last executing test programs: 2m14.397160894s ago: executing program 3 (id=51): getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x225c17d03, &(0x7f0000002180)={0x0, 0x3938700}, &(0x7f00000021c0)) write(r0, &(0x7f0000000000)='3', 0x4e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m13.703930206s ago: executing program 3 (id=55): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x802, r2, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000802"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fspick(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000580)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffdbb}}], 0x1, 0x24004800) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") sendmsg(r4, &(0x7f00000025c0)={&(0x7f0000000400)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0xa3250fc892208abf}, 0x80, &(0x7f0000002200)=[{&(0x7f00000004c0)="90f19d9e4d6c3183400f20383bdb718a7b70f52e21f22d13942354413e69981cd15c7d398b9adf3a4fefae4a50a669d7ff23f49e9d8418885bb33be6c8355aa2fdadec4b484122ba8b25ac3e673328a991a5a6fc8ed7e4d430f10389f2b998ad361b0b94ebe8a2", 0x67}, {&(0x7f0000000540)}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="b4cfc603a848d12756029f24e55b722c5603657cca8faec3c07b1636cfbd5b468d9b14d10b00c9a6ffc269da70da34a2d9b06bb1639850f1e9363213cf90e663d767a0bdca2ae6791c990d648adf99038b17316bbbc4856926ff1a9ac11fc0b4d21076e84608ba185f4c27ddaa1f57d894b1ee59dabd84", 0x77}, {&(0x7f0000001f80)="e8c9923f9a3baab43523b6e8a40711654369f63b", 0x14}, {&(0x7f0000001fc0)="830ee84574f40c5a5292fe1414caf43d1f014a49e7efcdce8520a24120ec7a5147f7ded4c83d393b7c36124f8fcaf38f6d61a8aaefdbb1073da853a09349464ee56d8d5333265767", 0x48}, {&(0x7f0000002040)="6f419fa3dd92a9626718a7cea33ec1b4389f7e25b709d43af02b80511da1aa5ceab8ca4038c7d226f85d4b99542a1491af8b2f97e16b29d9312471e570d44f30ec0330e03287899146cce481227f16f65dbadcfdd0d4e0244f9f195c96c26cd6f28be194c1031c97147fd3e8709fdf19ee6093f2567dadad002039b7f4b785faf973588bb9928b11d6397eb0179c08b220365ce9492ba7af26b2419eb0ab08576fd5777ca4389f2728fbdec2107f8e20fc42b337857f3e", 0xb7}, {&(0x7f0000002100)="7216346eb675029a105e319a8565608c8ca15bc4a39bc59b77707b854ce3a7ad35e12d136acbc6009fb550ea909c5b86fa4f2aab4ce89c3b838e87f5ac5600a93c8c763b8d2badb8ee0fca001df5b211e76514e036bc278496bf3dc11bb82871260bc2b2a1f665df04bbcd4bc2650609cb0193b5837ece097d10f749a65bc35a5b552508d8", 0x85}, {&(0x7f00000021c0)="264c4e6e59c9ba1dc05948e80a8288291eb15174ce29947b79", 0x19}], 0x9, &(0x7f00000022c0)=[{0x28, 0x10a, 0x2, "fed86187d3424a4a3738beaaa09c63c837ee48"}, {0x90, 0x1, 0x6, "55f5d1478fb994db6b566ba0af8e1e0f56a085fc3e2c2dd2d7707c7ce9845efcb2aff05940601a857932a377502c0fe903c079ecc7f842935eb1e2a68b9f263d09086efe8eb041d240559b9d9b7562054029e6f5b3a1765f65ba86504a81f26e93eb62c5942d54f014eb1dd833663e446a59df5846641375df2737772e43bc18"}, {0xf0, 0x101, 0x26, "4bd0f178d4df3f0b64a0183ef591e355e21651595503c42a962e4342077ecac8d20e99fd0c7e59f2514b9f0c6392ce5b786f245f7531bbfcacfce0742805f09f79c327ccfc43fad635413b4a1c5641cf5f060a044cf2d789503f7e2a7e297d9f34030179f67172c35b2582889ca55d5d234df5bbb9b4eaf6b27a67b7b76408c4c76e864bd23618b0562284071ebe43232f914c7a4cbe65834c51c94cf003cdf077041338395449a6fd8394615d67d85c82be44d4fc084cd33d294226f346353ccbb4ae26572e0174dc79a8960d50a929809b176f9a7528a295452c01763f"}, {0x78, 0xff, 0x0, "6d6638a268c6f2347121da6efcad819ba0e7b1bbe5bca82fa61e76d45dd0183e49eff64779075c42a3e74862f45a2b23b312d6f96c08fbae1ce2b507aa409361851d28936db2cbb2640e912784012aaff2fa872c839e20f908315d342a754fb1aebee4468808"}, {0xc8, 0x84, 0x3, "ffa768470dcff737343f0ac5d198b53c8f590b80be33acfc6d3e8011714018ce87b680d8aea57e39383c744209280eb4b0cf3ac0009f6e8a4df08d389d47044144d19c9c8739e5aaaf0f26367d9b1d798124b35120324d1827b0c2bed8d6b811ddeccb0eaa29da9a22a6978d961a89a1c80e70d1df8821a19337545db4763d58146276e7c23a228199fc1800f4f872db51859e6d6190c5aede0361b3c68c550a27e652009bab5950e554c8650d23ea8aa40fe6"}], 0x2e8}, 0x2000050) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ptrace(0x4207, r3) 2m12.396490898s ago: executing program 3 (id=56): r0 = memfd_create(&(0x7f0000000300)='\xf3e\t\x9fw8\xc0yAc\xb2\xb8ux\xd7\xad5\x9d&\xbf3\xec\xc3\xce\xf3&z\xfd\xd7\x8e\x7f\x06\x00\x00\x00~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\\xf4\x17\xdc\x90\x93\ao(f\xdb\x8fgK\b%4\\\xd4\xe0xY\xd4S\r\xec\x99\xe5\xb7c\xb7\xe2\xae\b\xcc\xf1\xe9V\x01\xba\xcc10H\xaam\xb7\xdc\x88\x98\xfd\xba@\x15\xc4/\x7f\a3\x16\x88\x8d\r\x97\x9e\xe9\xd8\x85\xa5\xcb\xb3\x1d$\x7f\'-\xe7\xac\xb8\n\xac\xc7\x06\xf1~\xfd\xa2\xc1\xdd@4\xed\xbc\xd7\x05d\t\xb2\x92\xdb\xc5\x85\xfc\x871t\xfb\xb7\xcc\x93\xd4Y\xea\xc7\xec7~-%\x1a\x06\xebc@R\x96\x8e\x98u\x88\x85\xa8\xca\xb0\xb8\'L\xc1\t\x80f?\x8fZ\xcd\xd3A?\xd8H\x12\v\xbc\xd2\x89\xf3O\xb5\xa0\r\xaer\xe4', 0x0) pwrite64(r0, &(0x7f0000000800)="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", 0x136, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xa0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7}]}) madvise(0x0, 0x0, 0x3) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x109900, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{}, &(0x7f0000000240), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x40014) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x3}], 0x10000000000000a3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000500)={[{@journal_dev={'journal_dev', 0x3d, 0x43a}}, {@grpjquota}, {@sb={'sb', 0x3d, 0x4}}, {@journal_dev}, {@commit={'commit', 0x3d, 0x4e}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@nobarrier}]}, 0x1, 0x44e, &(0x7f0000001780)="$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") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r5 = fcntl$dupfd(r4, 0x406, r4) sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) unshare(0x20000400) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000400000007"], 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0x8fc, 0x12) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x8000) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x7ffffff7, 0x0, 0x0) 2m12.20949512s ago: executing program 0 (id=57): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x1, r3}) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x218, r4, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 2m12.158966214s ago: executing program 0 (id=58): mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xdd85c0d5261ddb5c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x1000404, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) umount2(&(0x7f0000000380)='./file0\x00', 0x1) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0xd, 0x7fffffff}}, 0x30) 2m12.073824788s ago: executing program 0 (id=59): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x6c23, 0x0, @empty}, 0x1c) timer_getoverrun(r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000140)={&(0x7f0000000080)="c157376400a796f145daf894f2f94645cf7982b8924b0fd9116394486d8279a139b64a02f0f473f211f3533fb8e5deff9b8a2ca47904fc211f14793a3fba237d79010657ea217651082398", 0x4b}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) pselect6(0xfedc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44040) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x40, 0xe, 0x401d031, 0xffffffffffffffff, 0x0) 2m11.990218261s ago: executing program 0 (id=61): mkdirat(0xffffffffffffffff, 0x0, 0xf1f0f4393d956186) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f00000006c0)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x100, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) 2m10.901671633s ago: executing program 3 (id=64): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x259, &(0x7f0000002440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103243, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000380)={0x39, {0xd9b6, 0x5, 0xffffffff, 0x8, 0x3, 0xb}}) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="60000000100001000100000000000000000000000000000000000000000000000900030063616efdffffff00340012800800010063616e00280002802400090020a17de9d3a3ff5f0a7b0e0ccd71a60700"/96, 0x60) syz_open_dev$usbmon(&(0x7f0000000e40), 0x4, 0x301ac1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x400) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20011801}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, 'fd/3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000040), 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x9, r2}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 2m10.69369439s ago: executing program 3 (id=68): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x1, r3}) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x218, r4, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 2m9.493640163s ago: executing program 0 (id=70): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000540)={@loopback, 0x800, 0x0, 0x0, 0x1, 0xfc}, 0x20) 2m9.376102966s ago: executing program 3 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x3c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x1}, [@typed={0x25, 0x1, 0x0, 0x0, @str='SYSTEM12345678901234567890123456\x00'}]}, 0x3c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x60000000}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2m9.375904466s ago: executing program 32 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x3c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x1}, [@typed={0x25, 0x1, 0x0, 0x0, @str='SYSTEM12345678901234567890123456\x00'}]}, 0x3c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x60000000}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2m9.292128369s ago: executing program 0 (id=76): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) 2m9.236419055s ago: executing program 33 (id=76): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) 1m39.304031184s ago: executing program 6 (id=251): r0 = memfd_create(&(0x7f0000000300)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000010c0)={[0x4, 0x20001000000000, 0x4, 0x7fffffff, 0x1ffffff, 0x8, 0xffffffff, 0x9ffffffffffffff8, 0xfffc, 0xfffffffffffffff7, 0x599, 0x6, 0x2, 0x80000000007, 0x1000000000000003, 0xdd], 0x1, 0x80000}) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x58000, 0xf000, 0x9, 0x4, 0xe3, 0x3, 0xdf, 0x0, 0x84, 0x0, 0xb}, {0x2, 0x60000, 0x10, 0x4, 0x3, 0x7, 0x5, 0x5, 0x1, 0x3, 0xfa, 0x5}, {0xf000, 0x2000, 0x4, 0x2, 0x11, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0xc}, {0xeeee8000, 0xeeef0000, 0x9, 0xd, 0x1, 0x40, 0x0, 0x0, 0x0, 0x9, 0x9, 0x9}, {0x58000, 0xfec00000, 0xf, 0x9, 0x5, 0x2, 0x6, 0xed, 0x2, 0x6e, 0x0, 0x3d}, {0x4000, 0x80a0000, 0xb, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x2, 0x0, 0x0, 0xcd, 0x5, 0x9, 0x26, 0xa, 0x2, 0xdf, 0x6}, {0x1, 0x0, 0xb, 0xe, 0x13, 0x1e, 0x3, 0xff, 0x9, 0x5, 0x5, 0x8}, {0x25000, 0xd}, {0x80a0000, 0xff81}, 0xe0000031, 0x0, 0x0, 0x61, 0x6, 0xa800, 0x800f900, 0x1, [0x6, 0xffffffffffffffff, 0x8000000000000003, 0x4c]}) r4 = socket(0x10, 0x3, 0x0) r5 = epoll_create1(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000180)=0x7, 0x4) sendmmsg$inet6(r6, &(0x7f0000006200)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffa}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)}}], 0x2, 0x20080058) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0xa, 0x7ffc0001}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000002100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="64100000e6440379067052c1db1b3f8ee086965de291c9243dbb57e0697bde002fa7e37c64df49958ade914b30e1c921459c8e0c874b878c", @ANYRES16=r8, @ANYBLOB="000127bd7000fcdbdf256500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900090000005a0000000c100380081000800410010026a0042a6bb42d28cfeb066b5743d6d728129d84ae68120535228a5ef6fd18b2bfb43192fce7e3a7bf5f7442cd3ec4c73e19afbda022b8b4eee941a2d2576d11722dbc60abf4cccf3096338ba56311fb5a1126830ad457137396b5771d3420e90eec870a11e757e19a2d34a1206f5a4ee71dfe1047c6bd9f7a99a64d7e9e5b8be9962746a424f70118bcf69155709dd53967ffab65785d510926110cb53d5514a92bd6b7b9b94a6b6f45c1fa1a8ae7efe231443ab26a495753c3ade7b1de3b88688d1ab4a7d3fb3f6f74693e150f72b7b382460a3f22d5ca8d85ba9eee1e688044636fe16fdaad6936e25454b1547e685b21f52361a34c42c366108c54364f4639835ce5974adc82ccddec85452b6837040a5c7082ddac30b96bc67ca582a7be4a4abdab708d2da50c5f7cdc3afd253218aee90ecddc4b9ed9bfbdc236ff4497d88ee759a442bf5172c3fdd4d0f61c766f62dc67617599e70b9ee37ff18a8942f7d7cc61afceedd7b6f902307d2760976083b2a2bc0f0e502263f2f895060b0291288c1ae929dfff24ee333d6da12358aa1388670341979a9eaa725037ef279ec307e3844e2fa94b165f912acacbceb95d7e98112143cc0cbf4ae235b86f57bb9f2a0402023ec6bb46764b680519ffbd4763bafcea4280de5fa6a9e5d5b62ad96908217b513ff921740c162994e35254e87f4b6c70aa9f097606259bfc899e5e7eb199661250314855cb703efc43c3a4594d8d678a64dfe320ef3072fe8028408c5dc1709b42b11fb5765e91fe79da52587f79ab06c4b013e0d39d5eedd00be8faa70d13a55807747784835267d6e649370d72d0862b02816df84e37325b774217748d471b8e9d68d2120a3bc3c762b154945c7acac2d423f94158f92d95da1f4b9216af899fb6cdb096a5bf3759cd4a1c41e62c3da1decee865910694dbb295856773345cd010c731d23517b448ea82afea8bed58a6431ce1ccd6af5eeab5dca6e489aaf878256639f3ec02a513be3ed99e3a4bc9c0dd4154edc3ca0760a5e8536fa95e21e143999a5538fe55728c634069b486f4af9003488619cb66e9f7fb80bf360525ba160e4e37013f25e478818fc3ec4bd15ca8840c03b2221d38cb2c327402353b85a34f57892d45817138dcc2d3670192700d3fa470154cb066fa1eb5c760e985b32ee7f534274fb36b386709efca6eb7f19acbda8710d888b71c20cd93f2091a62adcf5e5a7d94629b927c4c74e50f24c7bf57d3988eb0bd6a86adfb1140cc08f767e082751d92f653c8f2ce35a1e38bd53e908c6d59dcbe7bf1a5d8049a8a6ffdf25191e53a61fcb05222f861ced5a9f5b71b66155227a23d8be2597c4c3abb467dfa16e3fd53d6bf811560588745b906c947c92bec8109b0154f6765b92475a8bf012f882a316b2ab850fcdcd7ad9fb87ce2430ca670ee7d10506b24ed02b69dfaa662d9b0e39734a3557a18d15748f2c6d658316dbaaf7d9f18ac94c5ee899817effa576cb73b1cf51390ec71ed78bb6303f5006e03fcac4aa1e5e34fb8408c92814cba99a93003bbe29e0134d19425bca4ee1acf24d851cab619a256ddbfe83aef974bc60d1b4c5b766e5bfa7c6efa45cebe8fcc7c148bdb1ed90de48052d6e774cd312a8c2998bcde2c75bc4790b90b47b320d40b62023cc299db49463c9349b61410bfc1b2a5c528b34bd421b5727e6049e01c6dbd74f36a9685a9e964475e892e705015ee04efdf77b6f716fc9069763b6fdd2be9b1decda8770711e56fd47ade6fea23dbd6fa32914d91f6c65376a867c18ebf0c1dc03eb76f11337eb080adb579245bb9d9ffc03af61246a8f9badc7338890fce4c11493903c2c9d06e5800c9453413cd6dbb78b6e7e08eaf67d96cdcbe217318e10449823a4b92cebb54fe592dffc476890f8b0a996a4367d08fda086586009227fe3ba2d4075a8bab330bdcef5af40851d35a7905ee2739676d46f3496de345e7788eeb7091350212499c58ecd54ded4c679df2410e77f15f158be5e27edaf323b772a68d5f42fabea1007cdb6f87769b6945b2644a0038d65e243e25e84878cfc593bca555ee836241ddbac7747f084ff03fde7b95ceb1239e3222bc210e7f74b2ebf1b783ff0e6470ebec5901d37eb1a3ac02495b92e6230061e8374ba99fcd7cd3362cd701f3b8a4088ea2228a705e40b9a08545ba2936cce6c207a0c79844bb593d8731ce8c26f3d1c0708c60ce4f6271a2c1487cd09ab5222bb6c63dc4e2bd23de6f0b55376e6809f407ef8c9ed131002559e7eb4b4a9e970bff9dee4187d97aaff89b20e16277f2b4b8481d34357c7954732c504c51818c3c4aa90971a7697fee3ef478c05156679e5f01a9ff3bfa087a5d5e09f166153e9dc7f0d2f938ee4c8041fa4e0384e161467e8caedeae065574db5ef367b7638f1b4bff47d9415182e808410ae972c5f56f04330494d44533eeb722c4e9c831006d8643890be36ec94dc2fce7a598986b644d484aa73c53de61adff13b919ac230bc06464d5ba743d884c90972530da1572a8f8fd4f65f52f1f0a4d8d737219ede8ab0fdffe63c9d73e4a6ea90187c0fa57131c8ecc8823320f349d2d5ef59d2f409d9b7511ad1d0ae9a9d22deca515939116daa213bf154e707066d1a9ad16d0ca82c6fcaa5f10e870368d669bcbf85311305a56c840481471c13e441a9c3eea2a3ec8176a467fb67d173dfdbea5514bd1705d76772d201f67cfcda3df9abd3326c0d21a8b04847c42c5f02dc545656e6c9d8b675b09c3f9e6ea85621f935ee9c7cc7e1ed6dceaa82a7b35ea9f9ac23f7e75400799ac9bcb88d7307b7256b9b93fdde778eb0c6231a480ed25d6326589ed42d431d67380600a5b3aed46bb247d4ee2283c6d5eaff96cc0eff9d25a1a28ff7a47dbff3f0027a1d34cc86d8454183a5af071cc14f8b2d575f9d0f0b550d3b55d2a172fefa3a753d41920cca0b9e2b678229b037e7314ea9234ac91cee0898942701a27b55a2054443cb951ec06fdcbddc0796f90934b7a4871598a4db5a572ed0d375beb18b06db5f1b69c67b1bb5bb1f7f39b839a859ba28fca6a0e6efe5bb79e9666ccb82178c5930d9774c87d0198ad21593450fe8f7225041148a3b23a154d70ebbc05a9d62ab13b7763dd706e0a8ccdef358473f2810b66c4968513a210eab35453563f1c56cb823c2027ff8a287fb1af022c8a0a7c4ff1cdc9be58184187e7b4e615dd8e0289de8cec710350dd15ce69c4bf01a104aa3e71271d6afcdb9106eb73b423d4cbb457b136e93573fec2211c51c2e930e3dd363b337ac41c6e5f84461248e769f839e29821b5bd5af9e636fb9db9f06a4fbbbeb9650b1d2fffc2cad8575dd4c2e9a6edc63df1ec4aeda746d59cf3e36ce5db62e92b0178a5c3db0fde65c0b255c8d6e5cca33b9e5081cd0c9a24c257fadc5ff33d5c6208cf7740c37bbeb6a9ba39d0edbf073dae9cf62db04484d7a1cb4af37fb2ad085994db3bc1e16e83c16ef544ceb228186e350112f8cffba575e063914c0670b7eea0c961540e3749f63530c625030380b0526a2754f9d30ad35659548a278e6bf96fe79ef6dfcf229359d71f2f8b8bfce418eb5b12eb386358a37e2f4e23f15adda0dc4570d82dbea5ec2666c9d1d011e4367af968e3d51cde9f0ab553f1747568abb3055bcdb81c4ac0605f508cf5ecbaa104e74a91a943ec67561e0f15feaba2002f2abca97cfec44ca43d0279dde25a00573b30288751c995b2e37948e066f06792c9a785d5c394b6b9ad49e73e443cd39535a723d71796274f98c69a1c77f0fb7b99fdfb3ecb162b13fd2c93f73f1881f2134442efd3a03ceee662bca091c7f10c1155669ea42ce50803456cb9aad3375455aa5174b9fe0ae04fcf1c67cd8b5c43386de3e8ac132bd2192db4b82c12a098bcfcd7a8bde599c4fb31337101db67f0018e21b1f58299ea66ecfeef0b6d911d09f72b30ceb1067fdc31782f3d37fa665b47cef0e2398354b9a7b20062c9e82da934a55da0b027f78d2b5f57e4b4f4212e4ebb391438356b8cf1731973ff902a65b55efa4227c710522c194b4e05fb28eb9b30a786d1eff034aafb8601fb8015fe9481697da0c9f6e2af2a9747de35915d26a4ddaa2695490995af3116d9ef29b3e5f947bef47894efe97d610260aa321a7bba6cbe818e603131e84fd9d1e9e2b1959ab52e3565e7d2b6919f146f1843bcec9b9fc4958ae3dcaca0ad8cdbb49952e6f159811011c16aed716d324f971263340f12270fc6e0c51b7258061e0d294fd391a63fa7ef8bc5578a16c1fb8ae15c38bb8e52771e69b2bb3871209dd295a14512f853c0cd8d6919990649a048cddeea66aef13ca64a4d8e5a919d73390c5e2b437466c39d14a1c01869ef03924981b76cef53d5e0ee1c912ee007361e1b752822c60d6b9289f5b47fdf12e3e72f214484808d9cffe740ddb7152f67f0573ad7d393ff2a501f3f589c5664a2d7c585d6c2400f69c730bfb4803b7b7d592ffa41fcc0bb4a304b9dfb09259ac28df585819e15917f54d7e47cdf6a1ca365917dab24fd5925d7ac70462f93f1d900149f5b1198797bdaa3e94c9374f914c75474e573ec695a486e5c248d069ef36d7e40d8bbb5ee38c9bf0b522bb5a906e5ccba870b27a84e5e5fa75f37ea490199a6264b115dbc6bbbecb7584eca2f42ed9e259e288e2e8e6504cc6f5bc93812aae3ea07e4b62539c8d1d2d6d343d981f49e77305f1facfb1cf61a6af6281cfab671794214ef879295b6425678447c8f9b4f46596029d4ec9adc1f4f0230bc6f2720a997da1748a655f975f3a48b4ca400f1264c755231941bdb18b80df44d2acd4c9f09c7b6cd827e09c7f159fe204ccf80f92b3362f03761545b1f0b65ef709f877eb67a11f9f0b5bd3d10147c242aedf3aae47be13d5990a703fdc72d6f18cc502cae52abcf49150c576ccd318e72effea920c48f384271bc5213e3da522fa6257b18c21e12fea351030c55a4e08e1d2164391f7aa967ccb9a889b42d165439ff4874f3c9a837af90918fae11bb33e34a3bc100409222528da248f862394786aa8ac13ded24b97241b16c1de7a5edabfdc9dc6165c736fb33be43430593719358d28742862e73dce1118dc2fc46292305450be95497761d5a0ecd6c393f0771f78801e7b2a0f3564d9757c123cd8f04c966bc902dd81633bf120ffaee2c9571dedb8dfb668fd8df696a734aab6886362b78e27d2e796a9720cae05b4801b2965038651a8738d1257de689ff139b0e8b14b0a07c877c8b7aaa72bcf027600c5a0e372f64097d3c40d085ba13f7945f700728004252d51f685564f3c331d3663774d56b61d4f8ff723170d34f5f58ac5fa06677d97d684349414c0c31f0666d83a3a2024fb1fafe3eb13588f3d0d17be5b7ab6c724def80e320d7c123a0ebbc4782a54d5a79bb6dc63cda36bcf177009bfa8ffdaea7476c27ce653e73bbdb136becd585914f9e91f50785eaf9ed0c793d4de0deaeebd58dd2834149770bfedfd04a505768a6bf5263d4b35c979c7c2da59695b090164106f722bcf221f9357872efd04a72b567a1e70695e652d36f2033e90f3baca862accef9d3609c67a51ef8b06e8cd204c10e21da764324d8d89d02dcaa988fee73d3ad44cde9babc83c32f35ab8ab8c52ed284ef9e17483ccb60fd815bac82969d9917598992af602161ab0f11f0b610d553293046bdf1e37ea3e731a009ce510b5a54cd517c383fcff734dd56e189d26e1d0086526189561b53602d871de38c0a8a100003800c0000800800030006000000"], 