last executing test programs: 1m23.200222017s ago: executing program 1 (id=64): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x3}}}}}}}, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000800)='system_u:object_r:cgroup_t:s0\x00', 0x1e) preadv(r4, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/14, 0xe}], 0x1, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002240)={0xffffffffffffffff}) getsockopt(r5, 0x1, 0x9, &(0x7f00000023c0)=""/4096, &(0x7f00000001c0)=0x1000) 1m23.199676947s ago: executing program 1 (id=65): syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 1m23.171391069s ago: executing program 1 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x600, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0) 1m23.156637561s ago: executing program 1 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="d11429d9985b6a75c4c5aa4e787ca05e8926200f08295d31d20ec29150", 0x1d, 0x90, &(0x7f0000000080)={0xa, 0x4e20, 0xfff, @mcast1, 0xc0c8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) eventfd2(0x1, 0x80801) (async) eventfd2(0x1, 0x80801) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01f901000000fddbdf2567000000080001000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900a60500002f00000008003c010300"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01f901000000fddbdf2567000000080001000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900a60500002f00000008003c010300"], 0x38}}, 0x0) unshare(0x64000600) r4 = gettid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRES16, @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xc1, 0x1526, &(0x7f00000006c0)="$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") mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x4013, 0x0) chroot(&(0x7f0000000280)='./file0\x00') (async) chroot(&(0x7f0000000280)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000001c00)={0x444, 0x3f3, 0x614, 0x70bd2b, 0x25dfdbfc, {0x6, 0x1, 0x3f, [0x0, 0x8, 0x200, 0x1, 0x9, 0x8, 0xce, 0xfffe0000, 0x1, 0x0, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x7ff, 0x15, 0xfc, 0x1, 0x20000000, 0x2, 0x3f, 0x0, 0x7, 0x9, 0xb, 0x7f, 0x8, 0x6, 0x3, 0x235, 0x1, 0x400, 0x5, 0x4, 0x9, 0x10, 0x4, 0x6d4, 0xc, 0x1000, 0xfffffffd, 0x1, 0x60, 0xfffffffb, 0x1, 0x8, 0x5, 0x3, 0x3f8cfcfd, 0x6, 0x0, 0x80000000, 0x80000000, 0x7ff, 0x2, 0xffff, 0xd, 0xfffffffb, 0xfff, 0x7, 0x2, 0x59061725, 0xf], [0x40, 0x75e5, 0x6000000, 0x17, 0x1, 0x7fffffff, 0x5, 0xffff5e24, 0x7786, 0x2, 0xd3, 0x5, 0x2, 0x1ff, 0x80000000, 0x3, 0x2, 0x8, 0xd2, 0x1, 0x0, 0xffff, 0x9, 0xffffffff, 0x3a5cc07f, 0x58, 0x0, 0xfffffffb, 0x1, 0x8, 0x7ff, 0x0, 0x4, 0x1, 0x8, 0x5e, 0x9, 0x4e11, 0x4, 0x0, 0x9, 0x4, 0x10001, 0x1000, 0x4, 0x4, 0x5, 0x7, 0x6, 0x6, 0x0, 0x7, 0x9, 0x0, 0xfffffffb, 0x6, 0x7fffffff, 0x7, 0x6a000000, 0x100, 0x6, 0x0, 0x5, 0xa000000], [0x4, 0x0, 0x45c5, 0xffff, 0x1, 0x8, 0xf, 0x7, 0xd75, 0x80000000, 0x8000, 0x8, 0x0, 0x8001, 0x7, 0x1, 0xff, 0xfffffff7, 0xfffffffc, 0x0, 0x5, 0x4, 0x1, 0x1, 0x51, 0x3, 0x7, 0xfffffffa, 0x6, 0xe0ad, 0xa, 0x7fffffff, 0x6, 0x633, 0x4, 0x1, 0x80, 0x13, 0x0, 0x3, 0x0, 0x0, 0x3b, 0x8000, 0xffff, 0x9, 0x8, 0xfffffffe, 0x3, 0x7, 0xa99, 0xfff, 0x8001, 0x100, 0xb8, 0x6, 0x1, 0x3, 0x4, 0x76, 0x0, 0x4, 0xf0, 0x3338], [0x6, 0x1, 0x1, 0x4, 0xe, 0xff00, 0x35, 0x6, 0x0, 0xc360, 0x8, 0x1, 0x3, 0x7, 0x4, 0x10001, 0x4, 0x3, 0x60000000, 0x8, 0x3, 0x3, 0xffffffff, 0x5, 0xffffff01, 0x7f, 0x4, 0x5, 0xffff, 0x43, 0x7fff, 0x7fff, 0x1, 0x7, 0xd, 0x5, 0x2e7, 0x2, 0x8, 0x100, 0x1, 0x80000001, 0x0, 0x1, 0x7, 0x42, 0x1, 0x7fffffff, 0x5, 0x9, 0xb, 0x5, 0xf25, 0xd1e, 0x3, 0xfffffffb, 0x4, 0x3, 0xfff, 0x1, 0x4, 0x40, 0xffffffff, 0x4], 0x24, ['\x00', 'bpf\x00', '\x00', 'exfat\x00', '(!^)/\x00', '/K\x00', 'bpf\x00', 'exfat\x00', '-&/@\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 1m22.768185655s ago: executing program 1 (id=70): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x9}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x9}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) (async) 1m22.755512446s ago: executing program 1 (id=71): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) unshare(0x22020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r0, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000340), 0x4) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, 0x0, 0x0) 1m22.651207006s ago: executing program 32 (id=71): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) unshare(0x22020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r0, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000340), 0x4) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, 0x0, 0x0) 20.587740385s ago: executing program 2 (id=440): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x9e, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaa5c599fb31c6981f5ff0086dd6000000800641101fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e2200649078020000000300000002000000673b"], 0x0) 20.328566568s ago: executing program 2 (id=441): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x24}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x6, 0x20005b5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") bind$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@acl}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlockall(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) 19.364598874s ago: executing program 2 (id=445): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) futex(0xfffffffffffffffc, 0x1, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x400000, 0x9}, 0x48) clock_gettime(0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x3010400, &(0x7f00000004c0)=ANY=[], 0x41, 0x240, &(0x7f0000000a80)="$eJzsmb9rFEEUx78z++suigpCCivBgBH1LrfXpDlMBMHKJvFXpYdZQ7xNTu5W8A5Eg42NdhaCjYX/gEUgqSzs7KwELVQQBD3QwsZmZXZm92bvNnfJqpXvU0y+s+/NzHtvZ1+RA0EQ/y2fPv788PD07OIJAHsxBUc9/2IAjEnNNf/3T24df1w78/TFu+ev1vbd2RrcTywJw/SDQtolZTYBvJw3cDc5KTH/EmJKTRbBE30eHMeUvgiGktJXwXFBaQ8Ml5W+oemm8C+Vrq/4Xula018SYkYMFTG4YqhiIL7eOsNSEnwYMs3e7nQbdd/3WpowlS3DlEskhzUmB8sNCzZ68xw1LT5RxUsP7q+LeVybmaR+b1ABx3eVRBUMC8pnFk5cG1kSLf9DJr7G+xtD+WdmK1yFYVySBSlqP7J8Ng/uumr76za8VtvpRxhdiMTHEpUcuc+0SGdu2HQAed4i0qss9E1GKrB/IFSm5vi7eEqVK8dZ53aaxaMigL+VoAx3LutV5soiFpO9rdf6k8OdrgX/87jlIRu78+bEzu9PYaSP3U8w/hDzF7OIboP/ScWyBfB2Q/aP8BnDUa0/mVr/KAerN8vtTvfkymp92Vv21ly36uyRtqgRlaNxqO/1+3Mx6k8T2v7WNr42t3G7HgStihxtZqOIIGi50dzVPpuFjea3K2pZgLMAjsiJaJt2sqPshI52hqF8ePRXqGlj2+AJgiAIgiAIgiAIgiAIgiB2Q/zP1XAUDLgnf575HQAA//9X3Fh4") epoll_create(0x7) clock_gettime(0x0, &(0x7f0000000080)) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000140)='./file0/file3\x00', 0x9400058c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 18.362718344s ago: executing program 2 (id=451): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x464ac2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x464ac2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x450000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0xffffffffffffffc0, 0xf1}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0xffffffffffffffc0, 0xf1}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000}, 0x94) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000380)="0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f3266b8377a000000d80f300f300f01c366baf80cb82b8e0a8eef66bafc0cb024ee0f01c3", 0x65}], 0x1, 0x14, 0x0, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.18477701s ago: executing program 2 (id=454): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x32, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x892}, {}, {}, [@map_idx={0x18, 0xf, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffbfae}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x2, 0x3, 0x6, 0x1, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @exit, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x89, &(0x7f0000000680)=""/137, 0x40f00, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0xc, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2fc2f, 0xffffffffffffffff, 0x1, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001000)=[{0x3, 0x5, 0xb, 0x8}], 0x10, 0x7}, 0x24) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000001c0)) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x8, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x800) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 17.783807615s ago: executing program 2 (id=457): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@nouid32}, {}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x456, &(0x7f0000000640)="$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") unshare(0x2a020400) socket(0x3, 0x3, 0x8) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='.\x00') socket$inet6_udp(0xa, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xa0002000}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, r5, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 17.701206602s ago: executing program 33 (id=457): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@nouid32}, {}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x456, &(0x7f0000000640)="$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") unshare(0x2a020400) socket(0x3, 0x3, 0x8) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='.\x00') socket$inet6_udp(0xa, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xa0002000}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, r5, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11.323399801s ago: executing program 4 (id=486): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x80001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x87}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x285ec}], 0x1) close(r0) open$dir(0x0, 0xe8c40, 0x0) 11.145103797s ago: executing program 4 (id=487): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x23d, &(0x7f0000000a40)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x189, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x5}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x1, 0x1a9f, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x154}, 0x8840) r1 = socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)=' ', 0x1) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000002100)="aaec69", 0x3}], 0x1, &(0x7f0000004700)=[{0x10, 0x2f, 0x800}], 0x10}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000080fedbdf250a808000000000000000000008001e"], 0x24}}, 0x20000050) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000100)=0x7d, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x8804) r6 = syz_clone(0x88208480, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r6) timer_create(0xa, 0x0, 0x0) tkill(r6, 0x12) socket(0x26, 0x2, 0x400) 11.143917937s ago: executing program 4 (id=488): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@fat=@showexec}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") (async) r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@fat=@showexec}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x40000, 0x0, 0x13}, 0x18) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0xffe, &(0x7f0000000680)) 11.119546149s ago: executing program 4 (id=489): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = creat(&(0x7f0000000380)='./file1/file0\x00', 0x10f) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r1) io_uring_enter(r0, 0x13e4, 0xd600, 0x8, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x6d}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xffff}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4024080}, 0xc040) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0xe00, 0x70bd26, 0x25dfdbfe, {{}, {}, {0xffffffffffffff7b, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x404c035) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000003c0)={[{@nobh}, {@jqfmt_vfsv0}, {@nodelalloc}]}, 0x3, 0x4f8, &(0x7f0000000800)="$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") getdents64(0xffffffffffffffff, 0x0, 0x4f) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 9.448305938s ago: executing program 6 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x0, @val=@tracing={0x0, 0xff}}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@random="09c9849d490f", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ced920", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "b3a21a", 0x0, 0x0, 0x0, @dev, @private0}}}}}}}, 0x0) 9.42020181s ago: executing program 6 (id=497): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="08367510ac73882f1cd7619adf5978f5a2372bad94a5fc9231dc307d5ff3", 0x1e}], 0x1, &(0x7f0000000180)=[@rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x48, 0x20000000}}], 0x1, 0x0) 9.398514382s ago: executing program 6 (id=498): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0x3, 0x1bd, {0x0, 0x6, 0x5, {0xc749, 0x68}, {0x2, 0x9}, @rumble={0x9, 0x9}}, {0x54, 0x200, 0xfff9, {0x1000, 0xfffa}, {0xb000}, @cond=[{0x8, 0x100, 0x6, 0x3, 0xa, 0xc}, {0x8001, 0x3, 0xc8, 0x7, 0x5, 0x8}]}}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$urandom(0xffffffffffffff9c, &(0x7f0000001700), 0x10000, 0x0) 9.344407417s ago: executing program 6 (id=499): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000003c0)={[{@nobh}, {@jqfmt_vfsv0}, {@nodelalloc}]}, 0x3, 0x4f8, &(0x7f0000000800)="$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") getdents64(0xffffffffffffffff, 0x0, 0x4f) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') removexattr(&(0x7f0000000080)='./file2\x00', &(0x7f0000000140)=@known='security.apparmor\x00') (fail_nth: 3) 8.771275258s ago: executing program 6 (id=500): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1004092, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x81, 0x105c7, &(0x7f0000010640)="$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") munmap(&(0x7f00005a3000/0x3000)=nil, 0x3000) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='minix\x00', 0x9000, &(0x7f0000000280)='f2fs\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000002002300850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 8.696636025s ago: executing program 6 (id=501): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'veth0_virt_wifi\x00'}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "dd09e2ed"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @local=@item_4={0x3, 0x2, 0x5, "b118d7dc"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGNAME(r3, 0x80404806, &(0x7f0000000040)) 8.668124417s ago: executing program 34 (id=501): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'veth0_virt_wifi\x00'}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "dd09e2ed"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @local=@item_4={0x3, 0x2, 0x5, "b118d7dc"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGNAME(r3, 0x80404806, &(0x7f0000000040)) 8.52703126s ago: executing program 0 (id=503): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000010000000000000008"], 0x40}, 0x20008024) 8.508217671s ago: executing program 4 (id=504): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x32, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x892}, {}, {}, [@map_idx={0x18, 0xf, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffbfae}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x2, 0x3, 0x6, 0x1, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @exit, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x89, &(0x7f0000000680)=""/137, 0x40f00, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0xc, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2fc2f, 0xffffffffffffffff, 0x1, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001000)=[{0x3, 0x5, 0xb, 0x8}], 0x10, 0x7}, 0x24) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000001c0)) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[@ANYRESOCT=r3], 0x835, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x8, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x800) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 8.442705498s ago: executing program 0 (id=505): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0xdc) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.420459019s ago: executing program 4 (id=506): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) futex(0xfffffffffffffffc, 0x1, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x400000, 0x9}, 0x48) clock_gettime(0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) pidfd_send_signal(0xffffffffffffffff, 0xc, &(0x7f0000000140)={0x2a, 0xfffff25b, 0x1000000}, 0x0) epoll_create(0x7) clock_gettime(0x0, &(0x7f0000000080)) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000140)='./file0/file3\x00', 0x9400058c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 8.363936605s ago: executing program 35 (id=506): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) futex(0xfffffffffffffffc, 0x1, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x400000, 0x9}, 0x48) clock_gettime(0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) pidfd_send_signal(0xffffffffffffffff, 0xc, &(0x7f0000000140)={0x2a, 0xfffff25b, 0x1000000}, 