000001ac0)=""/216, 0xd8}], 0x5, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8302, 0x0) r3 = io_uring_setup(0x2977, &(0x7f00000003c0)={0x0, 0x8855, 0x1, 0x3, 0x40, 0x0, r2}) sync_file_range(r3, 0x10001, 0x7, 0x3) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b0af8ff00000000bda107000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r4, &(0x7f0000000000)='7', 0x1) (async) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x7, 0x7, 0x4, 0x2, 0x4, 0x1}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000001c0)={[0x7]}, 0x8}) (async) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) 6.525866215s ago: executing program 2 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3U9rHOUfAPDvbJL+//2aQinqQQI9WKndNIl/KgitR9FiQe91SbahZNMt2U1pYqHtwV68SBFELIgvwLvH4hvwVQhaKFKCHryszGa23WZ3s8l2a1Ln84Fpn2dmku88+8zz5Dszu2wAuTWR/lOIeDkivkoiDrdtG41s48T6fmuPbsymSxKNxid/JJFk61r7J9n/B7PKSxHx8xcRJwudcWsrqwulSqW8lNUn64tXJ2srq6cuL5bmy/PlK9MzM2fempl+9523h9bW1y/89e3H9z848+XxtW9+fHDkbhLn4lC2rb0dz+BWe2UiJrLXZCzObdhxagjBdpOk3w5dzgF23khENBqNxlikc8DhGMlGPfDfdzMb/0AeJcY/5FQrD2hd2w/pOviF8fD99Rsdne0fXb83EvsivTY6sJY8dWWUXu+ODyF+GuOn3+/dTZfocx/i5hDiAbTcuh0Rp0dHO+e/JJv/Bnd6C3f9NsbI298f2En30/znjW75T+Fx/hNd8p+DXcbuIPqP/8KDIYTpKc3/3uua/z6eusZHstr/mjnfWHLpcqV8OiL+HxEnYmxvWh/0eU57/pcuafxWLpgdx4PRvU//zFypXhowXIeHtyNeeZL/JtEx/+9r5rob+z99PS5sMcax8r1Xe23r3/52w8+AGz9EvNa1/5880Uo2fz452TwfJltnRac/7xz7pVf87bV/+NL+P7B5+8eT9ue1te3H+H7f3+Ve2wY9//cknzbLe7J110v1+tJUxJ7ko871009+tlVv7Z+2/8Txzee/buf//oj4bIvtv3O0dxq0G/p/blv9v/3Crx9+/l2v+Fvr/zebpRPZmq3Mf1s9wGd57QAAAAAAAGC3KUTEoUgKxcflQqFYXH9/x9E4UKhUa/WTl6rLV+ai+VnZ8RgrtJ50H257P8RU9n7YVn16Q30mIo5ExNcj+5v14my1MrfTjQcAAAAAAAAAAAAAAAAAAIBd4mCPz/+nfhvZ6aMDnjtf+Q351Xf8D+ObnoBdyd9/yC/jH/LL+If8Mv4hv4x/yC/jH/LL+If8Mv4BAAAAAAAAAAAAAAAAAAAAAAAAAABgqC6cP58ujbVHN2bT+ty1leWF6rVTc+XaQnFxebY4W126WpyvVucr5eJsdbHf76tUq1enpmP5+mS9XKtP1lZWLy5Wl6/UL15eLM2XL5bH/pVWAQAAAAAAAAAAAAAAAAAAwIultrK6UKpUyksKPQtnY1ccxsCFpF8vn81OhoFCjO58AxWeQ2GHJyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPNPAAAA//+VMzPO") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0xffff, 0x1, 0x9}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r3, 0x0, r1, 0x0, 0x40010000, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000100)=0xd, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x700, 0xfdef) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xdfff, 0x2, 0x10001}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.162676059s ago: executing program 2 (id=211): r0 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\xfd\xff`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xd5\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E\xd1\xf9\x8a\xccq&\x15M]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaRE\x06\xa4\xf09\xcf\x05u \xc4\t\xf9\xa8T\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89s5\b8)O\x14\x90\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1e\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\x10\xf0\xbc\x1c8\b\xd41gK\xe4\xea\xe39d\bL\xe5\xea\xd7[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xa9\xa3\xac\xc0\xf4\x9cMSS\xec\xf2U\xde\xd2\xa2H\x8e\x8d\xc9\xc1.Nk\xbb\xc4\xe0_\x87Z*\x0fV{\xc9d[!>o\xee\xabt\x95\xa1\xa2\x9d\x00lI\xf2\x12\a\vx\x97VT\xa2\x8b\x8b\xa1\x89\xda\xabJ\xc8O\xe5\xce\x18\xb8\xc1\xce\"\x19z=\xdf\xf6\x84E\xb6\xd5\xf9\xe2\xca;\xe9}\x98{-\x0e\xf5\xf6T\x19\\\xeb\xf6v\xb3\xfdI\xdd\xd9\x10\xcc\x1dk\x98\x03\x9b\x89\xa0\xcc\x8a\x1d\x98\xa4F\xa2}\xb8\x9f\xf4\xb3\x87P\x16\x9a\x1d\xfd\x87\xdc!\x91\xaa\xbd\xfdr\xb9)\xc9\xce\x8c\xe8\xb0\x16E\x1b\xb3\x81\xee,A\xfey?\xccvw\xf8\xa0\xde\xa2\x7f\x15\x06\xf1\xc3\b', 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000000000800900000001000000", @ANYRES32, @ANYBLOB="0000e9ff00000000000000000000000000000000f8c1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket(0x28, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x43, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902310001080010000904df0003080662ff09050c02200006060309941f1000020102070424"], 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)='oom_score', 0x9) write$binfmt_misc(r3, &(0x7f0000000180)="e502", 0x2) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x7fff, 0x8}, 0xc) ioctl$NILFS_IOCTL_SYNC(r4, 0x80086e8a, &(0x7f0000000140)) 3.778775573s ago: executing program 0 (id=213): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x6c) fadvise64(r0, 0x3, 0xfe57, 0x4) write$binfmt_misc(r0, &(0x7f0000000000)="7d1eb5716714d1acdb381963ec8f399521b268010699ab9c713a739e013da5b9276126cf0cbc049040a0bf990a0cee2a2bf2b0f9072d10c0bfae31a652faeeda90aaf0c2c41e53e1f90b4828be64a516ab631252a30f100f33e317", 0x5b) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x2c0, 0x3a8, 0xffffffff, 0x3a8, 0x0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfff7, 'fsm\x00', "a5d0467c414865c7ccd3f0e49666abae64b467ed70ee66e32fed1f77d91941af8d4e7caeb32c1bb26a91401bde8e1b6bcc6bfe62988407aebd743cedb6a5c4afbeecc8f4fba7abb1aaf4f29f0b77ef54dee4a2d83d5523df7c1e8fcabac8ef00d57961cc11999e414e8840b5ec4e7265ffda2f97b0ba9d3d22aa5dda820f7855", 0x65, 0x4, {0x2f}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 3.769756994s ago: executing program 5 (id=214): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x24, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}, [@NDTA_NAME={0x4f, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc43\xa5m\"0'}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = dup(r5) write$UHID_SET_REPORT_REPLY(r6, 0x0, 0x4000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, r8, 0x701, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x48000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 3.723599996s ago: executing program 0 (id=215): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) fallocate(r0, 0x11, 0x6, 0x5345) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x6, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x7, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000300)={0x5, 0x0, 0x9}) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r5, &(0x7f00000003c0)="3767737afafc76a8acce5b83f0ecafd37b11f3e8bc4d7ce62fdde7724c6df893faad805e8c93250790d1e3619dd77e3fa66908998edd0ed3368c7938213e464da6fffd8f4bf0edd9f03bb16092acef2f08129057cfb3374784ecf7214d06fd97d825fee1f28e1a41599d886461d7909fb9cf94e71fa5d62e87b0", 0x7a, 0x20044010, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x5886, 0x6, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x0, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\a\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r9, @ANYBLOB="c3000000000000000000000000000000000000009c181dae711c6e23ca73c5029f51146d007a04c870ae5d0231937fc4f014f4304609a3041ac721359a64a73bd3eb5c0a40da35f37f38f65cb8c4a5ab8be6237d62c6703b8c3d08375be12d5b13ad12d8423ee71c174cdf1fb992be12a43124ac1065dc3c6ffa82b6656856a0aa8ac161d712f02debd64ee4c8f79a69cfaaec70fbd4bd71332aa536f1604c7777fa5cf5800b790f8612a5c00467a23c5a1057f5077e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff0000000026090200760000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb50200000800000018280000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000001400000076000000bf910000000000007b080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.202173397s ago: executing program 0 (id=216): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3200040, &(0x7f0000000440), 0xb, 0x57e, &(0x7f0000000c40)="$eJzs3U9rHGUYAPBnNkn/a1MoRT1IoAcrtZsm8U8FofUoWizYe12SbSjZdEt2U5pYaHuwIF6kCCIWxA/g3WPxA+inKGihSAl68LIym9l2m2Sz2WTbpM7vB5O878zsvvPuzPPuMzO7bAC5NZL+KUS8GhHfJBEH25YNRrZwZHm9pUfXJ9MpiUbjs7+SSLJ5rfWT7P/+rPJKRPz6ZcTxwup2awuLM6VKpTyX1Ufrs1dGawuLJy7NlqbL0+XL4xMTp96ZGH//vXf71tc3z/3z/af3Pjr19dGl735+cOhOEmfiQLasvR9bcLO9MhIj2WsyFGdWrDjWh8Z2kmS7N4BNGcjifCjSMeBgDGRRD/z/3YiIBpBTifiHnGrlAa1z+z6dB78wHn64fAK0uv+Dy9dGYk/z3GjfUvLUmVF6vjvch/bTNn758+6ddIou1yFu9KE9gJabtyLi5ODg6vEvyca/np1vXe492bx4vL6VbeTt/Qe20700/3lrrfyn8Dj/iTXyn/1rxO5mdI//woM+NNNRmv99sGb++3joGh7Iai81c76h5OKlSvlkRLwcEcdiaHdaX+9+zqml+41Oy9rzv3RK22/lgtl2PBjc/fRjpkr10lb63O7hrYjXnuS/Sawa//c0c92V+z99Pc6lhd++6trGkfLd1zst697/dv3PgBs/Rbyx5v5/ckcrWf/+5GjzeBhtHRWr/X37yO+dmm/01P/+S/f/vvX7P5y036+t9d7Gj3v+LXdattnjf1dyvlnelc27VqrX58YidiWfrJ4//uSxrXpr/bT/x46uP/6tdfzvjYjPN9j/24dvd1y1t+O//9L+T/W0/3sv3P/4ix86tb+x/f92s3Qsm7OR8W+jG7iV1w4AAAAAAAB2mkJEHIikUHxcLhSKxeXPdxyOfYVKtVY/frE6f3kqmt+VHY6hQutO98G2z0OMZZ+HbdXHV9QnIuJQRHw7sLdZL05WK1Pb3XkAAAAAAAAAAAAAAAAAAADYIfZ3+P5/6o+B7d464Jnzk9+QX13jvx+/9ATsSN7/Ib/EP+SX+If8Ev+QX+If8kv8Q36Jf8gv8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAB9de7s2XRqLD26PpnWp64uzM9Ur56YKtdmirPzk8XJ6tyV4nS1Ol0pFyers92er1KtXhkbj/lro/VyrT5aW1i8MFudv1y/cGm2NF2+UB56Lr0CAAAAAAAAAAAAAAAAAACAF0ttYXGmVKmU5xQ6Fk7HjtiMTReSbnv5dHYw9PTMkRUGt7+DCs+gsHKkuPH8BycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyPwXAAD//8tvN2Y=") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) sendmsg(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000840)="ec", 0x1}], 0x1}, 0x8084) r3 = accept(r1, 0x0, 0x0) shutdown(r3, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x11bfb03f, &(0x7f0000000100)=""/230}) 2.194964358s ago: executing program 34 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e0000002080007400000000010000580"], 0x74}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) ioctl(r1, 0xc138fd06, &(0x7f0000000000)) 2.182582398s ago: executing program 2 (id=218): socket$netlink(0x10, 0x3, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x1000, 0x3a, 'barrier', 0x3a, '', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x30) syz_usb_connect$uac2(0x0, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000008630750014000010203010370faf69f70e335edaf09028600030180e007080b0101010a20ff7f000000000101200009240102000b26000211240806010000010001000200030003000c2403fd0004a80306f9ff0a090401000001022000090400020000022000090501094000050400082501810909020009040200000102200009040201010102200009058209ff0305"], 0x0) 2.182373648s ago: executing program 5 (id=219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x40000001}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000280)=0x61) 2.111564202s ago: executing program 5 (id=220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) clock_adjtime(0x7, &(0x7f0000001200)={0x4, 0x9, 0x2, 0x2000009, 0x6, 0x0, 0x5, 0x5, 0x8, 0x401, 0xa6, 0xfffffffffffffffe, 0x8000000000000008, 0x2, 0xb, 0x4, 0x8, 0x4, 0x1, 0x1, 0x0, 0x7fffffffffffffff, 0xb, 0x1, 0x4, 0x6}) (rerun: 32) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) io_setup(0x2, &(0x7f0000001280)=0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r10}, &(0x7f0000000a80), &(0x7f0000000ac0)=r7}, 0x20) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) (async) sendmsg$inet(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) (async, rerun: 32) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) (rerun: 32) io_destroy(r5) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001300)={0x3, &(0x7f0000000040)=[{0x8, 0xf7, 0xb, 0x6c}, {0xff, 0x80, 0x9, 0x9}, {0xc, 0x65, 0x3, 0x6}]}, 0x10) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x110, 0xffffffffffffffff, 0x1b5cb000) (async) write(r2, &(0x7f0000000100)="658fcea2ecb4f1b15460", 0xa) (async) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) (async) syz_kvm_setup_cpu$x86(r1, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x4}], 0x1) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1.912306401s ago: executing program 0 (id=221): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x84840, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800704, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000006900a40500000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000010280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x1000, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_LK(r6, &(0x7f0000000240)={0x28, 0x0, r8, {{0x5, 0xfffffffffffffff9, 0x0, r2}}}, 0x28) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="040000000000000002004e24e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e"], 0x210) r9 = openat2(r5, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x40000, 0x100, 0x6}, 0x18) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000021c0)={{r9}, "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"}) 1.895232432s ago: executing program 5 (id=222): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@broadcast, @private=0xa010102, @local}, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) socket$inet(0x2, 0x3, 0x2) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r2 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000000) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r5, 0x0) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000002100)={0x4000, 0x0, &(0x7f0000000100), &(0x7f0000000140), {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) setpriority(0x2, 0xff, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x1cb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.802723596s ago: executing program 7 (id=217): unshare(0x3c060000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000680)={&(0x7f0000001000)={[{&(0x7f0000000180)="5a0454b6fb187f0eb107403512a673124e23f0b8ff906dd3ea4ccef304796636879dbd91fff3787ba884046668ed86d0d86a4b898b71d3e68b285bc10e30892fee8446a6b1ed1da43cedda2c107e", 0x4e, 0x1}, {&(0x7f0000000440)="eaa62a7e42cb49d5ec40b486c99f36388c264091affa776a7dcbde83b5130d2d6b94a802331529613b24c8e55d31cec1c18b838d407b5214cfceedf68c61ecec72181342d098ec8097ac49652bb0cf1458ba61548edaded357ce6ebd7818bf981321f9133dfcbf037c4e0bcff064352b0bf2c76a862a9dab0e551cb0e393e59c9785bb8160cfebf84492005e7d2be0c29fbf1e42d6502fbd3c612b2b4ef2fc7d0af02eea6441d8f79f147d258526cfe3b232b7f19619651ff9388fae3646576b4c4506431abb87fc81f9c13629ed158ddaa095caf04acd1ad0893cf29d1baa8189af", 0xe2, 0x3}, {&(0x7f0000000540)="2553fedb14c3900a108a55dac5c4772f47545f72b348ea8c80c17d9c7edb2c14fb071a52506d02953cdf414d1fbd8165cd829131f0e729f4dc44c262888a7133e56e3746b8b98251", 0x48}, {&(0x7f00000005c0)="fecbd8691b097b0609bbb22aad549c05354fe0298b2df40eefc03d18a0064382a5f4124603569f5fe66808ac52941d45e5d975534f005aeeb6b497b74cda635da9854d91f5743bdabd7f7f760357a079665db00d58bffde0a5d297cd7e6036921ed68fbf2848bbb56dc4232138cdfc9503b20d46a71c94451732c7b4e3fcff79b5722bbe2fce29", 0x87, 0x3}]}, 0x4, 0x1, 0x3}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1, &(0x7f0000000300)=@raw=[@generic={0x95, 0x0, 0x0, 0x0, 0xc62}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setuid(0xee01) fchdir(r1) bind$802154_raw(r0, &(0x7f0000000080)={0x1e, @none={0x0, 0x2}}, 0x14) 1.759747948s ago: executing program 6 (id=193): getcwd(&(0x7f0000000040)=""/117, 0x75) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}]}) 1.355726337s ago: executing program 7 (id=217): unshare(0x3c060000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000680)={&(0x7f0000001000)={[{&(0x7f0000000180)="5a0454b6fb187f0eb107403512a673124e23f0b8ff906dd3ea4ccef304796636879dbd91fff3787ba884046668ed86d0d86a4b898b71d3e68b285bc10e30892fee8446a6b1ed1da43cedda2c107e", 0x4e, 0x1}, {&(0x7f0000000440)="eaa62a7e42cb49d5ec40b486c99f36388c264091affa776a7dcbde83b5130d2d6b94a802331529613b24c8e55d31cec1c18b838d407b5214cfceedf68c61ecec72181342d098ec8097ac49652bb0cf1458ba61548edaded357ce6ebd7818bf981321f9133dfcbf037c4e0bcff064352b0bf2c76a862a9dab0e551cb0e393e59c9785bb8160cfebf84492005e7d2be0c29fbf1e42d6502fbd3c612b2b4ef2fc7d0af02eea6441d8f79f147d258526cfe3b232b7f19619651ff9388fae3646576b4c4506431abb87fc81f9c13629ed158ddaa095caf04acd1ad0893cf29d1baa8189af", 0xe2, 0x3}, {&(0x7f0000000540)="2553fedb14c3900a108a55dac5c4772f47545f72b348ea8c80c17d9c7edb2c14fb071a52506d02953cdf414d1fbd8165cd829131f0e729f4dc44c262888a7133e56e3746b8b98251", 0x48}, {&(0x7f00000005c0)="fecbd8691b097b0609bbb22aad549c05354fe0298b2df40eefc03d18a0064382a5f4124603569f5fe66808ac52941d45e5d975534f005aeeb6b497b74cda635da9854d91f5743bdabd7f7f760357a079665db00d58bffde0a5d297cd7e6036921ed68fbf2848bbb56dc4232138cdfc9503b20d46a71c94451732c7b4e3fcff79b5722bbe2fce29", 0x87, 0x3}]}, 0x4, 0x1, 0x3}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1, &(0x7f0000000300)=@raw=[@generic={0x95, 0x0, 0x0, 0x0, 0xc62}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setuid(0xee01) fchdir(r1) bind$802154_raw(r0, &(0x7f0000000080)={0x1e, @none={0x0, 0x2}}, 0x14) 914.392917ms ago: executing program 5 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x800) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) mount(0x0, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x800049, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2, 0x20) write(r6, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r7) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x2, 0x120) write(r5, &(0x7f0000000380)="7251af474012a42aa0acb015360c2177b4fab55c7f093bd0db5f942f4e2b607d01e932070000007c8e878f28ea040000004ddf65967a7f9b1ee4e71d3b123b5abc07bb6d77333475017fe79a4f969e43a178cff9c3924734a73a972b6c1abf301f3ecaa6eaf155819dbc711dfd04ba066cddf3", 0x73) 772.002904ms ago: executing program 6 (id=193): getcwd(&(0x7f0000000040)=""/117, 0x75) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}]}) 550.608764ms ago: executing program 7 (id=217): unshare(0x3c060000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000680)={&(0x7f0000001000)={[{&(0x7f0000000180)="5a0454b6fb187f0eb107403512a673124e23f0b8ff906dd3ea4ccef304796636879dbd91fff3787ba884046668ed86d0d86a4b898b71d3e68b285bc10e30892fee8446a6b1ed1da43cedda2c107e", 