0x1044}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008010) r10 = dup3(r4, r5, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0xfffffffd, 0x0, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, &(0x7f0000000300)={0x200f}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) 1m39.03165349s ago: executing program 6 (id=256): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x80, 0xfffffffe, 0x2f8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x1, 0x553a, &(0x7f0000006040)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r6 = accept4$unix(r3, 0x0, &(0x7f0000000280), 0x800) sendmsg$nl_netfilter(r3, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)={0x2d0, 0x13, 0xa, 0x5, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x9}, [@typed={0x8, 0x126, 0x0, 0x0, @fd=r5}, @generic="a5384f1fc8b526375ccd48369d76ecfa6aa30f1db0199ab8d481cf0ddb5542724c24114c72b91f5dfe25003e27a5c635f0ceaaf4695c64143fa13ffd32859fffc355548e6da083c9e1ae14b801f1928d1d2dd79c0fa4d6fa823ccf825ed8c24feddb91cfa64e107001ed007dd5e0799f0456d9f2b368f4a8f9cfd00f0322ac321b962742b80a428a706f14ac21f02bbd83b9a50e2850862211344aa614e77c1a5e2077c962eda1d12dd9e62a307ee79e7d29b6d83972ba60c84ea4359b136cb95f1179", @typed={0x8, 0xf4, 0x0, 0x0, @pid=r4}, @nested={0x1a1, 0x106, 0x0, 0x1, [@nested={0x4, 0x89}, @generic="12b95ff912355348836c9dccc3523e8ecffd417db042991ab713b47bfb63d4790cff76032845bbf7611b7f00da133e0078a13e4a717cab87767c2d9d5ffedc3d041a1a5e9ffe1bf4f8586f1c580dabc3d70c863dfb6babe631cc5a507878c88b04713c298e84ee2a8062f6a77fa7cfb3d7c64969651d598c9e94e2eacfbcf2e6020e5b30912df27399a48277ef6c03e5c174ac13e58b7567a3f37f6368cf0ad9db01f2a52010d198e1f2548b17531584eeae4577248f5a0fde536ea0e70ef59d7f7696d1dd523321aeba13593808fcae5a3509", @nested={0x4, 0x8a}, @generic="479a48b37c0fe185607bbb161a78ee45032450ac7f784e185a13e643cdb0ef60431fd20e80920efc7f266af1e78b420228a1720d78b0bac8cfcfeaa190989b9432cb30438cc39374518986df0ad4059580a46756d708073e0b771f6586e4c325decb52720463f83375f7084797b44d5267b7b1c881c1b9588941e67a2e3fc49751f92a0167ad154eaca4dbdf543245244eaaaa8c4956391462dd2f3edd1c1ebcad426959871637f4457215b2f8ab", @nested={0x4, 0x128}, @nested={0x4, 0x139}, @typed={0x8, 0xfb, 0x0, 0x0, @fd=r6}, @nested={0x4, 0xb3}]}, @generic="91b0a814d60de9754e5e8be30915fd4f1e0c33f5c97d0563e062316ff63419230fd1ebcfc33c681a0386ddf5baa8c8d53a6c4731e9e1976c7aa14049d8e380afcdac00"]}, 0x2d0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r3, 0x0) syz_usb_connect$uac3(0x5, 0xba, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000080c2018104000010203010902a8000301081001080b0001010130350904000000010130000a240108440005000000142402020404060409000000030080000200070013240303050404050200000000ff00ff037f00132403040304040410090000"], 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") open(&(0x7f00000000c0)='./file1\x00', 0x1c1242, 0x13) 1m35.110938077s ago: executing program 6 (id=269): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0xfb}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') splice(r2, 0x0, r3, 0x0, 0x7151, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge_slave_1\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m34.933713676s ago: executing program 6 (id=271): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x25, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0x1200080, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x5, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x40, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$incfs(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000200), 0x4482, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40025c1, 0x0, 0x0) 1m34.728136263s ago: executing program 6 (id=272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22020400) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x48443, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0xb, 0x0, @void}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x280, 0x2383, @loopback}, 0x10) 1m34.541712115s ago: executing program 6 (id=273): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create(0x4) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090244000101081008090400001002060000052407000005"], 0x0) 1m34.369420793s ago: executing program 34 (id=273): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create(0x4) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090244000101081008090400001002060000052407000005"], 0x0) 33.616858579s ago: executing program 2 (id=576): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0000000f00000071439f05404213dc92bc9a1c73e6d53ef51adce2a3254c6adf6e8bb7732c34fa222a181f4f1238a43d8a66270a", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f00000004c0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_read_part_table(0x5c2, &(0x7f0000000bc0)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x3481cc60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)) sendfile(r7, r7, &(0x7f0000000280)=0xfffffffffffffffc, 0x0) recvmsg$can_bcm(r7, &(0x7f0000009440)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000009340)=[{&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000600)=""/229, 0xe5}, {&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/244, 0xf4}, {&(0x7f0000000980)=""/37, 0x25}, {&(0x7f00000009c0)=""/57, 0x39}, {&(0x7f0000000a00)=""/164, 0xa4}, {&(0x7f0000008340)=""/4096, 0x1000}], 0x9, &(0x7f0000009400)=""/42, 0x2a}, 0x40002002) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, 0x0, 0x0) dup2(r8, r3) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r2, 0xffffffffffffffff, 0x2) 33.015198206s ago: executing program 2 (id=582): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3a, 0xc, 0x0, 0x9, 0x9, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0xfffffffd, 0x6, 0xff, 0x0, 0xfffffeff}}) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000), 0x4, 0x4e0, &(0x7f0000000240)="$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") fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) recvfrom(r2, 0x0, 0x0, 0x32, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d440fe0000000000002900000003000000", 0x30) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_ublk_setup_io_uring(0x4dd3, &(0x7f00000002c0)={0x0, 0x620c, 0x0, 0x0, 0xaa}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) syz_ublk_setup_io_uring(0x101e, &(0x7f0000000480)={0x0, 0x181a, 0x7f, 0x0, 0x187, 0x0, r4}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x114) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000005000/0x4000)=nil, &(0x7f0000005000/0x4000)=nil, 0x4000, 0x1}) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) 32.100203659s ago: executing program 2 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f00000003c0)=@attr_pmu_irq={0x0, 0x1, 0x1, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', r5, 0x1, 0x700, 0x2, 0x6, {{0x38, 0x4, 0x1, 0x4, 0xe0, 0x64, 0x0, 0x84, 0x29, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x5, 0x3, 0x9, [{@rand_addr=0x64010100, 0x8}, {@remote}]}, @generic={0x82, 0x6, "f79f1315"}, @timestamp={0x44, 0x24, 0xdc, 0x0, 0x2, [0x0, 0x6, 0x5, 0x9, 0x7fffffff, 0x7f, 0x35, 0xc3]}, @noop, @end, @timestamp_prespec={0x44, 0x14, 0x3c, 0x3, 0x2, [{@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x4}]}, @cipso={0x86, 0x45, 0x0, [{0x6, 0x10, "f9451362ac90b33149bb38bdbf57"}, {0x2, 0xd, "437c7b4237b6df9c82de63"}, {0x2, 0xf, "961d197b56f07317fe85685564"}, {0x6, 0x10, "6d8d11e332cbed77dc77815f18bc"}, {0x5, 0x3, '?'}]}, @generic={0x88, 0x11, "743a346a9a3f334df69388ec28a6c1"}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x1, 0xa, "ed6c174e5c604016"}, {0x5, 0x10, "92ca5c3c2748c6ef028b54ecbb5e"}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=@getchain={0x44, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xd, 0xfff3}, {0x1, 0xa}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) 31.956041499s ago: executing program 2 (id=589): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x80fffe, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x1a, 0x0, &(0x7f00000000c0)) syz_read_part_table(0x637, &(0x7f0000000000)="$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") r5 = open(&(0x7f0000000080)='./file1\x00', 0x14e142, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002"], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14, &(0x7f0000000180)={[{@max_batch_time={'max_batch_time', 0x3d, 0xc2e}}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x2, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") r7 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r8, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r7, &(0x7f0000000000), 0xfe00, 0x2000}]) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000004c0), 0x208e24b) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd"], 0x66) openat$cgroup_freezer_state(r5, &(0x7f0000000640), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 31.41132707s ago: executing program 2 (id=593): syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000980)='./file0\x00', 0x1000000, &(0x7f0000000000)={[{@errors_remount}, {@test_dummy_encryption}]}, 0x0, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") 31.212129116s ago: executing program 2 (id=594): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x0, r0, 0x5}) prctl$PR_MCE_KILL(0x23, 0xb, 0x7fffffffeffe) fcntl$setlease(r0, 0x400, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="1e665eef4d1a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 31.177445865s ago: executing program 35 (id=594): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x0, r0, 0x5}) prctl$PR_MCE_KILL(0x23, 0xb, 0x7fffffffeffe) fcntl$setlease(r0, 0x400, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="1e665eef4d1a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 20.596089839s ago: executing program 1 (id=651): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x4a, 0x20a, &(0x7f0000000580)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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") r2 = creat(&(0x7f0000000140)='./file1\x00', 0xa4) write$UHID_INPUT(r2, &(0x7f0000002180)={0x8, {"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", 0x1000}}, 0xfffffd96) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) fallocate(r2, 0x0, 0xbf5, 0x2000402) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x4000000000000008, 0x7, 0x48, 0x4000000000000e52, 0x800000000004, 0x5479, 0x1041, 0x6, 0x0, 0x400000002, 0x1, 0x100000000, 0x200000000000002, 0x40000000005, 0x8000000000085, 0x800040068], 0xf000, 0x557c1}) unshare(0x62000000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x2, 0x70bd26, 0x8, {{}, {}, {0x18, 0x17, {0x1, 0x1e6f, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}}, 0x88d1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) 18.441543366s ago: executing program 1 (id=658): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) link(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00121100631177fbac14030a44079f03fe800000ff050000000002000000ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) 17.444170243s ago: executing program 1 (id=668): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x0, 0x0, 0x20, {0x0, 0x0, 0x0, 0xff5c}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x4}, {0xc, 0xb}, {0xffffffffffffff9c, 0xa, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) close(0x3) dup2(r2, r3) clock_gettime(0xfffffffffffffffd, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x20, 0x0, 0x0, 0x4, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x97, 0x100, @void}}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x74, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x0, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x56}, @MPTCP_PM_ATTR_TOKEN={0x6, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc0d0}, 0x8800) 17.416846501s ago: executing program 1 (id=670): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x874) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 16.506378783s ago: executing program 1 (id=672): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) prctl$PR_SET_SECUREBITS(0x1c, 0xc) setfsuid(0xee00) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 16.440261072s ago: executing program 1 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x3}}]}}}]}, 0x40}}, 0x800) 3.123115094s ago: executing program 5 (id=764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 3.091528293s ago: executing program 5 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) 3.081105636s ago: executing program 8 (id=766): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) 2.292222165s ago: executing program 7 (id=770): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, r6) r7 = syz_pidfd_open(r4, 0x0) setns(r7, 0x24020000) 2.291922285s ago: executing program 5 (id=771): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) listen(0xffffffffffffffff, 0x10040) 2.291754315s ago: executing program 7 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) 1.950435069s ago: executing program 4 (id=773): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.908218861s ago: executing program 4 (id=774): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.523260988s ago: executing program 5 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x7404}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.456243896s ago: executing program 5 (id=776): syz_usb_connect$uac2(0x5, 0x8e, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x5, 0x70, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1c, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x306, 0x23, 0x1, 0x1, 0x6, 0x7}, @extension_unit={0x7, 0x24, 0x9, 0x1, 0x80, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x8, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x7, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.438704261s ago: executing program 36 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x3}}]}}}]}, 0x40}}, 0x800) 1.362766613s ago: executing program 7 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x241) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000, 0xa15b0}, 0x700) write(r0, &(0x7f0000000000)='3', 0x4e) 1.337579449s ago: executing program 7 (id=779): syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 1.124164728s ago: executing program 8 (id=780): r0 = socket(0x2, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x18, r3}, 0x10) sendmsg$nl_route(r0, 0x0, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.123881649s ago: executing program 8 (id=781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x8000a, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400"], 0x4a) 1.038996862s ago: executing program 8 (id=782): mlockall(0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 1.017943318s ago: executing program 8 (id=783): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_clone3(&(0x7f0000000500)={0x40040000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 842.900156ms ago: executing program 4 (id=784): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x4172, 0xffffffffffffffff, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$FUSE(r3, 0x0, 0x0) 797.664789ms ago: executing program 8 (id=785): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbey@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\x00\xc3j$v\xefw\x96\\\\/\xfc\xe3\xb8\xc7\x0f\xaa\\\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0xa, 0xc25, 0xffffffff, 0x695, 0x1e, "50e4d8009df7b84e9799b09a0400", 0xe9, 0xfff}) 698.258157ms ago: executing program 4 (id=786): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040086, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback, 0x200}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000b40)=0x228a, 0x4) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x40000, 0x0, 0xfffffef4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 591.672796ms ago: executing program 4 (id=787): socket$packet(0x11, 0x3, 0x300) pipe(0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 556.816726ms ago: executing program 4 (id=788): openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x8001, 0x1}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={0x0, 0x0, 0x10}, 0x18) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') write(0xffffffffffffffff, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) 127.394915ms ago: executing program 5 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1035}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x34}}, 0x0) 240.56µs ago: executing program 7 (id=790): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0) write$FUSE_LK(r0, 0x0, 0x0) 0s ago: executing program 7 (id=791): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000400)="621bbe0b79") kernel console output (not intermixed with test programs): 435][ T622] EXT4-fs (loop5): unmounting filesystem. [ 95.040705][ T290] EXT4-fs (loop2): unmounting filesystem. [ 95.053773][ T1793] loop7: detected capacity change from 0 to 1024 [ 95.064043][ T1793] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 95.084621][ T1793] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 95.095473][ T1793] EXT4-fs error (device loop7): ext4_get_journal_inode:5749: inode #5: comm syz.7.384: unexpected bad inode w/o EXT4_IGET_BAD [ 95.108785][ T1793] EXT4-fs (loop7): no journal found [ 95.118355][ T1797] loop1: detected capacity change from 0 to 512 [ 95.124834][ T1793] EXT4-fs (loop7): can't get journal size [ 95.132718][ T28] audit: type=1400 audit(1790784191.092:467): avc: denied { map } for pid=1795 comm="syz.2.385" path="pipe:[9603]" dev="pipefs" ino=9603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 95.132984][ T1798] overlayfs: missing 'lowerdir' [ 95.165213][ T1793] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 95.182694][ T1798] fuse: Bad value for 'rootmode' [ 95.192069][ T347] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.261515][ T28] audit: type=1400 audit(1790784191.092:468): avc: denied { mounton } for pid=1795 comm="syz.2.385" path="/76/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 95.331257][ T1805] loop4: detected capacity change from 0 to 8192 [ 95.422478][ T1814] loop4: detected capacity change from 0 to 2048 [ 95.772480][ T1816] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.335784][ T1826] loop5: detected capacity change from 0 to 2048 [ 96.348855][ T1827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 96.369575][ T1827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 96.383154][ T1814] loop4: p1 < > p4 [ 96.390128][ T1825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 96.400119][ T1814] loop4: p4 size 722688 extends beyond EOD, truncated [ 96.410811][ T1825] FAULT_INJECTION: forcing a failure. [ 96.410811][ T1825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.442901][ T1826] loop5: p1 < > p4 [ 96.449299][ T1826] loop5: p4 size 722688 extends beyond EOD, truncated [ 96.461633][ T1825] CPU: 0 PID: 1825 Comm: syz.2.393 Not tainted syzkaller #0 [ 96.468946][ T1825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.479004][ T1825] Call Trace: [ 96.482287][ T1825] [ 96.485213][ T1825] __dump_stack+0x21/0x24 [ 96.489555][ T1825] dump_stack_lvl+0x110/0x170 [ 96.494245][ T1825] ? __cfi_dump_stack_lvl+0x8/0x8 [ 96.499284][ T1825] dump_stack+0x15/0x24 [ 96.503448][ T1825] should_fail_ex+0x3bf/0x510 [ 96.508132][ T1825] should_fail+0xb/0x10 [ 96.512290][ T1825] should_fail_usercopy+0x1a/0x20 [ 96.517320][ T1825] _copy_to_user+0x1e/0x90 [ 96.521744][ T1825] simple_read_from_buffer+0xe9/0x160 [ 96.527122][ T1825] proc_fail_nth_read+0x1a6/0x220 [ 96.532155][ T1825] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 96.537709][ T1825] ? security_file_permission+0x94/0xb0 [ 96.543271][ T1825] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 96.548823][ T1825] vfs_read+0x286/0x930 [ 96.552984][ T1825] ? __cfi_vfs_read+0x10/0x10 [ 96.557663][ T1825] ? __kasan_check_write+0x14/0x20 [ 96.562780][ T1825] ? mutex_lock+0x93/0x1b0 [ 96.567204][ T1825] ? __cfi_mutex_lock+0x10/0x10 [ 96.572060][ T1825] ? __fdget_pos+0x2cd/0x380 [ 96.576661][ T1825] ? ksys_read+0x70/0x260 [ 96.581000][ T1825] ksys_read+0x14a/0x260 [ 96.585247][ T1825] ? __cfi_ksys_read+0x10/0x10 [ 96.590030][ T1825] ? fpregs_restore_userregs+0x128/0x260 [ 96.595677][ T1825] __x64_sys_read+0x7b/0x90 [ 96.600189][ T1825] x64_sys_call+0x2f/0x9a0 [ 96.604650][ T1825] do_syscall_64+0x4c/0xa0 [ 96.609078][ T1825] ? clear_bhb_loop+0x30/0x80 [ 96.613768][ T1825] ? clear_bhb_loop+0x30/0x80 [ 96.618441][ T1825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.624344][ T1825] RIP: 0033:0x7f78ca35e98e [ 96.625927][ T103] loop4: p1 < > p4 [ 96.628756][ T1825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.628772][ T1825] RSP: 002b:00007f78cb2d9fe8 EFLAGS: 00000246 [ 96.639052][ T103] loop4: p4 size 722688 extends beyond EOD, [ 96.652253][ T1825] ORIG_RAX: 0000000000000000 [ 96.652264][ T1825] RAX: ffffffffffffffda RBX: 00007f78cb2da6c0 RCX: 00007f78ca35e98e [ 96.652276][ T1825] RDX: 000000000000000f RSI: 00007f78cb2da0a0 RDI: 0000000000000004 [ 96.652285][ T1825] RBP: 00007f78cb2da090 R08: 0000000000000000 R09: 0000000000000000 [ 96.652294][ T1825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.652303][ T1825] R13: 00007f78ca626038 R14: 00007f78ca625fa0 R15: 00007ffd4fb80578 [ 96.652317][ T1825] [ 96.712159][ T103] truncated [ 96.743092][ T1418] EXT4-fs (loop7): unmounting filesystem. [ 98.243975][ T1834] netlink: 'syz.2.405': attribute type 3 has an invalid length. [ 98.251677][ T1834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.405'. [ 98.295085][ T28] audit: type=1400 audit(1790784193.012:469): avc: denied { mounton } for pid=1835 comm="syz.7.395" path="/21/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 98.738692][ T1844] loop2: detected capacity change from 0 to 16 [ 98.856646][ T1844] erofs: (device loop2): mounted with root inode @ nid 36. [ 98.878273][ T1848] loop4: detected capacity change from 0 to 2048 [ 99.030950][ T1850] loop7: detected capacity change from 0 to 128 [ 99.084556][ T347] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.246117][ T1848] loop4: p1 < > p4 [ 99.525248][ T1848] loop4: p4 size 722688 extends beyond EOD, truncated [ 99.948466][ T103] loop4: p1 < > p4 [ 99.965771][ T103] loop4: p4 size 722688 extends beyond EOD, truncated [ 100.121271][ T1864] loop4: detected capacity change from 0 to 128 [ 100.124994][ T1865] loop2: detected capacity change from 0 to 512 [ 100.132775][ T28] audit: type=1400 audit(1790784196.092:470): avc: denied { ioctl } for pid=1856 comm="syz.5.398" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 100.179451][ T1865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.188441][ T1865] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.209406][ T28] audit: type=1400 audit(1790784196.162:471): avc: denied { append } for pid=1858 comm="syz.2.400" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.213596][ T1870] xt_TCPMSS: Only works on TCP SYN packets [ 100.247782][ T1871] device veth0 entered promiscuous mode [ 100.254941][ T1871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 100.267563][ T1865] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.400: bg 0: block 10240: padding at end of block bitmap is not set [ 100.275856][ T28] audit: type=1400 audit(1790784196.162:472): avc: denied { map } for pid=1858 comm="syz.2.400" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.311268][ T1872] syz.4.401: attempt to access beyond end of device [ 100.311268][ T1872] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 100.329065][ T28] audit: type=1400 audit(1790784196.202:473): avc: denied { ioctl } for pid=1863 comm="syz.4.401" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 100.922107][ T290] EXT4-fs (loop2): unmounting filesystem. [ 100.979991][ T1881] loop5: detected capacity change from 0 to 2048 [ 101.023607][ T1881] loop5: p1 p2 p3 [ 101.193256][ T1893] loop4: detected capacity change from 0 to 128 [ 101.224908][ T1893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.252226][ T1893] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.283443][ T1891] loop5: detected capacity change from 0 to 8192 [ 101.332821][ T347] I/O error, dev loop5, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.370945][ T291] EXT4-fs (loop4): unmounting filesystem. [ 101.428353][ T1900] loop4: detected capacity change from 0 to 128 [ 101.456179][ T1900] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.475284][ T1900] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.495347][ T28] audit: type=1400 audit(1790784197.452:474): avc: denied { create } for pid=1899 comm="syz.4.408" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.530904][ T1900] incfs: Can't find or create .incomplete dir in ./file0 [ 101.542731][ T1900] incfs: mount failed -28 [ 101.557429][ T1907] loop1: detected capacity change from 0 to 2048 [ 101.568933][ T28] audit: type=1400 audit(1790784197.482:475): avc: denied { ioctl open } for pid=1899 comm="syz.4.408" path="/72/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.581888][ T1882] loop2: detected capacity change from 0 to 131072 [ 101.594187][ T1910] loop7: detected capacity change from 0 to 512 [ 101.599208][ T28] audit: type=1400 audit(1790784197.482:476): avc: denied { write } for pid=1899 comm="syz.4.408" path=2F202864656C6574656429 dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.628369][ T1910] ext4: Unknown parameter 'smackfshat' [ 101.660349][ T28] audit: type=1400 audit(1790784197.612:477): avc: denied { setattr } for pid=1899 comm="syz.4.408" path="/72/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.679523][ T1882] F2FS-fs (loop2): invalid crc_offset: 266236 [ 101.694351][ T1907] loop1: p1 < > p4 [ 101.700133][ T28] audit: type=1400 audit(1790784197.652:478): avc: denied { read } for pid=1899 comm="syz.4.408" name="file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.714393][ T1907] loop1: p4 size 722688 extends beyond EOD, truncated [ 101.728461][ T1882] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.741325][ T291] EXT4-fs (loop4): unmounting filesystem. [ 101.811029][ T1882] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 101.941524][ T1110] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 102.142594][ T1110] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 102.166422][ T1110] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.633970][ T1924] loop4: detected capacity change from 0 to 2048 [ 102.656901][ T1926] loop2: detected capacity change from 0 to 128 [ 102.679776][ T1926] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.771336][ T1931] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 102.780582][ T1931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 102.795157][ T1931] loop2: detected capacity change from 0 to 1024 [ 102.813388][ T1931] EXT4-fs (loop2): invalid inodes per group: 204800 [ 102.813388][ T1931] [ 102.828153][ T28] audit: type=1400 audit(1790784198.712:479): avc: denied { associate } for pid=1928 comm="syz.2.417" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.859775][ T1110] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.869901][ T1110] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 102.885422][ T1110] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 102.889407][ T1924] loop4: p1 < > p4 [ 102.894541][ T1110] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 102.903529][ T1924] loop4: p4 size 722688 extends beyond EOD, truncated [ 102.907266][ T1110] usb 8-1: Manufacturer: syz [ 102.931676][ T1110] usb 8-1: config 0 descriptor?? [ 102.969828][ T1934] device bridge2 entered promiscuous mode [ 102.986092][ T1936] loop5: detected capacity change from 0 to 256 [ 103.000200][ T1936] device bridge3 entered promiscuous mode [ 103.201504][ T1092] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 103.205305][ T1941] xt_TCPMSS: Only works on TCP SYN packets [ 103.391506][ T1092] usb 3-1: Using ep0 maxpacket: 32 [ 103.407380][ T1092] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.417992][ T1943] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 103.432284][ T1092] usb 3-1: config 178 has an invalid interface number: 183 but max is 0 [ 103.443890][ T1092] usb 3-1: config 178 has no interface number 0 [ 103.462893][ T1092] usb 3-1: New USB device found, idVendor=0582, idProduct=b7a6, bcdDevice=10.27 [ 103.481492][ T1092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.489564][ T1092] usb 3-1: Product: syz [ 103.499647][ T1092] usb 3-1: Manufacturer: syz [ 103.504335][ T1092] usb 3-1: SerialNumber: syz [ 103.576981][ T1110] appleir 0003:05AC:8243.0004: item fetching failed at offset 0/1 [ 103.595222][ T1110] appleir 0003:05AC:8243.0004: parse failed [ 103.601228][ T1110] appleir: probe of 0003:05AC:8243.0004 failed with error -22 [ 103.662209][ T1943] loop4: detected capacity change from 0 to 40427 [ 103.727214][ T1092] usb 3-1: USB disconnect, device number 9 [ 103.737411][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:178.183/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.810404][ T1110] usb 8-1: USB disconnect, device number 2 [ 103.979739][ T1947] loop4: detected capacity change from 0 to 256 [ 104.005064][ T1947] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 104.041477][ T1947] exFAT-fs (loop4): invalid boot region [ 104.047105][ T1947] exFAT-fs (loop4): failed to recognize exfat type [ 104.241914][ T1949] FAULT_INJECTION: forcing a failure. [ 104.241914][ T1949] name failslab, interval 1, probability 0, space 0, times 0 [ 104.261979][ T1949] CPU: 1 PID: 1949 Comm: syz.5.423 Not tainted syzkaller #0 [ 104.269406][ T1949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.279563][ T1949] Call Trace: [ 104.282852][ T1949] [ 104.285789][ T1949] __dump_stack+0x21/0x24 [ 104.290156][ T1949] dump_stack_lvl+0x110/0x170 [ 104.294859][ T1949] ? __cfi_dump_stack_lvl+0x8/0x8 [ 104.299900][ T1949] dump_stack+0x15/0x24 [ 104.304075][ T1949] should_fail_ex+0x3bf/0x510 [ 104.308848][ T1949] __should_failslab+0xac/0xf0 [ 104.313620][ T1949] should_failslab+0x9/0x20 [ 104.318125][ T1949] __kmem_cache_alloc_node+0x3d/0x2d0 [ 104.323504][ T1949] ? alloc_mnt_ns+0xb3/0x420 [ 104.328111][ T1949] ? alloc_mnt_ns+0xb3/0x420 [ 104.332713][ T1949] kmalloc_trace+0x29/0xb0 [ 104.337306][ T1949] alloc_mnt_ns+0xb3/0x420 [ 104.341728][ T1949] __se_sys_open_tree+0x319/0x810 [ 104.346764][ T1949] ? __this_cpu_preempt_check+0x13/0x20 [ 104.352323][ T1949] ? __x64_sys_open_tree+0x90/0x90 [ 104.357451][ T1949] ? fpregs_restore_userregs+0x128/0x260 [ 104.363088][ T1949] __x64_sys_open_tree+0x7b/0x90 [ 104.368115][ T1949] x64_sys_call+0x5ae/0x9a0 [ 104.372630][ T1949] do_syscall_64+0x4c/0xa0 [ 104.377057][ T1949] ? clear_bhb_loop+0x30/0x80 [ 104.381736][ T1949] ? clear_bhb_loop+0x30/0x80 [ 104.386418][ T1949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.392321][ T1949] RIP: 0033:0x7f216699e159 [ 104.396735][ T1949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.416437][ T1949] RSP: 002b:00007f2167811028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 104.424860][ T1949] RAX: ffffffffffffffda RBX: 00007f2166c25fa0 RCX: 00007f216699e159 [ 104.432873][ T1949] RDX: 0000000000089901 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 104.440868][ T1949] RBP: 00007f2166a3506b R08: 0000000000000000 R09: 0000000000000000 [ 104.448824][ T1949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.456817][ T1949] R13: 00007f2166c26038 R14: 00007f2166c25fa0 R15: 00007fffb4c7f758 [ 104.464802][ T1949] [ 104.510400][ T1949] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 104.526423][ T1959] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.545360][ T1949] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.591938][ T1959] netlink: 56 bytes leftover after parsing attributes in process `syz.7.427'. [ 104.601606][ T622] EXT4-fs (loop5): unmounting filesystem. [ 104.614428][ T1959] device ip6gre1 entered promiscuous mode [ 104.638185][ T1967] ./dev/sda1: Can't open blockdev [ 105.499722][ T1971] loop7: p1 < > p4 [ 105.520304][ T1981] xt_TCPMSS: Only works on TCP SYN packets [ 105.560864][ T1971] loop7: p4 size 722688 extends beyond EOD, truncated [ 106.947534][ T1987] kernel profiling enabled (shift: 9) [ 107.377500][ T1976] set_capacity_and_notify: 3 callbacks suppressed [ 107.377521][ T1976] loop1: detected capacity change from 0 to 40427 [ 107.395749][ T1993] loop5: detected capacity change from 0 to 512 [ 107.425827][ T1993] ext4: Unknown parameter 'smackfshat' [ 107.487070][ T1976] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 107.494873][ T347] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.521606][ T1976] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 107.571820][ T1976] F2FS-fs (loop1): invalid crc value [ 107.622066][ T1976] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 107.688758][ T103] loop7: p1 < > p4 [ 107.693515][ T103] loop7: p4 size 722688 extends beyond EOD, truncated [ 107.703806][ T1998] loop4: detected capacity change from 0 to 2048 [ 107.726279][ T1976] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 107.736306][ T1976] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.746985][ T1998] loop4: p1 p2 p3 [ 107.751692][ T608] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 107.829298][ T2009] ./dev/sda1: Can't open blockdev [ 107.854144][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 107.854159][ T28] audit: type=1400 audit(1790784203.812:485): avc: denied { append } for pid=1973 comm="syz.1.433" path="/91/file1/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.936514][ T1983] loop2: detected capacity change from 0 to 131072 [ 107.940484][ T2012] SELinux: security_context_str_to_sid (*e({)]-) failed with errno=-22 [ 107.952889][ T2012] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 107.962577][ T608] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 107.978587][ T2012] tipc: MTU too low for tipc bearer [ 107.984024][ T608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.988070][ T1983] F2FS-fs (loop2): invalid crc_offset: 266236 [ 107.999921][ T2010] loop4: detected capacity change from 0 to 8192 [ 108.009177][ T608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.034490][ T1983] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.052347][ T608] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.389113][ T28] audit: type=1400 audit(1790784204.172:486): avc: denied { lock } for pid=1973 comm="syz.1.433" path="/91/file1/file0" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.975857][ T608] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 108.975879][ T289] syz-executor: attempt to access beyond end of device [ 108.975879][ T289] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 108.991487][ T608] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 109.009211][ T1983] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 109.018864][ T608] usb 6-1: Manufacturer: syz [ 109.041968][ T608] usb 6-1: config 0 descriptor?? [ 109.106813][ T2018] loop7: detected capacity change from 0 to 40427 [ 109.113134][ T2027] loop4: detected capacity change from 0 to 2048 [ 109.114487][ T2018] F2FS-fs (loop7): invalid crc value [ 109.136071][ T2018] F2FS-fs (loop7): Found nat_bits in checkpoint [ 109.186220][ T2027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.200854][ T28] audit: type=1400 audit(1790784205.152:487): avc: denied { read } for pid=2026 comm="syz.4.446" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.216922][ T2018] F2FS-fs (loop7): Start checkpoint disabled! [ 109.229920][ T2018] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 109.230019][ T28] audit: type=1400 audit(1790784205.182:488): avc: denied { open } for pid=2026 comm="syz.4.446" path="/77/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.262065][ T2018] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 109.293315][ T28] audit: type=1400 audit(1790784205.252:489): avc: denied { rename } for pid=2016 comm="syz.7.443" name="file0" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 109.399001][ T841] kworker/u4:7: attempt to access beyond end of device [ 109.399001][ T841] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 109.947113][ T330] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.151579][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 110.159331][ T330] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 110.172542][ T330] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 110.187305][ T330] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.194950][ T330] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 110.205450][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.248957][ T330] usb 5-1: config 0 descriptor?? [ 110.871190][ T2040] xt_TCPMSS: Only works on TCP SYN packets [ 110.878460][ T608] usbhid 6-1:0.0: can't add hid device: -71 [ 110.884974][ T608] usbhid: probe of 6-1:0.0 failed with error -71 [ 110.886383][ T28] audit: type=1400 audit(1790784206.842:490): avc: denied { mount } for pid=2026 comm="syz.4.446" name="/" dev="configfs" ino=9220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.892829][ T608] usb 6-1: USB disconnect, device number 5 [ 110.923271][ T28] audit: type=1400 audit(1790784206.882:491): avc: denied { search } for pid=2026 comm="syz.4.446" name="/" dev="configfs" ino=9220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.946028][ T28] audit: type=1400 audit(1790784206.882:492): avc: denied { read } for pid=2026 comm="syz.4.446" name="/" dev="configfs" ino=9220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.949834][ T330] usbhid 5-1:0.0: can't add hid device: -71 [ 110.970105][ T28] audit: type=1400 audit(1790784206.882:493): avc: denied { open } for pid=2026 comm="syz.4.446" path="/" dev="configfs" ino=9220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.043631][ T330] usbhid: probe of 5-1:0.0 failed with error -71 [ 111.065621][ T330] usb 5-1: USB disconnect, device number 7 [ 111.091027][ T2051] loop5: detected capacity change from 0 to 2048 [ 111.132236][ T2051] loop5: p1 < > p4 [ 111.137128][ T2051] loop5: p4 size 722688 extends beyond EOD, truncated [ 111.157970][ T2053] ./dev/sda1: Can't open blockdev [ 111.179255][ T103] loop5: p1 < > p4 [ 111.184586][ T103] loop5: p4 size 722688 extends beyond EOD, truncated [ 111.297585][ T2063] loop2: detected capacity change from 0 to 256 [ 111.346518][ T2063] exfat: Bad value for 'uid' [ 111.352567][ T2061] loop1: detected capacity change from 0 to 2048 [ 111.398690][ T2061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.407388][ T2061] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.439196][ T2061] EXT4-fs (loop1): unmounting filesystem. [ 111.446032][ T2058] F2FS-fs (loop7): fault_injection options not supported [ 111.481898][ T291] EXT4-fs (loop4): unmounting filesystem. [ 111.488414][ T2058] F2FS-fs (loop7): invalid crc value [ 111.523357][ T2058] F2FS-fs (loop7): Found nat_bits in checkpoint [ 111.552642][ T2072] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.586891][ T2072] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.600645][ T2058] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 111.623988][ T2072] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.456: bg 0: block 10240: padding at end of block bitmap is not set [ 111.695794][ T291] EXT4-fs (loop4): unmounting filesystem. [ 111.919412][ T2085] ext4: Unknown parameter 'smackfshat' [ 112.109532][ T2093] xt_TCPMSS: Only works on TCP SYN packets [ 114.397712][ T28] audit: type=1400 audit(1790784210.352:494): avc: denied { bind } for pid=2096 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.654707][ T2106] set_capacity_and_notify: 3 callbacks suppressed [ 114.654740][ T2106] loop1: detected capacity change from 0 to 128 [ 115.618532][ T330] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.650448][ T2113] loop5: detected capacity change from 0 to 2048 [ 115.687601][ T28] audit: type=1400 audit(1790784211.642:495): avc: denied { read } for pid=2123 comm="syz.2.473" dev="sockfs" ino=25276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.709059][ T2124] 9pnet_fd: Insufficient options for proto=fd [ 115.734368][ T2113] loop5: p1 < > p4 [ 115.739086][ T2113] loop5: p4 size 722688 extends beyond EOD, truncated [ 115.911537][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.101494][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 116.122437][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 116.130733][ T24] usb 2-1: config 0 has no interface number 0 [ 116.139402][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 116.148438][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 116.164805][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.173287][ T24] usb 2-1: Product: syz [ 116.177601][ T24] usb 2-1: Manufacturer: syz [ 116.185007][ T2146] xt_TCPMSS: Only works on TCP SYN packets [ 116.192361][ T24] usb 2-1: SerialNumber: syz [ 116.212468][ T24] usb 2-1: config 0 descriptor?? [ 116.228784][ T24] smsc75xx v1.0.0 [ 116.564991][ T2148] loop7: detected capacity change from 0 to 40427 [ 116.903342][ T2148] F2FS-fs (loop7): fault_injection options not supported [ 117.013872][ T2148] F2FS-fs (loop7): invalid crc value [ 117.083718][ T2158] loop2: detected capacity change from 0 to 512 [ 117.139099][ T2148] F2FS-fs (loop7): Found nat_bits in checkpoint [ 117.185636][ T2158] ext4: Unknown parameter 'smackfshat' [ 117.421198][ T2148] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 117.431782][ T1330] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.551571][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 117.562605][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.572483][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 117.584627][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 117.594545][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 117.605211][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 117.615069][ T24] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 117.625122][ T24] usb 2-1: USB disconnect, device number 7 [ 117.721509][ T1613] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 117.781555][ T60] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 117.912645][ T1613] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 117.923962][ T1613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.935216][ T1613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.945362][ T1613] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 117.959439][ T1613] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 117.968832][ T1613] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 117.981746][ T1613] usb 3-1: Manufacturer: syz [ 117.987296][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.998603][ T1613] usb 3-1: config 0 descriptor?? [ 118.003659][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.013521][ T60] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 118.023143][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.031757][ T60] usb 6-1: config 0 descriptor?? [ 118.136514][ T2177] IPv6: sit2: Disabled Multicast RS [ 118.287468][ T2180] loop1: detected capacity change from 0 to 2048 [ 118.343179][ T2180] loop1: p1 < > p4 [ 118.349531][ T2180] loop1: p4 size 722688 extends beyond EOD, truncated [ 118.604177][ T1613] appleir 0003:05AC:8243.0006: item fetching failed at offset 0/1 [ 118.613108][ T1613] appleir 0003:05AC:8243.0006: parse failed [ 118.619190][ T1613] appleir: probe of 0003:05AC:8243.0006 failed with error -22 [ 118.647364][ T2165] loop5: detected capacity change from 0 to 256 [ 118.673082][ T2165] FAT-fs (loop5): Directory bread(block 1285) failed [ 118.679966][ T2165] FAT-fs (loop5): Directory bread(block 1286) failed [ 118.687056][ T2165] FAT-fs (loop5): Directory bread(block 1287) failed [ 118.694182][ T2165] FAT-fs (loop5): Directory bread(block 1288) failed [ 118.722854][ T28] audit: type=1400 audit(1790784214.682:496): avc: denied { set_context_mgr } for pid=2183 comm="syz.7.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 118.808421][ T330] usb 3-1: USB disconnect, device number 10 [ 118.836204][ T60] usb 6-1: language id specifier not provided by device, defaulting to English [ 118.859180][ T2189] loop7: detected capacity change from 0 to 2048 [ 118.912194][ T2189] loop7: p1 < > p4 [ 118.917127][ T2189] loop7: p4 size 722688 extends beyond EOD, truncated [ 118.945116][ T103] loop7: p1 < > p4 [ 118.952730][ T103] loop7: p4 size 722688 extends beyond EOD, truncated [ 119.128227][ T2187] loop4: detected capacity change from 0 to 40427 [ 119.155965][ T2187] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 119.169637][ T2187] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 119.184563][ T2187] F2FS-fs (loop4): Image doesn't support compression [ 119.197629][ T2187] F2FS-fs (loop4): Image doesn't support compression [ 119.210378][ T2187] F2FS-fs (loop4): invalid crc value [ 119.217163][ T2187] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 119.245889][ T60] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 119.267917][ T60] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 119.321666][ T2158] syz.2.480 (2158) used greatest stack depth: 19248 bytes left [ 119.338128][ T2187] F2FS-fs (loop4): Start checkpoint disabled! [ 119.345607][ T60] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 119.354260][ T2187] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 119.361631][ T60] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 119.369119][ T60] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 119.378043][ T60] usb 6-1: USB disconnect, device number 6 [ 119.389726][ T2187] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 119.400265][ T2187] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 119.789158][ T2208] loop2: detected capacity change from 0 to 1024 [ 119.974718][ T2208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.352827][ T846] kworker/u4:9: attempt to access beyond end of device [ 120.352827][ T846] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 120.366969][ T28] audit: type=1400 audit(1790784216.312:497): avc: denied { map } for pid=2207 comm="syz.2.493" path="/102/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.509655][ T2213] loop7: detected capacity change from 0 to 40427 [ 120.519873][ T2213] F2FS-fs (loop7): fault_injection options not supported [ 120.534230][ T2213] F2FS-fs (loop7): invalid crc value [ 120.541931][ T290] EXT4-fs (loop2): unmounting filesystem. [ 120.570564][ T2213] F2FS-fs (loop7): Found nat_bits in checkpoint [ 120.645828][ T2230] loop1: detected capacity change from 0 to 2048 [ 120.684024][ T2213] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 120.734942][ T2236] loop5: detected capacity change from 0 to 512 [ 120.762171][ T2236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.771910][ T2236] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 121.383809][ T2230] loop1: p1 < > p4 [ 121.593718][ T2232] xt_TCPMSS: Only works on TCP SYN packets [ 121.644144][ T2236] EXT4-fs (loop5): 1 truncate cleaned up [ 121.869997][ T2230] loop1: p4 size 722688 extends beyond EOD, truncated [ 121.884262][ T2236] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 122.154141][ T2256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 122.172331][ T2256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.506'. [ 122.175099][ T2254] loop7: detected capacity change from 0 to 2048 [ 122.192558][ T2256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.506'. [ 122.262899][ T2254] loop7: p1 < > p4 [ 122.267569][ T28] audit: type=1400 audit(1790784218.222:498): avc: denied { setopt } for pid=2260 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.271904][ T2254] loop7: p4 size 722688 extends beyond EOD, truncated [ 122.309575][ T28] audit: type=1400 audit(1790784218.242:499): avc: denied { getopt } for pid=2260 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.337520][ T103] loop7: p1 < > p4 [ 122.346520][ T103] loop7: p4 size 722688 extends beyond EOD, truncated [ 122.371253][ T28] audit: type=1400 audit(1790784218.242:500): avc: denied { create } for pid=2260 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 122.463079][ T622] EXT4-fs (loop5): unmounting filesystem. [ 122.667381][ T2275] FAULT_INJECTION: forcing a failure. [ 122.667381][ T2275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.697975][ T2275] CPU: 1 PID: 2275 Comm: syz.5.512 Not tainted syzkaller #0 [ 122.705300][ T2275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.715377][ T2275] Call Trace: [ 122.718659][ T2275] [ 122.721592][ T2275] __dump_stack+0x21/0x24 [ 122.725930][ T2275] dump_stack_lvl+0x110/0x170 [ 122.730624][ T2275] ? __cfi_dump_stack_lvl+0x8/0x8 [ 122.735664][ T2275] dump_stack+0x15/0x24 [ 122.739835][ T2275] should_fail_ex+0x3bf/0x510 [ 122.744515][ T2275] should_fail+0xb/0x10 [ 122.748680][ T2275] should_fail_usercopy+0x1a/0x20 [ 122.753714][ T2275] _copy_from_user+0x1e/0xc0 [ 122.758326][ T2275] iovec_from_user+0x1aa/0x2e0 [ 122.763103][ T2275] __import_iovec+0x6d/0x460 [ 122.767700][ T2275] ? kstrtoull+0x137/0x1d0 [ 122.772123][ T2275] import_iovec+0x7c/0xb0 [ 122.776464][ T2275] ___sys_sendmsg+0x252/0x360 [ 122.781151][ T2275] ? __sys_sendmsg+0x290/0x290 [ 122.785923][ T2275] ? __kasan_check_write+0x14/0x20 [ 122.791036][ T2275] ? proc_fail_nth_write+0x180/0x200 [ 122.796331][ T2275] ? vfs_write+0xa51/0xd00 [ 122.800754][ T2275] ? __fdget+0x19c/0x220 [ 122.804998][ T2275] __x64_sys_sendmsg+0x20d/0x2e0 [ 122.809944][ T2275] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 122.815411][ T2275] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 122.821505][ T2275] x64_sys_call+0x171/0x9a0 [ 122.826025][ T2275] do_syscall_64+0x4c/0xa0 [ 122.830464][ T2275] ? clear_bhb_loop+0x30/0x80 [ 122.835161][ T2275] ? clear_bhb_loop+0x30/0x80 [ 122.839854][ T2275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.845755][ T2275] RIP: 0033:0x7f216699e159 [ 122.850173][ T2275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.869787][ T2275] RSP: 002b:00007f2167811028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.878215][ T2275] RAX: ffffffffffffffda RBX: 00007f2166c25fa0 RCX: 00007f216699e159 [ 122.886315][ T2275] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000006 [ 122.894302][ T2275] RBP: 00007f2167811090 R08: 0000000000000000 R09: 0000000000000000 [ 122.902413][ T2275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.910395][ T2275] R13: 00007f2166c26038 R14: 00007f2166c25fa0 R15: 00007fffb4c7f758 [ 122.918645][ T2275] [ 123.380370][ T2292] netlink: 'syz.5.514': attribute type 3 has an invalid length. [ 125.563932][ T2295] loop2: detected capacity change from 0 to 2048 [ 125.703104][ T2286] loop7: detected capacity change from 0 to 40427 [ 125.718747][ T2286] F2FS-fs (loop7): fault_injection options not supported [ 125.732737][ T2286] F2FS-fs (loop7): invalid crc value [ 125.739150][ T2286] F2FS-fs (loop7): Found nat_bits in checkpoint [ 125.783827][ T28] audit: type=1400 audit(1790784221.742:501): avc: denied { getopt } for pid=2300 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.813072][ T103] loop2: p1 < > p4 [ 125.820806][ T103] loop2: p4 size 722688 extends beyond EOD, truncated [ 125.831857][ T2286] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 125.866055][ T347] udevd[347]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 125.877142][ T1330] udevd[1330]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 125.938484][ T2318] loop4: detected capacity change from 0 to 2048 [ 126.064469][ T2318] loop4: p1 < > p4 [ 126.074022][ T2318] loop4: p4 size 722688 extends beyond EOD, truncated [ 126.175691][ T1613] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 126.256407][ T2321] xt_TCPMSS: Only works on TCP SYN packets [ 126.441506][ T1613] usb 6-1: Using ep0 maxpacket: 32 [ 126.449354][ T1613] usb 6-1: unable to get BOS descriptor or descriptor too short [ 126.471127][ T1613] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.506660][ T1613] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 126.532002][ T1613] usb 6-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 126.546886][ T2329] loop7: detected capacity change from 0 to 4096 [ 126.553573][ T1613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.561642][ T1613] usb 6-1: Product: syz [ 126.570658][ T2329] EXT4-fs: quotafile must be on filesystem root [ 126.577097][ T1613] usb 6-1: Manufacturer: syz [ 126.595178][ T1613] usb 6-1: SerialNumber: syz [ 126.874388][ T2336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.874906][ T39] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 126.892742][ T2336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.945261][ T1613] usb 6-1: 0:2 : does not exist [ 126.950894][ T1613] usb 6-1: unit 249 not found! [ 126.962630][ T1613] usb 6-1: unit 2 not found! [ 127.082933][ T39] usb 8-1: not running at top speed; connect to a high speed hub [ 127.150055][ T1613] usb 6-1: USB disconnect, device number 7 [ 127.185729][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.449767][ T39] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.785626][ T39] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 127.858344][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.918168][ T2344] loop5: detected capacity change from 0 to 2048 [ 127.977401][ T2344] loop5: p1 < > p4 [ 127.982648][ T2344] loop5: p4 size 722688 extends beyond EOD, truncated [ 127.989268][ T2347] loop2: detected capacity change from 0 to 256 [ 128.017548][ T2348] input: syz0 as /devices/virtual/input/input7 [ 128.035866][ T28] audit: type=1400 audit(1790784223.992:502): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1260 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.038231][ T2348] loop1: detected capacity change from 0 to 512 [ 128.064306][ T28] audit: type=1400 audit(1790784223.992:503): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1260 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.109606][ T28] audit: type=1400 audit(1790784223.992:504): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1260 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.135974][ T28] audit: type=1326 audit(1790784224.052:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.2.535" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ca39e159 code=0x7ffc0000 [ 128.191234][ T28] audit: type=1326 audit(1790784224.052:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.2.535" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ca39e159 code=0x7ffc0000 [ 128.226242][ T28] audit: type=1326 audit(1790784224.092:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.2.535" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ca39e159 code=0x7ffc0000 [ 128.251586][ T28] audit: type=1326 audit(1790784224.092:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.2.535" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ca39e159 code=0x7ffc0000 [ 128.297525][ T2348] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.312399][ T2359] ./dev/sda1: Can't open blockdev [ 128.317549][ T28] audit: type=1326 audit(1790784224.092:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.2.535" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f78ca39dec2 code=0x7ffc0000 [ 128.349909][ T2348] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.382151][ T2329] fuse: Bad value for 'fd' [ 128.391619][ T28] audit: type=1326 audit(1790784224.092:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.2.535" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f78ca39df57 code=0x7ffc0000 [ 128.392747][ T2362] loop4: detected capacity change from 0 to 128 [ 128.424739][ T2354] loop2: detected capacity change from 0 to 256 [ 128.433701][ T2348] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 128.483149][ T2348] EXT4-fs (loop1): Remounting filesystem read-only [ 128.532056][ T2354] loop2: detected capacity change from 0 to 256 [ 128.567090][ T2362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.602862][ T2362] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.776875][ T2362] incfs: Can't find or create .incomplete dir in ./file0 [ 128.821767][ T2362] incfs: mount failed -28 [ 128.876748][ T291] EXT4-fs (loop4): unmounting filesystem. [ 128.920596][ T289] EXT4-fs (loop1): unmounting filesystem. [ 129.140315][ T39] usb 8-1: string descriptor 0 read error: -71 [ 129.166305][ T39] usb 8-1: Found UVC 1.00 device (046d:0825) [ 129.187309][ T39] usb 8-1: No streaming interface found for terminal 2. [ 129.210232][ T39] uvcvideo 8-1:1.0: Entity type for entity Input 1 was not initialized! [ 129.378168][ T39] usb 8-1: USB disconnect, device number 3 [ 129.384268][ T1330] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.415623][ T2372] loop5: p1 < > p4 [ 129.425463][ T2372] loop5: p4 size 722688 extends beyond EOD, truncated [ 129.447482][ T2382] EXT4-fs: Ignoring removed nobh option [ 129.476709][ T2382] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 129.485578][ T2382] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.542: attempt to clear invalid blocks 1 len 1 [ 129.503085][ T2382] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 129.520458][ T2382] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.542: invalid indirect mapped block 1819239214 (level 0) [ 129.536999][ T2386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 129.547727][ T2382] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.542: invalid indirect mapped block 1819239214 (level 1) [ 129.584269][ T2382] EXT4-fs (loop7): 1 truncate cleaned up [ 129.589937][ T2382] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 129.683494][ T347] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.828271][ T1418] EXT4-fs (loop7): unmounting filesystem. [ 129.870205][ T2392] device syzkaller0 entered promiscuous mode [ 129.977731][ T2401] ./dev/sda1: Can't open blockdev [ 130.026469][ T347] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.132334][ T2412] xt_TCPMSS: Only works on TCP SYN packets [ 130.681956][ T477] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.791922][ T28] kauditd_printk_skb: 1397 callbacks suppressed [ 130.791947][ T28] audit: type=1326 audit(1790784226.742:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.1.552" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa3a979e159 code=0x7ffc0000 [ 130.910015][ T2413] set_capacity_and_notify: 21 callbacks suppressed [ 130.910035][ T2413] loop7: detected capacity change from 0 to 2048 [ 130.931548][ T477] usb 3-1: Using ep0 maxpacket: 16 [ 130.938010][ T477] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 130.953081][ T2420] loop4: detected capacity change from 0 to 1024 [ 130.972411][ T28] audit: type=1326 audit(1790784226.742:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.1.552" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a979e159 code=0x7ffc0000 [ 130.976939][ T477] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.020803][ T2420] EXT4-fs: Ignoring removed orlov option [ 131.021468][ T28] audit: type=1400 audit(1790784226.882:1910): avc: denied { create } for pid=2419 comm="syz.4.