0x0) epoll_create(0x7) clock_gettime(0x0, &(0x7f0000000080)) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000140)='./file0/file3\x00', 0x9400058c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 8.30663244s ago: executing program 0 (id=508): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) sendmmsg$unix(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="08367510ac73882f1cd7619adf5978f5a2372bad94a5fc9231dc307d5ff3", 0x1e}], 0x1, &(0x7f0000000180)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, r3]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}], 0x48, 0x20000000}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="7f9983ab389fa8fc25222e462a7861709e38e43d8e6fe06ea6edb1079c855031feab820ba1c464fea76215d992ed1526bfc9fd872253d91fea07c502a0e3779ce0e7eb51c90217a522a841373b5ae2e70174389f7d1658430a29958868ad1f11296d19ccf882612c0b2ea9f7c15076bc8a0da72005934629e2e9cb581eee70b9413e24671d651ebca7ee2589fc2b4b8e4a31e75536912d70a5db31b5a67308be4a5660948a6010f62ea5150df71db3695d71b157646b95b77505aba281a564416d194d95087e2c82900ef0df5e2bd7d3dc11d900a31916c742cf607d82229fa951", 0xe1}], 0x1, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r3, r3, r1, r1, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r3, r1, r2, 0xffffffffffffffff, r2, r2, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0xe8, 0x804}}], 0x2, 0x0) 8.282354572s ago: executing program 0 (id=509): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000003c0)={[{@nobh}, {@jqfmt_vfsv0}, {@nodelalloc}]}, 0x3, 0x4f8, &(0x7f0000000800)="$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") getdents64(0xffffffffffffffff, 0x0, 0x4f) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') removexattr(&(0x7f0000000080)='./file2\x00', &(0x7f0000000140)=@known='security.apparmor\x00') 7.971055009s ago: executing program 0 (id=512): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read$FUSE(r0, &(0x7f0000003600)={0x2020}, 0x2020) (fail_nth: 1) 7.836201191s ago: executing program 0 (id=513): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x32, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x892}, {}, {}, [@map_idx={0x18, 0xf, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffbfae}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x2, 0x3, 0x6, 0x1, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @exit, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x89, &(0x7f0000000680)=""/137, 0x40f00, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0xc, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2fc2f, 0xffffffffffffffff, 0x1, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001000)=[{0x3, 0x5, 0xb, 0x8}], 0x10, 0x7}, 0x24) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000001c0)) 7.808092264s ago: executing program 36 (id=513): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x32, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x892}, {}, {}, [@map_idx={0x18, 0xf, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffbfae}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x2, 0x3, 0x6, 0x1, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @exit, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x89, &(0x7f0000000680)=""/137, 0x40f00, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0xc, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2fc2f, 0xffffffffffffffff, 0x1, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001000)=[{0x3, 0x5, 0xb, 0x8}], 0x10, 0x7}, 0x24) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000001c0)) 5.172860749s ago: executing program 3 (id=530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="1000110ec1e9abc89b0046b30000", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3c) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000a80)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x8, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff54, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x20080000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="cc81000000000000380012800b000100697036746e6c000028000280060011004e2400fcd0851b0c600014000200fe80000000000000000000000000001705000400080000001400030068737230000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = fsmount(r2, 0x0, 0x80) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r4, 0x16, 0x0, @void}, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010100af9d3f10f00a057a0ce801020301090212000184b930907f0904020000664d75"], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000003c0)={0x2002, {{0x2, 0x4e23, @multicast1}}, {{0x2002, 0x4e24, @loopback}}}, 0x108) setxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {}, [{0x2, 0x2}], {0x4, 0x7}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x2c, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2bd, &(0x7f0000000dc0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x1, 0x6, "7aedbf", 0x287, 0x21, 0xff, @dev={0xfe, 0x80, '\x00', 0x33}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x32, 0xa, 0x2, 0x27, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private2]}, @srh={0x3c, 0x6, 0x4, 0x3, 0x8, 0x20, 0x9e40, [@empty, @mcast2, @mcast2]}, @hopopts={0x2b, 0x18, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}, @generic={0x8, 0xb9, "49af43cba1007ab2edbcb6ee5e411ef7b473da05d9a9ff96cf15ef5a006a46d99c1ea9b0cbf092bc8f40ed06457b03957a84c922369d1d0f4afd1a99742b1375234120d854cb6d457097e442895421e46d8813c2364496777f42c3a72717123fe2e521af72c0df6f6e6874d0cfc4475dda2be073275da52b49034a2b3ca90cb56ad49254d530d4ca6e984eedb368e032fcca0237d140ffe59556d47d730ea0fd452e7a5dffe7d5bfad56171ccbc2aced0ab4f15f0de45effed"}]}, @routing={0x3b, 0xc, 0x2, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x5, 0x7, "101000", 0xb, "007b1a"}, "ec4ae3c22e8cdcdfc9b7925bac3482f38df624e3bd49065a381d8a98e060dcea5213eafa662f3a3025ac67cf9b3de16dd8a98c704a52f0704d93f4ac8f6acd9942ca142c85b94a94efbd31b0a272c569a12aeb9de9dc0faeaaa4e70c926df3308654bc954b79a277201d469eeef07240140d8475edc3411ad98940c40f01ed26ae53798e0bf941fee98c77a53bd47d665ec03d56a174e24c7f1293cb9bf1d529373240af7f17d24cdb2a5f9a1fd408"}}}}}}, 0x0) r7 = openat$incfs(r4, &(0x7f0000000980)='.log\x00', 0x40040, 0x19) getsockopt$inet_tcp_int(r7, 0x6, 0x3a, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) 4.326953174s ago: executing program 9 (id=535): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(r1, 0x4, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(r5, 0x6, &(0x7f00000001c0)={0x2, 0x3, 0xab4e, 0xfffffffffffffffd}) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r6, &(0x7f0000001180)=""/4096, 0x1000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e8) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x2cc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) 3.412256366s ago: executing program 9 (id=543): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x0, @val=@tracing={0x0, 0xff}}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@random="09c9849d490f", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ced920", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "b3a21a", 0x0, 0x0, 0x0, @dev, @private0}}}}}}}, 0x0) 3.387906238s ago: executing program 9 (id=544): sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01e723000000ffdbdf251500000024001d81"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x49}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SMPS_MODE={0x5}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48080) copy_file_range(r1, 0x0, r0, 0x0, 0x103, 0x0) 3.292315176s ago: executing program 9 (id=545): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101241, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 3.102842933s ago: executing program 3 (id=546): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000002f80)=""/61) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x381}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x6}, 0x28, {0x2, 0x4e21, @local}, 'macvtap0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 3.087712064s ago: executing program 3 (id=547): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x32, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x892}, {}, {}, [@map_idx={0x18, 0xf, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffbfae}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x2, 0x3, 0x6, 0x1, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @exit, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x89, &(0x7f0000000680)=""/137, 0x40f00, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0xc, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2fc2f, 0xffffffffffffffff, 0x1, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001000)=[{0x3, 0x5, 0xb, 0x8}], 0x10, 0x7}, 0x24) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000001c0)) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x8, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 2.306874934s ago: executing program 5 (id=553): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2088c1, &(0x7f00000001c0)=ANY=[], 0x0, 0x186, &(0x7f0000000300)="$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") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) listen(r2, 0x6) write$tun(r1, &(0x7f0000000d80)=ANY=[@ANYBLOB="03000100ec0639000c0069b38cce0030110000000000000000000002000000000000ff0200000000000000000000000000014e224e20003090"], 0x62) 2.144172049s ago: executing program 5 (id=554): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x0, @val=@tracing={0x0, 0xff}}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@random="09c9849d490f", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ced920", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "b3a21a", 0x0, 0x0, 0x0, @dev, @private0}}}}}}}, 0x0) 2.119931811s ago: executing program 5 (id=555): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r0, &(0x7f0000000140)={0x60, 0x0, r1, {{0x9724, 0x1, 0x5, 0x0, 0x9, 0xf, 0xb60}}}, 0x60) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x5e, &(0x7f00000083c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60c52d9200283afffe8000000000000000000000000000bbff010000000000000000000000000001890090780000000000000000000000000000ff01ff0000aafc0100"/94], 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x40, 0x1) flistxattr(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x40000022, 0x0, 0x0) 1.139188688s ago: executing program 7 (id=559): r0 = io_uring_setup(0x667, &(0x7f00000002c0)={0x0, 0x3986, 0x40, 0x0, 0x235}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1000, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000d80)={'\x00', 0x4, 0x3ff, 0xff, 0x7, 0x1, r5}) ioctl$TCFLSH(r1, 0x540b, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r6, 0x0) accept(r6, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) 1.0026923s ago: executing program 5 (id=560): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000440)='./file2\x00', 0x10008, &(0x7f0000000000)=ANY=[], 0x1, 0x1df, &(0x7f0000000140)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r2, 0x0, 0x6, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000800000001"], 0x50) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r5, &(0x7f0000000380), &(0x7f0000000440)=@udp, 0x2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02221e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af268c900a756e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32bf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b577243152374d7b367337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fb2469d6cbf857a137b542045d203e43874fe17720a05d3bc42bde811dcf97732108f5cb5943e609856876c2108491e88875ead76331822c8f0151a1cf06e634ac0933487716484f30f17d8f29af19784814192b4677759b781fc1a6726b154bbf3f30c48f0b829397acb9b337a6929d1158492e49bfe9a1158a57b6a422c8d1a3c476487a736a74d01bf48e05ac030092c66a502a8a5c9ef0a29582b6fef6d0dcd6a3a277887134f98291d79a2ed48adb3086b7c1c7340e0998036686b1919d25c3aa9591f4135fdad46003d76b366b81e50fdefeecf3b5d17e946059e2883ca43d61e14e725f0acaff73e0922319b6ea7b09b7b9ea691f5598f014f362e033ba9bc2a64f1c2ed591ef9c6f1a7a08e8e2842c0a592dd82d72e141db440000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) execveat(r0, &(0x7f0000000340)='./file2\x00', &(0x7f0000000400)={[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='{}(\r\x00']}, &(0x7f0000000580)={[&(0x7f0000000480)='-^!@%[\\,\x00', &(0x7f00000004c0)='(**\\\x00', &(0x7f0000000500)='erofs\x00']}, 0x1000) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x110400, 0x0) fchown(r9, 0x0, 0xee01) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x44483, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r7, r9, 0x18, 0x0, @val=@iter={&(0x7f00000006c0)=@task={r10, r11, r12}, 0x10}}, 0x20) 940.293506ms ago: executing program 7 (id=562): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0xdc) ioctl$KVM_RUN(r6, 0xae80, 0x0) 939.851116ms ago: executing program 8 (id=564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000001c0)=@vmx={0x0, 0x0, 0x2080, {0xd000, 0x58000, {0x1}, 0x4dd57228a29204c0, 0x5}, {"000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f5f1e3e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c9550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa5c9dab0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c394b1e80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffffffffff00"}}) 807.256688ms ago: executing program 8 (id=565): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x0, @val=@tracing={0x0, 0xff}}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@random="09c9849d490f", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ced920", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "b3a21a", 0x0, 0x0, 0x0, @dev, @private0}}}}}}}, 0x0) 806.819748ms ago: executing program 8 (id=566): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r3 = syz_usb_connect$hid(0x2, 0xfffffffffffffcf3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') ptrace$getsig(0x4202, r1, 0x8001, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 741.247804ms ago: executing program 7 (id=567): ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000050000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1003, &(0x7f0000003e80)=""/4099, 0x41100, 0xd}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x8, 0x6, 0x4, {{0x13, 0x4, 0x0, 0x22, 0x4c, 0x66, 0x0, 0x5, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x34, 0x2, [{0x0, 0xf, "b669be34373346800c95f60a04"}, {0x9306e8f026694712, 0xd, "623ab6715510de53764907"}, {0x7, 0x12, "b3bdc357bafdd96bd58544d9815f89cf"}]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0x7}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x7f, 0x30, 0x30, 0x0, 0x3b, 0x61]}}, &(0x7f0000000300)=""/65, 0x3d, 0x41, 0x0, 0x5}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r3, r4, 0x3, 0x3, 0x2}, 0x50) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="018f2bbd7000fcdbdf2510"], 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) 668.35442ms ago: executing program 7 (id=568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001"], 0x54}, 0x1, 0x0, 0x0, 0x300}, 0x0) 668.08997ms ago: executing program 7 (id=569): socket$inet(0x2, 0x3, 0x8d) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f00000002c0)=0xffffffffffffffff, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r1, r1, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000a00)=0xb5, 0x46) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) listen(r2, 0x2000002) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240001801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x2000000000000021) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80143, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) 598.399877ms ago: executing program 3 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)=""/6, &(0x7f0000000080)=0x6) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 575.490268ms ago: executing program 3 (id=571): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20, 0xfffffffe}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pim6reg1\x00', 0x0}) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x551d, &(0x7f00000079c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) write$P9_RXATTRCREATE(r4, &(0x7f0000000500)={0x7, 0x21, 0x4}, 0x7) r5 = open(&(0x7f0000000240)='./file1\x00', 0x2c102, 0x66) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r6, 0x10, 0x88b, 0x8000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1001, 0xffffffff, 0xf) sendfile(r5, r5, 0x0, 0x800000009) socket$igmp6(0xa, 0x3, 0x2) unshare(0x26000400) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r7, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0xc48c05706419c103, 0xff, 0x81, 0x8, 0x4, @loopback, @mcast2, 0x80, 0x87d0, 0x4, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x6, 0x80000000, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x700, 0x1, 0xfff}}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181201, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$KVM_SET_NESTED_STATE(r12, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x452, {0x200000, 0x200000000000000, {0x2}, 0x0, 