0x4e, 0x1}, {&(0x7f0000000440)="eaa62a7e42cb49d5ec40b486c99f36388c264091affa776a7dcbde83b5130d2d6b94a802331529613b24c8e55d31cec1c18b838d407b5214cfceedf68c61ecec72181342d098ec8097ac49652bb0cf1458ba61548edaded357ce6ebd7818bf981321f9133dfcbf037c4e0bcff064352b0bf2c76a862a9dab0e551cb0e393e59c9785bb8160cfebf84492005e7d2be0c29fbf1e42d6502fbd3c612b2b4ef2fc7d0af02eea6441d8f79f147d258526cfe3b232b7f19619651ff9388fae3646576b4c4506431abb87fc81f9c13629ed158ddaa095caf04acd1ad0893cf29d1baa8189af", 0xe2, 0x3}, {&(0x7f0000000540)="2553fedb14c3900a108a55dac5c4772f47545f72b348ea8c80c17d9c7edb2c14fb071a52506d02953cdf414d1fbd8165cd829131f0e729f4dc44c262888a7133e56e3746b8b98251", 0x48}, {&(0x7f00000005c0)="fecbd8691b097b0609bbb22aad549c05354fe0298b2df40eefc03d18a0064382a5f4124603569f5fe66808ac52941d45e5d975534f005aeeb6b497b74cda635da9854d91f5743bdabd7f7f760357a079665db00d58bffde0a5d297cd7e6036921ed68fbf2848bbb56dc4232138cdfc9503b20d46a71c94451732c7b4e3fcff79b5722bbe2fce29", 0x87, 0x3}]}, 0x4, 0x1, 0x3}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1, &(0x7f0000000300)=@raw=[@generic={0x95, 0x0, 0x0, 0x0, 0xc62}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setuid(0xee01) fchdir(r1) bind$802154_raw(r0, &(0x7f0000000080)={0x1e, @none={0x0, 0x2}}, 0x14) 500.145987ms ago: executing program 6 (id=193): getcwd(&(0x7f0000000040)=""/117, 0x75) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}]}) 388.808962ms ago: executing program 0 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="c4e211096c37d7c744240004000000c744240200800000c7442406000000000f011424b8010000000f01d9660f3880ac650000008066b831000f00d82666440f3881ac92f9ffff7f66baf80cb86c05c38eef66bafc0cb828670000ef420fc79b7ed700006766470f38820aff48b7", 0x6e}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000102050000000000000000000500000494000a8008000140000000008800028014000180080001007f00000600000000e000000206000340000200000c000280ff0001002f0000001400018008000100ac1e000108000200ffffffff0c000280050001001100000006000340000000001400018008000100ac14143229000200ac1e00010c00028005000100840000000c000280050001002100000006000340000000000800084000000003180001"], 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) 388.596522ms ago: executing program 7 (id=217): unshare(0x3c060000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000680)={&(0x7f0000001000)={[{&(0x7f0000000180)="5a0454b6fb187f0eb107403512a673124e23f0b8ff906dd3ea4ccef304796636879dbd91fff3787ba884046668ed86d0d86a4b898b71d3e68b285bc10e30892fee8446a6b1ed1da43cedda2c107e", 0x4e, 0x1}, {&(0x7f0000000440)="eaa62a7e42cb49d5ec40b486c99f36388c264091affa776a7dcbde83b5130d2d6b94a802331529613b24c8e55d31cec1c18b838d407b5214cfceedf68c61ecec72181342d098ec8097ac49652bb0cf1458ba61548edaded357ce6ebd7818bf981321f9133dfcbf037c4e0bcff064352b0bf2c76a862a9dab0e551cb0e393e59c9785bb8160cfebf84492005e7d2be0c29fbf1e42d6502fbd3c612b2b4ef2fc7d0af02eea6441d8f79f147d258526cfe3b232b7f19619651ff9388fae3646576b4c4506431abb87fc81f9c13629ed158ddaa095caf04acd1ad0893cf29d1baa8189af", 0xe2, 0x3}, {&(0x7f0000000540)="2553fedb14c3900a108a55dac5c4772f47545f72b348ea8c80c17d9c7edb2c14fb071a52506d02953cdf414d1fbd8165cd829131f0e729f4dc44c262888a7133e56e3746b8b98251", 0x48}, {&(0x7f00000005c0)="fecbd8691b097b0609bbb22aad549c05354fe0298b2df40eefc03d18a0064382a5f4124603569f5fe66808ac52941d45e5d975534f005aeeb6b497b74cda635da9854d91f5743bdabd7f7f760357a079665db00d58bffde0a5d297cd7e6036921ed68fbf2848bbb56dc4232138cdfc9503b20d46a71c94451732c7b4e3fcff79b5722bbe2fce29", 0x87, 0x3}]}, 0x4, 0x1, 0x3}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1, &(0x7f0000000300)=@raw=[@generic={0x95, 0x0, 0x0, 0x0, 0xc62}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setuid(0xee01) fchdir(r1) bind$802154_raw(r0, &(0x7f0000000080)={0x1e, @none={0x0, 0x2}}, 0x14) 314.234425ms ago: executing program 0 (id=225): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x20000000, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 313.618186ms ago: executing program 6 (id=193): getcwd(&(0x7f0000000040)=""/117, 0x75) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}]}) 239.699379ms ago: executing program 7 (id=217): unshare(0x3c060000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000680)={&(0x7f0000001000)={[{&(0x7f0000000180)="5a0454b6fb187f0eb107403512a673124e23f0b8ff906dd3ea4ccef304796636879dbd91fff3787ba884046668ed86d0d86a4b898b71d3e68b285bc10e30892fee8446a6b1ed1da43cedda2c107e", 0x4e, 0x1}, {&(0x7f0000000440)="eaa62a7e42cb49d5ec40b486c99f36388c264091affa776a7dcbde83b5130d2d6b94a802331529613b24c8e55d31cec1c18b838d407b5214cfceedf68c61ecec72181342d098ec8097ac49652bb0cf1458ba61548edaded357ce6ebd7818bf981321f9133dfcbf037c4e0bcff064352b0bf2c76a862a9dab0e551cb0e393e59c9785bb8160cfebf84492005e7d2be0c29fbf1e42d6502fbd3c612b2b4ef2fc7d0af02eea6441d8f79f147d258526cfe3b232b7f19619651ff9388fae3646576b4c4506431abb87fc81f9c13629ed158ddaa095caf04acd1ad0893cf29d1baa8189af", 0xe2, 0x3}, {&(0x7f0000000540)="2553fedb14c3900a108a55dac5c4772f47545f72b348ea8c80c17d9c7edb2c14fb071a52506d02953cdf414d1fbd8165cd829131f0e729f4dc44c262888a7133e56e3746b8b98251", 0x48}, {&(0x7f00000005c0)="fecbd8691b097b0609bbb22aad549c05354fe0298b2df40eefc03d18a0064382a5f4124603569f5fe66808ac52941d45e5d975534f005aeeb6b497b74cda635da9854d91f5743bdabd7f7f760357a079665db00d58bffde0a5d297cd7e6036921ed68fbf2848bbb56dc4232138cdfc9503b20d46a71c94451732c7b4e3fcff79b5722bbe2fce29", 0x87, 0x3}]}, 0x4, 0x1, 0x3}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1, &(0x7f0000000300)=@raw=[@generic={0x95, 0x0, 0x0, 0x0, 0xc62}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setuid(0xee01) fchdir(r1) bind$802154_raw(r0, &(0x7f0000000080)={0x1e, @none={0x0, 0x2}}, 0x14) 154.355253ms ago: executing program 6 (id=193): getcwd(&(0x7f0000000040)=""/117, 0x75) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}]}) 78.574337ms ago: executing program 7 (id=217): unshare(0x3c060000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000680)={&(0x7f0000001000)={[{&(0x7f0000000180)="5a0454b6fb187f0eb107403512a673124e23f0b8ff906dd3ea4ccef304796636879dbd91fff3787ba884046668ed86d0d86a4b898b71d3e68b285bc10e30892fee8446a6b1ed1da43cedda2c107e", 0x4e, 0x1}, {&(0x7f0000000440)="eaa62a7e42cb49d5ec40b486c99f36388c264091affa776a7dcbde83b5130d2d6b94a802331529613b24c8e55d31cec1c18b838d407b5214cfceedf68c61ecec72181342d098ec8097ac49652bb0cf1458ba61548edaded357ce6ebd7818bf981321f9133dfcbf037c4e0bcff064352b0bf2c76a862a9dab0e551cb0e393e59c9785bb8160cfebf84492005e7d2be0c29fbf1e42d6502fbd3c612b2b4ef2fc7d0af02eea6441d8f79f147d258526cfe3b232b7f19619651ff9388fae3646576b4c4506431abb87fc81f9c13629ed158ddaa095caf04acd1ad0893cf29d1baa8189af", 0xe2, 0x3}, {&(0x7f0000000540)="2553fedb14c3900a108a55dac5c4772f47545f72b348ea8c80c17d9c7edb2c14fb071a52506d02953cdf414d1fbd8165cd829131f0e729f4dc44c262888a7133e56e3746b8b98251", 0x48}, {&(0x7f00000005c0)="fecbd8691b097b0609bbb22aad549c05354fe0298b2df40eefc03d18a0064382a5f4124603569f5fe66808ac52941d45e5d975534f005aeeb6b497b74cda635da9854d91f5743bdabd7f7f760357a079665db00d58bffde0a5d297cd7e6036921ed68fbf2848bbb56dc4232138cdfc9503b20d46a71c94451732c7b4e3fcff79b5722bbe2fce29", 0x87, 0x3}]}, 0x4, 0x1, 0x3}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1, &(0x7f0000000300)=@raw=[@generic={0x95, 0x0, 0x0, 0x0, 0xc62}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setuid(0xee01) fchdir(r1) bind$802154_raw(r0, &(0x7f0000000080)={0x1e, @none={0x0, 0x2}}, 0x14) 234.27µs ago: executing program 5 (id=226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x42, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x18, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x3, "3a391f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000840)={0x0, &(0x7f0000000940)=[@nested_load_code={0x12e, 0x60, {0x1, "36470fdb2e8fe970019e0dbdfc3048b816f30000000000000f23c00f21f83502000c000f23f8640fc71b66b89a000f00d02e43ac36f30f0944d2e60f01cb66400f38829b08000000"}}, @nested_load_syzos={0x136, 0xb8, {0x3, 0xd52, [@wrmsr={0x65, 0x20, {0x834, 0x21795d63}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x79, 0x5, 0x7, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}]}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x820a, 0x4, 0x40}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x6, 0x4, 0x4, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xd2, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0x401}}, @code={0xa, 0x67, {"66baf80cb84e92e485ef66bafc0c66ed0f063666410ffb804c4e4da76426654502bd0e0000000f32420f32c7442400bc77a066c744240200000000c7442406000000000f01142466b82a000f00d036de32f347d86a00"}}, @in_dx={0x69, 0x20, {0x70ba, 0x5}}, @uexit={0x0, 0x18, 0x100}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest16=0x812, 0x33cd, 0x7ff, 0x7}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0xb1f, 0x60}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xeb, 0x3, 0x3, 0x2}}, @wrmsr={0x65, 0x20, {0x400009b8, 0x215d7782}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x440, 0x4, 0x101, 0x7}}, @wr_drn={0x68, 0x20, {0x6, 0x550}}, @wr_crn={0x67, 0x20, {0x8, 0xffffffffffffffff}}, @wrmsr={0x65, 0x0, {0x2ec, 0x40}}, @nested_load_syzos={0x136, 0x1d8, {0x1, 0x8000, [@nested_load_syzos={0x136, 0x128, {0x2, 0x3, [@wr_drn={0x68, 0x20, {0x3, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro64=0x2401, 0x4, 0x9, 0x9}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x12, 0x4, 0x10}}, @nested_amd_vmcb_write_mask={0x17c, 0x10, {0x0, @save_area=0x627, 0x2, 0xeb3f, 0x101}}, @wrmsr={0x65, 0x20, {0x36b, 0x6}}]}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x43, 0x4, 0x20000000000000, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x8}}, @nested_amd_stgi={0x17e, 0x10}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc08, 0x9, 0x10000, 0xbaca}}, @nested_load_code={0x12e, 0x63, {0x3, "c74424002d000000c74424026affffffff2c243626460fc7b6270000000f20908f493802cc440f20c0350f000000440f22c0b805000000b9a1ad00000f01c165420f01c4d9e4c46291ad21"}}, @wrmsr={0x65, 0x20, {0x891, 0x2}}, @code={0xa, 0x5f, {"c4616df4b75404a1c066baf80cb8de771e89ef66bafc0c66edf20f30ee470fc75a26c4c17c77f3460f5b7db2400f0087ae0000000f1b8f09000000c74424000c000000c744240200000000ff1c24"}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x400000b4, 0x80}}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x0, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x9c, 0x1, 0x2, 0x3}}], 0x921}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000880)=[@text16={0x10, &(0x7f0000000140)="baf80c66b8301bbc8866efbafc0c66edbaf80c66b81a02178866efbafc0cb80000ef0f0095a1923e0f01c898baf80c66b8186fb48c66efbafc0c66edbad104edba4300ec646566660f3882719366b9be0a00000f32", 0x55}], 0x1, 0x34, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f00000008c0)) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x60, 0xa, 0x25, {0x25, 0x5, "79c33f19e1ef890f2d5bc61570e097f0de0df7099a2b28db615cd998b40a9de2a1105f"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x8c84089782fe50b9}}, &(0x7f00000002c0)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x4, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0xd8, 0x2, 0x6, 0xf, 0x3, [0xff0060, 0xffff18]}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "c72a1c89d6edaa62a68b662c6ade9a76"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xf8, 0x3, 0x7fff}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x8, 0xf, "81b1e21a", "0b5507a7"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x7, 0x8, 0x2, 0x9, 0x8}}}, &(0x7f0000001540)={0x84, &(0x7f0000000500)={0x0, 0xf, 0x4e, "7242519dcb754cc487821b378dae441ba6877142702d6c7a1f842b6fe741235b3af8075ec4ce98d846724cb834179b29038cc57b7b923201a5996a35ac481d0cf83cdda9e4fec22e63d46eee34c7"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xdc}, &(0x7f00000007c0)={0x20, 0x0, 0x4}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000001280)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f00000012c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001300)={0x40, 0xb, 0x2, "6bdd"}, &(0x7f0000001340)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001380)={0x40, 0x13, 0x6, @local}, &(0x7f00000013c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001400)={0x40, 0x19, 0x2, "de46"}, &(0x7f0000001440)={0x40, 0x1a, 0x2, 0xae}, &(0x7f0000001480)={0x40, 0x1c, 0x1, 0x1c}, &(0x7f00000014c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001500)={0x40, 0x21, 0x1, 0x4}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050f0000000000007111ab0000000000851000000200000085000000051c000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0xd, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r7}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x2, 0x2, 0x20, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x10, 0x10, 0xb0f, 0x9}}) sendmsg$nl_route_sched(r6, &(0x7f0000001740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)=@getchain={0x3c, 0x66, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xffe0}, {0xfff2, 0xf}, {0x8, 0x5}}, [{0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 6 (id=193): getcwd(&(0x7f0000000040)=""/117, 0x75) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}]}) kernel console output (not intermixed with test programs): [ T288] RIP: 0033:0x7f570511c277 [ 51.976499][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.996105][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 52.004516][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 52.012574][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 52.020543][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 52.028514][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 52.036484][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 52.044457][ T288] [ 52.061275][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 52.067339][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 52.074817][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.084893][ T288] Call Trace: [ 52.088181][ T288] [ 52.091119][ T288] __dump_stack+0x21/0x30 [ 52.092410][ T666] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.095476][ T288] dump_stack_lvl+0x110/0x170 [ 52.095500][ T288] ? show_regs_print_info+0x20/0x20 [ 52.115849][ T288] ? page_cache_prev_miss+0x290/0x290 [ 52.121234][ T288] dump_stack+0x15/0x20 [ 52.122563][ T666] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 52.125405][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 52.125434][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 52.140586][ T666] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 52.145359][ T288] ? f2fs_get_block+0x140/0x140 [ 52.145383][ T288] ? memcpy+0x56/0x70 [ 52.150977][ T666] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.150977][ T666] [ 52.163130][ T288] f2fs_find_data_page+0x189/0x3c0 [ 52.163152][ T288] f2fs_readdir+0x4b4/0x9e0 [ 52.168417][ T666] EXT4-fs (loop1): Total free blocks count 0 [ 52.171972][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 52.171994][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 52.172014][ T288] ? down_read_killable+0xc1/0x110 [ 52.172035][ T288] ? security_file_permission+0x83/0xa0 [ 52.172055][ T288] iterate_dir+0x25c/0x600 [ 52.182408][ T666] EXT4-fs (loop1): Free/Dirty block details [ 52.186770][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 52.191409][ T666] EXT4-fs (loop1): free_blocks=4096 [ 52.197225][ T288] __se_sys_getdents64+0xf2/0x250 [ 52.197248][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 52.202618][ T666] EXT4-fs (loop1): dirty_blocks=48 [ 52.207527][ T288] ? filldir+0x660/0x660 [ 52.212776][ T666] EXT4-fs (loop1): Block reservation details [ 52.218159][ T288] ? __x64_sys_umount+0x12d/0x170 [ 52.222764][ T666] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 52.228442][ T288] ? debug_smp_processor_id+0x17/0x20 [ 52.228467][ T288] __x64_sys_getdents64+0x7b/0x90 [ 52.285514][ T288] x64_sys_call+0x592/0x9a0 [ 52.290016][ T288] do_syscall_64+0x4c/0xa0 [ 52.294417][ T288] ? clear_bhb_loop+0x50/0xa0 [ 52.299088][ T288] ? clear_bhb_loop+0x50/0xa0 [ 52.303750][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.309650][ T288] RIP: 0033:0x7f5705145af3 [ 52.314177][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 52.333770][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 52.342175][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 52.350135][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 52.358090][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 52.366047][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 52.374011][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 52.381982][ T288] [ 52.386473][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 52.391142][ T305] usb 3-1: Using ep0 maxpacket: 8 [ 52.397566][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 52.402545][ T379] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 52.405037][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.417575][ T379] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.417575][ T379] [ 52.427394][ T288] Call Trace: [ 52.427401][ T288] [ 52.427409][ T288] __dump_stack+0x21/0x30 [ 52.447546][ T288] dump_stack_lvl+0x110/0x170 [ 52.452243][ T288] ? show_regs_print_info+0x20/0x20 [ 52.457438][ T288] ? page_cache_prev_miss+0x290/0x290 [ 52.462804][ T288] dump_stack+0x15/0x20 [ 52.466953][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 52.472324][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 52.477777][ T288] ? f2fs_get_block+0x140/0x140 [ 52.482622][ T288] ? may_link+0x3e8/0x560 [ 52.486944][ T288] ? may_create+0x440/0x440 [ 52.491442][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 52.496807][ T288] f2fs_empty_dir+0xa6/0x230 [ 52.501393][ T288] f2fs_rmdir+0x3f/0x70 [ 52.505545][ T288] vfs_rmdir+0x1ae/0x450 [ 52.509786][ T288] do_rmdir+0x261/0x6b0 [ 52.513937][ T288] ? d_delete_notify+0x160/0x160 [ 52.518868][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 52.523715][ T288] x64_sys_call+0x4c0/0x9a0 [ 52.528216][ T288] do_syscall_64+0x4c/0xa0 [ 52.532623][ T288] ? clear_bhb_loop+0x50/0xa0 [ 52.537292][ T288] ? clear_bhb_loop+0x50/0xa0 [ 52.541962][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.547859][ T288] RIP: 0033:0x7f570511c277 [ 52.552270][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.571894][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 52.580304][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 52.588270][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 52.596237][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 52.604206][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 52.612171][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 52.620138][ T288] [ 52.624028][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 52.630100][ T596] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 52.630541][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 52.645025][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.655083][ T288] Call Trace: [ 52.658358][ T288] [ 52.661283][ T288] __dump_stack+0x21/0x30 [ 52.665611][ T288] dump_stack_lvl+0x110/0x170 [ 52.670282][ T288] ? show_regs_print_info+0x20/0x20 [ 52.675472][ T288] ? page_cache_prev_miss+0x290/0x290 [ 52.680845][ T288] dump_stack+0x15/0x20 [ 52.684996][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 52.690381][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 52.695835][ T288] ? f2fs_get_block+0x140/0x140 [ 52.700681][ T288] ? memcpy+0x56/0x70 [ 52.704659][ T288] f2fs_find_data_page+0x189/0x3c0 [ 52.709771][ T288] f2fs_readdir+0x4b4/0x9e0 [ 52.714278][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 52.719471][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 52.724586][ T288] ? down_read_killable+0xc1/0x110 [ 52.729702][ T288] ? security_file_permission+0x83/0xa0 [ 52.735244][ T288] iterate_dir+0x25c/0x600 [ 52.739658][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 52.744851][ T288] __se_sys_getdents64+0xf2/0x250 [ 52.749878][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 52.755071][ T288] ? filldir+0x660/0x660 [ 52.759311][ T288] ? __x64_sys_umount+0x12d/0x170 [ 52.764338][ T288] ? debug_smp_processor_id+0x17/0x20 [ 52.769825][ T288] __x64_sys_getdents64+0x7b/0x90 [ 52.774863][ T288] x64_sys_call+0x592/0x9a0 [ 52.779365][ T288] do_syscall_64+0x4c/0xa0 [ 52.783783][ T288] ? clear_bhb_loop+0x50/0xa0 [ 52.788456][ T288] ? clear_bhb_loop+0x50/0xa0 [ 52.793130][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.799021][ T288] RIP: 0033:0x7f5705145af3 [ 52.803439][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 52.823054][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 52.831468][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 52.839434][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 52.847399][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 52.855365][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 52.863330][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 52.871298][ T288] [ 52.880368][ T20] usb 1-1: device descriptor read/64, error -71 [ 52.886970][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 52.893219][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 52.900700][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.910770][ T288] Call Trace: [ 52.914050][ T288] [ 52.916980][ T288] __dump_stack+0x21/0x30 [ 52.921319][ T288] dump_stack_lvl+0x110/0x170 [ 52.925994][ T288] ? show_regs_print_info+0x20/0x20 [ 52.931193][ T288] ? page_cache_prev_miss+0x290/0x290 [ 52.936562][ T288] dump_stack+0x15/0x20 [ 52.940712][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 52.946089][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 52.951544][ T288] ? f2fs_get_block+0x140/0x140 [ 52.956392][ T288] ? may_link+0x3e8/0x560 [ 52.960715][ T288] ? may_create+0x440/0x440 [ 52.965212][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 52.970581][ T288] f2fs_empty_dir+0xa6/0x230 [ 52.975169][ T288] f2fs_rmdir+0x3f/0x70 [ 52.979316][ T288] vfs_rmdir+0x1ae/0x450 [ 52.983551][ T288] do_rmdir+0x261/0x6b0 [ 52.987704][ T288] ? d_delete_notify+0x160/0x160 [ 52.992634][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 52.997484][ T288] x64_sys_call+0x4c0/0x9a0 [ 53.001979][ T288] do_syscall_64+0x4c/0xa0 [ 53.006391][ T288] ? clear_bhb_loop+0x50/0xa0 [ 53.011066][ T288] ? clear_bhb_loop+0x50/0xa0 [ 53.015738][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.021630][ T288] RIP: 0033:0x7f570511c277 [ 53.026056][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.045655][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 53.054066][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 53.062046][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 53.070028][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 53.078012][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 53.085991][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 53.093966][ T288] [ 53.097686][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 53.102270][ T305] usb 3-1: device descriptor read/all, error -71 [ 53.111447][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 53.118939][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.129011][ T288] Call Trace: [ 53.132307][ T288] [ 53.135249][ T288] __dump_stack+0x21/0x30 [ 53.139593][ T288] dump_stack_lvl+0x110/0x170 [ 53.144293][ T288] ? show_regs_print_info+0x20/0x20 [ 53.149510][ T288] ? page_cache_prev_miss+0x290/0x290 [ 53.154899][ T288] dump_stack+0x15/0x20 [ 53.159074][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 53.164466][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 53.169940][ T288] ? f2fs_get_block+0x140/0x140 [ 53.174800][ T288] ? memcpy+0x56/0x70 [ 53.178798][ T288] f2fs_find_data_page+0x189/0x3c0 [ 53.183927][ T288] f2fs_readdir+0x4b4/0x9e0 [ 53.188455][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 53.193674][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 53.198803][ T288] ? down_read_killable+0xc1/0x110 [ 53.203937][ T288] ? security_file_permission+0x83/0xa0 [ 53.209582][ T288] iterate_dir+0x25c/0x600 [ 53.214019][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 53.219231][ T288] __se_sys_getdents64+0xf2/0x250 [ 53.223010][ T30] audit: type=1400 audit(1789972657.231:243): avc: denied { mount } for pid=684 comm="syz.2.71" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.224277][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 53.251322][ T288] ? filldir+0x660/0x660 [ 53.255567][ T288] ? __x64_sys_umount+0x12d/0x170 [ 53.260588][ T288] ? debug_smp_processor_id+0x17/0x20 [ 53.265970][ T288] __x64_sys_getdents64+0x7b/0x90 [ 53.271003][ T288] x64_sys_call+0x592/0x9a0 [ 53.275508][ T288] do_syscall_64+0x4c/0xa0 [ 53.279922][ T288] ? clear_bhb_loop+0x50/0xa0 [ 53.284594][ T288] ? clear_bhb_loop+0x50/0xa0 [ 53.289267][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.295156][ T288] RIP: 0033:0x7f5705145af3 [ 53.299569][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 53.319174][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 53.327586][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 53.335558][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 53.343521][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 53.351485][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 53.359465][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 53.367442][ T288] [ 53.374933][ T688] loop1: detected capacity change from 0 to 512 [ 53.381731][ T30] audit: type=1400 audit(1789972657.391:244): avc: denied { search } for pid=684 comm="syz.2.71" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.385653][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 53.412058][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 53.419549][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.424349][ T30] audit: type=1400 audit(1789972657.391:245): avc: denied { read write } for pid=684 comm="syz.2.71" name="trace" dev="tracefs" ino=13110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 53.429610][ T288] Call Trace: [ 53.429617][ T288] [ 53.429629][ T288] __dump_stack+0x21/0x30 [ 53.453057][ T30] audit: type=1400 audit(1789972657.391:246): avc: denied { open } for pid=684 comm="syz.2.71" path="/19/dir0/per_cpu/cpu0/trace" dev="tracefs" ino=13110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 53.455373][ T288] dump_stack_lvl+0x110/0x170 [ 53.491138][ T288] ? show_regs_print_info+0x20/0x20 [ 53.496329][ T288] ? page_cache_prev_miss+0x290/0x290 [ 53.501687][ T288] dump_stack+0x15/0x20 [ 53.505827][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 53.511185][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 53.516651][ T288] ? f2fs_get_block+0x140/0x140 [ 53.521492][ T288] ? may_link+0x3e8/0x560 [ 53.525811][ T288] ? may_create+0x440/0x440 [ 53.530308][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 53.535687][ T288] f2fs_empty_dir+0xa6/0x230 [ 53.540290][ T288] f2fs_rmdir+0x3f/0x70 [ 53.544435][ T288] vfs_rmdir+0x1ae/0x450 [ 53.548680][ T288] do_rmdir+0x261/0x6b0 [ 53.552822][ T288] ? d_delete_notify+0x160/0x160 [ 53.557746][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 53.562590][ T288] x64_sys_call+0x4c0/0x9a0 [ 53.567095][ T288] do_syscall_64+0x4c/0xa0 [ 53.571521][ T288] ? clear_bhb_loop+0x50/0xa0 [ 53.576183][ T288] ? clear_bhb_loop+0x50/0xa0 [ 53.580844][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.586725][ T288] RIP: 0033:0x7f570511c277 [ 53.591129][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.610736][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 53.619156][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 53.627112][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 53.635076][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 53.643033][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 53.651012][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 53.658990][ T288] [ 53.663263][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 53.669576][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 53.677045][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.687093][ T288] Call Trace: [ 53.690373][ T288] [ 53.693305][ T288] __dump_stack+0x21/0x30 [ 53.697638][ T288] dump_stack_lvl+0x110/0x170 [ 53.702305][ T288] ? show_regs_print_info+0x20/0x20 [ 53.707502][ T288] ? page_cache_prev_miss+0x290/0x290 [ 53.712870][ T288] dump_stack+0x15/0x20 [ 53.717018][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 53.722396][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 53.727864][ T288] ? f2fs_get_block+0x140/0x140 [ 53.732714][ T288] ? memcpy+0x56/0x70 [ 53.736792][ T288] f2fs_find_data_page+0x189/0x3c0 [ 53.741922][ T288] f2fs_readdir+0x4b4/0x9e0 [ 53.746437][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 53.751650][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 53.756761][ T288] ? down_read_killable+0xc1/0x110 [ 53.762780][ T288] ? security_file_permission+0x83/0xa0 [ 53.768362][ T288] iterate_dir+0x25c/0x600 [ 53.772865][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 53.778220][ T288] __se_sys_getdents64+0xf2/0x250 [ 53.783261][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 53.788467][ T288] ? filldir+0x660/0x660 [ 53.792717][ T288] ? __x64_sys_umount+0x12d/0x170 [ 53.797742][ T288] ? debug_smp_processor_id+0x17/0x20 [ 53.803118][ T288] __x64_sys_getdents64+0x7b/0x90 [ 53.808144][ T288] x64_sys_call+0x592/0x9a0 [ 53.812643][ T288] do_syscall_64+0x4c/0xa0 [ 53.817051][ T288] ? clear_bhb_loop+0x50/0xa0 [ 53.821722][ T288] ? clear_bhb_loop+0x50/0xa0 [ 53.826394][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.832284][ T288] RIP: 0033:0x7f5705145af3 [ 53.836697][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 53.856304][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 53.864718][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 53.872686][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 53.880650][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 53.888616][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 53.896578][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 53.904552][ T288] [ 53.908381][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 53.917417][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 53.924903][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.930413][ T688] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 53.934961][ T288] Call Trace: [ 53.934970][ T288] [ 53.934975][ T288] __dump_stack+0x21/0x30 [ 53.934998][ T288] dump_stack_lvl+0x110/0x170 [ 53.935014][ T288] ? show_regs_print_info+0x20/0x20 [ 53.935030][ T288] ? page_cache_prev_miss+0x290/0x290 [ 53.935047][ T288] dump_stack+0x15/0x20 [ 53.935064][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 53.984639][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 53.990099][ T288] ? f2fs_get_block+0x140/0x140 [ 53.994942][ T288] ? may_link+0x3e8/0x560 [ 53.999268][ T288] ? may_create+0x440/0x440 [ 54.003762][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 54.009129][ T288] f2fs_empty_dir+0xa6/0x230 [ 54.013712][ T288] f2fs_rmdir+0x3f/0x70 [ 54.017859][ T288] vfs_rmdir+0x1ae/0x450 [ 54.022097][ T288] do_rmdir+0x261/0x6b0 [ 54.026249][ T288] ? d_delete_notify+0x160/0x160 [ 54.031182][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 54.036033][ T288] x64_sys_call+0x4c0/0x9a0 [ 54.040535][ T288] do_syscall_64+0x4c/0xa0 [ 54.044948][ T288] ? clear_bhb_loop+0x50/0xa0 [ 54.049617][ T288] ? clear_bhb_loop+0x50/0xa0 [ 54.054285][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.060174][ T288] RIP: 0033:0x7f570511c277 [ 54.064584][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.084183][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 54.092592][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 54.100560][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 54.108528][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 54.116493][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 54.124463][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 54.132430][ T288] [ 54.142113][ T688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 54.149078][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 54.151372][ T30] audit: type=1400 audit(1789972658.151:247): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 54.167049][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 54.184284][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.194353][ T288] Call Trace: [ 54.197645][ T288] [ 54.200585][ T288] __dump_stack+0x21/0x30 [ 54.204931][ T288] dump_stack_lvl+0x110/0x170 [ 54.209619][ T288] ? show_regs_print_info+0x20/0x20 [ 54.214828][ T288] ? page_cache_prev_miss+0x290/0x290 [ 54.220210][ T288] dump_stack+0x15/0x20 [ 54.224373][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 54.229758][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 54.235227][ T288] ? f2fs_get_block+0x140/0x140 [ 54.240087][ T288] ? memcpy+0x56/0x70 [ 54.244086][ T288] f2fs_find_data_page+0x189/0x3c0 [ 54.249203][ T288] f2fs_readdir+0x4b4/0x9e0 [ 54.253715][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 54.258922][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 54.264054][ T288] ? down_read_killable+0xc1/0x110 [ 54.269190][ T288] ? security_file_permission+0x83/0xa0 [ 54.274755][ T288] iterate_dir+0x25c/0x600 [ 54.279191][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 54.284410][ T288] __se_sys_getdents64+0xf2/0x250 [ 54.289457][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 54.294670][ T288] ? filldir+0x660/0x660 [ 54.298925][ T288] ? __x64_sys_umount+0x12d/0x170 [ 54.303968][ T288] ? debug_smp_processor_id+0x17/0x20 [ 54.309357][ T288] __x64_sys_getdents64+0x7b/0x90 [ 54.314411][ T288] x64_sys_call+0x592/0x9a0 [ 54.318930][ T288] do_syscall_64+0x4c/0xa0 [ 54.321210][ T698] loop2: detected capacity change from 0 to 40427 [ 54.323356][ T288] ? clear_bhb_loop+0x50/0xa0 [ 54.334432][ T288] ? clear_bhb_loop+0x50/0xa0 [ 54.339127][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.345044][ T288] RIP: 0033:0x7f5705145af3 [ 54.349489][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 54.369113][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 54.377542][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 54.385523][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 54.393498][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 54.401463][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 