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 131.071682][ T28] audit: type=1326 audit(1790784226.912:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.1.552" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a979e159 code=0x7ffc0000 [ 131.082840][ T477] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.106851][ T477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.111925][ T2413] loop7: p1 < > p4 [ 131.119638][ T2420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.133875][ T477] usb 3-1: Product: syz [ 131.138073][ T477] usb 3-1: Manufacturer: syz [ 131.142541][ T2420] EXT4-fs error (device loop4): __ext4_new_inode:1291: comm syz.4.553: failed to insert inode 12: doubly allocated? [ 131.155414][ T477] usb 3-1: SerialNumber: syz [ 131.155613][ T28] audit: type=1326 audit(1790784226.912:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.1.552" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3a979dec2 code=0x7ffc0000 [ 131.184668][ T2413] loop7: p4 size 722688 extends beyond EOD, truncated [ 131.194838][ T2427] netlink: 72 bytes leftover after parsing attributes in process `syz.4.553'. [ 131.233006][ T103] loop7: p1 < > p4 [ 131.237177][ T2427] netem: invalid attributes len -24 [ 131.242648][ T28] audit: type=1326 audit(1790784226.912:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.1.552" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa3a979df57 code=0x7ffc0000 [ 131.252213][ T103] loop7: p4 size 722688 extends beyond EOD, [ 131.269792][ T28] audit: type=1326 audit(1790784226.912:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.1.552" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa3a975ae51 code=0x7ffc0000 [ 131.272757][ T2427] netem: change failed [ 131.276174][ T28] audit: type=1326 audit(1790784226.912:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.1.552" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa3a979ef49 code=0x7ffc0000 [ 131.311455][ T103] truncated [ 131.329579][ T28] audit: type=1326 audit(1790784226.912:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.1.552" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa3a975aebb code=0x7ffc0000 [ 131.357483][ T28] audit: type=1326 audit(1790784226.912:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2417 comm="syz.1.552" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a979e159 code=0x7ffc0000 [ 131.394029][ T477] usb 3-1: 0:2 : does not exist [ 131.401889][ T291] EXT4-fs (loop4): unmounting filesystem. [ 131.417796][ T347] udevd[347]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 131.429084][ T477] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 131.431843][ T323] udevd[323]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 131.437563][ T2429] loop7: detected capacity change from 0 to 2048 [ 131.466931][ T477] usb 3-1: USB disconnect, device number 11 [ 131.502172][ T2429] loop7: p1 < > p4 [ 131.506974][ T2429] loop7: p4 size 722688 extends beyond EOD, truncated [ 131.718718][ T2439] loop1: detected capacity change from 0 to 2048 [ 131.884164][ T2431] loop4: detected capacity change from 0 to 40427 [ 131.933583][ T2431] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 131.942142][ T2431] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 131.956545][ T2431] F2FS-fs (loop4): invalid crc value [ 132.033353][ T2431] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 132.899889][ T2431] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 132.909869][ T347] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.926456][ T2451] ./dev/sda1: Can't open blockdev [ 132.931924][ T2431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.981658][ T2431] SELinux: Context : is not valid (left unmapped). [ 133.030175][ T291] syz-executor: attempt to access beyond end of device [ 133.030175][ T291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.127960][ T2458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.561'. [ 133.900132][ T2423] loop5: detected capacity change from 0 to 131072 [ 133.908409][ T2456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 133.952459][ T2423] F2FS-fs (loop5): invalid crc_offset: 266236 [ 133.963654][ T2456] netlink: 10 bytes leftover after parsing attributes in process `syz.1.562'. [ 133.993408][ T2460] FAULT_INJECTION: forcing a failure. [ 133.993408][ T2460] name failslab, interval 1, probability 0, space 0, times 0 [ 134.006403][ T2460] CPU: 0 PID: 2460 Comm: syz.7.564 Not tainted syzkaller #0 [ 134.013707][ T2460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.023765][ T2460] Call Trace: [ 134.027063][ T2460] [ 134.030000][ T2460] __dump_stack+0x21/0x24 [ 134.034340][ T2460] dump_stack_lvl+0x110/0x170 [ 134.039032][ T2460] ? __cfi_dump_stack_lvl+0x8/0x8 [ 134.044079][ T2460] ? selinux_kernfs_init_security+0x143/0x450 [ 134.050175][ T2460] dump_stack+0x15/0x24 [ 134.054358][ T2460] should_fail_ex+0x3bf/0x510 [ 134.055735][ T2423] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 134.059042][ T2460] ? __kernfs_new_node+0xe1/0x670 [ 134.059069][ T2460] __should_failslab+0xac/0xf0 [ 134.076880][ T2460] should_failslab+0x9/0x20 [ 134.081387][ T2460] kmem_cache_alloc+0x3b/0x320 [ 134.086176][ T2460] __kernfs_new_node+0xe1/0x670 [ 134.091017][ T2460] ? clear_nonspinnable+0x60/0x60 [ 134.096033][ T2460] ? rwsem_write_trylock+0x136/0x300 [ 134.101310][ T2460] ? kernfs_new_node+0x260/0x260 [ 134.106234][ T2460] ? up_write+0x7b/0x290 [ 134.110468][ T2460] kernfs_new_node+0x150/0x260 [ 134.115218][ T2460] __kernfs_create_file+0x4e/0x270 [ 134.120313][ T2460] sysfs_add_file_mode_ns+0x1ce/0x270 [ 134.125710][ T2460] internal_create_group+0x6b7/0xeb0 [ 134.130990][ T2460] ? sysfs_create_group+0x30/0x30 [ 134.136003][ T2460] ? up_write+0x7b/0x290 [ 134.140269][ T2460] ? kernfs_activate+0x1ea/0x200 [ 134.145207][ T2460] sysfs_create_groups+0x58/0x120 [ 134.150231][ T2460] device_add_attrs+0xdb/0x830 [ 134.155428][ T2460] ? get_device_parent+0x410/0x410 [ 134.160534][ T2460] ? sysfs_do_create_link_sd+0xe9/0x110 [ 134.166073][ T2460] device_add+0x5b0/0xec0 [ 134.170425][ T2460] netdev_register_kobject+0x18e/0x330 [ 134.175885][ T2460] ? raw_notifier_call_chain+0xfa/0x110 [ 134.181422][ T2460] register_netdevice+0xec9/0x1550 [ 134.186539][ T2460] ? __cfi_register_netdevice+0x10/0x10 [ 134.192076][ T2460] ? mutex_unlock+0x8f/0x230 [ 134.196671][ T2460] ? __cfi_mutex_unlock+0x10/0x10 [ 134.201706][ T2460] ? radix_tree_lookup+0x276/0x290 [ 134.206812][ T2460] ppp_dev_configure+0x7c9/0xa60 [ 134.211749][ T2460] ppp_ioctl+0x82d/0x17c0 [ 134.216075][ T2460] ? __cfi_ppp_ioctl+0x10/0x10 [ 134.220827][ T2460] ? __fget_files+0x2d1/0x330 [ 134.225493][ T2460] ? security_file_ioctl+0x95/0xc0 [ 134.230598][ T2460] ? __cfi_ppp_ioctl+0x10/0x10 [ 134.235352][ T2460] __se_sys_ioctl+0x12f/0x1b0 [ 134.240018][ T2460] __x64_sys_ioctl+0x7b/0x90 [ 134.244625][ T2460] x64_sys_call+0x58b/0x9a0 [ 134.249208][ T2460] do_syscall_64+0x4c/0xa0 [ 134.253623][ T2460] ? clear_bhb_loop+0x30/0x80 [ 134.258373][ T2460] ? clear_bhb_loop+0x30/0x80 [ 134.263036][ T2460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.269021][ T2460] RIP: 0033:0x7f7c3c99e159 [ 134.273441][ T2460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.293066][ T2460] RSP: 002b:00007f7c3d88a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.301470][ T2460] RAX: ffffffffffffffda RBX: 00007f7c3cc25fa0 RCX: 00007f7c3c99e159 [ 134.309437][ T2460] RDX: 0000200000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 134.317393][ T2460] RBP: 00007f7c3ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 134.325362][ T2460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.333435][ T2460] R13: 00007f7c3cc26038 R14: 00007f7c3cc25fa0 R15: 00007ffc2875c028 [ 134.341561][ T2460] [ 134.353496][ T2468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 134.363014][ T2468] netlink: 10 bytes leftover after parsing attributes in process `syz.1.562'. [ 134.459573][ T2473] xt_TCPMSS: Only works on TCP SYN packets [ 135.232920][ T2485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 135.249791][ T2486] loop5: detected capacity change from 0 to 2048 [ 135.293103][ T2489] ip_tables: iptables: counters copy to user failed while replacing table [ 135.305648][ T2486] loop5: p1 < > p4 [ 135.311920][ T2486] loop5: p4 size 722688 extends beyond EOD, truncated [ 135.346043][ T2488] loop2: detected capacity change from 0 to 8192 [ 135.383521][ T2488] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.620312][ T477] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 135.642294][ T2499] ./dev/sda1: Can't open blockdev [ 135.676513][ T2502] loop7: detected capacity change from 0 to 512 [ 135.778962][ T2502] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 135.788113][ T2502] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.801527][ T477] usb 2-1: device descriptor read/64, error -71 [ 135.813879][ T1418] EXT4-fs (loop7): unmounting filesystem. [ 136.071607][ T477] usb 2-1: device descriptor read/64, error -71 [ 136.341617][ T477] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 136.501566][ T477] usb 2-1: device descriptor read/64, error -71 [ 137.061622][ T477] usb 2-1: device descriptor read/64, error -71 [ 137.182130][ T477] usb usb2-port1: attempt power cycle [ 137.850995][ T2514] loop2: detected capacity change from 0 to 2048 [ 137.864912][ T2518] loop5: detected capacity change from 0 to 512 [ 137.871925][ T2518] ext4: Unknown parameter 'smackfshat' [ 137.892134][ T2514] loop2: p1 < > p4 [ 137.897886][ T2514] loop2: p4 size 722688 extends beyond EOD, truncated [ 137.909436][ T103] loop2: p1 < > p4 [ 137.914178][ T103] loop2: p4 size 722688 extends beyond EOD, truncated [ 137.993090][ T2519] loop4: detected capacity change from 0 to 40427 [ 138.009629][ T2519] F2FS-fs (loop4): Unrecognized mount option "9¾noquota" or missing value [ 138.131520][ T477] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 138.150293][ T2526] loop4: detected capacity change from 0 to 512 [ 138.156708][ T19] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 138.162529][ T477] usb 2-1: device descriptor read/8, error -71 [ 138.166217][ T2526] EXT4-fs: Ignoring removed orlov option [ 138.176379][ T2526] EXT4-fs: dax option not supported [ 138.292307][ T2528] loop2: detected capacity change from 0 to 512 [ 138.302138][ T2528] EXT4-fs (loop2): orphan cleanup on readonly fs [ 138.309015][ T2528] EXT4-fs error (device loop2): ext4_quota_enable:7032: comm syz.2.582: Bad quota inum: 5, type: 1 [ 138.320395][ T2530] x_tables: duplicate underflow at hook 3 [ 138.320555][ T2528] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 138.332057][ T477] usb 2-1: device descriptor read/8, error -71 [ 138.344173][ T2528] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 138.354720][ T2528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.364735][ T19] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 138.380922][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.392327][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.402512][ T19] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 138.417219][ T2534] ./dev/sda1: Can't open blockdev [ 138.417970][ T19] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 138.431493][ T19] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 138.436189][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 138.436218][ T28] audit: type=1400 audit(1790784234.392:2039): avc: denied { read } for pid=2536 comm="syz.7.585" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.439860][ T19] usb 6-1: Manufacturer: syz [ 138.473781][ T28] audit: type=1400 audit(1790784234.422:2040): avc: denied { open } for pid=2536 comm="syz.7.585" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.610825][ T28] audit: type=1400 audit(1790784234.422:2041): avc: denied { ioctl } for pid=2536 comm="syz.7.585" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.697020][ T19] usb 6-1: config 0 descriptor?? [ 138.707006][ T28] audit: type=1400 audit(1790784234.472:2042): avc: denied { unlink } for pid=2536 comm="syz.7.585" name="#18" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.838132][ T28] audit: type=1326 audit(1790784234.792:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.7.586" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 138.863061][ T28] audit: type=1326 audit(1790784234.792:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.7.586" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 138.888054][ T28] audit: type=1326 audit(1790784234.792:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.7.586" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 138.912925][ T28] audit: type=1326 audit(1790784234.792:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.7.586" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 138.937720][ T28] audit: type=1326 audit(1790784234.792:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.7.586" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 138.962918][ T28] audit: type=1326 audit(1790784234.792:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.7.586" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 139.016470][ T2549] loop4: detected capacity change from 0 to 1024 [ 139.129236][ T290] EXT4-fs (loop2): unmounting filesystem. [ 139.150912][ T2551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.588'. [ 139.263820][ T2555] loop2: detected capacity change from 0 to 4096 [ 139.288202][ T2555] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.305876][ T2555] EXT4-fs (loop2): Test dummy encryption mode enabled [ 139.313931][ T2555] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 139.322965][ T2555] System zones: 0-5 [ 139.331106][ T19] appleir 0003:05AC:8243.0007: item fetching failed at offset 0/1 [ 139.340623][ T19] appleir 0003:05AC:8243.0007: parse failed [ 139.347279][ T2555] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.356528][ T19] appleir: probe of 0003:05AC:8243.0007 failed with error -22 [ 139.768736][ T477] usb 6-1: USB disconnect, device number 8 [ 139.775162][ T2566] loop7: detected capacity change from 0 to 2048 [ 139.781529][ T19] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 139.841923][ T2566] loop7: p1 < > p4 [ 139.846367][ T2566] loop7: p4 size 722688 extends beyond EOD, truncated [ 139.956251][ T2561] EXT4-fs (loop2): unmounting filesystem. [ 139.967274][ T19] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 139.976757][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.993549][ T19] usb 5-1: Product: syz [ 139.999912][ T19] usb 5-1: Manufacturer: syz [ 140.007718][ T19] usb 5-1: SerialNumber: syz [ 140.217189][ T2570] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.224465][ T2570] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.232160][ T2570] device bridge_slave_0 entered promiscuous mode [ 140.239425][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.246912][ T2570] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.254586][ T2570] device bridge_slave_1 entered promiscuous mode [ 140.326513][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.333613][ T2570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.340990][ T2570] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.348079][ T2570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.408468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.427168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.435778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.445201][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.453686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.464975][ T591] device bridge_slave_1 left promiscuous mode [ 140.471081][ T591] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.478563][ T1092] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 140.478713][ T591] device bridge_slave_0 left promiscuous mode [ 140.492476][ T591] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.500480][ T591] device veth1_macvtap left promiscuous mode [ 140.506702][ T591] device veth0_vlan left promiscuous mode [ 140.566379][ T2583] loop7: detected capacity change from 0 to 128 [ 141.493637][ T19] rtl8150 5-1:1.0: couldn't reset the device [ 141.499705][ T19] rtl8150: probe of 5-1:1.0 failed with error -5 [ 141.521008][ T19] usb 5-1: USB disconnect, device number 9 [ 141.537686][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.539514][ T2595] loop7: detected capacity change from 0 to 256 [ 141.546475][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.569155][ T1092] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 141.578611][ T2570] device veth0_vlan entered promiscuous mode [ 141.586651][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.589385][ T1092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.595640][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.612701][ T1092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.619844][ T2570] device veth1_macvtap entered promiscuous mode [ 141.630046][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.637845][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.645520][ T1092] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 141.648028][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.659963][ T1092] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 141.667622][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.675856][ T1092] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 141.684225][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.701088][ T1092] usb 2-1: Manufacturer: syz [ 141.709146][ T1092] usb 2-1: config 0 descriptor?? [ 141.715786][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.724964][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.737093][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.745635][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.754467][ T2608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.602'. [ 141.764327][ T2608] netlink: 20 bytes leftover after parsing attributes in process `syz.5.602'. [ 141.781756][ T2608] netlink: 20 bytes leftover after parsing attributes in process `syz.5.602'. [ 141.796158][ T2608] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 141.806165][ T2608] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 141.857032][ T2611] ./dev/sda1: Can't open blockdev [ 142.022850][ T347] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.397647][ T1092] appleir 0003:05AC:8243.0008: item fetching failed at offset 0/1 [ 142.416777][ T1092] appleir 0003:05AC:8243.0008: parse failed [ 142.428985][ T1092] appleir: probe of 0003:05AC:8243.0008 failed with error -22 [ 142.531456][ T330] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 142.652227][ T1092] usb 2-1: USB disconnect, device number 12 [ 142.662598][ T2627] loop7: p1 < > p4 [ 142.666902][ T2627] loop7: p4 size 722688 extends beyond EOD, truncated [ 142.722579][ T330] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.732807][ T330] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 142.739940][ T2630] 9pnet_fd: Insufficient options for proto=fd [ 142.744885][ T330] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 142.751023][ T2630] netlink: 48 bytes leftover after parsing attributes in process `syz.8.607'. [ 142.759295][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.775674][ T330] usb 6-1: Product: syz [ 142.780084][ T330] usb 6-1: Manufacturer: syz [ 142.785846][ T330] usb 6-1: SerialNumber: syz [ 142.980976][ T2635] xt_TCPMSS: Only works on TCP SYN packets [ 143.985986][ T2637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 144.027174][ T2645] ./dev/sda1: Can't open blockdev [ 144.039461][ T28] kauditd_printk_skb: 377 callbacks suppressed [ 144.039474][ T28] audit: type=1107 audit(1790784239.992:2426): pid=2648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='‹' [ 144.129839][ T28] audit: type=1326 audit(1790784240.072:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2657 comm="syz.7.616" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 144.183500][ T28] audit: type=1326 audit(1790784240.072:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2657 comm="syz.7.616" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 144.230561][ T2669] set_capacity_and_notify: 4 callbacks suppressed [ 144.230590][ T2669] loop8: detected capacity change from 0 to 128 [ 144.302059][ T2669] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 144.656033][ T28] audit: type=1326 audit(1790784240.082:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2657 comm="syz.7.616" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 144.853480][ T28] audit: type=1326 audit(1790784240.082:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2657 comm="syz.7.616" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 145.081767][ T28] audit: type=1326 audit(1790784240.082:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2657 comm="syz.7.616" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 145.159771][ T28] audit: type=1326 audit(1790784240.082:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2657 comm="syz.7.616" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 145.184942][ T28] audit: type=1326 audit(1790784240.082:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2657 comm="syz.7.616" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 145.210126][ T28] audit: type=1326 audit(1790784240.082:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2657 comm="syz.7.616" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 145.238000][ T28] audit: type=1326 audit(1790784240.082:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2657 comm="syz.7.616" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3c99e159 code=0x7ffc0000 [ 145.304721][ T2673] loop8: detected capacity change from 0 to 256 [ 145.367108][ T330] usb 6-1: USB disconnect, device number 9 [ 145.382146][ T2653] loop4: detected capacity change from 0 to 40427 [ 145.416176][ T2653] F2FS-fs (loop4): invalid crc value [ 145.440510][ T2653] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.463908][ T2681] loop8: detected capacity change from 0 to 512 [ 145.476856][ T2681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.501293][ T2681] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 145.513510][ T2653] F2FS-fs (loop4): Start checkpoint disabled! [ 145.524193][ T2653] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 145.531846][ T2653] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 145.545747][ T2681] EXT4-fs (loop8): 1 truncate cleaned up [ 145.554705][ T2681] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 145.639985][ T2686] loop5: detected capacity change from 0 to 40427 [ 145.658228][ T2570] EXT4-fs (loop8): unmounting filesystem. [ 145.784484][ T842] kworker/u4:8: attempt to access beyond end of device [ 145.784484][ T842] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 145.877235][ T2701] loop8: detected capacity change from 0 to 40427 [ 145.887283][ T2701] F2FS-fs (loop8): invalid crc value [ 145.893887][ T2701] F2FS-fs (loop8): Found nat_bits in checkpoint [ 145.920851][ T2701] F2FS-fs (loop8): Start checkpoint disabled! [ 145.929493][ T2701] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 145.937188][ T2701] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 145.967072][ T2701] syz.8.626: attempt to access beyond end of device [ 145.967072][ T2701] loop8: rw=2049, sector=77824, nr_sectors = 2560 limit=40427 [ 145.981608][ T330] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 146.027056][ T842] kworker/u4:8: attempt to access beyond end of device [ 146.027056][ T842] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 146.171460][ T330] usb 6-1: Using ep0 maxpacket: 32 [ 146.179246][ T330] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 146.196156][ T330] usb 6-1: config 0 has no interface number 0 [ 146.207072][ T330] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 146.224269][ T330] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 146.243831][ T330] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 146.263118][ T330] usb 6-1: config 0 interface 196 has no altsetting 0 [ 146.280864][ T330] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 146.292715][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.301098][ T330] usb 6-1: Product: syz [ 146.305890][ T330] usb 6-1: Manufacturer: syz [ 146.311079][ T330] usb 6-1: SerialNumber: syz [ 146.329765][ T330] usb 6-1: config 0 descriptor?? [ 146.335093][ T2690] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 146.380239][ T2716] loop7: detected capacity change from 0 to 2048 [ 146.432101][ T2716] loop7: p1 < > p4 [ 146.437842][ T2716] loop7: p4 size 722688 extends beyond EOD, truncated [ 146.489048][ T2719] loop8: detected capacity change from 0 to 2048 [ 146.547130][ T330] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 146.555216][ T2719] loop8: p1 < > p4 [ 146.559831][ T2719] loop8: p4 size 722688 extends beyond EOD, truncated [ 146.569109][ T330] ipheth: probe of 6-1:0.196 failed with error -71 [ 146.581721][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.599348][ T330] usb 6-1: USB disconnect, device number 10 [ 146.951719][ T2725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.631'. [ 149.056538][ T2739] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 149.128919][ T2727] loop4: detected capacity change from 0 to 40427 [ 149.145161][ T2727] F2FS-fs (loop4): invalid crc value [ 149.202577][ T28] kauditd_printk_skb: 1276 callbacks suppressed [ 149.202593][ T28] audit: type=1326 audit(1790784245.162:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.5.639" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216699e159 code=0x7ffc0000 [ 149.239574][ T2749] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 149.240494][ T28] audit: type=1326 audit(1790784245.192:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.5.639" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216699e159 code=0x7ffc0000 [ 149.300246][ T28] audit: type=1326 audit(1790784245.192:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.5.639" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216699e159 code=0x7ffc0000 [ 149.304277][ T2727] F2FS-fs (loop4): Found nat_bits in checkpoint [ 149.374065][ T28] audit: type=1326 audit(1790784245.192:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.5.639" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f216699e159 code=0x7ffc0000 [ 149.399463][ T28] audit: type=1326 audit(1790784245.192:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.5.639" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216699e159 code=0x7ffc0000 [ 149.425582][ T28] audit: type=1326 audit(1790784245.192:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.5.639" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216699e159 code=0x7ffc0000 [ 149.451343][ T2727] F2FS-fs (loop4): Start checkpoint disabled! [ 149.461203][ T2727] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 149.480042][ T2759] loop8: detected capacity change from 0 to 2048 [ 149.486728][ T28] audit: type=1326 audit(1790784245.192:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.5.639" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216699e159 code=0x7ffc0000 [ 149.530148][ T2727] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 149.533983][ T28] audit: type=1326 audit(1790784245.192:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.5.639" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f216699e159 code=0x7ffc0000 [ 149.562756][ T28] audit: type=1326 audit(1790784245.242:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.5.639" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216699e159 code=0x7ffc0000 [ 149.565375][ T2759] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 149.598206][ T2760] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.611731][ T2759] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.735513][ T2774] FAULT_INJECTION: forcing a failure. [ 149.735513][ T2774] name failslab, interval 1, probability 0, space 0, times 0 [ 149.749746][ T2774] CPU: 0 PID: 2774 Comm: syz.1.644 Not tainted syzkaller #0 [ 149.757052][ T2774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.767111][ T2774] Call Trace: [ 149.770395][ T2774] [ 149.773324][ T2774] __dump_stack+0x21/0x24 [ 149.777676][ T2774] dump_stack_lvl+0x110/0x170 [ 149.782356][ T2774] ? __cfi_dump_stack_lvl+0x8/0x8 [ 149.787477][ T2774] dump_stack+0x15/0x24 [ 149.791636][ T2774] should_fail_ex+0x3bf/0x510 [ 149.796314][ T2774] __should_failslab+0xac/0xf0 [ 149.801075][ T2774] should_failslab+0x9/0x20 [ 149.805573][ T2774] kmem_cache_alloc_node+0x42/0x330 [ 149.810788][ T2774] ? __alloc_skb+0xe8/0x4a0 [ 149.815312][ T2774] ? mutex_lock+0x93/0x1b0 [ 149.819741][ T2774] __alloc_skb+0xe8/0x4a0 [ 149.824087][ T2774] netlink_dump+0x1e8/0xdc0 [ 149.828624][ T2774] ? __kasan_slab_free+0x11/0x20 [ 149.833563][ T2774] ? kfree_skbmem+0x10c/0x180 [ 149.838241][ T2774] ? refcount_inc+0x80/0x80 [ 149.842749][ T2774] ? kfree_skbmem+0x10c/0x180 [ 149.847518][ T2774] ? consume_skb+0xb3/0x1f0 [ 149.852023][ T2774] netlink_recvmsg+0x68f/0xe00 [ 149.856789][ T2774] ? __cfi_netlink_recvmsg+0x10/0x10 [ 149.862157][ T2774] ? save_fpregs_to_fpstate+0x199/0x220 [ 149.867794][ T2774] ? __switch_to+0x56f/0x1070 [ 149.872468][ T2774] ? __cfi_trace_event_raw_event_sched_switch+0x10/0x10 [ 149.879405][ T2774] ? security_socket_recvmsg+0x99/0xc0 [ 149.884867][ T2774] ? __cfi_netlink_recvmsg+0x10/0x10 [ 149.890244][ T2774] ____sys_recvmsg+0x2d6/0x5c0 [ 149.895029][ T2774] ? __sys_recvmsg_sock+0x50/0x50 [ 149.900155][ T2774] ? import_iovec+0x7c/0xb0 [ 149.904667][ T2774] ___sys_recvmsg+0x210/0x590 [ 149.909358][ T2774] ? kstrtoull+0x137/0x1d0 [ 149.913812][ T2774] ? __sys_recvmsg+0x290/0x290 [ 149.918681][ T2774] ? kstrtouint_from_user+0x113/0x170 [ 149.924061][ T2774] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 149.930143][ T2774] ? __fget_files+0x2d1/0x330 [ 149.934826][ T2774] ? __fdget+0x19c/0x220 [ 149.939071][ T2774] ? do_recvmmsg+0x19e/0x7e0 [ 149.943671][ T2774] do_recvmmsg+0x370/0x7e0 [ 149.948094][ T2774] ? __sys_recvmmsg+0x290/0x290 [ 149.952950][ T2774] ? __cfi_mutex_unlock+0x10/0x10 [ 149.957981][ T2774] __x64_sys_recvmmsg+0x195/0x250 [ 149.963009][ T2774] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 149.968560][ T2774] ? fpregs_restore_userregs+0x128/0x260 [ 149.974204][ T2774] ? switch_fpu_return+0xe/0x10 [ 149.979066][ T2774] x64_sys_call+0x3e7/0x9a0 [ 149.983573][ T2774] do_syscall_64+0x4c/0xa0 [ 149.988002][ T2774] ? clear_bhb_loop+0x30/0x80 [ 149.992686][ T2774] ? clear_bhb_loop+0x30/0x80 [ 149.997366][ T2774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.003263][ T2774] RIP: 0033:0x7fa3a979e159 [ 150.007683][ T2774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.027296][ T2774] RSP: 002b:00007fa3aa5fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 150.035723][ T2774] RAX: ffffffffffffffda RBX: 00007fa3a9a25fa0 RCX: 00007fa3a979e159 [ 150.043704][ T2774] RDX: 0000000000000001 RSI: 0000200000000900 RDI: 0000000000000006 [ 150.051686][ T2774] RBP: 00007fa3aa5fb090 R08: 0000000000000000 R09: 0000000000000000 [ 150.059660][ T2774] R10: 0000000040010120 R11: 0000000000000246 R12: 0000000000000001 [ 150.067638][ T2774] R13: 00007fa3a9a26038 R14: 00007fa3a9a25fa0 R15: 00007ffe901d0b88 [ 150.075620][ T2774] [ 150.118191][ T2570] EXT4-fs (loop8): unmounting filesystem. [ 150.163571][ T2783] loop8: detected capacity change from 0 to 512 [ 150.201823][ T2783] ext4: Unknown parameter 'smackfshat' [ 150.246637][ T2784] loop7: detected capacity change from 0 to 2048 [ 150.292222][ T2784] loop7: p1 < > p4 [ 150.302207][ T2784] loop7: p4 size 722688 extends beyond EOD, truncated [ 150.393187][ T8] kworker/u4:0: attempt to access beyond end of device [ 150.393187][ T8] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 150.511502][ T19] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 150.892520][ T19] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 150.911467][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.922686][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.951288][ T19] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 150.972163][ T19] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 150.981223][ T19] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 151.011453][ T19] usb 9-1: Manufacturer: syz [ 151.022207][ T19] usb 9-1: config 0 descriptor?? [ 151.344666][ T2802] loop7: detected capacity change from 0 to 16 [ 151.387338][ T2802] erofs: (device loop7): mounted with root inode @ nid 36. [ 151.418306][ T2804] loop5: detected capacity change from 0 to 2048 [ 151.419854][ T2798] syz.7.652: attempt to access beyond end of device [ 151.419854][ T2798] loop7: rw=524288, sector=1342177712, nr_sectors = 256 limit=16 [ 151.459539][ T2804] EXT4-fs (loop5): unsupported descriptor size 9 [ 151.472101][ T2796] syz.7.652: attempt to access beyond end of device [ 151.472101][ T2796] loop7: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 151.480017][ T2802] syz.7.652: attempt to access beyond end of device [ 151.480017][ T2802] loop7: rw=524288, sector=1342177528, nr_sectors = 184 limit=16 [ 151.531633][ T2798] syz.7.652: attempt to access beyond end of device [ 151.531633][ T2798] loop7: rw=0, sector=1342177816, nr_sectors = 32 limit=16 [ 151.559966][ T2802] syz.7.652: attempt to access beyond end of device [ 151.559966][ T2802] loop7: rw=524288, sector=1342177968, nr_sectors = 1864 limit=16 [ 151.574481][ T2796] syz.7.652: attempt to access beyond end of device [ 151.574481][ T2796] loop7: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 151.597554][ T2796] syz.7.652: attempt to access beyond end of device [ 151.597554][ T2796] loop7: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 151.631575][ T2802] syz.7.652: attempt to access beyond end of device [ 151.631575][ T2802] loop7: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 151.675838][ T2798] syz.7.652: attempt to access beyond end of device [ 151.675838][ T2798] loop7: rw=0, sector=1342177816, nr_sectors = 32 limit=16 [ 151.704402][ T2811] loop4: detected capacity change from 0 to 128 [ 151.935287][ T2796] syz.7.652: attempt to access beyond end of device [ 151.935287][ T2796] loop7: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 152.663347][ T19] appleir 0003:05AC:8243.0009: item fetching failed at offset 0/1 [ 152.671776][ T19] appleir 0003:05AC:8243.0009: parse failed [ 152.678058][ T19] appleir: probe of 0003:05AC:8243.0009 failed with error -22 [ 152.923090][ T19] usb 9-1: USB disconnect, device number 2 [ 153.226774][ T2804] loop5: detected capacity change from 0 to 131072 [ 153.236586][ T2804] F2FS-fs (loop5): Unrecognized mount option "./mytrace" or missing value [ 153.288009][ T2826] FAULT_INJECTION: forcing a failure. [ 153.288009][ T2826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.301373][ T2826] CPU: 1 PID: 2826 Comm: syz.5.660 Not tainted syzkaller #0 [ 153.308764][ T2826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.318824][ T2826] Call Trace: [ 153.322107][ T2826] [ 153.325041][ T2826] __dump_stack+0x21/0x24 [ 153.329379][ T2826] dump_stack_lvl+0x110/0x170 [ 153.334104][ T2826] ? __cfi_dump_stack_lvl+0x8/0x8 [ 153.339138][ T2826] dump_stack+0x15/0x24 [ 153.343304][ T2826] should_fail_ex+0x3bf/0x510 [ 153.347985][ T2826] should_fail+0xb/0x10 [ 153.352144][ T2826] should_fail_usercopy+0x1a/0x20 [ 153.357262][ T2826] _copy_to_user+0x1e/0x90 [ 153.361690][ T2826] simple_read_from_buffer+0xe9/0x160 [ 153.367068][ T2826] proc_fail_nth_read+0x1a6/0x220 [ 153.372098][ T2826] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 153.377652][ T2826] ? security_file_permission+0x94/0xb0 [ 153.383216][ T2826] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 153.388759][ T2826] vfs_read+0x286/0x930 [ 153.392927][ T2826] ? __cfi_vfs_read+0x10/0x10 [ 153.397626][ T2826] ? __kasan_check_write+0x14/0x20 [ 153.402748][ T2826] ? mutex_lock+0x93/0x1b0 [ 153.407154][ T2826] ? __cfi_mutex_lock+0x10/0x10 [ 153.411994][ T2826] ? __fdget_pos+0x2cd/0x380 [ 153.416562][ T2826] ? ksys_read+0x70/0x260 [ 153.420884][ T2826] ksys_read+0x14a/0x260 [ 153.425123][ T2826] ? __cfi_ksys_read+0x10/0x10 [ 153.429867][ T2826] ? debug_smp_processor_id+0x17/0x20 [ 153.435227][ T2826] __x64_sys_read+0x7b/0x90 [ 153.439730][ T2826] x64_sys_call+0x2f/0x9a0 [ 153.444142][ T2826] do_syscall_64+0x4c/0xa0 [ 153.448540][ T2826] ? clear_bhb_loop+0x30/0x80 [ 153.453195][ T2826] ? clear_bhb_loop+0x30/0x80 [ 153.457871][ T2826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.463741][ T2826] RIP: 0033:0x7f216695e98e [ 153.468149][ T2826] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.487735][ T2826] RSP: 002b:00007f2167810fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.496130][ T2826] RAX: ffffffffffffffda RBX: 00007f21678116c0 RCX: 00007f216695e98e [ 153.504109][ T2826] RDX: 000000000000000f RSI: 00007f21678110a0 RDI: 0000000000000006 [ 153.512063][ T2826] RBP: 00007f2167811090 R08: 0000000000000000 R09: 0000000000000000 [ 153.520017][ T2826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.527979][ T2826] R13: 00007f2166c26038 R14: 00007f2166c25fa0 R15: 00007fffb4c7f758 [ 153.535948][ T2826] [ 153.617788][ T2839] loop4: detected capacity change from 0 to 2048 [ 153.682193][ T2839] loop4: p1 < > p4 [ 153.686994][ T2839] loop4: p4 size 722688 extends beyond EOD, truncated [ 153.747687][ T2850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 153.763413][ T2850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 154.977321][ T28] kauditd_printk_skb: 550 callbacks suppressed [ 154.977386][ T28] audit: type=1400 audit(1790784250.922:4269): avc: denied { map } for pid=2866 comm="syz.7.674" path="socket:[30524]" dev="sockfs" ino=30524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 155.100204][ T28] audit: type=1400 audit(1790784250.932:4270): avc: denied { connect } for pid=2866 comm="syz.7.