0x4}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f5f1e3e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)={@dev, @multicast1, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="347c2cb701a245685c48d4bb2a0a140080", @ANYRES16=r2, @ANYBLOB="000825bd7000fedbdf25080000000c00028008000200030000000c1302809a00050095f5a15c4c802f8268d5c95f102929539c1d0672f1731a5f995bce93ee0a386970c3046fa7510bb287af0bae90566755f33e3e4e69beff1e4701a2b19582355b7c15a0668a4380d2f516d1f682bddd0b0b0deda0f7519a15180d2be6e6d9b8477d5ac7a46a265c8fc77031090490ef33d10fad1dccf85accb8648ce34205bf2aa4e06bbd85c405e823c481b9db2f33bac6b5919dab0400002d0005003df8fd6085214560ba6008eda3478ba6a22d482b2c26240e45073843372e2092e7dad51d788196d92d000000580103801c000180080001000000000010000200252a3a86402d262d2f272400240001800b000200544950437632000007000200f07b00000900020054495043000000003400018004000300060002002d0000000800010001000000040003000900020054495043000000000400030004000300040003004c00018008000100060000000800010009000000050002000000000008000100090000000b0002002d3a235b3a4000000900020054495043000000000800010009000000080001007e0a000054000180080001000900000008000100090000000400030008000100020000000900020054495043000000000b00020054495043763200000b0002005449504376320000040003000b00020054495043763200000c000180080001000900000014000180080001000000ff030500020000000000200001800400030008000200b623210009000200544950430000000004000300840003802000018008000100000001000400030004000300080002003a272c00040003001c00018008000100040000000800010000feffff08000100020000003400018008000100ff0f000008000100ff0f000008000200723a2900040003000400030008000100000000000800010038ffffff100001800b00020054495043763200005c0003801800018008000100040000000b0002005449504376320000400001800410040014476063a2b6c7607d0e9cba15026a308d2e36a74e96720ccde5d7ae68626419074d839bc94303f1055415aed8fb344458723d5f859e06be8dec95395bb60ba8c01cefb134b7ba3e01e7fce8b18158adb089a7fa15655203d0cf7f5c7ba831b2a051f0825626d6fcf658721cb241a91681473b780029b32af71c84b9e1e32c26ccf4b39b72f377e280cd3fa98653c29166e4dae3d49fd65b9b9f19e928029df7436ebb9773853dacbe264647e52e84f5b198854d7512454caed0a6dd6f13d4e8d702d230b5ac709ba104c99f7ff32c7b50d8a5f7471c89c90cb3bc4031d5e30ca8ee9429e083f004cae43f2a6266de7580810fcabcbefcecdd291096164548d72edaf45a263b821cad904ef2854aee7c53f516496fbf8b0880bc589e1d3ecf97c4abd586b8ad84c472d89c9adc39dc024623cdbe4e94f9eb8ec6ca079314b1e89f74c2dd68e8852290f79568c24a7020f77ac06de1d91bd54b12786b851b8dbc9b6ca8dec9dba6380ed0aa7f0577316d0416871315e2f2fabba90b09843b9cd10023f06af0f5adc38073a48d91ed58964c7eb63b528a56c907b15b8f526eb13f05a8426a6490b9f59913b1767b617ec7a59c37dd283857009607e6226b6d59a331340c00baa89f02f1e34233a6e1207b2f1bf7bd2305eabac20b1281e90bbf03d2667ad9b914d16dedb99780f1c92845a5cde34846548cd9a44bbe59318220460134b8ad235aba18e3fd3324b058d1a75b815970ab805952e44affd00e4fef4c4a1836ee201f24ebf04228eaccae8dc1d29dd0b419ff3a94a9bfbf297c848beb7ba0655421fd2d4a1cc4623981869c112ac2c4ddbce6379eecc6385c3ed292846857de6324a93998e4e7cc8e6def4b1bead114f6743ce7731ee57e12e16a9039bb88b1515619d4f84fd058e305b880f4433e837508f6b43ab016ad00449c9518b23c30eaf20dc858b0049a0d10aa1c61c9aca258cfb6938ac5186f2d1fad141f19951f8d03fe344e59082399631483dbea6cac0c296ed3961e759c2417d207ed70e3b769b09be76b8801b499d4ac9c26e8ad4a4f788f706c0d06a2c0828fc06cb3606556cd83004affeb93a487b577d2df87812dc069a769e889dba2378540a9aa2db10f1d1b1bfa56aee97ec43bca3f25f00f7d0baae8319eac8359bfafba35b066c7b13709040478e8ea21905afa0c6d8a6a21121dea0b732d5b787eca5ecaeb1e1cea183f02e42e3bb8bea62c4fe6797ea04e23afb1b9553d85eacc3d8610c6bf57cca3f901594cbb805b4bbd6dd65d8847ffe6500462bf1ad7ecf7b6a11f68061cec5e8e194432457e704ab4bd8c9372a911c30de3136a296f1f289e67b7ce718a6c3375efa15a6f9774a4501a1935a1a83570f6f9f0f86412a8d500e584ffdad69c02d7315309c3022e117069546b261e0af30764ef1de391060886eca1ce2a17aedf32850980bf7d1e2100566508eb3e8d8e25849652e60dfe11e159a806ec873cd65f6b984c2abd8284580070c5a1ebd51408d6de066930d38a843e9da69fc9c992dc18d5ea352c7522e8f45f0393af0d06c4e2a95037411ba3b1a1fb4026388e7ccd35cd09a7510cd15071b94c458fc86b7291e72e2e0cc70d967999feaf6dc16d489ba1fc7d2751985afe59ae977371cbdd8daa190be4fde0d7a9e877c2dc68fd149a20272153597293c8cce22de3d8d2952d050a6aa2bc42dd3826e472d6cebafca6c7fb37b7dc0e74b95189e268ffa91be90d87d98278df358ad6a1e6f2ff4e44ef48c05047176155f429c28350df92b611e26ab6c347cba6891b909c111017bc6015f3b7f0a2b124e8b54d7183e76572bc4a22efec9ccb361f6ffa2879418cc373dd9f767f711295bd4315b2f8b1aaa9f58a0de94fd4558c4571537c0a9c70fb745ee0ba03047f26aa264af0ef4258034926dc8df5ae04e255a8c068e97c90060fe294e3dbc9d11b838082c153f8f823371e57e449889112f91be7fd54ade4866de89518add002d8d59e890d2d786c5679394e7fd6e7005290aebf7548ab7ad0e20693032d7557dae31673e2e4ef86e7200e4e829ad123d05eb4ebff18fc17d57a5b41c32949e991c3b1a485c0f97d6cb6fb048021841a95847f11e0ae0cf8aa7435c80834cd364c0ce75ee9e6d94f53a6af63983d3fce03755d2fdf6faf6eabfa4427e8260dfb88331c8e39add41efad0ca3e62d7194018dcb627d8deb75c541417bab96491ede64f5410a35ee93885b36c41b11f5471f719bc1eec4ffb88dcfdff4d10176044bee0b1987186fea4d5eb924271c10b8b6cc77951629fce74de0cc9e559ab17af5a485e94fef678a2149d62c9a2e1edab2ac48a6c0afe2a5763bb83491467cee09282bebdd2d269b5ba657352c5eb375441767c3e53d7c055842c646f7af4f9d0f5b194426f824f705d79323dd51ed126f8d6233dab7061bdbcb529b59f8f6c219589aaf97ac7836ea9bca9894d8a37df622bc16112462d41180eb2782cd2b9df19ee321785517ae986548d41ad0514a5df3483aa3b52e4ede974ced1b6f1afd296cf578b13b842449bb105afcaa469ea33af178e640768d1c5c2cb01f63fe68dfa6a65988fd787d246619bf03c3243c677bcf13b03a2ac2d28ce74bd88c881a96620dc3f6ecbe2b19abe67b61057e307ced9704da9829ebb04eade4933137330732115ead549044131282eb8d2f5764dceca43860d40823c16f23dd94814f383686dd93d65bba8d44dedc96d98e8bc5a2603d63bc86e43652a19452d55ca6b5dff68c06c2d952fc39faa08f16529f8dc259e72fc2cec13567f400e15189fefecaa7959e590a36884f4da0c0efe27207e1bb170a84e27ab0adb9152c1361e8d0fb501b5cf8f8bb384bb525c314f14d30c70c8aea86030cc4acc8ce7906e225cef88f6a7658e2ad8cc0ef7c2516c87157f314bba57a40fcf18bff7f3c8d8138efaade5549c4f5e85d487c0c74c237b597b127a7c46469cd031467c2aa3250a688fd35f1ada22dcf2ffd4d7310cfac897851fc450bbaf1d3a8eabdee650dd1d526c3aea68aafb7da1988bce2940214c548b0c2a49eec98ca6595548e3e81d63e35d9c23dae6e4f67908ef8233eef89d85eb9c258bc58c604385d24d3bd985f82d7a3ad79b48c1c7131850bc5bb6ee6056d72578ba230cfc090ed06890629d7dd85324833271f3a48e28f4e209b0f6064a19b134e563e3bbfbcc4078232175cc08b201da6e437bb8dd666f4ee318ad6e73ce85313f08a650e138b01fc1d72649e4c9be040a1d2aafa12ac4ffc9bdaf404855c5ac3352d6efe8958137ac61e0d8a9aa09dc44351e287e78d5688041520ff2f1266f4666e37d9f9ee33939f31edc5b736a44910198c0865686d4bdd7a939af48c45609562c06cadb73a2a8e7fda99a2d5477506374f262d540b18db0f54608861b5279cdb2634e665b56d0208007d94ef672c2d9c5505fecbbf1391f1a602a5a198e5fde899124a1d6643fbcb77a47ec0c7964fa916f11dd433a034c3168fffb54aa2545cb608217032e068eca6291c9f93a638f6c103d3b37ff21625814caa71d67093fb175e1a41a31bb51c4ea89b3878a724a1e8c8f49ba0ae5bc0a31272eb6d71536b2be1d077fb57c39e318cb7236469d6d9ed61380e3b91127001f2509683001360a3d05216ad214e25c9e2df2ce1e91c4f63f74dc708e45ab890056c45c7a84935dca335a0a272ab75fdf1fa7f2db3fd6f296015bf03f6b8908f2e8cb3b18ecf132640b52e36e652cf90528383f6bbc978005d3d9d336f3156f1329cc780fcef473430a22cc337966c38341b66b6fefc82b3738d52722a2f39cda83ebc872b809759681a668e5955e2a83f0feb9346882bb7c90f879087039844eff66b15c351418cbfdbdbc2a8ae06a84d43ae6bc5520c26cf80de62d6f27da1eee9df342292c1c126992831ae73fc63b7167cbf84eee362b7dd1274e1fb4ef4ad526d81250ffab62126296f5e36ab437ac6106521fd7fdc5d76ec3db6b6b9939f0f1ebf169a969a8e4e4e9731caea4d9724a8d9aa1f4db9866f90373830be9a6b8de27b3817580f20bb55494afbb7891b3579ecbbdff4b3a30a3a9ed40d725d2aea5d831e4e526d3ceb27bb21791d3ecbca7cf453617a1d38fcf51ad2b146c415beee473be9287689b54107f97d4ed18be33a8bd44ec1cf1bce08a4d74cc75b6746726b2d5d245cbd61b0f6016c1d0f74ded305a7351c9fbed087a26bc3e98d9ccb454c38a95888657049b22ef6de31f7c54dd01bfa9077ba13d6e49db7f27720aef8c5f89078411d25464b64ef02fb46de410b61cef7d7cff2584bc3a029ff1968af52ad7d87f5acd5435660ad62f3637e1a03d0de16ebc40569c9a4215d3b433000c2c97ea3780dcdb9dc96936cd2a02ea2c4e81d6baa6e31be30bd674c26f8090b197da536abc3d802abfc548f6725a3f6999fea002103bc6bf3a50baed9fc06a2eb40270be6941b058252623f0f145e5ec769f83bc3a53b16c8cda17b0f9f624d7d07c4155a6f4f9a1669087b39a34290c7537b4d2fc450be3562b20d543dd1aad2d51a1b74f4bc708b504d4ab955d66436589c7694726c75b7aea1eb4b9c288061d4ba6b6d44dd176e052b544c1110b1f115b0b9a5b5f2b3a8f375f800decf563acf532ed119d6e71e8af9f026829765e7c28b43fbce7f97607aaeacab2a03657c9bf9185ff22670a191b648590ef50bf5eac92541053465ca5a08f242e9de83ed55125ad6b7afc80267aac99a7ef1abd614c5a57308dc2080cf14455bbc8f62d557b9de824396636ca4a9cb034d64b890085117fe88e65ce4a74b492cc993252b998a9021472d2bca3a405f19901c7bd4e8b003595d7058bc491c05ce0e230d65520082ba11e3c25883b7ef0234383bf79c558d9bba0f86c2572792e6c785bdd8eeab7a7ddb1999f9311a3b2899b7ce56b2c9cdce7f2f4b4488c29a65a3b3698284baf9a38f9a179720cbd0a706092ce3d35ec7945a49f7ea1f4bff79faff57edea4e27436b06fabd26324773e4094b3a8991224aaf228bbe5b4255577d04f28344e6e8015d8f75a8dc97be218a0d090cb1a888d73079d8ec657b33e5244441349f33518ac15ee684c1384afa1827be9fd7f59a04ea9e9465ba6a21ea3967c794668d16c2984f27956fd20f9c2a0d9ac4944f819e749bd2370cce98e46becc7660d8056b4c3cc3ccd920a3ebc9ae39705f9b0666436a0e6cfeb877b9259a0df35439c280127074cff4fa5eeb5fca0e7f572cdbae0ebd0247fbfdfeee71b4f51a9acd2f15173ccbb7316d68eb88abe1f5dc2eecc7e2a370d4f04dff4373f3ca30e7dbea061e974a1adb6c7d1beb3f27ad37ac08eaeee9652e548abdb6019538624a7e8a936e3e46050e29a8592cc9bc6bb69276deb94194c6d6f338685559edc1044950616f71faddc0b960bab3de14b4b2fcb8b5a6dc347144ab7d34a5a0a7eedb71d15dda447d7de07c9b744f5d64556e558e9178d7507e9fab94919b96e627df306c6b3dbd1ad2f5faa90b4719f5f8a2fba78d5423fbf92441c7d399f8f7a26cdacaf73c4f53d63ed452797d967d2a23f32c15bf9298686c6945d289b2ec0ec2854872e13fea35e7aa511fa93f576e40af90f20ed47981c0394f1ab456f763faf51400e875f3cd9198ad32c5bd3ef5a0ab4c17a37c0a152be6003484bbfe9b8e8531013ab5601379f53f98443bb018bbe71080dd23220eab9cc95efd1c167dcd40d7a9092b0fee6ad27be0fa8454b127a358463366ab6b77875714d288a74a566eac000180080003000300000008000100", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300020000001400020076657468315f766c616e000000000000080003000300000008000100", @ANYRES32=r8, @ANYBLOB="1400020067656e657665310000000000000000000800030001000000200001801400020074756e6c30000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="5c000180140002007665746830000000000000000000000014000200627269646765300000000000000000001400020067726530000000000000000000000000140002006261746164765f736c6176655f31000008000300020000002000018008000100", @ANYRES32=r13, @ANYBLOB="140002006e657464657673696d30000000000000"], 0x1434}, 0x1, 0x0, 0x0, 0x1}, 0x0) 452.220149ms ago: executing program 7 (id=572): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x32, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x892}, {}, {}, [@map_idx={0x18, 0xf, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffbfae}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x2, 0x3, 0x6, 0x1, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @exit, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x89, &(0x7f0000000680)=""/137, 0x40f00, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0xc, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2fc2f, 0xffffffffffffffff, 0x1, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001000)=[{0x3, 0x5, 0xb, 0x8}], 0x10, 0x7}, 0x24) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000001c0)) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x835, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x8, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x800) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 239.935049ms ago: executing program 3 (id=573): r0 = io_uring_setup(0x667, &(0x7f00000002c0)={0x0, 0x3986, 0x40, 0x0, 0x235}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1000, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000d80)={'\x00', 0x4, 0x3ff, 0xff, 0x7, 0x1, r5}) ioctl$TCFLSH(r1, 0x540b, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r6, 0x0) accept(r6, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) 178.265174ms ago: executing program 8 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000141400030400000000000000000a3f0000", @ANYRES32=r1, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) 105.595931ms ago: executing program 8 (id=575): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="08367510ac73882f1cd7619adf5978f5a2372bad94a5fc9231dc307d5ff3", 0x1e}], 0x1, &(0x7f0000000180)=[@rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x48, 0x20000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780), 0x0, 0x804}}], 0x2, 0x0) 100.043301ms ago: executing program 8 (id=576): syz_usb_connect(0x5, 0x24, &(0x7f0000007f80)={{0x12, 0x1, 0x300, 0xb0, 0x2e, 0x3, 0x40, 0x8dd, 0x987, 0xfcb1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x2, 0x70, 0x0, [{{0x9, 0x4, 0x78, 0x6, 0x0, 0xe9, 0x8e, 0x1a}}]}}]}}, &(0x7f0000008840)={0x0, 0x0, 0x19, &(0x7f0000008400)=ANY=[@ANYBLOB="050f19000114100a0622bd000000c0000000"]}) 51.882725ms ago: executing program 5 (id=577): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x0, @val=@tracing={0x0, 0xff}}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@random="09c9849d490f", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ced920", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "b3a21a", 0x0, 0x0, 0x0, @dev, @private0}}}}}}}, 0x0) 51.399505ms ago: executing program 5 (id=578): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0xdc) ioctl$KVM_RUN(r5, 0xae80, 0x0) 216.23µs ago: executing program 9 (id=579): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/149, 0x95}], 0x1, 0x8001, 0x6) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x7, 0x4) sendto$packet(r0, 0x0, 0x0, 0x44090, &(0x7f0000000040)={0x11, 0x6, r1, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001580)=0xd) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x3e0, 0x210, 0x210, 0x100, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f00000000c0), {[{{@arp={@empty, @remote, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x31, 0xfa41, 0x480b, 0xa, 0x80, 0x81, 'gretap0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x0, 0x8f}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x86, 0xb0, {0xd771}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @empty, 0xf, 0x1}}}, {{@arp={@local, @private=0xa010101, 0xff0000ff, 0xff000000, 0x2, 0xe, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x2, 0x9, 0x6cc, 0x0, 0x9, 0xa8, 'macsec0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x23}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 9 (id=580): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[@ANYBLOB='umask=00000000000000000000011,namecase=1,errors=continue,allow_utime=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,umask=00000000000000000005676,keep_last_dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp865,dmask=00000000000000000000001,discard,uid=', @ANYRESHEX=0xee00, @ANYBLOB="969043c7ff1774ebb8582e00"], 0x80, 0x1500, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x144) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40046721, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): ext4_dirty_inode:6134: inode #13: comm syz.5.249: mark_inode_dirty error [ 64.871108][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 64.871124][ T28] audit: type=1400 audit(1771540553.487:432): avc: denied { create } for pid=1278 comm="syz.5.249" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.905183][ T517] Bluetooth: hci2: command 0x1003 tx timeout [ 64.911382][ T489] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 64.921569][ T1279] EXT4-fs (loop5): Remounting filesystem read-only [ 64.928203][ T1279] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.249: invalid indirect mapped block 234881024 (level 0) [ 65.005892][ T283] EXT4-fs (loop0): unmounting filesystem. [ 65.037969][ T1279] EXT4-fs (loop5): Remounting filesystem read-only [ 65.050128][ T1279] EXT4-fs error (device loop5): ext4_do_update_inode:5269: inode #13: comm syz.5.249: corrupted inode contents [ 65.098657][ T1279] EXT4-fs (loop5): Remounting filesystem read-only [ 65.126495][ T1289] erofs: (device loop3): mounted with root inode @ nid 36. [ 65.153907][ T1279] EXT4-fs error (device loop5): ext4_truncate:4320: inode #13: comm syz.5.249: mark_inode_dirty error [ 65.397260][ T1291] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.422404][ T1279] EXT4-fs (loop5): Remounting filesystem read-only [ 65.452922][ T1291] EXT4-fs: journaled quota format not specified [ 65.485437][ T1279] EXT4-fs error (device loop5) in ext4_setattr:5673: Corrupt filesystem [ 65.515434][ T1279] EXT4-fs (loop5): Remounting filesystem read-only [ 65.548557][ T1294] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 65.651650][ T1295] set_capacity_and_notify: 6 callbacks suppressed [ 65.651671][ T1295] loop2: detected capacity change from 0 to 512 [ 65.731919][ T1295] FAT-fs (loop2): Unrecognized mount option "qui`t" or missing value [ 65.757539][ T1300] tipc: Started in network mode [ 65.778132][ T1300] tipc: Node identity ac14140f, cluster identity 