54.409426][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 54.417393][ T288] [ 54.427771][ T596] usb 5-1: not running at top speed; connect to a high speed hub [ 54.428033][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 54.442506][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 54.444494][ T705] capability: warning: `syz.4.77' uses 32-bit capabilities (legacy support in use) [ 54.449993][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.450007][ T288] Call Trace: [ 54.450013][ T288] [ 54.450019][ T288] __dump_stack+0x21/0x30 [ 54.479867][ T288] dump_stack_lvl+0x110/0x170 [ 54.479889][ T288] ? show_regs_print_info+0x20/0x20 [ 54.479904][ T288] ? page_cache_prev_miss+0x290/0x290 [ 54.479920][ T288] dump_stack+0x15/0x20 [ 54.479932][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 54.479951][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 54.479965][ T288] ? f2fs_get_block+0x140/0x140 [ 54.479979][ T288] ? may_link+0x3e8/0x560 [ 54.479993][ T288] ? may_create+0x440/0x440 [ 54.480006][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 54.480020][ T288] f2fs_empty_dir+0xa6/0x230 [ 54.480036][ T288] f2fs_rmdir+0x3f/0x70 [ 54.480049][ T288] vfs_rmdir+0x1ae/0x450 [ 54.480065][ T288] do_rmdir+0x261/0x6b0 [ 54.480080][ T288] ? d_delete_notify+0x160/0x160 [ 54.480095][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 54.480110][ T288] x64_sys_call+0x4c0/0x9a0 [ 54.480124][ T288] do_syscall_64+0x4c/0xa0 [ 54.480137][ T288] ? clear_bhb_loop+0x50/0xa0 [ 54.480152][ T288] ? clear_bhb_loop+0x50/0xa0 [ 54.480166][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.480181][ T288] RIP: 0033:0x7f570511c277 [ 54.480195][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.480208][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 54.480226][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 54.480237][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 54.480248][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 54.480258][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 54.480269][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 54.480281][ T288] [ 54.480651][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 54.480669][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 54.480688][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.480699][ T288] Call Trace: [ 54.480704][ T288] [ 54.480711][ T288] __dump_stack+0x21/0x30 [ 54.480731][ T288] dump_stack_lvl+0x110/0x170 [ 54.480749][ T288] ? show_regs_print_info+0x20/0x20 [ 54.480767][ T288] ? page_cache_prev_miss+0x290/0x290 [ 54.705037][ T288] dump_stack+0x15/0x20 [ 54.709196][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 54.714569][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 54.720021][ T288] ? f2fs_get_block+0x140/0x140 [ 54.724865][ T288] ? memcpy+0x56/0x70 [ 54.728846][ T288] f2fs_find_data_page+0x189/0x3c0 [ 54.733950][ T288] f2fs_readdir+0x4b4/0x9e0 [ 54.738453][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 54.743644][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 54.748759][ T288] ? down_read_killable+0xc1/0x110 [ 54.753886][ T288] ? security_file_permission+0x83/0xa0 [ 54.759438][ T288] iterate_dir+0x25c/0x600 [ 54.763858][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 54.769069][ T288] __se_sys_getdents64+0xf2/0x250 [ 54.774093][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 54.779289][ T288] ? filldir+0x660/0x660 [ 54.783525][ T288] ? __x64_sys_umount+0x12d/0x170 [ 54.788550][ T288] ? debug_smp_processor_id+0x17/0x20 [ 54.793920][ T288] __x64_sys_getdents64+0x7b/0x90 [ 54.798942][ T288] x64_sys_call+0x592/0x9a0 [ 54.803442][ T288] do_syscall_64+0x4c/0xa0 [ 54.807851][ T288] ? clear_bhb_loop+0x50/0xa0 [ 54.812548][ T288] ? clear_bhb_loop+0x50/0xa0 [ 54.817222][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.823108][ T288] RIP: 0033:0x7f5705145af3 [ 54.827519][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 54.847124][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 54.855535][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 54.863523][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 54.871507][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 54.879484][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 54.887451][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 54.895424][ T288] [ 54.902226][ T596] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 54.919096][ T698] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 54.937969][ T596] usb 5-1: can't read configurations, error -71 [ 54.939897][ T708] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 54.941243][ T698] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 54.973912][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 54.989339][ T713] loop1: detected capacity change from 0 to 512 [ 54.989483][ T714] loop4: detected capacity change from 0 to 512 [ 55.003560][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 55.010243][ T698] F2FS-fs (loop2): invalid crc value [ 55.011050][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.011063][ T288] Call Trace: [ 55.011068][ T288] [ 55.011075][ T288] __dump_stack+0x21/0x30 [ 55.011098][ T288] dump_stack_lvl+0x110/0x170 [ 55.011114][ T288] ? show_regs_print_info+0x20/0x20 [ 55.011131][ T288] ? page_cache_prev_miss+0x290/0x290 [ 55.011150][ T288] dump_stack+0x15/0x20 [ 55.011165][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 55.011188][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 55.011206][ T288] ? f2fs_get_block+0x140/0x140 [ 55.011224][ T288] ? may_link+0x3e8/0x560 [ 55.076398][ T288] ? may_create+0x440/0x440 [ 55.080909][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 55.086299][ T288] f2fs_empty_dir+0xa6/0x230 [ 55.090890][ T288] f2fs_rmdir+0x3f/0x70 [ 55.095039][ T288] vfs_rmdir+0x1ae/0x450 [ 55.099277][ T288] do_rmdir+0x261/0x6b0 [ 55.103427][ T288] ? d_delete_notify+0x160/0x160 [ 55.108360][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 55.113205][ T288] x64_sys_call+0x4c0/0x9a0 [ 55.117702][ T288] do_syscall_64+0x4c/0xa0 [ 55.122113][ T288] ? clear_bhb_loop+0x50/0xa0 [ 55.126784][ T288] ? clear_bhb_loop+0x50/0xa0 [ 55.131453][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.137339][ T288] RIP: 0033:0x7f570511c277 [ 55.141749][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.161354][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 55.169766][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 55.177734][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 55.185702][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 55.193669][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 55.201633][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 55.209603][ T288] [ 55.213688][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 55.219693][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 55.227150][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.237199][ T288] Call Trace: [ 55.240469][ T288] [ 55.243392][ T288] __dump_stack+0x21/0x30 [ 55.247724][ T288] dump_stack_lvl+0x110/0x170 [ 55.252395][ T288] ? show_regs_print_info+0x20/0x20 [ 55.257587][ T288] ? page_cache_prev_miss+0x290/0x290 [ 55.262951][ T288] dump_stack+0x15/0x20 [ 55.267100][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 55.272473][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 55.277924][ T288] ? f2fs_get_block+0x140/0x140 [ 55.282766][ T288] ? memcpy+0x56/0x70 [ 55.286743][ T288] f2fs_find_data_page+0x189/0x3c0 [ 55.291846][ T288] f2fs_readdir+0x4b4/0x9e0 [ 55.296348][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 55.301544][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 55.306652][ T288] ? down_read_killable+0xc1/0x110 [ 55.311763][ T288] ? security_file_permission+0x83/0xa0 [ 55.317303][ T288] iterate_dir+0x25c/0x600 [ 55.321715][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 55.326907][ T288] __se_sys_getdents64+0xf2/0x250 [ 55.331924][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 55.337115][ T288] ? filldir+0x660/0x660 [ 55.341349][ T288] ? __x64_sys_umount+0x12d/0x170 [ 55.346365][ T288] ? debug_smp_processor_id+0x17/0x20 [ 55.351732][ T288] __x64_sys_getdents64+0x7b/0x90 [ 55.356755][ T288] x64_sys_call+0x592/0x9a0 [ 55.361249][ T288] do_syscall_64+0x4c/0xa0 [ 55.365660][ T288] ? clear_bhb_loop+0x50/0xa0 [ 55.370333][ T288] ? clear_bhb_loop+0x50/0xa0 [ 55.375007][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.380902][ T288] RIP: 0033:0x7f5705145af3 [ 55.385320][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 55.405008][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 55.413422][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 55.421409][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 55.429378][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 55.437352][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 55.445321][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 55.453291][ T288] [ 55.456691][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 55.466377][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 55.473866][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.483922][ T288] Call Trace: [ 55.487202][ T288] [ 55.490136][ T288] __dump_stack+0x21/0x30 [ 55.494469][ T288] dump_stack_lvl+0x110/0x170 [ 55.499140][ T288] ? show_regs_print_info+0x20/0x20 [ 55.504335][ T288] ? page_cache_prev_miss+0x290/0x290 [ 55.509700][ T288] dump_stack+0x15/0x20 [ 55.513851][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 55.519228][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 55.524700][ T288] ? f2fs_get_block+0x140/0x140 [ 55.529559][ T288] ? may_link+0x3e8/0x560 [ 55.533893][ T288] ? may_create+0x440/0x440 [ 55.538400][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 55.543770][ T288] f2fs_empty_dir+0xa6/0x230 [ 55.548360][ T288] f2fs_rmdir+0x3f/0x70 [ 55.552513][ T288] vfs_rmdir+0x1ae/0x450 [ 55.556753][ T288] do_rmdir+0x261/0x6b0 [ 55.560904][ T288] ? d_delete_notify+0x160/0x160 [ 55.565874][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 55.570722][ T288] x64_sys_call+0x4c0/0x9a0 [ 55.575218][ T288] do_syscall_64+0x4c/0xa0 [ 55.579636][ T288] ? clear_bhb_loop+0x50/0xa0 [ 55.584323][ T288] ? clear_bhb_loop+0x50/0xa0 [ 55.589000][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.594896][ T288] RIP: 0033:0x7f570511c277 [ 55.599313][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.618914][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 55.627325][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 55.635294][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 55.643259][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 55.651226][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 55.659194][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 55.667159][ T288] [ 55.678074][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 55.684218][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 55.689414][ T698] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 55.691692][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.691705][ T288] Call Trace: [ 55.691710][ T288] [ 55.691717][ T288] __dump_stack+0x21/0x30 [ 55.691739][ T288] dump_stack_lvl+0x110/0x170 [ 55.691754][ T288] ? show_regs_print_info+0x20/0x20 [ 55.691773][ T288] ? page_cache_prev_miss+0x290/0x290 [ 55.691793][ T288] dump_stack+0x15/0x20 [ 55.691808][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 55.691830][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 55.691849][ T288] ? f2fs_get_block+0x140/0x140 [ 55.706370][ T714] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 55.712908][ T288] ? memcpy+0x56/0x70 [ 55.712936][ T288] f2fs_find_data_page+0x189/0x3c0 [ 55.726376][ T714] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 55.728139][ T288] f2fs_readdir+0x4b4/0x9e0 [ 55.742227][ T714] System zones: [ 55.742832][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 55.748242][ T714] 0-1 [ 55.753633][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 55.753656][ T288] ? down_read_killable+0xc1/0x110 [ 55.753678][ T288] ? security_file_permission+0x83/0xa0 [ 55.758855][ T714] , 15-15 [ 55.766400][ T288] iterate_dir+0x25c/0x600 [ 55.766422][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 55.766442][ T288] __se_sys_getdents64+0xf2/0x250 [ 55.770881][ T714] , 18-18 [ 55.775763][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 55.775797][ T288] ? filldir+0x660/0x660 [ 55.775813][ T288] ? __x64_sys_umount+0x12d/0x170 [ 55.775831][ T288] ? debug_smp_processor_id+0x17/0x20 [ 55.784223][ T714] , 34-34 [ 55.788301][ T288] __x64_sys_getdents64+0x7b/0x90 [ 55.791975][ T714] [ 55.797030][ T288] x64_sys_call+0x592/0x9a0 [ 55.797052][ T288] do_syscall_64+0x4c/0xa0 [ 55.800152][ T714] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.804732][ T288] ? clear_bhb_loop+0x50/0xa0 [ 55.804754][ T288] ? clear_bhb_loop+0x50/0xa0 [ 55.804772][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.810260][ T714] __quota_error: 1 callbacks suppressed [ 55.810271][ T714] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 55.815398][ T288] RIP: 0033:0x7f5705145af3 [ 55.815418][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 55.818611][ T714] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 55.822762][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 55.822788][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 55.822802][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 55.822815][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 55.828249][ T714] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 55.833002][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 55.833018][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 55.833035][ T288] [ 55.836344][ T714] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.78: bad orphan inode 16 [ 55.843604][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 55.849732][ T698] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 55.850468][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 55.856261][ T714] ext4_test_bit(bit=15, block=18) = 1 [ 55.858743][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.863825][ T698] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 55.866076][ T288] Call Trace: [ 55.866083][ T288] [ 55.879791][ T714] is_bad_inode(inode)=0 [ 55.881289][ T288] __dump_stack+0x21/0x30 [ 55.881315][ T288] dump_stack_lvl+0x110/0x170 [ 55.881331][ T288] ? show_regs_print_info+0x20/0x20 [ 55.886068][ T714] NEXT_ORPHAN(inode)=0 [ 55.890673][ T288] ? page_cache_prev_miss+0x290/0x290 [ 55.896646][ T714] max_ino=32 [ 55.902080][ T288] dump_stack+0x15/0x20 [ 55.902099][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 55.911397][ T714] i_nlink=2 [ 55.915776][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 55.948591][ T714] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 55.949855][ T288] ? f2fs_get_block+0x140/0x140 [ 55.959852][ T698] attempt to access beyond end of device [ 55.959852][ T698] loop2: rw=2049, want=53384, limit=40427 [ 55.966218][ T288] ? may_link+0x3e8/0x560 [ 55.966244][ T288] ? may_create+0x440/0x440 [ 55.966260][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 56.001158][ T698] attempt to access beyond end of device [ 56.001158][ T698] loop2: rw=2049, want=53392, limit=40427 [ 56.004787][ T288] f2fs_empty_dir+0xa6/0x230 [ 56.173407][ T288] f2fs_rmdir+0x3f/0x70 [ 56.177556][ T288] vfs_rmdir+0x1ae/0x450 [ 56.181779][ T288] do_rmdir+0x261/0x6b0 [ 56.185918][ T288] ? d_delete_notify+0x160/0x160 [ 56.190850][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 56.195683][ T288] x64_sys_call+0x4c0/0x9a0 [ 56.200168][ T288] do_syscall_64+0x4c/0xa0 [ 56.204578][ T288] ? clear_bhb_loop+0x50/0xa0 [ 56.209239][ T288] ? clear_bhb_loop+0x50/0xa0 [ 56.213899][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.219774][ T288] RIP: 0033:0x7f570511c277 [ 56.224176][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.243782][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 56.252181][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 56.260139][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 56.268092][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 56.276054][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 56.284027][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 56.291986][ T288] [ 56.295597][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 56.302532][ T30] audit: type=1400 audit(1789972660.311:249): avc: denied { map } for pid=712 comm="syz.4.78" path="pipe:[533]" dev="pipefs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 56.326582][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 56.334093][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.344170][ T288] Call Trace: [ 56.347460][ T288] [ 56.350396][ T288] __dump_stack+0x21/0x30 [ 56.354736][ T288] dump_stack_lvl+0x110/0x170 [ 56.359418][ T288] ? show_regs_print_info+0x20/0x20 [ 56.364630][ T288] ? page_cache_prev_miss+0x290/0x290 [ 56.370013][ T288] dump_stack+0x15/0x20 [ 56.374174][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 56.379568][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 56.385048][ T288] ? f2fs_get_block+0x140/0x140 [ 56.389909][ T288] ? memcpy+0x56/0x70 [ 56.393902][ T288] f2fs_find_data_page+0x189/0x3c0 [ 56.399022][ T288] f2fs_readdir+0x4b4/0x9e0 [ 56.403551][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 56.408771][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 56.413902][ T288] ? down_read_killable+0xc1/0x110 [ 56.419031][ T288] ? security_file_permission+0x83/0xa0 [ 56.424592][ T288] iterate_dir+0x25c/0x600 [ 56.429028][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 56.434225][ T288] __se_sys_getdents64+0xf2/0x250 [ 56.439249][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 56.444442][ T288] ? filldir+0x660/0x660 [ 56.448676][ T288] ? __x64_sys_umount+0x12d/0x170 [ 56.453696][ T288] ? debug_smp_processor_id+0x17/0x20 [ 56.459095][ T288] __x64_sys_getdents64+0x7b/0x90 [ 56.464116][ T288] x64_sys_call+0x592/0x9a0 [ 56.468615][ T288] do_syscall_64+0x4c/0xa0 [ 56.473026][ T288] ? clear_bhb_loop+0x50/0xa0 [ 56.477701][ T288] ? clear_bhb_loop+0x50/0xa0 [ 56.482370][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.488258][ T288] RIP: 0033:0x7f5705145af3 [ 56.492672][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 56.512272][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 56.520679][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 56.528649][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 56.536614][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 56.544579][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 56.552547][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 56.560516][ T288] [ 56.564800][ T6] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 56.583952][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 56.590025][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 56.597511][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.607585][ T288] Call Trace: [ 56.608596][ T724] loop1: detected capacity change from 0 to 40427 [ 56.610871][ T288] [ 56.610880][ T288] __dump_stack+0x21/0x30 [ 56.620538][ T287] attempt to access beyond end of device [ 56.620538][ T287] loop2: rw=2049, want=45104, limit=40427 [ 56.624528][ T288] dump_stack_lvl+0x110/0x170 [ 56.624551][ T288] ? show_regs_print_info+0x20/0x20 [ 56.624569][ T288] ? page_cache_prev_miss+0x290/0x290 [ 56.624590][ T288] dump_stack+0x15/0x20 [ 56.655131][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 56.660513][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 56.665968][ T288] ? f2fs_get_block+0x140/0x140 [ 56.670827][ T288] ? may_link+0x3e8/0x560 [ 56.675174][ T288] ? may_create+0x440/0x440 [ 56.679687][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 56.685076][ T288] f2fs_empty_dir+0xa6/0x230 [ 56.689664][ T288] f2fs_rmdir+0x3f/0x70 [ 56.693816][ T288] vfs_rmdir+0x1ae/0x450 [ 56.698061][ T288] do_rmdir+0x261/0x6b0 [ 56.702217][ T288] ? d_delete_notify+0x160/0x160 [ 56.707151][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 56.711998][ T288] x64_sys_call+0x4c0/0x9a0 [ 56.716497][ T288] do_syscall_64+0x4c/0xa0 [ 56.720909][ T288] ? clear_bhb_loop+0x50/0xa0 [ 56.725598][ T288] ? clear_bhb_loop+0x50/0xa0 [ 56.730274][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.736180][ T288] RIP: 0033:0x7f570511c277 [ 56.740590][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.760191][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 56.768604][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 56.776574][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 56.784541][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 56.792508][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 56.800482][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 56.808469][ T288] [ 56.813527][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 56.819542][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 56.827010][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.837057][ T288] Call Trace: [ 56.840324][ T288] [ 56.843263][ T288] __dump_stack+0x21/0x30 [ 56.847598][ T288] dump_stack_lvl+0x110/0x170 [ 56.852260][ T288] ? show_regs_print_info+0x20/0x20 [ 56.857451][ T288] ? page_cache_prev_miss+0x290/0x290 [ 56.862811][ T288] dump_stack+0x15/0x20 [ 56.867036][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 56.872416][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 56.877873][ T288] ? f2fs_get_block+0x140/0x140 [ 56.882713][ T288] ? memcpy+0x56/0x70 [ 56.886688][ T288] f2fs_find_data_page+0x189/0x3c0 [ 56.891783][ T288] f2fs_readdir+0x4b4/0x9e0 [ 56.896277][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 56.901462][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 56.906565][ T288] ? down_read_killable+0xc1/0x110 [ 56.911668][ T288] ? security_file_permission+0x83/0xa0 [ 56.917216][ T288] iterate_dir+0x25c/0x600 [ 56.921633][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 56.926819][ T288] __se_sys_getdents64+0xf2/0x250 [ 56.931835][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 56.937018][ T288] ? filldir+0x660/0x660 [ 56.941246][ T288] ? __x64_sys_umount+0x12d/0x170 [ 56.946257][ T288] ? debug_smp_processor_id+0x17/0x20 [ 56.951623][ T288] __x64_sys_getdents64+0x7b/0x90 [ 56.956634][ T288] x64_sys_call+0x592/0x9a0 [ 56.961125][ T288] do_syscall_64+0x4c/0xa0 [ 56.965525][ T288] ? clear_bhb_loop+0x50/0xa0 [ 56.970189][ T288] ? clear_bhb_loop+0x50/0xa0 [ 56.974845][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.980726][ T288] RIP: 0033:0x7f5705145af3 [ 56.985128][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 57.004726][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 57.013126][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 57.021099][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 57.029056][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 57.037011][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 57.044985][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 57.052943][ T288] [ 57.056762][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 57.063276][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 57.063590][ T724] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 57.070755][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.070768][ T288] Call Trace: [ 57.070775][ T288] [ 57.070781][ T288] __dump_stack+0x21/0x30 [ 57.097698][ T288] dump_stack_lvl+0x110/0x170 [ 57.102374][ T288] ? show_regs_print_info+0x20/0x20 [ 57.107577][ T288] ? page_cache_prev_miss+0x290/0x290 [ 57.112949][ T288] dump_stack+0x15/0x20 [ 57.117103][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 57.122475][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 57.127929][ T288] ? f2fs_get_block+0x140/0x140 [ 57.132775][ T288] ? may_link+0x3e8/0x560 [ 57.137096][ T288] ? may_create+0x440/0x440 [ 57.141596][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 57.146979][ T288] f2fs_empty_dir+0xa6/0x230 [ 57.151578][ T288] f2fs_rmdir+0x3f/0x70 [ 57.155734][ T288] vfs_rmdir+0x1ae/0x450 [ 57.159977][ T288] do_rmdir+0x261/0x6b0 [ 57.164137][ T288] ? d_delete_notify+0x160/0x160 [ 57.169078][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 57.173930][ T288] x64_sys_call+0x4c0/0x9a0 [ 57.178433][ T288] do_syscall_64+0x4c/0xa0 [ 57.182844][ T288] ? clear_bhb_loop+0x50/0xa0 [ 57.187521][ T288] ? clear_bhb_loop+0x50/0xa0 [ 57.192197][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.198085][ T288] RIP: 0033:0x7f570511c277 [ 57.202499][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.222107][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 57.230518][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 57.238492][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 57.246461][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 57.254430][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 57.262394][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 57.270363][ T288] [ 57.279511][ T724] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 57.301105][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 57.307135][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 57.314616][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.322478][ T724] F2FS-fs (loop1): invalid crc value [ 57.324682][ T288] Call Trace: [ 57.324693][ T288] [ 57.324699][ T288] __dump_stack+0x21/0x30 [ 57.340524][ T288] dump_stack_lvl+0x110/0x170 [ 57.345235][ T288] ? show_regs_print_info+0x20/0x20 [ 57.350449][ T288] ? page_cache_prev_miss+0x290/0x290 [ 57.355832][ T288] dump_stack+0x15/0x20 [ 57.360003][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 57.365400][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 57.370868][ T288] ? f2fs_get_block+0x140/0x140 [ 57.375731][ T288] ? memcpy+0x56/0x70 [ 57.377420][ T732] loop2: detected capacity change from 0 to 256 [ 57.379730][ T288] f2fs_find_data_page+0x189/0x3c0 [ 57.391071][ T288] f2fs_readdir+0x4b4/0x9e0 [ 57.395592][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 57.400806][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 57.405928][ T288] ? down_read_killable+0xc1/0x110 [ 57.411055][ T288] ? security_file_permission+0x83/0xa0 [ 57.414649][ T724] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 57.416611][ T288] iterate_dir+0x25c/0x600 [ 57.432033][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 57.437251][ T288] __se_sys_getdents64+0xf2/0x250 [ 57.442294][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 57.447547][ T288] ? filldir+0x660/0x660 [ 57.451815][ T288] ? __x64_sys_umount+0x12d/0x170 [ 57.452767][ T724] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 57.456853][ T288] ? debug_smp_processor_id+0x17/0x20 [ 57.463995][ T724] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 57.469230][ T288] __x64_sys_getdents64+0x7b/0x90 [ 57.481791][ T288] x64_sys_call+0x592/0x9a0 [ 57.486307][ T288] do_syscall_64+0x4c/0xa0 [ 57.490733][ T288] ? clear_bhb_loop+0x50/0xa0 [ 57.495432][ T288] ? clear_bhb_loop+0x50/0xa0 [ 57.500136][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.506052][ T288] RIP: 0033:0x7f5705145af3 [ 57.510485][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 57.511285][ T724] attempt to access beyond end of device [ 57.511285][ T724] loop1: rw=2049, want=53384, limit=40427 [ 57.530189][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 57.530220][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 57.530234][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 57.530246][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 57.530258][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 57.530270][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 57.549315][ T724] attempt to access beyond end of device [ 57.549315][ T724] loop1: rw=2049, want=53392, limit=40427 [ 57.549853][ T288] [ 57.604154][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 57.610260][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 57.617757][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.627800][ T288] Call Trace: [ 57.631071][ T288] [ 57.634016][ T288] __dump_stack+0x21/0x30 [ 57.638340][ T288] dump_stack_lvl+0x110/0x170 [ 57.643002][ T288] ? show_regs_print_info+0x20/0x20 [ 57.648184][ T288] ? page_cache_prev_miss+0x290/0x290 [ 57.653541][ T288] dump_stack+0x15/0x20 [ 57.657682][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 57.663041][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 57.668493][ T288] ? f2fs_get_block+0x140/0x140 [ 57.673329][ T288] ? may_link+0x3e8/0x560 [ 57.677645][ T288] ? may_create+0x440/0x440 [ 57.682134][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 57.687492][ T288] f2fs_empty_dir+0xa6/0x230 [ 57.692078][ T288] f2fs_rmdir+0x3f/0x70 [ 57.696349][ T288] vfs_rmdir+0x1ae/0x450 [ 57.700592][ T288] do_rmdir+0x261/0x6b0 [ 57.704738][ T288] ? d_delete_notify+0x160/0x160 [ 57.709670][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 57.714513][ T288] x64_sys_call+0x4c0/0x9a0 [ 57.719021][ T288] do_syscall_64+0x4c/0xa0 [ 57.723427][ T288] ? clear_bhb_loop+0x50/0xa0 [ 57.728090][ T288] ? clear_bhb_loop+0x50/0xa0 [ 57.732753][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.738632][ T288] RIP: 0033:0x7f570511c277 [ 57.743036][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.762630][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 57.771031][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 57.779011][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 57.786975][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 57.794951][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 57.802921][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 57.810892][ T288] [ 57.814522][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 57.820734][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 57.828207][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.838267][ T288] Call Trace: [ 57.841545][ T288] [ 57.844477][ T288] __dump_stack+0x21/0x30 [ 57.848812][ T288] dump_stack_lvl+0x110/0x170 [ 57.853482][ T288] ? show_regs_print_info+0x20/0x20 [ 57.858684][ T288] ? page_cache_prev_miss+0x290/0x290 [ 57.864053][ T288] dump_stack+0x15/0x20 [ 57.868203][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 57.873575][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 57.879029][ T288] ? f2fs_get_block+0x140/0x140 [ 57.883875][ T288] ? memcpy+0x56/0x70 [ 57.887856][ T288] f2fs_find_data_page+0x189/0x3c0 [ 57.892962][ T288] f2fs_readdir+0x4b4/0x9e0 [ 57.897467][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 57.902681][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 57.907793][ T288] ? down_read_killable+0xc1/0x110 [ 57.912905][ T288] ? security_file_permission+0x83/0xa0 [ 57.918449][ T288] iterate_dir+0x25c/0x600 [ 57.922864][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 57.928063][ T288] __se_sys_getdents64+0xf2/0x250 [ 57.933083][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 57.938278][ T288] ? filldir+0x660/0x660 [ 57.942518][ T288] ? __x64_sys_umount+0x12d/0x170 [ 57.947538][ T288] ? debug_smp_processor_id+0x17/0x20 [ 57.952907][ T288] __x64_sys_getdents64+0x7b/0x90 [ 57.957935][ T288] x64_sys_call+0x592/0x9a0 [ 57.962432][ T288] do_syscall_64+0x4c/0xa0 [ 57.966844][ T288] ? clear_bhb_loop+0x50/0xa0 [ 57.971514][ T288] ? clear_bhb_loop+0x50/0xa0 [ 57.976187][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.982075][ T288] RIP: 0033:0x7f5705145af3 [ 57.986486][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 58.006093][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 58.014510][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 58.022478][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 58.030539][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 58.038509][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 58.046476][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 58.054453][ T288] [ 58.058422][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 58.064592][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 58.072067][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.082386][ T288] Call Trace: [ 58.085659][ T288] [ 58.088602][ T288] __dump_stack+0x21/0x30 [ 58.092925][ T288] dump_stack_lvl+0x110/0x170 [ 58.097592][ T288] ? show_regs_print_info+0x20/0x20 [ 58.102796][ T288] ? page_cache_prev_miss+0x290/0x290 [ 58.108171][ T288] dump_stack+0x15/0x20 [ 58.112322][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 58.117702][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 58.123158][ T288] ? f2fs_get_block+0x140/0x140 [ 58.128003][ T288] ? may_link+0x3e8/0x560 [ 58.132341][ T288] ? may_create+0x440/0x440 [ 58.136830][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 58.142205][ T288] f2fs_empty_dir+0xa6/0x230 [ 58.146786][ T288] f2fs_rmdir+0x3f/0x70 [ 58.150933][ T288] vfs_rmdir+0x1ae/0x450 [ 58.155201][ T288] do_rmdir+0x261/0x6b0 [ 58.159351][ T288] ? d_delete_notify+0x160/0x160 [ 58.164288][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 58.169142][ T288] x64_sys_call+0x4c0/0x9a0 [ 58.173640][ T288] do_syscall_64+0x4c/0xa0 [ 58.178070][ T288] ? clear_bhb_loop+0x50/0xa0 [ 58.182741][ T288] ? clear_bhb_loop+0x50/0xa0 [ 58.187428][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.193314][ T288] RIP: 0033:0x7f570511c277 [ 58.197719][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.217328][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 58.225736][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 58.233712][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 58.241689][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 58.249646][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 58.257602][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 58.265562][ T288] [ 58.268681][ T6] usb 1-1: device descriptor read/64, error -71 [ 58.270505][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 58.281087][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 58.288550][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.298593][ T288] Call Trace: [ 58.301879][ T288] [ 58.304799][ T288] __dump_stack+0x21/0x30 [ 58.309115][ T288] dump_stack_lvl+0x110/0x170 [ 58.313776][ T288] ? show_regs_print_info+0x20/0x20 [ 58.318958][ T288] ? page_cache_prev_miss+0x290/0x290 [ 58.324317][ T288] dump_stack+0x15/0x20 [ 58.328456][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 58.333829][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 58.339271][ T288] ? f2fs_get_block+0x140/0x140 [ 58.344118][ T288] ? memcpy+0x56/0x70 [ 58.348084][ T288] f2fs_find_data_page+0x189/0x3c0 [ 58.353290][ T288] f2fs_readdir+0x4b4/0x9e0 [ 58.357779][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 58.362977][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 58.368091][ T288] ? down_read_killable+0xc1/0x110 [ 58.373203][ T288] ? security_file_permission+0x83/0xa0 [ 58.378734][ T288] iterate_dir+0x25c/0x600 [ 58.383138][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 58.388322][ T288] __se_sys_getdents64+0xf2/0x250 [ 58.393347][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 58.398531][ T288] ? filldir+0x660/0x660 [ 58.402759][ T288] ? __x64_sys_umount+0x12d/0x170 [ 58.407767][ T288] ? debug_smp_processor_id+0x17/0x20 [ 58.413156][ T288] __x64_sys_getdents64+0x7b/0x90 [ 58.418207][ T288] x64_sys_call+0x592/0x9a0 [ 58.422727][ T288] do_syscall_64+0x4c/0xa0 [ 58.427136][ T288] ? clear_bhb_loop+0x50/0xa0 [ 58.431819][ T288] ? clear_bhb_loop+0x50/0xa0 [ 58.436501][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.442396][ T288] RIP: 0033:0x7f5705145af3 [ 58.446822][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 58.466430][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 58.474835][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 58.482809][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 58.490769][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 58.498725][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 58.506699][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 58.514658][ T288] [ 58.520488][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 58.526536][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 58.534008][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.544066][ T288] Call Trace: [ 58.547340][ T288] [ 58.550272][ T288] __dump_stack+0x21/0x30 [ 58.554602][ T288] dump_stack_lvl+0x110/0x170 [ 58.559276][ T288] ? show_regs_print_info+0x20/0x20 [ 58.564476][ T288] ? page_cache_prev_miss+0x290/0x290 [ 58.569848][ T288] dump_stack+0x15/0x20 [ 58.574003][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 58.579372][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 58.584826][ T288] ? f2fs_get_block+0x140/0x140 [ 58.589676][ T288] ? may_link+0x3e8/0x560 [ 58.594001][ T288] ? may_create+0x440/0x440 [ 58.598501][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 58.603870][ T288] f2fs_empty_dir+0xa6/0x230 [ 58.608459][ T288] f2fs_rmdir+0x3f/0x70 [ 58.612615][ T288] vfs_rmdir+0x1ae/0x450 [ 58.616858][ T288] do_rmdir+0x261/0x6b0 [ 58.621009][ T288] ? d_delete_notify+0x160/0x160 [ 58.625948][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 58.630796][ T288] x64_sys_call+0x4c0/0x9a0 [ 58.635304][ T288] do_syscall_64+0x4c/0xa0 [ 58.639719][ T288] ? clear_bhb_loop+0x50/0xa0 [ 58.644392][ T288] ? clear_bhb_loop+0x50/0xa0 [ 58.649062][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.654956][ T288] RIP: 0033:0x7f570511c277 [ 58.659381][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.678985][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 58.687406][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 58.695378][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 58.703349][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 58.711323][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 58.719296][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 58.727286][ T288] [ 58.730902][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 58.745982][ T467] attempt to access beyond end of device [ 58.745982][ T467] loop1: rw=2049, want=45104, limit=40427 [ 58.753038][ T745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49102 sclass=netlink_route_socket pid=745 comm=syz.0.86 [ 58.761491][ T743] loop4: detected capacity change from 0 to 512 [ 58.769922][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 58.783311][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.793369][ T288] Call Trace: [ 58.796654][ T288] [ 58.799584][ T288] __dump_stack+0x21/0x30 [ 58.803917][ T288] dump_stack_lvl+0x110/0x170 [ 58.808595][ T288] ? show_regs_print_info+0x20/0x20 [ 58.813800][ T288] ? page_cache_prev_miss+0x290/0x290 [ 58.819170][ T288] dump_stack+0x15/0x20 [ 58.823320][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 58.828692][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 58.834145][ T288] ? f2fs_get_block+0x140/0x140 [ 58.838991][ T288] ? memcpy+0x56/0x70 [ 58.842999][ T288] f2fs_find_data_page+0x189/0x3c0 [ 58.848110][ T288] f2fs_readdir+0x4b4/0x9e0 [ 58.852611][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 58.857805][ T288] ? __se_sys_newfstat+0x2fc/0x3b0 [ 58.862919][ T288] ? down_read_killable+0xc1/0x110 [ 58.868031][ T288] ? security_file_permission+0x83/0xa0 [ 58.873574][ T288] iterate_dir+0x25c/0x600 [ 58.877992][ T288] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 58.883194][ T288] __se_sys_getdents64+0xf2/0x250 [ 58.888215][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 58.893412][ T288] ? filldir+0x660/0x660 [ 58.897652][ T288] ? debug_smp_processor_id+0x17/0x20 [ 58.903025][ T288] __x64_sys_getdents64+0x7b/0x90 [ 58.908052][ T288] x64_sys_call+0x592/0x9a0 [ 58.912554][ T288] do_syscall_64+0x4c/0xa0 [ 58.916967][ T288] ? clear_bhb_loop+0x50/0xa0 [ 58.921646][ T288] ? clear_bhb_loop+0x50/0xa0 [ 58.926319][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.932207][ T288] RIP: 0033:0x7f5705145af3 [ 58.936622][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 58.956225][ T288] RSP: 002b:00007ffcfe359848 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 58.964638][ T288] RAX: ffffffffffffffda RBX: 0000555581548950 RCX: 00007f5705145af3 [ 58.972617][ T288] RDX: 0000000000008000 RSI: 0000555581548980 RDI: 0000000000000006 [ 58.980589][ T288] RBP: 0000555581548980 R08: 00007f5705371e20 R09: 0000000000000001 [ 58.988553][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581548954 [ 58.996521][ T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffcfe35cbe0 [ 59.004499][ T288] [ 59.016084][ T288] F2FS-fs (loop3): access invalid blkaddr:36 [ 59.023617][ T743] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 59.027859][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 59.040267][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.046939][ T743] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 59.050329][ T288] Call Trace: [ 59.050336][ T288] [ 59.058867][ T743] EXT4-fs (loop4): dax option not supported [ 59.060707][ T288] __dump_stack+0x21/0x30 [ 59.073985][ T288] dump_stack_lvl+0x110/0x170 [ 59.078676][ T288] ? show_regs_print_info+0x20/0x20 [ 59.083882][ T288] ? page_cache_prev_miss+0x290/0x290 [ 59.089260][ T288] dump_stack+0x15/0x20 [ 59.093413][ T288] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 59.098795][ T288] f2fs_get_read_data_page+0x43f/0x6e0 [ 59.104250][ T288] ? f2fs_get_block+0x140/0x140 [ 59.109096][ T288] ? may_link+0x3e8/0x560 [ 59.113420][ T288] ? may_create+0x440/0x440 [ 59.117923][ T288] f2fs_get_lock_data_page+0x59/0x230 [ 59.123289][ T288] f2fs_empty_dir+0xa6/0x230 [ 59.127876][ T288] f2fs_rmdir+0x3f/0x70 [ 59.132033][ T288] vfs_rmdir+0x1ae/0x450 [ 59.136272][ T288] do_rmdir+0x261/0x6b0 [ 59.140434][ T288] ? d_delete_notify+0x160/0x160 [ 59.145366][ T288] __x64_sys_unlinkat+0xc7/0xf0 [ 59.150214][ T288] x64_sys_call+0x4c0/0x9a0 [ 59.154710][ T288] do_syscall_64+0x4c/0xa0 [ 59.159121][ T288] ? clear_bhb_loop+0x50/0xa0 [ 59.163799][ T288] ? clear_bhb_loop+0x50/0xa0 [ 59.168494][ T288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.174401][ T288] RIP: 0033:0x7f570511c277 [ 59.178820][ T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.198422][ T288] RSP: 002b:00007ffcfe359878 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 59.206835][ T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f570511c277 [ 59.214805][ T288] RDX: 0000000000000200 RSI: 00007ffcfe35aa20 RDI: 00000000ffffff9c [ 59.222775][ T288] RBP: 00007f57051b34bb R08: 0000000000008680 R09: 0000000000000001 [ 59.230743][ T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffcfe35aa20 [ 59.238709][ T288] R13: 00007f57051b34bb R14: 00005555815254e8 R15: 00007ffcfe35cbe0 [ 59.246684][ T288] [ 59.254606][ T747] loop2: detected capacity change from 0 to 512 [ 59.342137][ T747] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.362769][ T747] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.367680][ T755] loop1: detected capacity change from 0 to 1024 [ 59.386489][ T743] capability: warning: `syz.4.85' uses deprecated v2 capabilities in a way that may be insecure [ 59.421183][ T30] audit: type=1400 audit(1789972663.431:250): avc: denied { map } for pid=742 comm="syz.4.85" path="socket:[18521]" dev="sockfs" ino=18521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 59.447194][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 59.455513][ T30] audit: type=1400 audit(1789972663.461:251): avc: denied { create } for pid=746 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.456375][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 59.485087][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 59.495273][ T761] loop1: detected capacity change from 0 to 1024 [ 59.566459][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.574814][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.582398][ T759] device bridge_slave_0 entered promiscuous mode [ 59.589599][ T759] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.597101][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.604738][ T759] device bridge_slave_1 entered promiscuous mode [ 59.678437][ T759] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.685537][ T759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.692844][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.699892][ T759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.707277][ T20] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 59.723788][ T780] loop1: detected capacity change from 0 to 4096 [ 59.733050][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.749992][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.757946][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.774647][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.775634][ T780] EXT4-fs (loop1): Test dummy encryption mode enabled [ 59.810313][ T780] EXT4-fs (loop1): Ignoring removed bh option [ 59.817712][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.824806][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.848910][ T780] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,usrquota,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 59.854063][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.901270][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.908362][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.926049][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.934466][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.952553][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.981238][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.001738][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.023580][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.039911][ T759] device veth0_vlan entered promiscuous mode [ 60.053816][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.088189][ T759] device veth1_macvtap entered promiscuous mode [ 60.094757][ T30] audit: type=1400 audit(1789972664.091:252): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.126089][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.134851][ T30] audit: type=1400 audit(1789972664.091:253): avc: denied { unlink } for pid=287 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 60.169254][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.197698][ T790] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.214104][ T30] audit: type=1400 audit(1789972664.221:254): avc: denied { mounton } for pid=759 comm="syz-executor" path="/root/syzkaller.hFuwJT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.253910][ T792] loop2: detected capacity change from 0 to 512 [ 60.273658][ T792] EXT4-fs error (device loop2): __ext4_iget:4950: inode #11: block 1: comm syz.2.96: invalid block [ 60.286313][ T792] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.96: couldn't read orphan inode 11 (err -117) [ 60.298371][ T792] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.317774][ T30] audit: type=1400 audit(1789972664.321:255): avc: denied { create } for pid=791 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.411489][ T804] tipc: Started in network mode [ 60.416382][ T804] tipc: Node identity ac1414aa, cluster identity 4711 [ 60.423555][ T804] tipc: Enabled bearer , priority 10 [ 60.446919][ T807] loop2: detected capacity change from 0 to 256 [ 60.451225][ T607] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 60.459308][ T30] audit: type=1400 audit(1789972664.461:256): avc: denied { remount } for pid=808 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 60.487897][ T811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 60.541277][ T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.562294][ T815] loop2: detected capacity change from 0 to 512 [ 60.588303][ T815] EXT4-fs (loop2): Test dummy encryption mode enabled [ 60.617570][ T815] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,errors=remount-ro,. Quota mode: writeback. [ 60.821132][ T607] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.831705][ T607] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 60.871526][ T389] device bridge_slave_1 left promiscuous mode [ 60.877837][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.885887][ T389] device bridge_slave_0 left promiscuous mode [ 60.892186][ T389] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.900282][ T389] device veth1_macvtap left promiscuous mode [ 60.906409][ T389] device veth0_vlan left promiscuous mode [ 60.991903][ T6] usb 6-1: unable to get BOS descriptor or descriptor too short [ 61.001081][ T607] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 61.010267][ T596] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 61.019734][ T607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.027792][ T607] usb 2-1: Product: syz [ 61.032047][ T607] usb 2-1: Manufacturer: syz [ 61.036633][ T607] usb 2-1: SerialNumber: syz [ 61.081038][ T6] usb 6-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 61.081770][ T607] usb-storage 2-1:1.0: USB Mass Storage device detected [ 61.091475][ T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.101236][ T607] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 61.115386][ T607] scsi host1: usb-storage 2-1:1.0 [ 61.271064][ T6] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 61.280186][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.288405][ T6] usb 6-1: Product: syz [ 61.292866][ T6] usb 6-1: Manufacturer: syz [ 61.300124][ T788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'. [ 61.314932][ T788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 61.323787][ T30] audit: type=1400 audit(1789972665.301:257): avc: denied { create } for pid=787 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 61.346210][ T30] audit: type=1400 audit(1789972665.351:258): avc: denied { read } for pid=787 comm="syz.1.94" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 61.370630][ T30] audit: type=1400 audit(1789972665.351:259): avc: denied { open } for pid=787 comm="syz.1.94" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 61.451161][ T596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.464922][ T596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.476491][ T596] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.490805][ T596] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.501194][ T596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.516326][ T596] usb 3-1: config 0 descriptor?? [ 61.551678][ T607] tipc: Node number set to 2886997162 [ 61.726179][ T30] audit: type=1400 audit(1789972665.731:260): avc: denied { read } for pid=841 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.783653][ T30] audit: type=1400 audit(1789972665.781:261): avc: denied { write } for pid=841 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.785092][ T6] usb 6-1: SerialNumber: syz [ 61.808968][ T305] usb 2-1: USB disconnect, device number 3 [ 61.829809][ T848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 61.844484][ T30] audit: type=1400 audit(1789972665.851:262): avc: denied { getopt } for pid=841 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.865935][ T850] netlink: 112 bytes leftover after parsing attributes in process `syz.0.106'. [ 61.891357][ T379] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.923772][ T30] audit: type=1400 audit(1789972665.931:263): avc: denied { read } for pid=854 comm="syz.4.108" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.958891][ T859] loop4: detected capacity change from 0 to 2048 [ 61.992166][ T859] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.002840][ T859] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.024938][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 62.039345][ T829] UDC core: couldn't find an available UDC or it's busy: -16 [ 62.053968][ T829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.064988][ T829] tmpfs: Unknown parameter 'inode3Þ<È/—2' [ 62.113305][ T30] audit: type=1400 audit(1789972666.121:264): avc: denied { ioctl } for pid=866 comm="syz.4.110" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18173 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.154739][ T873] loop4: detected capacity change from 0 to 256 [ 62.256418][ T873] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 62.339050][ T875] loop4: detected capacity change from 0 to 1024 [ 62.382982][ T30] audit: type=1400 audit(1789972666.391:265): avc: denied { remount } for pid=874 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.414540][ T883] fuse: Bad value for 'fd' [ 62.548781][ T875] x_tables: ip6_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 352 [ 62.579130][ T875] loop4: detected capacity change from 0 to 16 [ 62.616376][ T889] loop5: detected capacity change from 0 to 256 [ 62.627770][ T875] erofs: (device loop4): mounted with root inode @ nid 36. [ 62.657088][ T30] audit: type=1400 audit(1789972666.661:266): avc: denied { wake_alarm } for pid=896 comm="syz.0.119" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.680667][ T899] loop2: detected capacity change from 0 to 512 [ 62.691149][ T6] usb 6-1: 0:1 : does not exist [ 62.696270][ T6] usb 6-1: unit 4 not found! [ 62.702207][ T6] usb 6-1: unit 197 not found! [ 62.717136][ T899] EXT4-fs (loop2): Mount option "journal_dev=0x0000000000000003" incompatible with ext2 [ 62.723747][ T6] usb 6-1: USB disconnect, device number 2 [ 62.786145][ T903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 62.802831][ T904] bridge1: port 1(erspan0) entered blocking state [ 62.809417][ T904] bridge1: port 1(erspan0) entered disabled state [ 62.816493][ T904] device erspan0 entered promiscuous mode [ 62.823093][ T904] bridge1: port 1(erspan0) entered blocking state [ 62.829531][ T904] bridge1: port 1(erspan0) entered forwarding state [ 62.836609][ T596] usbhid 3-1:0.0: can't add hid device: -71 [ 62.910305][ T596] usbhid: probe of 3-1:0.0 failed with error -71 [ 62.929995][ T596] usb 3-1: USB disconnect, device number 4 [ 63.606222][ T925] xt_hashlimit: size too large, truncated to 1048576 [ 63.843730][ T936] netlink: 132 bytes leftover after parsing attributes in process `syz.4.130'. [ 63.875097][ T938] loop5: detected capacity change from 0 to 256 [ 63.883818][ T936] loop4: detected capacity change from 0 to 16 [ 63.941066][ T596] Bluetooth: hci0: command 0x1003 tx timeout [ 63.952108][ T936] erofs: Unknown parameter './config/usb_gadget/g1/functions/hid.usb0/subclass' [ 63.967023][ T853] Bluetooth: hci0: sending frame failed (-49) [ 63.973358][ T938] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 64.183574][ T940] loop2: detected capacity change from 0 to 40427 [ 64.319650][ T940] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 64.332374][ T946] loop5: detected capacity change from 0 to 16 [ 64.338613][ T940] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 64.359166][ T940] F2FS-fs (loop2): invalid crc value [ 64.374504][ T940] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 64.419105][ T946] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 25144) [ 64.459414][ T940] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 64.471314][ T940] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.505382][ T940] attempt to access beyond end of device [ 64.505382][ T940] loop2: rw=2049, want=53384, limit=40427 [ 64.518420][ T946] tipc: Can't bind to reserved service type 2 [ 64.569538][ T940] attempt to access beyond end of device [ 64.569538][ T940] loop2: rw=2049, want=53392, limit=40427 [ 64.576030][ T959] mmap: syz.1.136 (959) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 64.679676][ T961] APIC base relocation is unsupported by KVM [ 64.729263][ T287] attempt to access beyond end of device [ 64.729263][ T287] loop2: rw=2049, want=45104, limit=40427 [ 64.932029][ T966] EXT4-fs (loop4): Ignoring removed nobh option [ 64.994101][ T966] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 65.013709][ T966] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.141274][ T956] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 65.187255][ T956] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 65.233750][ T956] F2FS-fs (loop1): Found nat_bits in checkpoint [ 65.319735][ T956] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 65.326919][ T956] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.408751][ T995] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 65.655457][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 65.785203][ T1005] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.021081][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 66.028215][ T853] Bluetooth: hci0: sending frame failed (-49) [ 66.034566][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.048998][ T6] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 66.211043][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.224271][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.239545][ T6] usb 3-1: Product: syz [ 66.247920][ T6] usb 3-1: Manufacturer: syz [ 66.256666][ T6] usb 3-1: SerialNumber: syz [ 66.311630][ T6] cdc_mbim 3-1:1.0: skipping garbage [ 66.411560][ T461] loop1: p1 < > p4 [ 66.471387][ T461] loop1: p4 size 722688 extends beyond EOD, truncated [ 66.511573][ T985] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.604923][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 66.604941][ T30] audit: type=1400 audit(1789972670.611:280): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.679991][ T30] audit: type=1400 audit(1789972670.641:281): avc: denied { create } for pid=1019 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 66.883097][ T1020] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 66.898364][ T1021] loop1: p1 < > p4 [ 66.906315][ T1021] loop1: p4 size 722688 extends beyond EOD, truncated [ 66.953048][ T1026] process 'syz.0.151' launched './file0' with NULL argv: empty string added [ 66.984796][ T1033] set_capacity_and_notify: 5 callbacks suppressed [ 66.984812][ T1033] loop4: detected capacity change from 0 to 1024 [ 67.031379][ T30] audit: type=1400 audit(1789972671.041:282): avc: denied { read append } for pid=1028 comm="syz.1.153" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.032050][ T1033] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.067109][ T30] audit: type=1400 audit(1789972671.071:283): avc: denied { connect } for pid=1028 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.070467][ T1035] loop5: detected capacity change from 0 to 256 [ 67.104294][ T477] udevd[477]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 67.115426][ T461] udevd[461]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 67.135612][ T477] udevd[477]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 67.141957][ T1033] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 67.178767][ T461] udevd[461]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 67.194365][ T461] udevd[461]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 67.196774][ T1044] udevd[1044]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 67.218193][ T30] audit: type=1326 audit(1789972671.221:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.0.155" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c72ac3159 code=0x7ffc0000 [ 67.231200][ T985] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.251428][ T30] audit: type=1326 audit(1789972671.251:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.0.155" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c72ac3159 code=0x7ffc0000 [ 67.272487][ T1040] deleting an unspecified loop device is not supported. [ 67.276483][ T6] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 67.289174][ T30] audit: type=1326 audit(1789972671.251:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.0.155" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c72ac3159 code=0x7ffc0000 [ 67.314766][ T30] audit: type=1326 audit(1789972671.251:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.0.155" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c72ac3159 code=0x7ffc0000 [ 67.338423][ T1035] UDC core: couldn't find an available UDC or it's busy: -16 [ 67.341220][ T30] audit: type=1326 audit(1789972671.251:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.0.155" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c72ac3159 code=0x7ffc0000 [ 67.347302][ T1035] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.372014][ T30] audit: type=1326 audit(1789972671.251:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.0.155" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c72ac3159 code=0x7ffc0000 [ 67.405701][ T1040] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 67.433340][ T1055] loop1: detected capacity change from 0 to 256 [ 67.453048][ T1062] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 67.484187][ T985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.139'. [ 67.501037][ T6] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 67.508878][ T6] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 67.518275][ T6] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, ea:c6:1b:97:81:84 [ 67.562136][ T6] usb 3-1: USB disconnect, device number 5 [ 67.568387][ T6] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 67.611010][ T607] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.668863][ T1064] loop4: detected capacity change from 0 to 40427 [ 67.680343][ T1064] SELinux: security_context_str_to_sid(sysadm) failed for (dev ?, type ?) errno=-22 [ 67.721005][ T701] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 67.731762][ T1064] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(4) [ 67.739666][ T1064] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 67.741061][ T596] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 67.749115][ T1064] F2FS-fs (loop4): invalid crc value [ 67.763707][ T1064] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 67.796221][ T1064] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 67.803485][ T1064] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 67.812340][ T1064] SELinux: security_context_str_to_sid(sysadm) failed for (dev loop4, type f2fs) errno=-22 [ 67.981007][ T701] usb 1-1: Using ep0 maxpacket: 8 [ 67.991099][ T596] usb 2-1: Using ep0 maxpacket: 16 [ 68.011123][ T607] usb 6-1: unable to get BOS descriptor or descriptor too short [ 68.101106][ T607] usb 6-1: config 80 has an invalid interface number: 68 but max is 0 [ 68.111016][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 68.113997][ T607] usb 6-1: config 80 has no interface number 0 [ 68.124952][ T607] usb 6-1: config 80 interface 68 has no altsetting 0 [ 68.141182][ T701] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 68.153978][ T1096] loop4: detected capacity change from 0 to 40427 [ 68.160954][ T701] usb 1-1: config 0 interface 0 has no altsetting 0 [ 68.167714][ T701] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 68.177222][ T701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.177386][ T1096] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 68.186291][ T701] usb 1-1: config 0 descriptor?? [ 68.194577][ T596] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 7 [ 68.210888][ T1096] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 68.219485][ T596] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 68.222454][ T1096] F2FS-fs (loop4): invalid crc value [ 68.230592][ T596] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 68.248304][ T1096] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 68.273491][ T1096] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 68.280614][ T1096] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.291011][ T607] usb 6-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=ce.79 [ 68.304527][ T607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.312629][ T607] usb 6-1: Product: syz [ 68.316923][ T607] usb 6-1: Manufacturer: syz [ 68.321791][ T607] usb 6-1: SerialNumber: syz [ 68.321907][ T1096] attempt to access beyond end of device [ 68.321907][ T1096] loop4: rw=2049, want=53384, limit=40427 [ 68.340318][ T1096] attempt to access beyond end of device [ 68.340318][ T1096] loop4: rw=2049, want=53392, limit=40427 [ 68.401062][ T596] usb 2-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice= 0.40 [ 68.410113][ T596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.418169][ T596] usb 2-1: Product: 㛬뿸⢃䓲䦸珀笛뵩틕䨯䟖ꑠէ懞悙۱יּབ㊌仞摆ᢋⰼ劬傎뫪ꊉ㤽쿻ሾ䴀ͯ쟃숝밍ὅ옝헽暤ﺹ嗵コ᪠ꦘ⛅ﳗ䶹鈉⻬褓廍蔸コ퉝ᷲ렱큀ᓨ鑳䴴៵↍犥꣛ㆆ弉ה쾱孯٠ࠄ䔨ᶼ쬡俔壪墸돧묷匡㺁钱櫬첦뺧ਇ豥᠄ꄦ傺静䠿º븑友뎮죌ॐ඀淝茰╵鏂卋뉮駲㬺ꊇ羿梣ʹᇫ瓓堅붥 [ 68.452524][ T596] usb 2-1: Manufacturer: 跓紤躚虉Ử↓ [ 68.458947][ T596] usb 2-1: SerialNumber: syz [ 68.467637][ T285] attempt to access beyond end of device [ 68.467637][ T285] loop4: rw=2049, want=45104, limit=40427 [ 68.563849][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.571113][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.717654][ T1055] tipc: Started in network mode [ 68.723037][ T1055] tipc: Node identity be03efcb1a98, cluster identity 4711 [ 68.741211][ T1055] tipc: Enabled bearer , priority 0 [ 68.752286][ T1055] syzkaller0: MTU too low for tipc bearer [ 68.758144][ T1055] tipc: Disabling bearer [ 68.781071][ T701] usbhid 1-1:0.0: can't add hid device: -71 [ 68.787701][ T701] usbhid: probe of 1-1:0.0 failed with error -71 [ 68.805232][ T701] usb 1-1: USB disconnect, device number 5 [ 69.003273][ T1130] xt_hashlimit: size too large, truncated to 1048576 [ 69.054695][ T1129] loop2: detected capacity change from 0 to 256 [ 69.143281][ T1129] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.151363][ T607] usbhid 6-1:80.68: couldn't find an input interrupt endpoint [ 69.174268][ T607] usb 6-1: USB disconnect, device number 3 [ 69.181602][ T596] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 69.193901][ T1131] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 69.205336][ T596] usb 2-1: USB disconnect, device number 4 [ 69.256566][ T1131] FAT-fs (loop2): Filesystem has been set read-only [ 69.293186][ T1138] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 69.304721][ T1129] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 69.464114][ T1144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 69.600980][ T701] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 70.011036][ T701] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.071086][ T701] usb 1-1: not running at top speed; connect to a high speed hub [ 70.080072][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 70.088873][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.097302][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 70.107099][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.115680][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.124226][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.132620][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.141496][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.161447][ T701] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.231051][ T596] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 70.341060][ T701] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.350178][ T701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.358434][ T701] usb 1-1: Product: ᐁ [ 70.362680][ T701] usb 1-1: Manufacturer: Щ [ 70.510978][ T596] usb 3-1: device descriptor read/64, error -71 [ 70.614980][ T100] udevd[100]: could not touch /run/udev/queue: No such file or directory [ 70.623791][ T100] udevd[100]: could not touch /run/udev/queue: No such file or directory [ 70.651327][ T701] usb 1-1: bad CDC descriptors [ 70.651338][ T100] udevd[100]: could not touch /run/udev/queue: No such file or directory [ 70.665137][ T100] udevd[100]: could not touch /run/udev/queue: No such file or directory [ 70.665418][ T701] usb 1-1: USB disconnect, device number 6 [ 70.931026][ T596] usb 3-1: device descriptor read/64, error -71 [ 71.021415][ T1163] loop5: detected capacity change from 0 to 40427 [ 71.037853][ T1163] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 71.049764][ T1163] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 71.059987][ T1163] F2FS-fs (loop5): invalid crc value [ 71.067917][ T1163] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 71.101375][ T1163] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 71.108503][ T1163] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 71.142761][ T1163] attempt to access beyond end of device [ 71.142761][ T1163] loop5: rw=2049, want=53384, limit=40427 [ 71.143090][ T1169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 71.155907][ T1163] attempt to access beyond end of device [ 71.155907][ T1163] loop5: rw=2049, want=53392, limit=40427 [ 71.183576][ T1169] device batadv_slave_1 entered promiscuous mode [ 71.200986][ T596] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 71.214990][ T1171] netlink: 104 bytes leftover after parsing attributes in process `syz.0.176'. [ 71.253878][ T759] attempt to access beyond end of device [ 71.253878][ T759] loop5: rw=2049, want=45104, limit=40427 [ 71.267317][ T1173] loop4: detected capacity change from 0 to 128 [ 71.306222][ T1173] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.316903][ T1173] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.343963][ T1173] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 71.399581][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.179'. [ 71.417808][ T1183] tipc: Started in network mode [ 71.428080][ T1183] tipc: Node identity ac14140f, cluster identity 4711 [ 71.435368][ T1183] tipc: New replicast peer: 255.255.255.255 [ 71.441656][ T1183] tipc: Enabled bearer , priority 10 [ 71.465551][ T1185] loop5: detected capacity change from 0 to 512 [ 71.480000][ T1185] EXT4-fs (loop5): dax option not supported [ 71.500983][ T596] usb 3-1: device descriptor read/64, error -71 [ 71.529682][ T1187] ip_tables: iptables: counters copy to user failed while replacing table [ 71.650986][ T609] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 71.891060][ T609] usb 5-1: Using ep0 maxpacket: 16 [ 71.896330][ T596] usb 3-1: device descriptor read/64, error -71 [ 72.021275][ T609] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 72.030157][ T596] usb usb3-port1: attempt power cycle [ 72.040137][ T609] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 72.057549][ T609] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.104352][ T1195] loop5: detected capacity change from 0 to 131072 [ 72.175349][ T1195] F2FS-fs (loop5): invalid crc value [ 72.197783][ T1195] F2FS-fs (loop5): Found nat_bits in checkpoint [ 72.251059][ T609] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.265318][ T609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.276600][ T1195] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 72.283610][ T609] usb 5-1: Product: syz [ 72.287817][ T609] usb 5-1: Manufacturer: syz [ 72.293128][ T1195] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 72.320979][ T609] usb 5-1: SerialNumber: syz [ 72.441028][ T596] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 72.488757][ T30] kauditd_printk_skb: 271 callbacks suppressed [ 72.488773][ T30] audit: type=1400 audit(1789972676.491:561): avc: denied { append } for pid=1192 comm="syz.5.183" name="file1" dev="loop5" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.571136][ T26] tipc: Node number set to 2886997007 [ 72.631196][ T609] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 72.639246][ T596] usb 3-1: device descriptor read/8, error -71 [ 72.649302][ T609] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 72.661012][ T609] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 72.694270][ T609] usb 5-1: USB disconnect, device number 8 [ 72.711325][ T561] udevd[561]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.911028][ T596] usb 3-1: device descriptor read/8, error -71 [ 73.176096][ T1211] loop4: detected capacity change from 0 to 256 [ 73.215625][ T30] audit: type=1400 audit(1789972677.221:562): avc: denied { read } for pid=1212 comm="syz.5.185" path="socket:[20170]" dev="sockfs" ino=20170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.266351][ T1216] netlink: 52 bytes leftover after parsing attributes in process `syz.5.185'. [ 73.277047][ T1211] device-mapper: ioctl: only supply one of name or uuid, cmd(6) [ 73.282881][ T1216] loop5: detected capacity change from 0 to 256 [ 73.291323][ T1211] netlink: 104 bytes leftover after parsing attributes in process `syz.4.188'. [ 73.300855][ T30] audit: type=1400 audit(1789972677.261:563): avc: denied { mount } for pid=1210 comm="syz.4.188" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 73.328720][ T30] audit: type=1400 audit(1789972677.281:564): avc: denied { mounton } for pid=1210 comm="syz.4.188" path="/45/file1/dev" dev="loop4" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 73.365196][ T285] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 73.387526][ T285] FAT-fs (loop4): Filesystem has been set read-only [ 73.394764][ T1215] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 73.399470][ T285] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 73.404999][ T30] audit: type=1400 audit(1789972677.281:565): avc: denied { read } for pid=1210 comm="syz.4.188" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 73.420805][ T1206] loop2: detected capacity change from 0 to 40427 [ 73.444576][ T1215] SELinux: failed to load policy [ 73.448064][ T30] audit: type=1400 audit(1789972677.281:566): avc: denied { open } for pid=1210 comm="syz.4.188" path="/45/file1/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 73.476103][ T30] audit: type=1400 audit(1789972677.281:567): avc: denied { ioctl } for pid=1210 comm="syz.4.188" path="/45/file1/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 73.503805][ T30] audit: type=1400 audit(1789972677.391:568): avc: denied { connect } for pid=1214 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.525246][ T30] audit: type=1400 audit(1789972677.401:569): avc: denied { load_policy } for pid=1214 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 73.545759][ T1206] F2FS-fs (loop2): invalid crc value [ 73.563284][ T1206] F2FS-fs (loop2): Found nat_bits in checkpoint [ 73.631398][ T1206] F2FS-fs (loop2): Start checkpoint disabled! [ 73.645385][ T1206] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 73.653001][ T701] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 73.921005][ T701] usb 6-1: device descriptor read/64, error -71 [ 74.310967][ T701] usb 6-1: device descriptor read/64, error -71 [ 74.580991][ T701] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 74.639311][ T1206] F2FS-fs (loop2): switch discard_unit option is not allowed [ 74.646838][ T30] audit: type=1400 audit(1789972678.641:570): avc: denied { remount } for pid=1205 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.667365][ T1206] netlink: 292 bytes leftover after parsing attributes in process `syz.2.186'. [ 74.858926][ T389] attempt to access beyond end of device [ 74.858926][ T389] loop2: rw=1, want=79872, limit=40427 [ 74.860981][ T701] usb 6-1: device descriptor read/64, error -71 [ 74.874670][ T389] attempt to access beyond end of device [ 74.874670][ T389] loop2: rw=1, want=81920, limit=40427 [ 74.894268][ T389] attempt to access beyond end of device [ 74.894268][ T389] loop2: rw=1, want=52056, limit=40427 [ 74.909641][ T389] attempt to access beyond end of device [ 74.909641][ T389] loop2: rw=1, want=53248, limit=40427 [ 74.930061][ T389] attempt to access beyond end of device [ 74.930061][ T389] loop2: rw=1, want=77504, limit=40427 [ 74.943360][ T389] attempt to access beyond end of device [ 74.943360][ T389] loop2: rw=1, want=77824, limit=40427 [ 74.959520][ T389] attempt to access beyond end of device [ 74.959520][ T389] loop2: rw=1, want=83968, limit=40427 [ 75.348181][ T701] usb 6-1: device descriptor read/64, error -71 [ 75.481188][ T701] usb usb6-port1: attempt power cycle [ 75.531365][ T1249] loop2: detected capacity change from 0 to 512 [ 75.910986][ T701] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 76.073169][ T1256] netlink: 'syz.0.198': attribute type 4 has an invalid length. [ 76.082295][ T1256] netlink: 17 bytes leftover after parsing attributes in process `syz.0.198'. [ 76.097282][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 76.104894][ T701] usb 6-1: device descriptor read/8, error -71 [ 76.130069][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 76.138447][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.147110][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.157981][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.173666][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.182668][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.191072][ T609] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 76.341004][ T701] usb 6-1: device descriptor read/8, error -71 [ 76.946825][ T1274] netlink: 160 bytes leftover after parsing attributes in process `syz.0.202'. [ 77.002624][ T1279] loop2: detected capacity change from 0 to 512 [ 77.055337][ T1279] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 77.838512][ T1287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 78.101682][ T609] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 78.371002][ T609] usb 3-1: device descriptor read/64, error -71 [ 78.761014][ T609] usb 3-1: device descriptor read/64, error -71 [ 79.030987][ T609] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 79.180969][ T701] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 79.311024][ T609] usb 3-1: device descriptor read/64, error -71 [ 79.440984][ T701] usb 6-1: Using ep0 maxpacket: 16 [ 79.491050][ T701] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 79.622332][ T701] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 79.630054][ T701] usb 6-1: can't read configurations, error -61 [ 79.701007][ T609] usb 3-1: device descriptor read/64, error -71 [ 79.781002][ T701] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 79.821064][ T609] usb usb3-port1: attempt power cycle [ 80.021354][ T701] usb 6-1: Using ep0 maxpacket: 16 [ 80.061068][ T701] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 80.201002][ T701] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 80.208599][ T701] usb 6-1: can't read configurations, error -61 [ 80.215160][ T701] usb usb6-port1: attempt power cycle [ 80.230983][ T609] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 80.401050][ T609] usb 3-1: device descriptor read/8, error -71 [ 80.581020][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 80.650981][ T701] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 80.671037][ T609] usb 3-1: device descriptor read/8, error -71 [ 80.751018][ T701] usb 6-1: Using ep0 maxpacket: 16 [ 80.791045][ T701] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 80.931026][ T701] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 80.938697][ T701] usb 6-1: can't read configurations, error -61 [ 81.104962][ T701] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 81.106755][ T1314] loop2: detected capacity change from 0 to 1024 [ 81.205747][ T1314] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 81.216843][ T701] usb 6-1: Using ep0 maxpacket: 16 [ 81.241020][ T1314] EXT4-fs (loop2): group descriptors corrupted! [ 81.271025][ T701] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 81.421020][ T701] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 81.428914][ T701] usb 6-1: can't read configurations, error -61 [ 81.439394][ T1317] block device autoloading is deprecated and will be removed. [ 81.446969][ T1317] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 81.469143][ T701] usb usb6-port1: unable to enumerate USB device [ 82.672800][ T1324] loop5: detected capacity change from 0 to 40427 [ 82.683783][ T1324] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 82.690515][ T1324] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 82.708097][ T1324] F2FS-fs (loop5): invalid crc value [ 82.716462][ T1324] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 82.731040][ T609] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 82.757151][ T1324] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 82.764747][ T1324] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 82.781677][ T1324] handle_bad_sector: 2025 callbacks suppressed [ 82.781698][ T1324] attempt to access beyond end of device [ 82.781698][ T1324] loop5: rw=2049, want=53384, limit=40427 [ 82.800699][ T1324] attempt to access beyond end of device [ 82.800699][ T1324] loop5: rw=2049, want=53392, limit=40427 [ 82.888994][ T759] attempt to access beyond end of device [ 82.888994][ T759] loop5: rw=2049, want=45104, limit=40427 [ 83.101031][ T609] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 83.109311][ T609] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 83.119672][ T609] usb 3-1: config 8 has no interface number 0 [ 83.127028][ T609] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 83.291070][ T609] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 83.300252][ T609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.309121][ T609] usb 3-1: Product: syz [ 83.313565][ T609] usb 3-1: Manufacturer: syz [ 83.318251][ T609] usb 3-1: SerialNumber: syz [ 83.608820][ T609] usb 3-1: USB disconnect, device number 14 [ 83.872951][ T1337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.214'. [ 85.467840][ T1348] loop0: detected capacity change from 0 to 2048 [ 85.525908][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 85.525926][ T30] audit: type=1400 audit(1789972689.531:583): avc: denied { getopt } for pid=1355 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.554690][ T379] tipc: Left network mode [ 85.612609][ T1348] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.631078][ T1348] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.671170][ T1348] fs-verity: sha512 using implementation "sha512-avx2" [ 85.740968][ T609] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 85.946589][ T1383] loop0: detected capacity change from 0 to 512 [ 86.070993][ T609] usb 3-1: Using ep0 maxpacket: 8 [ 86.137566][ T1383] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.221: inode has both inline data and extents flags [ 86.151595][ T1383] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.221: couldn't read orphan inode 15 (err -117) [ 86.164051][ T1383] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.210539][ T379] device bridge_slave_1 left promiscuous mode [ 86.239095][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.341205][ T609] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 86.360409][ T379] device bridge_slave_0 left promiscuous mode [ 86.377799][ T609] usb 3-1: can't read configurations, error -61 [ 86.434660][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.480575][ T379] device veth1_macvtap left promiscuous mode [ 86.514350][ T379] device veth0_vlan left promiscuous mode [ 86.591119][ T609] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 86.921049][ T609] usb 3-1: Using ep0 maxpacket: 8 [ 87.081048][ T609] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 87.088777][ T609] usb 3-1: can't read configurations, error -61 [ 87.095533][ T609] usb usb3-port1: attempt power cycle [ 87.136653][ T30] audit: type=1400 audit(1789972691.141:584): avc: denied { mounton } for pid=1389 comm="syz.5.223" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 87.162771][ T30] audit: type=1400 audit(1789972691.171:585): avc: denied { execute } for pid=1389 comm="syz.5.223" name="file0" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.185392][ T30] audit: type=1400 audit(1789972691.171:586): avc: denied { execute_no_trans } for pid=1389 comm="syz.5.223" path="/26/file0" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.261530][ T1399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.224'. [ 87.465090][ T1404] loop0: detected capacity change from 0 to 40427 [ 87.475126][ T1404] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 87.491040][ T1404] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 87.510115][ T1404] F2FS-fs (loop0): invalid crc value [ 87.520782][ T1404] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 87.544296][ T609] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 87.575183][ T1404] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 87.582546][ T1404] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.607267][ T1404] attempt to access beyond end of device [ 87.607267][ T1404] loop0: rw=2049, want=53384, limit=40427 [ 87.619902][ T1404] attempt to access beyond end of device SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=193 state=3 status=67 (errno 32: Broken pipe) [ 87.619902][ T1404] loop0: rw=2049, want=53392, limit=40427 [ 87.631217][ T30] audit: type=1400 audit(1789972691.631:587): avc: denied { write } for pid=276 comm="syz-executor" path="pipe:[14854]" dev="pipefs" ino=14854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 87.655066][ T609] usb 3-1: Using ep0 maxpacket: 8 [ 87.793877][ T1404] attempt to access beyond end of device [ 87.793877][ T1404] loop0: rw=2049, want=45104, limit=40427 [ 87.881021][ T609] usb 3-1: device descriptor read/all, error -71 [ 88.421549][ T379] device bridge_slave_1 left promiscuous mode [ 88.427666][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.435188][ T379] device bridge_slave_0 left promiscuous mode [ 88.441368][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.449168][ T379] device veth1_macvtap left promiscuous mode [ 88.455196][ T379] device veth0_vlan left promiscuous mode [ 88.901587][ T379] tipc: Disabling bearer [ 88.906630][ T379] tipc: Left network mode [ 88.981050][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 89.501565][ T379] device bridge_slave_1 left promiscuous mode [ 89.507690][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.515166][ T379] device bridge_slave_0 left promiscuous mode [ 89.521318][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.529137][ T379] device veth1_macvtap left promiscuous mode [ 89.535164][ T379] device veth0_vlan left promiscuous mode