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.931494][ T1092] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 156.064670][ T2882] FAULT_INJECTION: forcing a failure. [ 156.064670][ T2882] name failslab, interval 1, probability 0, space 0, times 0 [ 156.086670][ T2882] CPU: 0 PID: 2882 Comm: syz.5.679 Not tainted syzkaller #0 [ 156.094001][ T2882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.104078][ T2882] Call Trace: [ 156.107362][ T2882] [ 156.110297][ T2882] __dump_stack+0x21/0x24 [ 156.114648][ T2882] dump_stack_lvl+0x110/0x170 [ 156.119348][ T2882] ? __cfi_dump_stack_lvl+0x8/0x8 [ 156.124390][ T2882] ? kasan_set_track+0x60/0x70 [ 156.129169][ T2882] ? kasan_set_track+0x4b/0x70 [ 156.133949][ T2882] ? kasan_save_alloc_info+0x1f/0x30 [ 156.139240][ T2882] ? __kasan_kmalloc+0x95/0xb0 [ 156.144029][ T2882] dump_stack+0x15/0x24 [ 156.148205][ T2882] should_fail_ex+0x3bf/0x510 [ 156.152901][ T2882] __should_failslab+0xac/0xf0 [ 156.157683][ T2882] should_failslab+0x9/0x20 [ 156.162200][ T2882] kmem_cache_alloc_node+0x42/0x330 [ 156.167414][ T2882] ? alloc_vmap_area+0x184/0x18c0 [ 156.172449][ T2882] alloc_vmap_area+0x184/0x18c0 [ 156.177326][ T2882] ? vm_map_ram+0x930/0x930 [ 156.181842][ T2882] ? __kasan_kmalloc+0x95/0xb0 [ 156.186613][ T2882] ? kmalloc_node_trace+0x3d/0xb0 [ 156.191650][ T2882] __get_vm_area_node+0x160/0x360 [ 156.196690][ T2882] __vmalloc_node_range+0x326/0x1440 [ 156.202075][ T2882] ? n_tty_open+0x1d/0x150 [ 156.206512][ T2882] ? __wake_up+0x12e/0x1a0 [ 156.210953][ T2882] ? __cfi___vmalloc_node_range+0x10/0x10 [ 156.216702][ T2882] ? ldsem_down_write+0xc5/0x602 [ 156.221673][ T2882] ? clear_nonspinnable+0x60/0x60 [ 156.226724][ T2882] ? n_tty_open+0x1d/0x150 [ 156.231155][ T2882] vzalloc+0x78/0x90 [ 156.235063][ T2882] ? n_tty_open+0x1d/0x150 [ 156.239483][ T2882] n_tty_open+0x1d/0x150 [ 156.243786][ T2882] tty_ldisc_setup+0x1d0/0x360 [ 156.248566][ T2882] tty_init_dev+0x286/0x4e0 [ 156.253090][ T2882] ptmx_open+0xdd/0x2f0 [ 156.257259][ T2882] chrdev_open+0x593/0x600 [ 156.261688][ T2882] ? __cfi_chrdev_open+0x10/0x10 [ 156.266639][ T2882] ? fsnotify_perm+0x3e9/0x5b0 [ 156.271423][ T2882] do_dentry_open+0x885/0x11f0 [ 156.276200][ T2882] ? __cfi_chrdev_open+0x10/0x10 [ 156.281150][ T2882] vfs_open+0x73/0x80 [ 156.285174][ T2882] path_openat+0x2699/0x2f30 [ 156.289787][ T2882] ? getname_flags+0xba/0x510 [ 156.294497][ T2882] ? do_filp_open+0x420/0x420 [ 156.299210][ T2882] do_filp_open+0x1ee/0x420 [ 156.303745][ T2882] ? __cfi_do_filp_open+0x10/0x10 [ 156.308800][ T2882] ? alloc_fd+0x4c1/0x570 [ 156.313162][ T2882] do_sys_openat2+0x15e/0x820 [ 156.317865][ T2882] ? __se_sys_futex+0x136/0x310 [ 156.322749][ T2882] ? do_sys_open+0xe0/0xe0 [ 156.327189][ T2882] ? __this_cpu_preempt_check+0x13/0x20 [ 156.332752][ T2882] ? xfd_validate_state+0x70/0x150 [ 156.337894][ T2882] __x64_sys_openat+0x136/0x160 [ 156.342792][ T2882] x64_sys_call+0x783/0x9a0 [ 156.347319][ T2882] do_syscall_64+0x4c/0xa0 [ 156.351755][ T2882] ? clear_bhb_loop+0x30/0x80 [ 156.356449][ T2882] ? clear_bhb_loop+0x30/0x80 [ 156.361146][ T2882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.367043][ T2882] RIP: 0033:0x7f216699e159 [ 156.371475][ T2882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.391088][ T2882] RSP: 002b:00007f2167811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 156.399520][ T2882] RAX: ffffffffffffffda RBX: 00007f2166c25fa0 RCX: 00007f216699e159 [ 156.407509][ T2882] RDX: 0000000000000041 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 156.415491][ T2882] RBP: 00007f2166a3506b R08: 0000000000000000 R09: 0000000000000000 [ 156.423475][ T2882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.431463][ T2882] R13: 00007f2166c26038 R14: 00007f2166c25fa0 R15: 00007fffb4c7f758 [ 156.439445][ T2882] [ 156.447183][ T2882] syz.5.679: vmalloc error: size 8936, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 156.462652][ T2882] CPU: 0 PID: 2882 Comm: syz.5.679 Not tainted syzkaller #0 [ 156.469963][ T2882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.480027][ T2882] Call Trace: [ 156.483321][ T2882] [ 156.486259][ T2882] __dump_stack+0x21/0x24 [ 156.490607][ T2882] dump_stack_lvl+0x110/0x170 [ 156.495305][ T2882] ? __cfi_dump_stack_lvl+0x8/0x8 [ 156.500351][ T2882] ? pr_cont_kernfs_name+0x133/0x160 [ 156.505662][ T2882] dump_stack+0x15/0x24 [ 156.509844][ T2882] warn_alloc+0x1dc/0x200 [ 156.514192][ T2882] ? __cfi_warn_alloc+0x10/0x10 [ 156.519058][ T2882] ? __get_vm_area_node+0x175/0x360 [ 156.524276][ T2882] __vmalloc_node_range+0x34b/0x1440 [ 156.529582][ T2882] ? __wake_up+0x12e/0x1a0 [ 156.534020][ T2882] ? __cfi___vmalloc_node_range+0x10/0x10 [ 156.539850][ T2882] ? ldsem_down_write+0xc5/0x602 [ 156.544813][ T2882] ? clear_nonspinnable+0x60/0x60 [ 156.549854][ T2882] ? n_tty_open+0x1d/0x150 [ 156.554292][ T2882] vzalloc+0x78/0x90 [ 156.558200][ T2882] ? n_tty_open+0x1d/0x150 [ 156.562627][ T2882] n_tty_open+0x1d/0x150 [ 156.566884][ T2882] tty_ldisc_setup+0x1d0/0x360 [ 156.571666][ T2882] tty_init_dev+0x286/0x4e0 [ 156.576190][ T2882] ptmx_open+0xdd/0x2f0 [ 156.580462][ T2882] chrdev_open+0x593/0x600 [ 156.584893][ T2882] ? __cfi_chrdev_open+0x10/0x10 [ 156.589848][ T2882] ? fsnotify_perm+0x3e9/0x5b0 [ 156.594628][ T2882] do_dentry_open+0x885/0x11f0 [ 156.599413][ T2882] ? __cfi_chrdev_open+0x10/0x10 [ 156.604465][ T2882] vfs_open+0x73/0x80 [ 156.608465][ T2882] path_openat+0x2699/0x2f30 [ 156.613073][ T2882] ? getname_flags+0xba/0x510 [ 156.617757][ T2882] ? do_filp_open+0x420/0x420 [ 156.622452][ T2882] do_filp_open+0x1ee/0x420 [ 156.626967][ T2882] ? __cfi_do_filp_open+0x10/0x10 [ 156.632016][ T2882] ? alloc_fd+0x4c1/0x570 [ 156.636365][ T2882] do_sys_openat2+0x15e/0x820 [ 156.641070][ T2882] ? __se_sys_futex+0x136/0x310 [ 156.645943][ T2882] ? do_sys_open+0xe0/0xe0 [ 156.650382][ T2882] ? __this_cpu_preempt_check+0x13/0x20 [ 156.655945][ T2882] ? xfd_validate_state+0x70/0x150 [ 156.661080][ T2882] __x64_sys_openat+0x136/0x160 [ 156.665962][ T2882] x64_sys_call+0x783/0x9a0 [ 156.670487][ T2882] do_syscall_64+0x4c/0xa0 [ 156.674933][ T2882] ? clear_bhb_loop+0x30/0x80 [ 156.679624][ T2882] ? clear_bhb_loop+0x30/0x80 [ 156.684318][ T2882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.690226][ T2882] RIP: 0033:0x7f216699e159 [ 156.694657][ T2882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.714276][ T2882] RSP: 002b:00007f2167811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 156.722704][ T2882] RAX: ffffffffffffffda RBX: 00007f2166c25fa0 RCX: 00007f216699e159 [ 156.730693][ T2882] RDX: 0000000000000041 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 156.738685][ T2882] RBP: 00007f2166a3506b R08: 0000000000000000 R09: 0000000000000000 [ 156.746731][ T2882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.754715][ T2882] R13: 00007f2166c26038 R14: 00007f2166c25fa0 R15: 00007fffb4c7f758 [ 156.762709][ T2882] [ 156.766457][ T1092] usb 8-1: Using ep0 maxpacket: 32 [ 156.775606][ T2882] Mem-Info: [ 156.778860][ T2882] active_anon:11628 inactive_anon:9 isolated_anon:0 [ 156.778860][ T2882] active_file:11715 inactive_file:13304 isolated_file:0 [ 156.778860][ T2882] unevictable:4096 dirty:276 writeback:0 [ 156.778860][ T2882] slab_reclaimable:9498 slab_unreclaimable:91456 [ 156.778860][ T2882] mapped:31854 shmem:3053 pagetables:791 [ 156.778860][ T2882] sec_pagetables:0 bounce:0 [ 156.778860][ T2882] kernel_misc_reclaimable:0 [ 156.778860][ T2882] free:1484262 free_pcp:7685 free_cma:0 [ 156.834391][ T2882] Node 0 active_anon:46212kB inactive_anon:36kB active_file:46860kB inactive_file:53216kB unevictable:16384kB isolated(anon):0kB isolated(file):0kB mapped:123316kB dirty:1104kB writeback:0kB shmem:12212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4872kB pagetables:2964kB sec_pagetables:0kB all_unreclaimable? no [ 156.871759][ T1092] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 156.883716][ T1092] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.906386][ T1092] usb 8-1: config 0 descriptor?? [ 156.914406][ T2899] loop5: detected capacity change from 0 to 7 [ 156.931903][ T2882] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971864kB mlocked:0kB bounce:0kB free_pcp:5380kB local_pcp:5380kB free_cma:0kB [ 156.967352][ T2882] lowmem_reserve[]: 0 3932 3932 3932 [ 156.975691][ T2882] Normal free:2970820kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:46252kB inactive_anon:36kB active_file:46860kB inactive_file:53216kB unevictable:16384kB writepending:1120kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:33812kB local_pcp:20288kB free_cma:0kB [ 157.012377][ T2882] lowmem_reserve[]: 0 0 0 0 [ 157.019046][ T2882] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB [ 157.039448][ T2882] Normal: 3077*4kB (UM) 1254*8kB (UM) 1168*16kB (UME) 624*32kB (ME) 322*64kB (ME) 64*128kB (UM) 48*256kB (M) 13*512kB (UM) 13*1024kB (UM) 13*2048kB (UME) 689*4096kB (M) = 2970820kB [ 157.057759][ T2882] 33248 total pagecache pages [ 157.063005][ T2882] 0 pages in swap cache [ 157.067167][ T2882] Free swap = 124532kB [ 157.071936][ T2882] Total swap = 124996kB [ 157.076239][ T2882] 2097051 pages RAM [ 157.080043][ T2882] 0 pages HighMem/MovableOnly [ 157.085104][ T2882] 347485 pages reserved [ 157.089329][ T2882] 0 pages cma reserved [ 157.101764][ T2882] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 158.362273][ T1613] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 158.531487][ T1613] usb 6-1: device descriptor read/64, error -71 [ 158.665014][ T19] usb 8-1: USB disconnect, device number 4 [ 158.801554][ T1613] usb 6-1: device descriptor read/64, error -71 [ 159.000249][ T28] audit: type=1400 audit(1790784254.952:4271): avc: denied { append } for pid=2930 comm="syz.7.694" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 159.091547][ T1613] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 159.251573][ T1613] usb 6-1: device descriptor read/64, error -71 [ 159.533094][ T2941] FAULT_INJECTION: forcing a failure. [ 159.533094][ T2941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.553416][ T2930] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.561532][ T1613] usb 6-1: device descriptor read/64, error -71 [ 159.567864][ T2941] CPU: 1 PID: 2941 Comm: syz.4.697 Not tainted syzkaller #0 [ 159.575172][ T2941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.585243][ T2941] Call Trace: [ 159.588544][ T2941] [ 159.591480][ T2941] __dump_stack+0x21/0x24 [ 159.595835][ T2941] dump_stack_lvl+0x110/0x170 [ 159.600534][ T2941] ? __cfi_dump_stack_lvl+0x8/0x8 [ 159.605584][ T2941] ? schedule+0xd4/0x170 [ 159.609853][ T2941] dump_stack+0x15/0x24 [ 159.614029][ T2941] should_fail_ex+0x3bf/0x510 [ 159.618727][ T2941] should_fail+0xb/0x10 [ 159.622895][ T2941] should_fail_usercopy+0x1a/0x20 [ 159.627935][ T2941] _copy_from_user+0x1e/0xc0 [ 159.632552][ T2941] iovec_from_user+0x1aa/0x2e0 [ 159.637334][ T2941] __import_iovec+0x6d/0x460 [ 159.641947][ T2941] import_iovec+0x7c/0xb0 [ 159.646294][ T2941] do_preadv+0x1f8/0x390 [ 159.650563][ T2941] ? vfs_writev+0x5f0/0x5f0 [ 159.655089][ T2941] ? __se_sys_futex+0x136/0x310 [ 159.659958][ T2941] ? __this_cpu_preempt_check+0x13/0x20 [ 159.665526][ T2941] ? xfd_validate_state+0x70/0x150 [ 159.670673][ T2941] ? __kasan_check_write+0x14/0x20 [ 159.675807][ T2941] ? fpregs_restore_userregs+0x128/0x260 [ 159.681457][ T2941] __x64_sys_preadv2+0xd7/0x100 [ 159.686325][ T2941] x64_sys_call+0x243/0x9a0 [ 159.690938][ T2941] do_syscall_64+0x4c/0xa0 [ 159.695381][ T2941] ? clear_bhb_loop+0x30/0x80 [ 159.700073][ T2941] ? clear_bhb_loop+0x30/0x80 [ 159.704771][ T2941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.710682][ T2941] RIP: 0033:0x7f8c3119e159 [ 159.715108][ T2941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.734730][ T2941] RSP: 002b:00007f8c32072028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 159.743162][ T2941] RAX: ffffffffffffffda RBX: 00007f8c31425fa0 RCX: 00007f8c3119e159 [ 159.751157][ T2941] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 159.759233][ T2941] RBP: 00007f8c3123506b R08: 0000000000007fff R09: 0000000000000000 [ 159.767227][ T2941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.775400][ T2941] R13: 00007f8c31426038 R14: 00007f8c31425fa0 R15: 00007fff62e78ed8 [ 159.783391][ T2941] [ 159.791539][ T1613] usb usb6-port1: attempt power cycle [ 159.988155][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 160.013714][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 160.054927][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 160.088868][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 160.112655][ T19] rtc rtc0: __rtc_set_alarm: err=-22 [ 161.101520][ T1613] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 161.203107][ T1613] usb 6-1: unable to get BOS descriptor or descriptor too short [ 161.223798][ T1613] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 161.259822][ T1613] usb 6-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 161.281749][ T477] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 161.300060][ T1613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.318419][ T1613] usb 6-1: Product: syz [ 161.322858][ T1613] usb 6-1: Manufacturer: syz [ 161.327465][ T1613] usb 6-1: SerialNumber: syz [ 161.471518][ T477] usb 9-1: Using ep0 maxpacket: 8 [ 161.479611][ T477] usb 9-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 161.499412][ T477] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.519158][ T477] usb 9-1: Product: syz [ 161.523553][ T477] usb 9-1: Manufacturer: syz [ 161.528160][ T477] usb 9-1: SerialNumber: syz [ 161.570353][ T477] usb 9-1: config 0 descriptor?? [ 161.590975][ T1613] usb 6-1: USB disconnect, device number 13 [ 161.848750][ T2983] input: syz1 as /devices/virtual/input/input10 [ 162.997243][ T1613] kernel write not supported for file /cpuinfo (pid: 1613 comm: kworker/1:9) [ 163.626302][ T28] audit: type=1400 audit(1790784259.582:4272): avc: denied { bind } for pid=3041 comm="syz.7.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.831665][ T3049] netlink: 32 bytes leftover after parsing attributes in process `syz.7.730'. [ 164.388395][ T60] usb 9-1: USB disconnect, device number 3 [ 164.851563][ T330] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 164.859232][ T19] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 165.062791][ T330] usb 5-1: config 0 has no interfaces? [ 165.068564][ T330] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 165.078135][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.086849][ T19] usb 8-1: unable to get BOS descriptor or descriptor too short [ 165.104892][ T330] usb 5-1: config 0 descriptor?? [ 165.110345][ T19] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.124684][ T19] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.144888][ T19] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 165.153984][ T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.162015][ T19] usb 8-1: Product: syz [ 165.166181][ T19] usb 8-1: Manufacturer: syz [ 165.170782][ T19] usb 8-1: SerialNumber: syz [ 165.195567][ T19] usb 8-1: selecting invalid altsetting 1 [ 165.201551][ T19] usb 8-1: unit 6 not found! [ 165.312553][ T28] audit: type=1400 audit(1790784261.272:4273): avc: denied { create } for pid=3059 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.332969][ T477] usb 5-1: USB disconnect, device number 10 [ 166.175525][ T19] usb 8-1: 2:0: failed to get current value for ch 0 (-71) [ 166.203822][ T19] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 166.232092][ T19] usb 8-1: USB disconnect, device number 5 [ 166.241853][ T60] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 166.434058][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.460707][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.480927][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.501756][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.524437][ T60] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 166.543315][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.560660][ T60] usb 5-1: config 0 descriptor?? [ 166.727039][ T3107] FAULT_INJECTION: forcing a failure. [ 166.727039][ T3107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.740240][ T3107] CPU: 0 PID: 3107 Comm: syz.7.753 Not tainted syzkaller #0 [ 166.747547][ T3107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.757612][ T3107] Call Trace: [ 166.760908][ T3107] [ 166.763858][ T3107] __dump_stack+0x21/0x24 [ 166.768219][ T3107] dump_stack_lvl+0x110/0x170 [ 166.772927][ T3107] ? __cfi_dump_stack_lvl+0x8/0x8 [ 166.777979][ T3107] ? __kasan_check_write+0x14/0x20 [ 166.783118][ T3107] dump_stack+0x15/0x24 [ 166.787300][ T3107] should_fail_ex+0x3bf/0x510 [ 166.791996][ T3107] should_fail+0xb/0x10 [ 166.796168][ T3107] should_fail_usercopy+0x1a/0x20 [ 166.801389][ T3107] strncpy_from_user+0x24/0x2c0 [ 166.806268][ T3107] ? kmem_cache_alloc+0x166/0x320 [ 166.811316][ T3107] ? getname_flags+0xba/0x510 [ 166.816015][ T3107] getname_flags+0xf5/0x510 [ 166.820539][ T3107] getname+0x19/0x20 [ 166.824449][ T3107] __x64_sys_execve+0x78/0xb0 [ 166.829151][ T3107] x64_sys_call+0x98/0x9a0 [ 166.833586][ T3107] do_syscall_64+0x4c/0xa0 [ 166.838024][ T3107] ? clear_bhb_loop+0x30/0x80 [ 166.842721][ T3107] ? clear_bhb_loop+0x30/0x80 [ 166.847432][ T3107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.853525][ T3107] RIP: 0033:0x7f7c3c99e159 [ 166.857953][ T3107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.877755][ T3107] RSP: 002b:00007f7c3d88a028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 166.886361][ T3107] RAX: ffffffffffffffda RBX: 00007f7c3cc25fa0 RCX: 00007f7c3c99e159 [ 166.894349][ T3107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.902333][ T3107] RBP: 00007f7c3ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 166.910319][ T3107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.918345][ T3107] R13: 00007f7c3cc26038 R14: 00007f7c3cc25fa0 R15: 00007ffc2875c028 [ 166.926344][ T3107] [ 167.032411][ T28] audit: type=1400 audit(1790784262.932:4274): avc: denied { execmem } for pid=3110 comm="syz.7.