4711 [ 65.785381][ T1300] tipc: New replicast peer: 255.255.255.255 [ 65.791994][ T1300] tipc: Enabled bearer , priority 10 [ 65.835879][ T28] audit: type=1400 audit(1771540554.487:433): avc: denied { read write open } for pid=1278 comm="syz.5.249" path=2F34302F66696C65302F66696C65302F668B9B90195018EA3619F9D80A0B894E212178E1A19909D764666264FA29E2C055FD7F8E67C2ACFB75F0A8D41692F4542A575EE42ED94A dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.877593][ T1306] loop3: detected capacity change from 0 to 1024 [ 65.890827][ T597] EXT4-fs (loop5): unmounting filesystem. [ 65.899216][ T1306] EXT4-fs: Ignoring removed orlov option [ 65.924514][ T28] audit: type=1400 audit(1771540554.527:434): avc: denied { ioctl } for pid=1278 comm="syz.5.249" path=2F34302F66696C65302F66696C65302F668B9B90195018EA3619F9D80A0B894E212178E1A19909D764666264FA29E2C055FD7F8E67C2ACFB75F0A8D41692F4542A575EE42ED94A dev="loop5" ino=18 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.988685][ T1306] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 66.220067][ T691] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 66.238154][ T1314] EXT4-fs error (device loop3): ext4_free_inode:355: comm syz.3.256: bit already cleared for inode 13 [ 66.249618][ T1314] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 66.387701][ T28] audit: type=1400 audit(1771540555.037:435): avc: denied { map } for pid=1318 comm="syz.2.260" path="pipe:[21525]" dev="pipefs" ino=21525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 66.410980][ T1319] input: syz1 as /devices/virtual/input/input11 [ 66.417364][ T1319] input: failed to attach handler leds to device input11, error: -6 [ 66.422028][ T1324] binder: 1323:1324 ioctl c0306201 200000000640 returned -22 [ 66.435083][ T1324] binder: 1323:1324 ioctl c0481273 200000000d80 returned -22 [ 66.443167][ T691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.445258][ T1325] loop0: detected capacity change from 0 to 128 [ 66.454172][ T691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.470297][ T691] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.483538][ T691] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.484138][ T1325] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.492861][ T691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.512085][ T691] usb 6-1: config 0 descriptor?? [ 66.757227][ T1336] loop2: detected capacity change from 0 to 16 [ 66.780020][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 66.811590][ T1336] erofs: (device loop2): mounted with root inode @ nid 36. [ 66.894599][ T6] tipc: Node number set to 2886997007 [ 66.990060][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 66.996387][ T24] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 67.004535][ T24] usb 5-1: config 1 has no interface number 1 [ 67.010714][ T24] usb 5-1: too many endpoints for config 1 interface 5 altsetting 8: 173, using maximum allowed: 30 [ 67.021548][ T24] usb 5-1: config 1 interface 5 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 173 [ 67.034562][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 67.045556][ T24] usb 5-1: config 1 interface 5 has no altsetting 0 [ 67.053686][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.062765][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.070805][ T24] usb 5-1: Product: ࠄ [ 67.075087][ T24] usb 5-1: Manufacturer: 㐁 [ 67.079691][ T24] usb 5-1: SerialNumber: 〉 [ 67.091046][ T691] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 67.100475][ T691] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 67.236126][ T1340] FAULT_INJECTION: forcing a failure. [ 67.236126][ T1340] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 67.249559][ T1340] CPU: 0 PID: 1340 Comm: syz.0.267 Not tainted syzkaller #0 [ 67.256890][ T1340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 67.266952][ T1340] Call Trace: [ 67.270244][ T1340] [ 67.273181][ T1340] __dump_stack+0x21/0x24 [ 67.277534][ T1340] dump_stack_lvl+0x110/0x170 [ 67.282221][ T1340] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.287273][ T1340] dump_stack+0x15/0x24 [ 67.291455][ T1340] should_fail_ex+0x3d4/0x520 [ 67.296158][ T1340] should_fail_alloc_page+0x61/0x90 [ 67.301376][ T1340] prepare_alloc_pages+0x148/0x600 [ 67.306505][ T1340] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 67.311722][ T1340] __alloc_pages+0x13a/0x480 [ 67.316338][ T1340] ? __cfi___alloc_pages+0x10/0x10 [ 67.321483][ T1340] ? 0xffffffffa0003dec [ 67.325640][ T1340] ? is_bpf_text_address+0x177/0x190 [ 67.330941][ T1340] ? mas_state_walk+0x79b/0xa60 [ 67.335805][ T1340] get_zeroed_page+0x19/0x40 [ 67.340401][ T1340] __pud_alloc+0x37/0x1a0 [ 67.344743][ T1340] handle_mm_fault+0x1ae8/0x26c0 [ 67.349713][ T1340] ? memcpy+0x56/0x70 [ 67.353710][ T1340] ? __cfi_mt_find+0x10/0x10 [ 67.358329][ T1340] ? __cfi_handle_mm_fault+0x10/0x10 [ 67.363715][ T1340] ? down_read_trylock+0x27f/0x660 [ 67.368922][ T1340] ? lock_mm_and_find_vma+0x9e/0x320 [ 67.374210][ T1340] ? do_user_addr_fault+0x2ee/0x1050 [ 67.379502][ T1340] do_user_addr_fault+0x63b/0x1050 [ 67.384623][ T1340] exc_page_fault+0x51/0xb0 [ 67.389182][ T1340] asm_exc_page_fault+0x27/0x30 [ 67.394040][ T1340] RIP: 0010:__put_user_nocheck_1+0x3/0x11 [ 67.399855][ T1340] Code: 09 e8 22 7b 7c fc ff c3 eb eb e8 19 7b 7c fc 89 d8 5b 41 5e 41 5f 5d c3 48 bb 00 f0 ff ff ff 7f 00 00 48 39 d9 73 74 0f 01 cb <88> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb ff ef ff ff ff 7f [ 67.419457][ T1340] RSP: 0018:ffffc90000bb7cb8 EFLAGS: 00050283 [ 67.425520][ T1340] RAX: ffffffff82c11f02 RBX: 00007ffffffff000 RCX: 0000200000000280 [ 67.433503][ T1340] RDX: 0000000000000000 RSI: ffffffff8743fc00 RDI: 0000000000004b33 [ 67.441557][ T1340] RBP: ffffc90000bb7e30 R08: ffff88811e53d100 R09: 0000000000000039 [ 67.449525][ T1340] R10: 000000000000560f R11: 0000000000000000 R12: 0000000000004b33 [ 67.457490][ T1340] R13: 0000000000000000 R14: ffff888120827800 R15: ffff888100077000 [ 67.465461][ T1340] ? vt_ioctl+0x5d2/0x1a60 [ 67.469882][ T1340] ? vt_ioctl+0x64b/0x1a60 [ 67.474298][ T1340] ? __cfi_vt_ioctl+0x10/0x10 [ 67.478969][ T1340] ? selinux_file_ioctl+0x3a0/0x4d0 [ 67.484179][ T1340] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 67.489723][ T1340] ? mutex_unlock+0x8f/0x230 [ 67.494491][ T1340] ? __cfi_mutex_unlock+0x10/0x10 [ 67.499529][ T1340] tty_ioctl+0x849/0xc60 [ 67.503772][ T1340] ? __cfi_tty_ioctl+0x10/0x10 [ 67.508535][ T1340] __se_sys_ioctl+0x12f/0x1b0 [ 67.513211][ T1340] __x64_sys_ioctl+0x7b/0x90 [ 67.517806][ T1340] x64_sys_call+0x58b/0x9a0 [ 67.522313][ T1340] do_syscall_64+0x4c/0xa0 [ 67.526731][ T1340] ? clear_bhb_loop+0x30/0x80 [ 67.531405][ T1340] ? clear_bhb_loop+0x30/0x80 [ 67.536083][ T1340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.541987][ T1340] RIP: 0033:0x7f302b79c629 [ 67.546400][ T1340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.566002][ T1340] RSP: 002b:00007f302c657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.574414][ T1340] RAX: ffffffffffffffda RBX: 00007f302ba15fa0 RCX: 00007f302b79c629 [ 67.582471][ T1340] RDX: 0000200000000280 RSI: 0000000000004b33 RDI: 0000000000000003 [ 67.590444][ T1340] RBP: 00007f302c657090 R08: 0000000000000000 R09: 0000000000000000 [ 67.598418][ T1340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.606391][ T1340] R13: 00007f302ba16038 R14: 00007f302ba15fa0 R15: 00007ffcdf643e18 [ 67.614537][ T1340] [ 67.674997][ T24] usb 5-1: 2:1: invalid format type 0xa192 is detected, processed as PCM [ 67.684262][ T24] usb 5-1: 2:1 : sample bitwidth 190 in over sample bytes 2 [ 67.692556][ T24] usb 5-1: failed to enable PITCH for EP 0x82 [ 67.698897][ T24] usb 5-1: 2:1: cannot set freq 13431035 to ep 0x82 [ 67.716385][ T24] usb 5-1: USB disconnect, device number 12 [ 67.878090][ T1348] loop2: detected capacity change from 0 to 512 [ 67.885250][ T1348] FAT-fs (loop2): Unrecognized mount option "qui`t" or missing value [ 67.910031][ T418] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 67.930667][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.948087][ T407] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.100077][ T418] usb 1-1: Using ep0 maxpacket: 8 [ 68.106392][ T418] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 68.114673][ T418] usb 1-1: config 0 has no interface number 0 [ 68.122141][ T418] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 68.131304][ T418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.139315][ T418] usb 1-1: Product: syz [ 68.143535][ T418] usb 1-1: Manufacturer: syz [ 68.148318][ T418] usb 1-1: SerialNumber: syz [ 68.154193][ T418] usb 1-1: config 0 descriptor?? [ 68.173461][ T1350] loop4: detected capacity change from 0 to 512 [ 68.180448][ T1350] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.187305][ T1350] EXT4-fs: journaled quota format not specified [ 68.240030][ T1313] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 68.274783][ T284] EXT4-fs (loop3): unmounting filesystem. [ 68.331486][ T28] audit: type=1400 audit(1771540556.987:436): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.363069][ T1342] loop0: detected capacity change from 0 to 256 [ 68.369740][ T1342] exfat: Deprecated parameter 'utf8' [ 68.395247][ T1342] exfat: Deprecated parameter 'utf8' [ 68.402910][ T28] audit: type=1400 audit(1771540557.017:437): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.427256][ T1342] exFAT-fs (loop0): failed to read sector(0x100) [ 68.443864][ T28] audit: type=1400 audit(1771540557.017:438): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.445204][ T1342] exFAT-fs (loop0): failed to load upcase table [ 68.471126][ T28] audit: type=1400 audit(1771540557.017:439): avc: denied { bpf } for pid=1341 comm="syz.0.268" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.497242][ T28] audit: type=1400 audit(1771540557.017:440): avc: denied { create } for pid=1341 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.513471][ T1342] exFAT-fs (loop0): failed to recognize exfat type [ 68.517297][ T28] audit: type=1400 audit(1771540557.017:441): avc: denied { mounton } for pid=1341 comm="syz.0.268" path="/56/file1" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.659876][ T418] usb 1-1: USB disconnect, device number 6 [ 69.034080][ T564] usb 6-1: USB disconnect, device number 8 [ 69.122029][ T1369] loop2: detected capacity change from 0 to 1024 [ 69.151390][ T1369] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 69.314907][ T1383] binder: 1382:1383 ioctl c0306201 200000000640 returned -22 [ 69.326830][ T1383] binder: 1382:1383 ioctl c0481273 200000000d80 returned -22 [ 69.403937][ T1388] loop0: detected capacity change from 0 to 16 [ 69.694405][ T287] EXT4-fs (loop2): unmounting filesystem. [ 69.721679][ T1388] erofs: (device loop0): mounted with root inode @ nid 36. [ 69.860221][ T564] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 69.935476][ T1407] loop3: detected capacity change from 0 to 40427 [ 69.952311][ T1407] F2FS-fs (loop3): Invalid segment count (0) [ 69.958477][ T1407] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 69.967529][ T1407] F2FS-fs (loop3): invalid crc value [ 69.980212][ T1407] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.990906][ T1409] FAT-fs (loop5): Unrecognized mount option "qui`t" or missing value [ 70.029442][ T1407] F2FS-fs (loop3): Start checkpoint disabled! [ 70.036087][ T1407] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 70.043684][ T1407] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 70.051026][ T1407] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 70.066160][ T564] usb 5-1: Using ep0 maxpacket: 32 [ 70.076913][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 70.088762][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 70.088777][ T28] audit: type=1400 audit(1771540558.670:494): avc: denied { read write } for pid=1406 comm="syz.3.290" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 70.095114][ T564] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 70.150598][ T477] kworker/u4:5: attempt to access beyond end of device [ 70.150598][ T477] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 70.171848][ T28] audit: type=1400 audit(1771540558.670:495): avc: denied { open } for pid=1406 comm="syz.3.290" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 70.186382][ T564] usb 5-1: config 1 has no interface number 1 [ 70.212223][ T564] usb 5-1: too many endpoints for config 1 interface 5 altsetting 8: 173, using maximum allowed: 30 [ 70.229661][ T1413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=1413 comm=syz.0.292 [ 70.233190][ T564] usb 5-1: config 1 interface 5 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 173 [ 70.242832][ T28] audit: type=1400 audit(1771540558.679:496): avc: denied { read append open } for pid=1406 comm="syz.3.290" path="/43/file0/pids.current" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.271883][ T564] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 70.297792][ T1413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1413 comm=syz.0.292 [ 70.314909][ T28] audit: type=1400 audit(1771540558.707:497): avc: denied { write } for pid=1406 comm="syz.3.290" path="/43/file0/file0" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.324798][ T564] usb 5-1: config 1 interface 5 has no altsetting 0 [ 70.345356][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.361990][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.377969][ T564] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.383412][ T1417] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.389320][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.399466][ T28] audit: type=1400 audit(1771540558.707:498): avc: denied { ioctl } for pid=1406 comm="syz.3.290" path="/43/file0/pids.current" dev="loop3" ino=10 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.431633][ T1417] EXT4-fs: journaled quota format not specified [ 70.434191][ T564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.438551][ T28] audit: type=1400 audit(1771540558.809:499): avc: denied { bind } for pid=1412 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.454487][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.474622][ T28] audit: type=1400 audit(1771540558.809:500): avc: denied { name_bind } for pid=1412 comm="syz.0.292" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 70.474661][ T564] usb 5-1: Product: ࠄ [ 70.506696][ T28] audit: type=1400 audit(1771540558.809:501): avc: denied { node_bind } for pid=1412 comm="syz.0.292" saddr=100.1.1.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 70.514188][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.541945][ T564] usb 5-1: Manufacturer: 㐁 [ 70.542805][ T28] audit: type=1400 audit(1771540558.873:502): avc: denied { name_bind } for pid=1412 comm="syz.0.292" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.550627][ T564] usb 5-1: SerialNumber: 〉 [ 70.568611][ T28] audit: type=1400 audit(1771540558.873:503): avc: denied { node_bind } for pid=1412 comm="syz.0.292" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.584371][ T24] usb 3-1: config 0 descriptor?? [ 70.814410][ T1424] netlink: 44 bytes leftover after parsing attributes in process `syz.0.295'. [ 70.824717][ T1424] netlink: 43 bytes leftover after parsing attributes in process `syz.0.295'. [ 70.833912][ T1424] netlink: 'syz.0.295': attribute type 5 has an invalid length. [ 70.841879][ T1424] netlink: 43 bytes leftover after parsing attributes in process `syz.0.295'. [ 70.980994][ T1437] FAULT_INJECTION: forcing a failure. [ 70.980994][ T1437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.994692][ T1437] CPU: 0 PID: 1437 Comm: syz.0.298 Not tainted syzkaller #0 [ 71.002009][ T1437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 71.012165][ T1437] Call Trace: [ 71.015452][ T1437] [ 71.018397][ T1437] __dump_stack+0x21/0x24 [ 71.022746][ T1437] dump_stack_lvl+0x110/0x170 [ 71.027439][ T1437] ? __cfi_dump_stack_lvl+0x8/0x8 [ 71.032477][ T1437] ? _parse_integer+0x2a/0x40 [ 71.037173][ T1437] dump_stack+0x15/0x24 [ 71.041345][ T1437] should_fail_ex+0x3d4/0x520 [ 71.046045][ T1437] should_fail+0xb/0x10 [ 71.050236][ T1437] should_fail_usercopy+0x1a/0x20 [ 71.055282][ T1437] _copy_from_user+0x1e/0xc0 [ 71.059901][ T1437] ___sys_sendmsg+0x1c3/0x360 [ 71.064600][ T1437] ? __sys_sendmsg+0x290/0x290 [ 71.069384][ T1437] ? __kasan_check_write+0x14/0x20 [ 71.074503][ T1437] ? proc_fail_nth_write+0x180/0x200 [ 71.079810][ T1437] ? vfs_write+0xa2c/0xce0 [ 71.084246][ T1437] ? __fdget+0x19c/0x220 [ 71.088504][ T1437] __x64_sys_sendmsg+0x205/0x2d0 [ 71.093460][ T1437] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 71.098938][ T1437] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 71.104598][ T24] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 71.105018][ T1437] x64_sys_call+0x171/0x9a0 [ 71.117280][ T1437] do_syscall_64+0x4c/0xa0 [ 71.121296][ T24] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 71.121711][ T1437] ? clear_bhb_loop+0x30/0x80 [ 71.121734][ T1437] ? clear_bhb_loop+0x30/0x80 [ 71.143470][ T1437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.149386][ T1437] RIP: 0033:0x7f302b79c629 [ 71.153807][ T1437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.173435][ T1437] RSP: 002b:00007f302c657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.181875][ T1437] RAX: ffffffffffffffda RBX: 00007f302ba15fa0 RCX: 00007f302b79c629 [ 71.189857][ T1437] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 71.197868][ T1437] RBP: 00007f302c657090 R08: 0000000000000000 R09: 0000000000000000 [ 71.205852][ T1437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.214003][ T1437] R13: 00007f302ba16038 R14: 00007f302ba15fa0 R15: 00007ffcdf643e18 [ 71.221998][ T1437] [ 71.228658][ T19] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 71.241677][ T564] usb 5-1: 2:1: invalid format type 0xa192 is detected, processed as PCM [ 71.267038][ T564] usb 5-1: 2:1 : sample bitwidth 190 in over sample bytes 2 [ 71.304382][ T1442] virtiofs: Unknown parameter 'always' [ 71.314123][ T564] usb 5-1: failed to enable PITCH for EP 0x82 [ 71.327427][ T564] usb 5-1: 2:1: cannot set freq 13431035 to ep 0x82 [ 71.391677][ T564] usb 5-1: USB disconnect, device number 13 [ 71.400305][ T6] hid-generic 0004:0004:0400.000A: unexpected long global item [ 71.408129][ T6] hid-generic: probe of 0004:0004:0400.000A failed with error -22 [ 71.434472][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.455747][ T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.478061][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.493586][ T19] usb 6-1: Product: syz [ 71.498107][ T19] usb 6-1: Manufacturer: syz [ 71.513779][ T19] usb 6-1: SerialNumber: syz [ 71.570135][ T19] usb 6-1: selecting invalid altsetting 1 [ 71.680181][ T1451] set_capacity_and_notify: 2 callbacks suppressed [ 71.680211][ T1451] loop0: detected capacity change from 0 to 16 [ 71.730671][ T1451] erofs: (device loop0): mounted with root inode @ nid 36. [ 71.984644][ T19] cdc_ncm 6-1:1.0: bind() failure [ 72.005822][ T19] usb 6-1: USB disconnect, device number 9 [ 72.039330][ T1458] loop3: detected capacity change from 0 to 512 [ 72.072535][ T1458] FAT-fs (loop3): Unrecognized mount option "qui`t" or missing value [ 72.082295][ T1462] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 72.522660][ T1479] loop4: detected capacity change from 0 to 512 [ 72.544711][ T1479] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.571637][ T1479] EXT4-fs: journaled quota format not specified [ 72.771094][ T1482] loop0: detected capacity change from 0 to 512 [ 72.851654][ T1482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.935646][ T1482] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.312: iget: bad i_size value: 38620345925642 [ 72.997217][ T1482] EXT4-fs (loop0): Remounting filesystem read-only [ 73.013452][ T1482] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.312: couldn't read orphan inode 15 (err -117) [ 73.032195][ T776] usb 3-1: USB disconnect, device number 4 [ 73.033400][ T1482] EXT4-fs (loop0): Remounting filesystem read-only [ 73.056002][ T1482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 73.090938][ T1494] loop2: detected capacity change from 0 to 1024 [ 73.110329][ T1494] EXT4-fs: Ignoring removed orlov option [ 73.132934][ T1494] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 73.231512][ T283] EXT4-fs (loop0): unmounting filesystem. [ 73.473281][ T1511] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.314: bit already cleared for inode 13 [ 73.675080][ T1516] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 73.818030][ T1516] loop4: detected capacity change from 0 to 40427 [ 73.828824][ T1516] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 73.838339][ T1516] F2FS-fs (loop4): invalid crc value [ 73.844056][ T1516] F2FS-fs (loop4): invalid crc value [ 73.850073][ T1516] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 73.907541][ T1520] loop0: detected capacity change from 0 to 16 [ 73.918779][ T1520] erofs: (device loop0): mounted with root inode @ nid 36. [ 74.458725][ T1528] loop4: detected capacity change from 0 to 512 [ 74.486896][ T1528] FAT-fs (loop4): Unrecognized mount option "qui`t" or missing value [ 74.732703][ T1526] loop3: detected capacity change from 0 to 131072 [ 74.742836][ T1526] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 74.759505][ T1526] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 74.767768][ T1526] F2FS-fs (loop3): Unrecognized mount option "0xffffffffffffffff1844674407370955161518446744073709551615" or missing value [ 74.871997][ T1526] overlayfs: './bus' not a directory [ 74.958132][ T1538] loop3: detected capacity change from 0 to 1024 [ 74.963173][ T418] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 75.005695][ T1538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.033377][ T284] EXT4-fs (loop3): unmounting filesystem. [ 75.490474][ T418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.503823][ T418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.513845][ T418] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.527396][ T418] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.536456][ T418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.553174][ T418] usb 1-1: config 0 descriptor?? [ 75.613187][ T1509] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 75.647694][ T287] EXT4-fs (loop2): unmounting filesystem. [ 75.715611][ T1553] netlink: 276 bytes leftover after parsing attributes in process `syz.5.329'. [ 75.808392][ T564] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 76.022689][ T564] usb 5-1: device descriptor read/64, error -71 [ 76.058079][ T418] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 76.069771][ T418] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 76.163744][ T1569] FAULT_INJECTION: forcing a failure. [ 76.163744][ T1569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.177551][ T1569] CPU: 0 PID: 1569 Comm: syz.3.335 Not tainted syzkaller #0 [ 76.184862][ T1569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.195095][ T1569] Call Trace: [ 76.198379][ T1569] [ 76.201316][ T1569] __dump_stack+0x21/0x24 [ 76.205642][ T1569] dump_stack_lvl+0x110/0x170 [ 76.210311][ T1569] ? __cfi_dump_stack_lvl+0x8/0x8 [ 76.215326][ T1569] dump_stack+0x15/0x24 [ 76.219468][ T1569] should_fail_ex+0x3d4/0x520 [ 76.224137][ T1569] should_fail+0xb/0x10 [ 76.228394][ T1569] should_fail_usercopy+0x1a/0x20 [ 76.233405][ T1569] _copy_from_user+0x1e/0xc0 [ 76.237983][ T1569] __sys_bpf+0x2a0/0x850 [ 76.242230][ T1569] ? bpf_link_show_fdinfo+0x330/0x330 [ 76.247601][ T1569] ? __cfi_ksys_write+0x10/0x10 [ 76.252454][ T1569] ? debug_smp_processor_id+0x17/0x20 [ 76.257811][ T1569] __x64_sys_bpf+0x7c/0x90 [ 76.262217][ T1569] x64_sys_call+0x488/0x9a0 [ 76.266706][ T1569] do_syscall_64+0x4c/0xa0 [ 76.271111][ T1569] ? clear_bhb_loop+0x30/0x80 [ 76.275779][ T1569] ? clear_bhb_loop+0x30/0x80 [ 76.280466][ T1569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.286357][ T1569] RIP: 0033:0x7f50c659c629 [ 76.290773][ T1569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.310383][ T1569] RSP: 002b:00007f50c73eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.318799][ T1569] RAX: ffffffffffffffda RBX: 00007f50c6815fa0 RCX: 00007f50c659c629 [ 76.326759][ T1569] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 0000000000000000 [ 76.334726][ T1569] RBP: 00007f50c73eb090 R08: 0000000000000000 R09: 0000000000000000 [ 76.342708][ T1569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.350673][ T1569] R13: 00007f50c6816038 R14: 00007f50c6815fa0 R15: 00007ffd55436af8 [ 76.358645][ T1569] [ 76.371602][ T564] usb 5-1: device descriptor read/64, error -71 [ 76.622366][ T1574] erofs: (device loop2): mounted with root inode @ nid 36. [ 76.659789][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 76.668477][ T776] usb 1-1: USB disconnect, device number 7 [ 76.675079][ T28] audit: type=1400 audit(1771540564.614:530): avc: denied { sqpoll } for pid=1570 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.743485][ T28] audit: type=1326 audit(1771540564.614:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.3.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50c659c629 code=0x0 [ 76.815855][ T564] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 76.863932][ T28] audit: type=1326 audit(1771540564.734:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c659c629 code=0x7ffc0000 [ 76.895302][ T28] audit: type=1326 audit(1771540564.734:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c659c629 code=0x7ffc0000 [ 76.919183][ T28] audit: type=1326 audit(1771540564.734:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f50c659c629 code=0x7ffc0000 [ 76.942542][ T28] audit: type=1326 audit(1771540564.734:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c659c629 code=0x7ffc0000 [ 76.966016][ T28] audit: type=1326 audit(1771540564.734:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c659c629 code=0x7ffc0000 [ 76.989510][ T564] usb 5-1: device descriptor read/64, error -71 [ 76.996278][ T28] audit: type=1326 audit(1771540564.734:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f50c659c629 code=0x7ffc0000 [ 77.019733][ T28] audit: type=1326 audit(1771540564.734:538): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c659c629 code=0x7ffc0000 [ 77.043522][ T28] audit: type=1326 audit(1771540564.734:539): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1570 comm="syz.3.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c659c629 code=0x7ffc0000 [ 77.254640][ T1589] set_capacity_and_notify: 2 callbacks suppressed [ 77.254662][ T1589] loop5: detected capacity change from 0 to 512 [ 77.302218][ T1589] FAT-fs (loop5): Unrecognized mount option "qui`t" or missing value [ 77.315912][ T564] usb 5-1: device descriptor read/64, error -71 [ 77.353576][ T1593] overlayfs: unrecognized mount option "fsuuid=948c31;7-b7" or missing value [ 78.582401][ T564] usb usb5-port1: attempt power cycle [ 78.904989][ T1617] loop2: detected capacity change from 0 to 512 [ 79.477792][ T1617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.490706][ T1617] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.501904][ T19] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 79.583809][ T1624] loop4: detected capacity change from 0 to 16 [ 79.797982][ T1624] erofs: (device loop4): mounted with root inode @ nid 36. [ 79.867741][ T287] EXT4-fs (loop2): unmounting filesystem. [ 79.915521][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.929115][ T19] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.942518][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.951657][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.959910][ T19] usb 1-1: Product: syz [ 79.964081][ T19] usb 1-1: Manufacturer: syz [ 79.968891][ T19] usb 1-1: SerialNumber: syz [ 79.985430][ T19] usb 1-1: selecting invalid altsetting 1 [ 80.141900][ T691] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 80.188050][ T1638] loop4: detected capacity change from 0 to 512 [ 80.195166][ T1638] FAT-fs (loop4): Unrecognized mount option "qui`t" or missing value [ 80.207276][ T776] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 80.214970][ T24] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 80.338095][ T691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.349051][ T691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.358990][ T691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.372146][ T691] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.381422][ T691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.390213][ T691] usb 4-1: config 0 descriptor?? [ 80.413992][ T24] usb 6-1: config 5 has an invalid interface number: 211 but max is 0 [ 80.417206][ T1598] netlink: 60 bytes leftover after parsing attributes in process `syz.0.344'. [ 80.422297][ T24] usb 6-1: config 5 has no interface number 0 [ 80.422368][ T776] usb 3-1: config 5 has an invalid interface number: 211 but max is 0 [ 80.445985][ T776] usb 3-1: config 5 has no interface number 0 [ 80.449929][ T19] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 80.454205][ T24] usb 6-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 80.462063][ T19] cdc_ncm 1-1:1.1: bind() failure [ 80.468436][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.480602][ T24] usb 6-1: Product: syz [ 80.489240][ T776] usb 3-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 80.491260][ T19] usb 1-1: USB disconnect, device number 8 [ 80.498331][ T776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.498355][ T776] usb 3-1: Product: syz [ 80.515822][ T1640] loop0: detected capacity change from 0 to 512 [ 80.522935][ T24] usb 6-1: Manufacturer: syz [ 80.527684][ T24] usb 6-1: SerialNumber: syz [ 80.533875][ T776] usb 3-1: Manufacturer: syz [ 80.539324][ T776] usb 3-1: SerialNumber: syz [ 80.540146][ T1640] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 80.544929][ T24] usb 6-1: bad CDC descriptors [ 80.561917][ T776] usb 3-1: bad CDC descriptors [ 80.761801][ T1631] FAULT_INJECTION: forcing a failure. [ 80.761801][ T1631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.774936][ T1631] CPU: 1 PID: 1631 Comm: syz.5.353 Not tainted syzkaller #0 [ 80.782232][ T1631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.792275][ T1631] Call Trace: [ 80.795549][ T1631] [ 80.798475][ T1631] __dump_stack+0x21/0x24 [ 80.802801][ T1631] dump_stack_lvl+0x110/0x170 [ 80.807467][ T1631] ? __cfi_dump_stack_lvl+0x8/0x8 [ 80.812488][ T1631] ? _parse_integer+0x2a/0x40 [ 80.817191][ T1631] dump_stack+0x15/0x24 [ 80.821374][ T1631] should_fail_ex+0x3d4/0x520 [ 80.826083][ T1631] should_fail+0xb/0x10 [ 80.830245][ T1631] should_fail_usercopy+0x1a/0x20 [ 80.835284][ T1631] _copy_from_user+0x1e/0xc0 [ 80.839884][ T1631] ___sys_sendmsg+0x1c3/0x360 [ 80.844561][ T1631] ? __sys_sendmsg+0x290/0x290 [ 80.849326][ T1631] ? __kasan_check_write+0x14/0x20 [ 80.854521][ T1631] ? proc_fail_nth_write+0x180/0x200 [ 80.859822][ T1631] ? vfs_write+0xa2c/0xce0 [ 80.864261][ T1631] ? __fdget+0x19c/0x220 [ 80.868523][ T1631] __x64_sys_sendmsg+0x205/0x2d0 [ 80.873475][ T1631] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 80.878945][ T1631] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 80.885050][ T1631] x64_sys_call+0x171/0x9a0 [ 80.889554][ T1631] do_syscall_64+0x4c/0xa0 [ 80.893978][ T1631] ? clear_bhb_loop+0x30/0x80 [ 80.898656][ T1631] ? clear_bhb_loop+0x30/0x80 [ 80.903415][ T1631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.909308][ T1631] RIP: 0033:0x7fdccbb9c629 [ 80.913723][ T1631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.933327][ T1631] RSP: 002b:00007fdccca78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.941751][ T1631] RAX: ffffffffffffffda RBX: 00007fdccbe15fa0 RCX: 00007fdccbb9c629 [ 80.949724][ T1631] RDX: 00000000240400c4 RSI: 0000200000000080 RDI: 0000000000000007 [ 80.957778][ T1631] RBP: 00007fdccca78090 R08: 0000000000000000 R09: 0000000000000000 [ 80.965882][ T1631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.973851][ T1631] R13: 00007fdccbe16038 R14: 00007fdccbe15fa0 R15: 00007ffcc9d9e2f8 [ 80.981823][ T1631] [ 80.989676][ T1628] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 81.058135][ T691] usbhid 4-1:0.0: can't add hid device: -71 [ 81.129243][ T691] usbhid: probe of 4-1:0.0 failed with error -71 [ 81.136758][ T691] usb 4-1: USB disconnect, device number 5 [ 81.148003][ T418] usb 6-1: USB disconnect, device number 10 [ 81.161465][ T776] usb 3-1: USB disconnect, device number 5 [ 81.225370][ T19] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 81.957517][ T1661] 9pnet_fd: Insufficient options for proto=fd [ 82.037252][ T1664] netlink: 16 bytes leftover after parsing attributes in process `syz.5.362'. [ 82.376025][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 82.376042][ T28] audit: type=1400 audit(1771540570.023:571): avc: denied { create } for pid=1676 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.468036][ T1681] loop2: detected capacity change from 0 to 16 [ 82.477408][ T1681] erofs: (device loop2): mounted with root inode @ nid 36. [ 82.729622][ T28] audit: type=1400 audit(1771540570.023:572): avc: denied { write } for pid=1676 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.753161][ T19] usb 1-1: config 5 has an invalid interface number: 211 but max is 0 [ 82.761742][ T19] usb 1-1: config 5 has no interface number 0 [ 82.787330][ T19] usb 1-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 82.796722][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.804722][ T19] usb 1-1: Product: syz [ 82.808932][ T19] usb 1-1: Manufacturer: syz [ 82.813548][ T19] usb 1-1: SerialNumber: syz [ 82.824164][ T19] usb 1-1: bad CDC descriptors [ 82.845979][ T1667] loop5: detected capacity change from 0 to 32768 [ 82.885305][ T1685] device veth1_to_bond entered promiscuous mode [ 82.892257][ T1685] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 82.918247][ T1686] loop4: detected capacity change from 0 