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 167.053267][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.060376][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.067713][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.074693][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.081569][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.088541][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.095413][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.107139][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.117374][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.125195][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.134091][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.141128][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.149980][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.157874][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.485881][ T28] audit: type=1400 audit(1790784263.132:4275): avc: denied { create } for pid=3110 comm="syz.7.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.523791][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.530869][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.646652][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.660674][ T28] audit: type=1400 audit(1790784263.152:4276): avc: denied { write } for pid=3110 comm="syz.7.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.746888][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 167.937044][ T28] audit: type=1400 audit(1790784263.152:4277): avc: denied { nlmsg_write } for pid=3110 comm="syz.7.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.975348][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 168.016909][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 168.025210][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 168.032245][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 168.038962][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 168.045707][ T60] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 168.053267][ T60] lua 0003:1E7D:2C2E.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 168.074946][ T60] usb 5-1: USB disconnect, device number 11 [ 168.090481][ T3133] FAULT_INJECTION: forcing a failure. [ 168.090481][ T3133] name failslab, interval 1, probability 0, space 0, times 0 [ 168.096926][ T3132] fido_id[3132]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 168.140169][ T3133] CPU: 1 PID: 3133 Comm: syz.7.763 Not tainted syzkaller #0 [ 168.147507][ T3133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.157573][ T3133] Call Trace: [ 168.160867][ T3133] [ 168.163809][ T3133] __dump_stack+0x21/0x24 [ 168.168164][ T3133] dump_stack_lvl+0x110/0x170 [ 168.172877][ T3133] ? __cfi_dump_stack_lvl+0x8/0x8 [ 168.177945][ T3133] dump_stack+0x15/0x24 [ 168.182148][ T3133] should_fail_ex+0x3bf/0x510 [ 168.187021][ T3133] __should_failslab+0xac/0xf0 [ 168.191812][ T3133] should_failslab+0x9/0x20 [ 168.196423][ T3133] __kmem_cache_alloc_node+0x3d/0x2d0 [ 168.201824][ T3133] ? parse_opts+0x185/0x5c0 [ 168.206351][ T3133] ? parse_opts+0x185/0x5c0 [ 168.210871][ T3133] __kmalloc_node_track_caller+0xa1/0x1e0 [ 168.216612][ T3133] kstrdup+0x3b/0x80 [ 168.220533][ T3133] parse_opts+0x185/0x5c0 [ 168.224890][ T3133] ? p9_fd_show_options+0x1a0/0x1a0 [ 168.230245][ T3133] ? __kasan_slab_free+0x11/0x20 [ 168.235314][ T3133] ? slab_free_freelist_hook+0xc2/0x190 [ 168.240896][ T3133] p9_fd_create+0x35/0x410 [ 168.245422][ T3133] p9_client_create+0x7b0/0x10e0 [ 168.250393][ T3133] ? __cfi_p9_client_create+0x10/0x10 [ 168.255799][ T3133] ? memset+0x35/0x40 [ 168.259803][ T3133] v9fs_session_init+0x1c2/0x16e0 [ 168.264853][ T3133] ? __cfi_v9fs_session_init+0x10/0x10 [ 168.270344][ T3133] ? kasan_save_alloc_info+0x1f/0x30 [ 168.275645][ T3133] ? __kasan_kmalloc+0x95/0xb0 [ 168.280439][ T3133] ? v9fs_mount+0xb6/0xa90 [ 168.284884][ T3133] ? kmalloc_trace+0x40/0xb0 [ 168.289495][ T3133] v9fs_mount+0xcc/0xa90 [ 168.293754][ T3133] ? __cfi_v9fs_mount+0x10/0x10 [ 168.298633][ T3133] ? cap_capable+0x1a6/0x230 [ 168.303335][ T3133] legacy_get_tree+0xfe/0x1a0 [ 168.308480][ T3133] ? __cfi_v9fs_mount+0x10/0x10 [ 168.313630][ T3133] vfs_get_tree+0x9a/0x270 [ 168.318161][ T3133] do_new_mount+0x251/0xb40 [ 168.322920][ T3133] ? security_capable+0x99/0xc0 [ 168.327802][ T3133] path_mount+0x640/0xfd0 [ 168.332156][ T3133] __se_sys_mount+0x320/0x390 [ 168.336857][ T3133] ? __this_cpu_preempt_check+0x13/0x20 [ 168.342424][ T3133] ? __x64_sys_mount+0xd0/0xd0 [ 168.347297][ T3133] ? __kasan_check_write+0x14/0x20 [ 168.352431][ T3133] ? fpregs_restore_userregs+0x128/0x260 [ 168.358092][ T3133] __x64_sys_mount+0xbf/0xd0 [ 168.362734][ T3133] x64_sys_call+0x65d/0x9a0 [ 168.367263][ T3133] do_syscall_64+0x4c/0xa0 [ 168.371712][ T3133] ? clear_bhb_loop+0x30/0x80 [ 168.376411][ T3133] ? clear_bhb_loop+0x30/0x80 [ 168.381112][ T3133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.387109][ T3133] RIP: 0033:0x7f7c3c99e159 [ 168.391544][ T3133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.411342][ T3133] RSP: 002b:00007f7c3d88a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.419774][ T3133] RAX: ffffffffffffffda RBX: 00007f7c3cc25fa0 RCX: 00007f7c3c99e159 [ 168.427769][ T3133] RDX: 00002000000000c0 RSI: 0000200000000200 RDI: 0000000000000000 [ 168.435755][ T3133] RBP: 00007f7c3ca3506b R08: 0000200000000300 R09: 0000000000000000 [ 168.443741][ T3133] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 168.451732][ T3133] R13: 00007f7c3cc26038 R14: 00007f7c3cc25fa0 R15: 00007ffc2875c028 [ 168.459728][ T3133] [ 168.761913][ T60] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 168.964052][ T60] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 168.981462][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.989478][ T60] usb 9-1: Product: syz [ 169.081868][ T60] usb 9-1: Manufacturer: syz [ 169.100967][ T60] usb 9-1: SerialNumber: syz [ 169.124035][ T60] usb 9-1: config 0 descriptor?? [ 169.343563][ T60] usb 9-1: USB disconnect, device number 4 [ 169.508078][ T3168] mmap: syz.5.771 (3168) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.522624][ T3165] kvm [3164]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 169.562064][ T3165] kvm [3164]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 170.011475][ T60] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 170.032864][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.039980][ T3179] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.048401][ T3179] device bridge_slave_0 entered promiscuous mode [ 170.067776][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.081152][ T3179] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.092021][ T3179] device bridge_slave_1 entered promiscuous mode [ 170.116601][ T3186] syz.8.781 uses obsolete (PF_INET,SOCK_PACKET) [ 170.171454][ T19] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 170.201127][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.208220][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.215521][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.222565][ T3179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.231700][ T60] usb 6-1: unable to get BOS descriptor or descriptor too short [ 170.242265][ T60] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 170.245911][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.261285][ T60] usb 6-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 170.270704][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.270710][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.285971][ T60] usb 6-1: Product: syz [ 170.285996][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.290129][ T60] usb 6-1: Manufacturer: syz [ 170.301954][ T60] usb 6-1: SerialNumber: syz [ 170.309911][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.320419][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.327508][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.346461][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.356289][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.363412][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.373149][ T19] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.386779][ T19] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.396719][ T19] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.406596][ T19] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.419621][ T19] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 170.429231][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.437139][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.441126][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.466003][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.477401][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.485727][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.493612][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.502195][ T3179] device veth0_vlan entered promiscuous mode [ 170.517648][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.521903][ T60] usb 6-1: USB disconnect, device number 14 [ 170.530661][ T3179] device veth1_macvtap entered promiscuous mode [ 170.564101][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.575452][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.635618][ T308] device bridge_slave_1 left promiscuous mode [ 170.642013][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.649576][ T308] device bridge_slave_0 left promiscuous mode [ 170.656280][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.658592][ T1613] usb 8-1: USB disconnect, device number 6 [ 170.673644][ T308] device veth1_macvtap left promiscuous mode [ 170.680052][ T308] device veth0_vlan left promiscuous mode [ 170.711574][ T1092] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 171.052261][ T1092] usb 9-1: not running at top speed; connect to a high speed hub [ 171.060751][ T1092] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 171.073102][ T1092] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 171.082246][ T1092] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.090240][ T1092] usb 9-1: Product: syz [ 171.094520][ T1092] usb 9-1: Manufacturer: syz [ 171.099290][ T1092] usb 9-1: SerialNumber: syz [ 171.107438][ T3198] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 171.200247][ T3211] ================================================================== [ 171.208324][ T3211] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0 [ 171.215078][ T3211] Write of size 8 at addr ffff88810ded2950 by task syz.7.791/3211 [ 171.222897][ T3211] [ 171.225242][ T3211] CPU: 1 PID: 3211 Comm: syz.7.791 Not tainted syzkaller #0 [ 171.232562][ T3211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.242613][ T3211] Call Trace: [ 171.245912][ T3211] [ 171.248874][ T3211] __dump_stack+0x21/0x24 [ 171.253203][ T3211] dump_stack_lvl+0x110/0x170 [ 171.255967][ T28] audit: type=1400 audit(1790784267.212:4278): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[9594]" dev="pipefs" ino=9594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 171.257888][ T3211] ? __cfi_dump_stack_lvl+0x8/0x8 [ 171.286035][ T3211] ? mutex_lock+0x86/0x1b0 [ 171.290468][ T3211] print_address_description+0x71/0x200 [ 171.296115][ T3211] print_report+0x4a/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.300467][ T3211] kasan_report+0x122/0x150 [ 171.305001][ T3211] ? mutex_lock+0x86/0x1b0 [ 171.309451][ T3211] kasan_check_range+0x249/0x2a0 [ 171.314415][ T3211] __kasan_check_write+0x14/0x20 [ 171.319371][ T3211] mutex_lock+0x86/0x1b0 [ 171.323723][ T3211] ? __cfi_mutex_lock+0x10/0x10 [ 171.328587][ T3211] ? kfree+0x6f/0xf0 [ 171.332659][ T3211] ? l2tp_session_put+0xaf/0x1a0 [ 171.337608][ T3211] ? l2tp_session_delete+0x3df/0x4d0 [ 171.342923][ T3211] pppol2tp_release+0x178/0x2b0 [ 171.347788][ T3211] sock_close+0xc9/0x220 [ 171.352037][ T3211] ? __cfi_sock_close+0x10/0x10 [ 171.356897][ T3211] __fput+0x1fd/0x8f0 [ 171.360897][ T3211] ____fput+0x15/0x20 [ 171.364892][ T3211] task_work_run+0x1e1/0x250 [ 171.369490][ T3211] ? __cfi_task_work_run+0x10/0x10 [ 171.374596][ T3211] ? __cfi___close_range+0x10/0x10 [ 171.379689][ T3211] exit_to_user_mode_loop+0x9b/0xb0 [ 171.384864][ T3211] exit_to_user_mode_prepare+0x87/0xd0 [ 171.390300][ T3211] syscall_exit_to_user_mode+0x1a/0x30 [ 171.395868][ T3211] do_syscall_64+0x58/0xa0 [ 171.400264][ T3211] ? clear_bhb_loop+0x30/0x80 [ 171.404918][ T3211] ? clear_bhb_loop+0x30/0x80 [ 171.409570][ T3211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.415445][ T3211] RIP: 0033:0x7f7c3c99e159 [ 171.419871][ T3211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.439482][ T3211] RSP: 002b:00007ffc2875c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 171.447879][ T3211] RAX: 0000000000000000 RBX: 00007ffc2875c270 RCX: 00007f7c3c99e159 [ 171.455835][ T3211] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 171.463801][ T3211] RBP: 0000000000029ca9 R08: 0000000000000001 R09: 0000000000000000 [ 171.471864][ T3211] R10: 0000001b2c520000 R11: 0000000000000246 R12: 00007ffc2875c2b0 [ 171.479823][ T3211] R13: 00007f7c3cc25fac R14: 0000000000029cdc R15: 00007f7c3cc25fa0 [ 171.487779][ T3211] [ 171.490792][ T3211] [ 171.493094][ T3211] Allocated by task 3212: [ 171.497395][ T3211] kasan_set_track+0x4b/0x70 [ 171.501974][ T3211] kasan_save_alloc_info+0x1f/0x30 [ 171.507063][ T3211] __kasan_kmalloc+0x95/0xb0 [ 171.511637][ T3211] __kmalloc+0xb4/0x1e0 [ 171.515779][ T3211] l2tp_session_create+0x38/0xbd0 [ 171.520802][ T3211] pppol2tp_connect+0xbf5/0x1640 [ 171.525734][ T3211] __sys_connect+0x3da/0x460 [ 171.530311][ T3211] __x64_sys_connect+0x7a/0x90 [ 171.535070][ T3211] x64_sys_call+0x88d/0x9a0 [ 171.539569][ T3211] do_syscall_64+0x4c/0xa0 [ 171.544080][ T3211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.550044][ T3211] [ 171.552344][ T3211] Freed by task 3211: [ 171.556314][ T3211] kasan_set_track+0x4b/0x70 [ 171.560885][ T3211] kasan_save_free_info+0x2b/0x40 [ 171.565935][ T3211] ____kasan_slab_free+0x132/0x180 [ 171.571229][ T3211] __kasan_slab_free+0x11/0x20 [ 171.576006][ T3211] slab_free_freelist_hook+0xc2/0x190 [ 171.581377][ T3211] __kmem_cache_free+0xb7/0x1b0 [ 171.586232][ T3211] kfree+0x6f/0xf0 [ 171.589945][ T3211] l2tp_session_put+0xaf/0x1a0 [ 171.594714][ T3211] l2tp_session_delete+0x3df/0x4d0 [ 171.599818][ T3211] pppol2tp_release+0x169/0x2b0 [ 171.604657][ T3211] sock_close+0xc9/0x220 [ 171.608881][ T3211] __fput+0x1fd/0x8f0 [ 171.612849][ T3211] ____fput+0x15/0x20 [ 171.616816][ T3211] task_work_run+0x1e1/0x250 [ 171.621390][ T3211] exit_to_user_mode_loop+0x9b/0xb0 [ 171.626579][ T3211] exit_to_user_mode_prepare+0x87/0xd0 [ 171.632020][ T3211] syscall_exit_to_user_mode+0x1a/0x30 [ 171.637487][ T3211] do_syscall_64+0x58/0xa0 [ 171.641891][ T3211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.647769][ T3211] [ 171.650077][ T3211] The buggy address belongs to the object at ffff88810ded2800 [ 171.650077][ T3211] which belongs to the cache kmalloc-512 of size 512 [ 171.664200][ T3211] The buggy address is located 336 bytes inside of [ 171.664200][ T3211] 512-byte region [ffff88810ded2800, ffff88810ded2a00) [ 171.677458][ T3211] [ 171.679769][ T3211] The buggy address belongs to the physical page: [ 171.686158][ T3211] page:ffffea000437b400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ded0 [ 171.696376][ T3211] head:ffffea000437b400 order:2 compound_mapcount:0 compound_pincount:0 [ 171.704675][ T3211] flags: 0x4000000000010200(slab|head|zone=1) [ 171.710727][ T3211] raw: 4000000000010200 ffffea0004820000 dead000000000002 ffff888100042f00 [ 171.719394][ T3211] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 171.727988][ T3211] page dumped because: kasan: bad access detected [ 171.734406][ T3211] page_owner tracks the page as allocated [ 171.740104][ T3211] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2162586237, free_ts 0 [ 171.758146][ T3211] post_alloc_hook+0x1f5/0x210 [ 171.762904][ T3211] prep_new_page+0x1c/0x110 [ 171.767399][ T3211] get_page_from_freelist+0x2ca9/0x2d20 [ 171.772932][ T3211] __alloc_pages+0x1fa/0x610 [ 171.777545][ T3211] alloc_slab_page+0x6e/0xf0 [ 171.782115][ T3211] new_slab+0x98/0x3e0 [ 171.786164][ T3211] ___slab_alloc+0x70f/0xb70 [ 171.790737][ T3211] __slab_alloc+0x5e/0xa0 [ 171.795048][ T3211] __kmem_cache_alloc_node+0x204/0x2d0 [ 171.800521][ T3211] kmalloc_trace+0x29/0xb0 [ 171.804939][ T3211] usb_cache_string+0x66/0x130 [ 171.809702][ T3211] usb_new_device+0x326/0x1500 [ 171.814481][ T3211] register_root_hub+0x246/0x460 [ 171.819407][ T3211] usb_add_hcd+0xaa7/0xeb0 [ 171.823817][ T3211] dummy_hcd_probe+0x14a/0x290 [ 171.828589][ T3211] platform_probe+0x16d/0x1f0 [ 171.833261][ T3211] page_owner free stack trace missing [ 171.838614][ T3211] [ 171.840920][ T3211] Memory state around the buggy address: [ 171.846536][ T3211] ffff88810ded2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.854588][ T3211] ffff88810ded2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.862638][ T3211] >ffff88810ded2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.870681][ T3211] ^ [ 171.877333][ T3211] ffff88810ded2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.885373][ T3211] ffff88810ded2a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 171.893413][ T3211] ================================================================== [ 171.954091][ T3211] Disabling lock debugging due to kernel taint [ 171.960297][ T28] audit: type=1400 audit(1790784267.912:4279): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.371550][ T2998] tipc: Resetting bearer [ 174.402952][ T2998] tipc: Disabling bearer [ 174.471824][ T60] usb 9-1: USB disconnect, device number 5 [ 174.622343][ T308] tipc: Left network mode [ 175.082407][ T308] device bridge_slave_1 left promiscuous mode [ 175.088533][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.096001][ T308] device bridge_slave_0 left promiscuous mode [ 175.102254][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.109918][ T308] device bridge_slave_1 left promiscuous mode [ 175.116112][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.123552][ T308] device bridge_slave_0 left promiscuous mode [ 175.129648][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.137792][ T308] device veth1_macvtap left promiscuous mode [ 175.143909][ T308] device veth0_vlan left promiscuous mode [ 175.149819][ T308] device veth1_macvtap left promiscuous mode [ 175.155891][ T308] device veth0_vlan left promiscuous mode