to 512 [ 82.928097][ T1686] FAT-fs (loop4): Unrecognized mount option "qui`t" or missing value [ 82.936665][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.044211][ T1690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.370'. [ 83.067483][ T6] usb 1-1: USB disconnect, device number 9 [ 83.240528][ T19] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 83.380908][ T1698] loop4: detected capacity change from 0 to 128 [ 83.398072][ T1698] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.406815][ T1698] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.492524][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.503738][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.513584][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.526637][ T19] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.535894][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.608482][ T28] audit: type=1400 audit(1771540571.149:573): avc: denied { remount } for pid=1697 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.883970][ T19] usb 4-1: config 0 descriptor?? [ 83.903130][ T1704] loop5: detected capacity change from 0 to 256 [ 83.930662][ T1694] loop2: detected capacity change from 0 to 131072 [ 83.944869][ T1694] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 83.969181][ T1694] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.994745][ T1694] F2FS-fs (loop2): invalid crc value [ 84.020813][ T1694] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.084689][ T1694] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 84.093042][ T1694] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 84.177199][ T1709] loop0: detected capacity change from 0 to 40427 [ 84.242144][ T28] audit: type=1400 audit(1771540571.740:574): avc: denied { map } for pid=1693 comm="syz.2.373" path="/newroot/74/file2/memory.events.local" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.365328][ T28] audit: type=1400 audit(1771540571.767:575): avc: denied { bind } for pid=1719 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.386663][ T28] audit: type=1400 audit(1771540571.767:576): avc: denied { connect } for pid=1719 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.388339][ T286] EXT4-fs (loop4): unmounting filesystem. [ 84.470229][ T1724] loop0: detected capacity change from 0 to 256 [ 84.618372][ T1727] 9pnet_fd: Insufficient options for proto=fd [ 84.751797][ T28] audit: type=1400 audit(1771540571.767:577): avc: denied { read } for pid=1719 comm="syz.0.380" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.772603][ T1727] loop4: detected capacity change from 0 to 1024 [ 84.774441][ T19] usbhid 4-1:0.0: can't add hid device: -71 [ 84.786859][ T19] usbhid: probe of 4-1:0.0 failed with error -71 [ 84.793280][ T28] audit: type=1400 audit(1771540571.767:578): avc: denied { open } for pid=1719 comm="syz.0.380" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.803689][ T1727] EXT4-fs: Ignoring removed orlov option [ 84.817271][ T19] usb 4-1: USB disconnect, device number 6 [ 84.828112][ T28] audit: type=1400 audit(1771540571.767:579): avc: denied { ioctl } for pid=1719 comm="syz.0.380" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.863450][ T1727] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.909005][ T691] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 85.125716][ T691] usb 6-1: Using ep0 maxpacket: 32 [ 85.133502][ T691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.147163][ T1736] loop3: detected capacity change from 0 to 16 [ 85.189795][ T1736] erofs: (device loop3): mounted with root inode @ nid 36. [ 85.592363][ T691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.603240][ T691] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.612694][ T691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.630059][ T691] usb 6-1: config 0 descriptor?? [ 85.643006][ T691] hub 6-1:0.0: USB hub found [ 85.666646][ T28] audit: type=1400 audit(1771540573.050:580): avc: denied { read } for pid=1737 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.718265][ T286] EXT4-fs (loop4): unmounting filesystem. [ 85.748537][ T1739] SELinux: policydb string does not match my string SE Linux [ 85.757010][ T1739] SELinux: failed to load policy [ 85.848191][ T1743] IPv6: sit1: Disabled Multicast RS [ 85.937417][ T1748] loop3: detected capacity change from 0 to 512 [ 85.940455][ T1750] EXT4-fs: Ignoring removed orlov option [ 85.953335][ T1748] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.968201][ T1748] EXT4-fs: journaled quota format not specified [ 86.025608][ T1754] EXT4-fs: Ignoring removed orlov option [ 86.055992][ T1750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.075675][ T1754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.100250][ T1728] SELinux: failed to load policy [ 86.382774][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 86.399464][ T1759] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.385: bit already cleared for inode 13 [ 86.412019][ T1759] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 86.435017][ T1765] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.389: bit already cleared for inode 13 [ 86.482424][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 86.547898][ T691] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 86.589809][ T691] usbhid 6-1:0.0: can't add hid device: -71 [ 86.595984][ T691] usbhid: probe of 6-1:0.0 failed with error -71 [ 86.643270][ T691] usb 6-1: USB disconnect, device number 11 [ 86.682772][ T1775] EXT4-fs: Ignoring removed orlov option [ 86.707996][ T1775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.900091][ T1782] binder: 1781:1782 ioctl c0306201 200000000640 returned -22 [ 86.908752][ T1782] binder: 1781:1782 ioctl c0481273 200000000d80 returned -22 [ 86.976218][ T478] Bluetooth: hci2: Frame reassembly failed (-84) [ 87.194981][ T691] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 87.259994][ T564] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 87.390018][ T691] usb 6-1: Using ep0 maxpacket: 32 [ 87.395577][ T691] usb 6-1: no configurations [ 87.400269][ T691] usb 6-1: can't read configurations, error -22 [ 87.455020][ T564] usb 4-1: Using ep0 maxpacket: 32 [ 87.461375][ T564] usb 4-1: config 1 has an invalid interface number: 5 but max is 2 [ 87.469636][ T564] usb 4-1: config 1 has no interface number 1 [ 87.475989][ T564] usb 4-1: too many endpoints for config 1 interface 5 altsetting 8: 173, using maximum allowed: 30 [ 87.486877][ T564] usb 4-1: config 1 interface 5 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 173 [ 87.499966][ T564] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 87.510937][ T564] usb 4-1: config 1 interface 5 has no altsetting 0 [ 87.519268][ T564] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.528358][ T564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.536363][ T564] usb 4-1: Product: ࠄ [ 87.540512][ T564] usb 4-1: Manufacturer: 㐁 [ 87.545109][ T564] usb 4-1: SerialNumber: 〉 [ 87.574273][ T691] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 87.769248][ T691] usb 6-1: Using ep0 maxpacket: 32 [ 87.774798][ T691] usb 6-1: no configurations [ 87.779391][ T691] usb 6-1: can't read configurations, error -22 [ 87.785777][ T691] usb usb6-port1: attempt power cycle [ 87.988711][ T564] usb 4-1: 2:1: invalid format type 0xa192 is detected, processed as PCM [ 87.997265][ T564] usb 4-1: 2:1 : sample bitwidth 190 in over sample bytes 2 [ 88.005255][ T564] usb 4-1: failed to enable PITCH for EP 0x82 [ 88.011906][ T564] usb 4-1: 2:1: cannot set freq 13431035 to ep 0x82 [ 88.032911][ T564] usb 4-1: USB disconnect, device number 7 [ 88.079787][ T1788] FAT-fs (loop5): Unrecognized mount option "qui`t" or missing value [ 88.289961][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.440927][ T1763] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 88.614290][ T517] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 88.621559][ T1764] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.667848][ T286] EXT4-fs (loop4): unmounting filesystem. [ 88.671282][ T287] EXT4-fs (loop2): unmounting filesystem. [ 88.879465][ T1799] set_capacity_and_notify: 4 callbacks suppressed [ 88.879496][ T1799] loop2: detected capacity change from 0 to 16 [ 88.983012][ T564] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 89.016323][ T1799] erofs: (device loop2): mounted with root inode @ nid 36. [ 89.166680][ T1805] loop5: detected capacity change from 0 to 512 [ 89.177847][ T1805] EXT4-fs (loop5): 1 truncate cleaned up [ 89.183643][ T1805] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 89.189771][ T564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.194608][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 89.194621][ T28] audit: type=1400 audit(1771540576.309:594): avc: denied { rename } for pid=1804 comm="syz.5.403" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.211186][ T564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.232178][ T45] Bluetooth: hci2: command 0x1003 tx timeout [ 89.241243][ T831] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 89.293236][ T283] EXT4-fs (loop0): unmounting filesystem. [ 89.306003][ T564] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.322816][ T564] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.331944][ T564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.347555][ T564] usb 5-1: config 0 descriptor?? [ 89.363274][ T1810] loop0: detected capacity change from 0 to 512 [ 89.370150][ T1810] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.377272][ T1810] EXT4-fs: journaled quota format not specified [ 89.388263][ T1811] netlink: 56 bytes leftover after parsing attributes in process `syz.5.403'. [ 89.437678][ T19] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 89.660983][ T19] usb 4-1: Using ep0 maxpacket: 8 [ 89.685293][ T19] usb 4-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 89.701430][ T19] usb 4-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 89.715317][ T19] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.722288][ T19] usb 4-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 89.731810][ T28] audit: type=1400 audit(1771540576.807:595): avc: denied { mount } for pid=1817 comm="syz.2.406" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 89.754322][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.762743][ T28] audit: type=1400 audit(1771540576.835:596): avc: denied { watch watch_reads } for pid=1817 comm="syz.2.406" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 89.765932][ T19] usb 4-1: config 0 descriptor?? [ 89.848026][ T564] usbhid 5-1:0.0: can't add hid device: -71 [ 89.854077][ T564] usbhid: probe of 5-1:0.0 failed with error -71 [ 89.856729][ T1825] binder: 1824:1825 ioctl c0306201 200000000640 returned -22 [ 89.870245][ T1825] binder: 1824:1825 ioctl c0481273 200000000d80 returned -22 [ 89.878888][ T564] usb 5-1: USB disconnect, device number 17 [ 90.091597][ T597] EXT4-fs (loop5): unmounting filesystem. [ 90.109054][ T1828] loop5: detected capacity change from 0 to 1024 [ 90.116049][ T1828] EXT4-fs: Ignoring removed orlov option [ 90.132851][ T1828] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 90.228610][ T288] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.240603][ T19] usbhid 4-1:0.0: can't add hid device: -71 [ 90.246556][ T19] usbhid: probe of 4-1:0.0 failed with error -71 [ 90.383251][ T1833] EXT4-fs error (device loop5): ext4_free_inode:355: comm syz.5.409: bit already cleared for inode 13 [ 90.555082][ T1835] loop4: detected capacity change from 0 to 1024 [ 90.558101][ T19] usb 4-1: USB disconnect, device number 8 [ 90.565786][ T1835] EXT4-fs: Ignoring removed orlov option [ 90.592051][ T1835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.661917][ T288] usb 3-1: Using ep0 maxpacket: 32 [ 90.684996][ T288] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 90.693423][ T288] usb 3-1: config 1 has no interface number 1 [ 90.700815][ T288] usb 3-1: too many endpoints for config 1 interface 5 altsetting 8: 173, using maximum allowed: 30 [ 90.712923][ T288] usb 3-1: config 1 interface 5 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 173 [ 90.726367][ T288] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 90.737550][ T288] usb 3-1: config 1 interface 5 has no altsetting 0 [ 90.744551][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 90.757260][ T1844] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.410: bit already cleared for inode 13 [ 90.768546][ T288] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.777774][ T1844] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 90.786620][ T288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.795034][ T288] usb 3-1: Product: ࠄ [ 90.799441][ T288] usb 3-1: Manufacturer: 㐁 [ 90.804233][ T288] usb 3-1: SerialNumber: 〉 [ 90.825480][ T1841] kvm [1840]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa25a [ 90.835815][ T1841] kvm [1840]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa25a [ 90.844725][ T1841] kvm [1840]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x933e [ 90.848993][ T1848] loop3: detected capacity change from 0 to 1024 [ 90.858767][ T1841] kvm [1840]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x90af [ 90.868619][ T1848] EXT4-fs: Ignoring removed orlov option [ 90.880963][ T1848] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.114785][ T478] Bluetooth: hci2: Frame reassembly failed (-84) [ 91.247192][ T288] usb 3-1: 2:1: invalid format type 0xa192 is detected, processed as PCM [ 91.261398][ T288] usb 3-1: 2:1 : sample bitwidth 190 in over sample bytes 2 [ 91.277454][ T288] usb 3-1: failed to enable PITCH for EP 0x82 [ 91.290594][ T288] usb 3-1: 2:1: cannot set freq 13431035 to ep 0x82 [ 91.309235][ T288] usb 3-1: USB disconnect, device number 6 [ 91.820097][ T1858] loop0: detected capacity change from 0 to 16 [ 91.829132][ T1858] erofs: (device loop0): mounted with root inode @ nid 36. [ 92.040231][ T1860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.417'. [ 92.050326][ T1860] device ip6gre1 entered promiscuous mode [ 92.058313][ T1860] netlink: 'syz.2.417': attribute type 6 has an invalid length. [ 92.066072][ T1860] netlink: 72 bytes leftover after parsing attributes in process `syz.2.417'. [ 92.088752][ T1862] loop2: detected capacity change from 0 to 512 [ 92.095720][ T1862] FAT-fs (loop2): Unrecognized mount option "errors=Remount-ro" or missing value [ 92.234769][ T28] audit: type=1400 audit(1771540579.115:597): avc: denied { write } for pid=1863 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.254221][ T28] audit: type=1400 audit(1771540579.115:598): avc: denied { setopt } for pid=1863 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.514629][ T1832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 92.542333][ T597] EXT4-fs (loop5): unmounting filesystem. [ 92.596524][ T1869] loop0: detected capacity change from 0 to 1024 [ 92.603832][ T1869] ext4: Unknown parameter 'smackfsdef' [ 92.850496][ T564] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 92.861325][ T517] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 92.871750][ T1835] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.943017][ T286] EXT4-fs (loop4): unmounting filesystem. [ 92.960158][ T1873] loop4: detected capacity change from 0 to 512 [ 92.966850][ T1873] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.973841][ T1873] EXT4-fs: journaled quota format not specified [ 93.144685][ T564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.165256][ T564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.175371][ T564] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.202537][ T28] audit: type=1400 audit(1771540580.010:599): avc: denied { create } for pid=1884 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.228117][ T564] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.237523][ T564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.239319][ T28] audit: type=1400 audit(1771540580.010:600): avc: denied { write } for pid=1884 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.254864][ T564] usb 6-1: config 0 descriptor?? [ 93.294707][ T45] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 93.294777][ T517] Bluetooth: hci2: command 0x1003 tx timeout [ 93.442195][ T284] EXT4-fs (loop3): unmounting filesystem. [ 93.460643][ T1894] binder: 1893:1894 ioctl c0306201 200000000640 returned -22 [ 93.467530][ T1890] kvm [1889]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa25a [ 93.468353][ T1894] binder: 1893:1894 ioctl c0481273 200000000d80 returned -22 [ 93.478545][ T1890] kvm [1889]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa25a [ 93.493672][ T1890] kvm [1889]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x933e [ 93.508831][ T1890] kvm [1889]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x90af [ 93.770206][ T1900] ip6t_REJECT: ECHOREPLY is not supported [ 93.777483][ T28] audit: type=1400 audit(1771540580.545:601): avc: denied { execute } for pid=1899 comm="syz.0.430" path="/96/cpu.stat" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.804510][ T564] usbhid 6-1:0.0: can't add hid device: -71 [ 93.811753][ T564] usbhid: probe of 6-1:0.0 failed with error -71 [ 93.825585][ T19] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 93.828017][ T564] usb 6-1: USB disconnect, device number 15 [ 93.852572][ T1903] EXT4-fs: Ignoring removed orlov option [ 93.878528][ T1903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.031385][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 94.037821][ T19] usb 4-1: config 1 has an invalid interface number: 5 but max is 2 [ 94.706518][ T1912] EXT4-fs error (device loop0): ext4_free_inode:355: comm syz.0.431: bit already cleared for inode 13 [ 94.870794][ T1915] set_capacity_and_notify: 1 callbacks suppressed [ 94.870823][ T1915] loop4: detected capacity change from 0 to 16 [ 94.886535][ T1915] erofs: (device loop4): mounted with root inode @ nid 36. [ 95.143519][ T19] usb 4-1: config 1 has no interface number 1 [ 95.149814][ T19] usb 4-1: too many endpoints for config 1 interface 5 altsetting 8: 173, using maximum allowed: 30 [ 95.162234][ T19] usb 4-1: config 1 interface 5 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 173 [ 95.175304][ T19] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 95.176194][ T1917] loop5: detected capacity change from 0 to 1024 [ 95.186299][ T19] usb 4-1: config 1 interface 5 has no altsetting 0 [ 95.207097][ T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.216339][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.224369][ T19] usb 4-1: Product: ࠄ [ 95.228648][ T19] usb 4-1: Manufacturer: 㐁 [ 95.232981][ T1917] EXT4-fs: Ignoring removed orlov option [ 95.233866][ T19] usb 4-1: SerialNumber: 〉 [ 95.253446][ T1919] tipc: Enabling of bearer rejected, failed to enable media [ 95.263591][ T1917] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 95.354155][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 95.362016][ T1917] EXT4-fs error (device loop5): ext4_free_inode:355: comm syz.5.433: bit already cleared for inode 13 [ 95.375163][ T1917] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 95.405602][ T1931] loop4: detected capacity change from 0 to 1024 [ 95.426784][ T1931] EXT4-fs: Ignoring removed orlov option [ 95.452481][ T1931] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.534370][ T1941] xt_hashlimit: size too large, truncated to 1048576 [ 95.666144][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 95.690333][ T19] usb 4-1: 2:1: invalid format type 0xa192 is detected, processed as PCM [ 95.704623][ T19] usb 4-1: 2:1 : sample bitwidth 190 in over sample bytes 2 [ 95.719835][ T19] usb 4-1: failed to enable PITCH for EP 0x82 [ 95.732636][ T19] usb 4-1: 2:1: cannot set freq 13431035 to ep 0x82 [ 95.782277][ T19] usb 4-1: USB disconnect, device number 9 [ 95.827057][ T1946] loop2: detected capacity change from 0 to 1024 [ 95.842689][ T1946] EXT4-fs: Ignoring removed orlov option [ 95.874374][ T1946] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.335392][ T1952] loop3: detected capacity change from 0 to 1024 [ 96.342263][ T1952] ext4: Unknown parameter 'smackfsdef' [ 96.414969][ T1910] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 96.442822][ T283] EXT4-fs (loop0): unmounting filesystem. [ 96.490087][ T1957] loop3: detected capacity change from 0 to 512 [ 96.496736][ T1957] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.504693][ T1957] EXT4-fs: journaled quota format not specified [ 96.767024][ T287] EXT4-fs (loop2): unmounting filesystem. [ 96.783268][ T564] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 96.990749][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.033948][ T1964] loop2: detected capacity change from 0 to 16 [ 97.059823][ T1964] erofs: (device loop2): mounted with root inode @ nid 36. [ 97.093902][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.104578][ T564] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.118438][ T564] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.127923][ T564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.181409][ T564] usb 1-1: config 0 descriptor?? [ 97.541865][ T517] Bluetooth: hci1: command 0x1003 tx timeout [ 97.548185][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 97.580911][ T597] EXT4-fs (loop5): unmounting filesystem. [ 97.587834][ T1968] kvm [1967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa25a [ 97.599185][ T1968] kvm [1967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa25a [ 97.610570][ T1968] kvm [1967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x933e [ 97.626587][ T1968] kvm [1967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x90af [ 97.659057][ T1977] loop5: detected capacity change from 0 to 256 [ 97.776276][ T1980] loop2: detected capacity change from 0 to 512 [ 97.799859][ T1980] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.808982][ T1980] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.818123][ T1980] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 97.830761][ T1980] EXT4-fs warning (device loop2): ext4_enable_quotas:7050: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.849763][ T1980] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 97.857670][ T1980] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.451: inode has both inline data and extents flags [ 97.871839][ T1980] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.451: couldn't read orphan inode 16 (err -117) [ 97.872919][ T1985] binder: 1984:1985 ioctl c0306201 200000000640 returned -22 [ 97.884106][ T1980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.900240][ T45] Bluetooth: hci2: command 0x1003 tx timeout [ 97.906296][ T831] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 97.954442][ T1985] binder: 1984:1985 ioctl c0481273 200000000d80 returned -22 [ 98.006556][ T286] EXT4-fs (loop4): unmounting filesystem. [ 98.028897][ T1989] FAULT_INJECTION: forcing a failure. [ 98.028897][ T1989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.042383][ T1989] CPU: 1 PID: 1989 Comm: syz.4.455 Not tainted syzkaller #0 [ 98.049713][ T1989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.059803][ T1989] Call Trace: [ 98.063106][ T1989] [ 98.066073][ T1989] __dump_stack+0x21/0x24 [ 98.070861][ T1989] dump_stack_lvl+0x110/0x170 [ 98.075570][ T1989] ? __cfi_dump_stack_lvl+0x8/0x8 [ 98.080684][ T1989] dump_stack+0x15/0x24 [ 98.084862][ T1989] should_fail_ex+0x3d4/0x520 [ 98.089558][ T1989] should_fail+0xb/0x10 [ 98.093717][ T1989] should_fail_usercopy+0x1a/0x20 [ 98.098744][ T1989] _copy_to_user+0x1e/0x90 [ 98.103167][ T1989] simple_read_from_buffer+0xe9/0x160 [ 98.108537][ T1989] proc_fail_nth_read+0x1a6/0x220 [ 98.113648][ T1989] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 98.119191][ T1989] ? security_file_permission+0x94/0xb0 [ 98.124744][ T1989] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 98.130286][ T1989] vfs_read+0x27a/0x910 [ 98.134474][ T1989] ? __cfi_vfs_read+0x10/0x10 [ 98.139160][ T1989] ? __kasan_check_write+0x14/0x20 [ 98.144265][ T1989] ? mutex_lock+0x93/0x1b0 [ 98.148683][ T1989] ? __cfi_mutex_lock+0x10/0x10 [ 98.153536][ T1989] ? __fdget_pos+0x2cd/0x380 [ 98.158119][ T1989] ? ksys_read+0x71/0x250 [ 98.162454][ T1989] ksys_read+0x149/0x250 [ 98.166701][ T1989] ? __cfi_ksys_read+0x10/0x10 [ 98.171470][ T1989] ? fput+0x154/0x1a0 [ 98.175449][ T1989] ? debug_smp_processor_id+0x17/0x20 [ 98.180820][ T1989] __x64_sys_read+0x7b/0x90 [ 98.185327][ T1989] x64_sys_call+0x2f/0x9a0 [ 98.189748][ T1989] do_syscall_64+0x4c/0xa0 [ 98.194168][ T1989] ? clear_bhb_loop+0x30/0x80 [ 98.198841][ T1989] ? clear_bhb_loop+0x30/0x80 [ 98.203519][ T1989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.209415][ T1989] RIP: 0033:0x7f17b8f5cece [ 98.213826][ T1989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.233428][ T1989] RSP: 002b:00007f17b9ec8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.241843][ T1989] RAX: ffffffffffffffda RBX: 00007f17b9ec96c0 RCX: 00007f17b8f5cece [ 98.249814][ T1989] RDX: 000000000000000f RSI: 00007f17b9ec90a0 RDI: 0000000000000004 [ 98.257784][ T1989] RBP: 00007f17b9ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 98.265755][ T1989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.273718][ T1989] R13: 00007f17b9216038 R14: 00007f17b9215fa0 R15: 00007ffeb55fa1f8 [ 98.281691][ T1989] [ 98.292476][ T1987] EXT4-fs (loop2): unmounting filesystem. [ 98.328919][ T1992] loop4: detected capacity change from 0 to 1024 [ 98.372869][ T1992] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 98.395144][ T1992] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 98.410689][ T1992] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 98.430428][ T1992] EXT4-fs (loop4): This should not happen!! Data will be lost [ 98.430428][ T1992] [ 98.440303][ T1992] EXT4-fs (loop4): Total free blocks count 0 [ 98.446433][ T19] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 98.449205][ T1996] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 32 with error 28 [ 98.466870][ T1992] EXT4-fs (loop4): Free/Dirty block details [ 98.472862][ T1992] EXT4-fs (loop4): free_blocks=2588934144 [ 98.481749][ T1996] EXT4-fs (loop4): This should not happen!! Data will be lost [ 98.481749][ T1996] [ 98.481783][ T1992] EXT4-fs (loop4): dirty_blocks=80 [ 98.497599][ T1996] EXT4-fs (loop4): Total free blocks count 0 [ 98.517565][ T28] audit: type=1400 audit(1771540584.920:602): avc: denied { mounton } for pid=1998 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 98.589938][ T1998] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.597127][ T1998] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.605204][ T1998] device bridge_slave_0 entered promiscuous mode [ 98.618314][ T1998] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.625896][ T1998] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.629138][ T2003] EXT4-fs: Ignoring removed orlov option [ 98.634844][ T1998] device bridge_slave_1 entered promiscuous mode [ 98.646826][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 98.653511][ T19] usb 6-1: config 1 has an invalid interface number: 5 but max is 2 [ 98.668214][ T19] usb 6-1: config 1 has no interface number 1 [ 98.675114][ T19] usb 6-1: too many endpoints for config 1 interface 5 altsetting 8: 173, using maximum allowed: 30 [ 98.686985][ T2003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.698521][ T19] usb 6-1: config 1 interface 5 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 173 [ 98.714881][ T19] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 98.726156][ T19] usb 6-1: config 1 interface 5 has no altsetting 0 [ 98.735528][ T19] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.744767][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.752902][ T19] usb 6-1: Product: ࠄ [ 98.757777][ T19] usb 6-1: Manufacturer: 㐁 [ 98.762440][ T19] usb 6-1: SerialNumber: 〉 [ 98.775106][ T1998] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.782339][ T1998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.789690][ T1998] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.796740][ T1998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.814942][ T478] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.829668][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.837810][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.845626][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.858489][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.866640][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 98.867172][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.881297][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.891950][ T2012] EXT4-fs error (device loop3): ext4_free_inode:355: comm syz.3.459: bit already cleared for inode 13 [ 98.903406][ T2012] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 98.913144][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.921657][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.928753][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.937341][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.948990][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.966539][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.979522][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.987798][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.995418][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.005894][ T340] device veth1_macvtap left promiscuous mode [ 99.011986][ T340] device veth0_vlan left promiscuous mode [ 99.090960][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 99.097517][ T24] usb 5-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 99.123438][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.133971][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.143352][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.151582][ T24] usb 5-1: Product: syz [ 99.155856][ T24] usb 5-1: Manufacturer: syz [ 99.161492][ T24] usb 5-1: SerialNumber: syz [ 99.182290][ T1998] device veth0_vlan entered promiscuous mode [ 99.196078][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.204689][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.215310][ T1998] device veth1_macvtap entered promiscuous mode [ 99.226843][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.234700][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.243238][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.254732][ T19] usb 6-1: 2:1: invalid format type 0xa192 is detected, processed as PCM [ 99.255969][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.265009][ T19] usb 6-1: 2:1 : sample bitwidth 190 in over sample bytes 2 [ 99.272167][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.282121][ T19] usb 6-1: failed to enable PITCH for EP 0x82 [ 99.293508][ T19] usb 6-1: 2:1: cannot set freq 13431035 to ep 0x82 [ 99.307228][ T28] audit: type=1400 audit(1771540585.640:603): avc: denied { mounton } for pid=1998 comm="syz-executor" path="/root/syzkaller.mC5pYY/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 99.357717][ T19] usb 6-1: USB disconnect, device number 16 [ 99.386309][ T28] audit: type=1400 audit(1771540585.640:604): avc: denied { mount } for pid=1998 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.387562][ T24] usb 5-1: 0:2 : does not exist [ 99.409741][ T28] audit: type=1400 audit(1771540585.640:605): avc: denied { mount } for pid=1998 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 99.438580][ T28] audit: type=1400 audit(1771540585.640:606): avc: denied { mounton } for pid=1998 comm="syz-executor" path="/root/syzkaller.mC5pYY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 99.466300][ T28] audit: type=1400 audit(1771540585.640:607): avc: denied { mounton } for pid=1998 comm="syz-executor" path="/root/syzkaller.mC5pYY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 99.497514][ T28] audit: type=1400 audit(1771540585.668:608): avc: denied { mounton } for pid=1998 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 99.529034][ T28] audit: type=1400 audit(1771540585.668:609): avc: denied { mount } for pid=1998 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.558715][ T28] audit: type=1400 audit(1771540585.668:610): avc: denied { mounton } for pid=1998 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 99.585642][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 99.606931][ T24] usb 5-1: USB disconnect, device number 18 [ 99.741756][ T2023] erofs: (device loop6): mounted with root inode @ nid 36. [ 99.923060][ T564] usbhid 1-1:0.0: can't add hid device: -71 [ 99.944005][ T564] usbhid: probe of 1-1:0.0 failed with error -71 [ 99.964403][ T564] usb 1-1: USB disconnect, device number 10 [ 101.018819][ T831] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.025022][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 101.031238][ T2003] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 101.073609][ T284] EXT4-fs (loop3): unmounting filesystem. [ 101.246672][ T2037] set_capacity_and_notify: 2 callbacks suppressed [ 101.246692][ T2037] loop3: detected capacity change from 0 to 1024 [ 101.261263][ T2037] EXT4-fs: Ignoring removed orlov option [ 101.277887][ T2042] loop4: detected capacity change from 0 to 1024 [ 101.308900][ T2037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.317704][ T2042] EXT4-fs: Ignoring removed orlov option [ 101.420542][ T2042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.603263][ T2051] EXT4-fs error (device loop3): ext4_free_inode:355: comm syz.3.468: bit already cleared for inode 13 [ 101.971967][ T340] Bluetooth: hci1: Frame reassembly failed (-84) [ 102.314763][ T2059] loop0: detected capacity change from 0 to 256 [ 102.342158][ T2059] exfat: Deprecated parameter 'utf8' [ 102.358524][ T2059] exfat: Deprecated parameter 'utf8' [ 102.369353][ T2059] exfat: Bad value for 'uid' [ 102.438909][ T2035] loop6: detected capacity change from 0 to 131072 [ 102.512222][ T2035] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 150994945) [ 102.532101][ T2035] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 102.732065][ T2035] F2FS-fs (loop6): invalid crc value [ 102.850577][ T2035] F2FS-fs (loop6): Found nat_bits in checkpoint [ 102.926629][ T2035] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 102.944721][ T2035] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 103.275368][ T2071] binder: 2070:2071 ioctl c0306201 200000000640 returned -22 [ 103.283078][ T2071] binder: 2070:2071 ioctl c0481273 200000000d80 returned -22 [ 103.301916][ T2075] loop6: detected capacity change from 0 to 1024 [ 103.317462][ T2075] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 103.325680][ T2075] System zones: 0-1, 3-8 [ 103.330460][ T2075] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 103.339219][ T2075] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.361075][ T1998] EXT4-fs (loop6): unmounting filesystem. [ 103.380640][ T2080] loop6: detected capacity change from 0 to 2048 [ 103.393742][ T2080] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 103.408273][ T2080] EXT4-fs (loop6): shut down requested (2) [ 103.414500][ T2080] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 103.423298][ T2080] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 103.432391][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 103.432405][ T28] audit: type=1400 audit(1771540589.452:614): avc: denied { mounton } for pid=2079 comm="syz.6.477" path="/6/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.461799][ T28] audit: type=1400 audit(1771540589.452:615): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 103.462031][ T1998] EXT4-fs (loop6): unmounting filesystem. [ 103.483803][ T28] audit: type=1400 audit(1771540589.452:616): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.511055][ T28] audit: type=1400 audit(1771540589.452:617): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.537346][ T28] audit: type=1400 audit(1771540589.452:618): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.561855][ T28] audit: type=1400 audit(1771540589.452:619): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.582604][ T288] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 103.591613][ T28] audit: type=1400 audit(1771540589.452:620): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.614639][ T28] audit: type=1400 audit(1771540589.452:621): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.652181][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 103.782227][ T2050] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 103.873889][ T284] EXT4-fs (loop3): unmounting filesystem. [ 103.912414][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 103.919700][ T24] usb 1-1: config 1 has an invalid interface number: 5 but max is 2 [ 103.931476][ T24] usb 1-1: config 1 has no interface number 1 [ 103.938364][ T24] usb 1-1: too many endpoints for config 1 interface 5 altsetting 8: 173, using maximum allowed: 30 [ 103.950151][ T24] usb 1-1: config 1 interface 5 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 173 [ 103.965214][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 103.976629][ T24] usb 1-1: config 1 interface 5 has no altsetting 0 [ 103.990933][ T2091] loop3: detected capacity change from 0 to 1024 [ 103.994045][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.000965][ T2091] EXT4-fs: Ignoring removed orlov option [ 104.012715][ T288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.024086][ T288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.025335][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.033911][ T288] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.049384][ T24] usb 1-1: Product: ࠄ [ 104.055116][ T288] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.059445][ T2091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.068373][ T288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.076575][ T24] usb 1-1: Manufacturer: 㐁 [ 104.089777][ T24] usb 1-1: SerialNumber: 〉 [ 104.098612][ T288] usb 6-1: config 0 descriptor?? [ 104.106717][ T477] Bluetooth: hci2: Frame reassembly failed (-84) [ 104.115141][ T2091] EXT4-fs error (device loop3): ext4_free_inode:355: comm syz.3.479: bit already cleared for inode 13 [ 104.126774][ T2091] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 104.215591][ T517] Bluetooth: hci1: command 0x1003 tx timeout [ 104.215591][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 104.229196][ T2055] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.265093][ T286] EXT4-fs (loop4): unmounting filesystem. [ 104.556842][ T24] usb 1-1: 2:1: invalid format type 0xa192 is detected, processed as PCM [ 104.565608][ T24] usb 1-1: 2:1 : sample bitwidth 190 in over sample bytes 2 [ 104.573821][ T24] usb 1-1: failed to enable PITCH for EP 0x82 [ 104.580117][ T24] usb 1-1: 2:1: cannot set freq 13431035 to ep 0x82 [ 104.594394][ T24] usb 1-1: USB disconnect, device number 11 [ 104.605399][ T288] usbhid 6-1:0.0: can't add hid device: -71 [ 104.611866][ T288] usbhid: probe of 6-1:0.0 failed with error -71 [ 104.623881][ T288] usb 6-1: USB disconnect, device number 17 [ 104.679747][ T2107] loop4: detected capacity change from 0 to 512 [ 104.686962][ T2107] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.705941][ T2107] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.715801][ T2107] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.733251][ T2107] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.483: iget: bad i_size value: 2533274857506816 [ 104.745977][ T28] audit: type=1400 audit(1771540590.661:622): avc: denied { ioctl } for pid=2106 comm="syz.4.483" path="/94/bus/file1" dev="loop4" ino=15 ioctlcmd=0xaf73 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.771283][ T286] EXT4-fs (loop4): unmounting filesystem. [ 104.833795][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.932260][ T2121] loop4: detected capacity change from 0 to 512 [ 104.939242][ T2121] FAT-fs (loop4): Unrecognized mount option "Klush" or missing value [ 104.960771][ T28] audit: type=1400 audit(1771540590.855:623): avc: denied { create } for pid=2120 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.989347][ T2123] loop4: detected capacity change from 0 to 128 [ 105.117571][ T2129] EXT4-fs: Ignoring removed orlov option [ 105.127061][ T2129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.195920][ T2133] EXT4-fs: Ignoring removed orlov option [ 105.224561][ T2133] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 105.298981][ T288] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 105.320409][ T477] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.646274][ T477] Bluetooth: hci1: Frame reassembly failed (-84) [ 105.654324][ T2141] EXT4-fs error (device loop5): ext4_free_inode:355: comm syz.5.491: bit already cleared for inode 13 [ 105.671771][ T477] Bluetooth: hci1: Frame reassembly failed (-84) [ 105.767518][ T288] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 105.776863][ T288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.784912][ T288] usb 5-1: Product: syz [ 105.789418][ T288] usb 5-1: Manufacturer: syz [ 105.794051][ T288] usb 5-1: SerialNumber: syz [ 106.281730][ T39] usb 5-1: USB disconnect, device number 19 [ 106.306585][ T489] Bluetooth: hci2: command 0x1003 tx timeout [ 106.306622][ T831] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 106.324063][ T284] EXT4-fs (loop3): unmounting filesystem. [ 106.570366][ T2127] EXT4-fs: Ignoring removed nobh option [ 106.588544][ T2127] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.617628][ T2127] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.489: iget: bad i_size value: 38620345925642 [ 106.631185][ T2151] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 106.642646][ T2151] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.647363][ T2127] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.489: couldn't read orphan inode 15 (err -117) [ 106.666182][ T2127] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.681391][ T2127] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.489: bg 0: block 5: invalid block bitmap [ 106.694145][ T2127] overlayfs: failed to set xattr on upper [ 106.774811][ T2163] set_capacity_and_notify: 4 callbacks suppressed [ 106.774824][ T2163] loop6: detected capacity change from 0 to 512 [ 106.798627][ T2163] EXT4-fs: Ignoring removed nobh option [ 106.834199][ T2163] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.861566][ T2163] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.499: iget: bad i_size value: 38620345925642 [ 106.875597][ T2163] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.499: couldn't read orphan inode 15 (err -117) [ 106.889284][ T2163] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 106.956002][ T2163] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.499: bg 0: block 5: invalid block bitmap [ 106.970351][ T2163] overlayfs: failed to set xattr on upper [ 106.980462][ T2163] FAULT_INJECTION: forcing a failure. [ 106.980462][ T2163] name failslab, interval 1, probability 0, space 0, times 0 [ 106.993566][ T2163] CPU: 1 PID: 2163 Comm: syz.6.499 Not tainted syzkaller #0 [ 107.000864][ T2163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.011018][ T2163] Call Trace: [ 107.014288][ T2163] [ 107.017206][ T2163] __dump_stack+0x21/0x24 [ 107.021615][ T2163] dump_stack_lvl+0x110/0x170 [ 107.026308][ T2163] ? __cfi_dump_stack_lvl+0x8/0x8 [ 107.031370][ T2163] dump_stack+0x15/0x24 [ 107.035528][ T2163] should_fail_ex+0x3d4/0x520 [ 107.040217][ T2163] __should_failslab+0xac/0xf0 [ 107.044976][ T2163] should_failslab+0x9/0x20 [ 107.049468][ T2163] slab_pre_alloc_hook+0x30/0x1e0 [ 107.054500][ T2163] ? memcpy+0x56/0x70 [ 107.058474][ T2163] kmem_cache_alloc_lru+0x49/0x280 [ 107.063571][ T2163] ? __d_alloc+0x34/0x6c0 [ 107.067886][ T2163] __d_alloc+0x34/0x6c0 [ 107.072027][ T2163] ? __cfi__raw_spin_lock+0x10/0x10 [ 107.077217][ T2163] d_alloc_parallel+0xe2/0x12e0 [ 107.082084][ T2163] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 107.087892][ T2163] ? rcu_preempt_deferred_qs_irqrestore+0x6c9/0x9d0 [ 107.094476][ T2163] ? __cfi_d_alloc_parallel+0x10/0x10 [ 107.099837][ T2163] ? __kasan_check_write+0x14/0x20 [ 107.104943][ T2163] ? rwsem_read_trylock+0x2ae/0x640 [ 107.110127][ T2163] ? __cfi_lockref_get_not_dead+0x10/0x10 [ 107.115927][ T2163] ? downgrade_write+0x370/0x370 [ 107.120866][ T2163] __lookup_slow+0x14f/0x410 [ 107.125450][ T2163] ? lookup_one_len+0x2e0/0x2e0 [ 107.130283][ T2163] ? down_read+0xa6/0xf0 [ 107.134596][ T2163] lookup_slow+0x57/0x70 [ 107.138866][ T2163] walk_component+0x2f4/0x420 [ 107.143532][ T2163] path_lookupat+0x180/0x490 [ 107.148106][ T2163] filename_lookup+0x224/0x560 [ 107.152857][ T2163] ? sysvec_reschedule_ipi+0x78/0x80 [ 107.158124][ T2163] ? __cfi_filename_lookup+0x10/0x10 [ 107.163393][ T2163] ? strncpy_from_user+0x17a/0x2d0 [ 107.168488][ T2163] user_path_at_empty+0x47/0x1c0 [ 107.173405][ T2163] path_removexattr+0xdf/0x480 [ 107.178154][ T2163] ? listxattr+0x320/0x320 [ 107.182643][ T2163] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 107.188346][ T2163] ? __kasan_check_read+0x11/0x20 [ 107.193351][ T2163] ? preempt_schedule_irq+0xca/0x120 [ 107.198623][ T2163] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 107.204379][ T2163] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 107.210485][ T2163] ? irqentry_exit+0x37/0x40 [ 107.215113][ T2163] ? sysvec_reschedule_ipi+0x78/0x80 [ 107.220452][ T2163] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 107.226078][ T2163] __x64_sys_removexattr+0x60/0x70 [ 107.231187][ T2163] x64_sys_call+0x592/0x9a0 [ 107.235763][ T2163] do_syscall_64+0x4c/0xa0 [ 107.240442][ T2163] ? clear_bhb_loop+0x30/0x80 [ 107.245107][ T2163] ? clear_bhb_loop+0x30/0x80 [ 107.249778][ T2163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.255694][ T2163] RIP: 0033:0x7f0d3059c629 [ 107.260100][ T2163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.279707][ T2163] RSP: 002b:00007f0d313a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 107.288118][ T2163] RAX: ffffffffffffffda RBX: 00007f0d30815fa0 RCX: 00007f0d3059c629 [ 107.296089][ T2163] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000080 [ 107.304055][ T2163] RBP: 00007f0d313a6090 R08: 0000000000000000 R09: 0000000000000000 [ 107.312020][ T2163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.319983][ T2163] R13: 00007f0d30816038 R14: 00007f0d30815fa0 R15: 00007ffe3dd597d8 [ 107.328136][ T2163] [ 107.414019][ T1998] EXT4-fs (loop6): unmounting filesystem. [ 107.509151][ T831] Bluetooth: hci0: command 0x1003 tx timeout [ 107.520223][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.527259][ T2137] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 107.527798][ T284] EXT4-fs (loop3): unmounting filesystem. [ 107.539441][ T2139] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 107.565203][ T2170] binder: 2169:2170 ioctl c0306201 200000000640 returned -22 [ 107.589405][ T2170] binder: 2169:2170 ioctl c0481273 200000000d80 returned -22 [ 107.599783][ T283] EXT4-fs (loop0): unmounting filesystem. [ 107.654841][ T2168] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.663070][ T2168] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.670685][ T2168] device bridge_slave_0 entered promiscuous mode [ 107.670823][ T286] EXT4-fs (loop4): unmounting filesystem. [ 107.677877][ T2168] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.690316][ T2168] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.698030][ T2168] device bridge_slave_1 entered promiscuous mode [ 107.775901][ T2168] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.783018][ T2168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.790328][ T2168] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.797444][ T2168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.844076][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.855958][ T517] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 107.856167][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 107.863899][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.910278][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.919184][ T597] EXT4-fs (loop5): unmounting filesystem. [ 107.940227][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.951279][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.954937][ T2191] loop0: detected capacity change from 0 to 512 [ 107.958397][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.967859][ T2191] EXT4-fs: Ignoring removed nobh option [ 107.979682][ T2193] loop5: detected capacity change from 0 to 256 [ 107.985993][ T39] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 107.986392][ T2191] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.009819][ T2193] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 108.015841][ T2191] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.509: iget: bad i_size value: 38620345925642 [ 108.034871][ T2191] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.509: couldn't read orphan inode 15 (err -117) [ 108.048247][ T2191] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.071812][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.080361][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.087450][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.092033][ T2191] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.509: bg 0: block 5: invalid block bitmap [ 108.107718][ T2191] overlayfs: failed to set xattr on upper [ 108.124980][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.157491][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.167674][ T2189] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.174972][ T2189] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.182552][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 108.182702][ T2189] device bridge_slave_0 entered promiscuous mode [ 108.195386][ T2189] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.202439][ T2189] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.204967][ T39] usb 4-1: config 1 has an invalid interface number: 5 but max is 2 [ 108.211024][ T2189] device bridge_slave_1 entered promiscuous mode [ 108.219386][ T283] EXT4-fs (loop0): unmounting filesystem. [ 108.229664][ T39] usb 4-1: config 1 has no interface number 1 [ 108.235871][ T39] usb 4-1: too many endpoints for config 1 interface 5 altsetting 8: 173, using maximum allowed: 30 [ 108.246787][ T39] usb 4-1: config 1 interface 5 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 173 [ 108.259861][ T39] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 108.271307][ T39] usb 4-1: config 1 interface 5 has no altsetting 0 [ 108.279886][ T39] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.295631][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.303903][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.312332][ T39] usb 4-1: Product: ࠄ [ 108.317173][ T39] usb 4-1: Manufacturer: 㐁 [ 108.323276][ T39] usb 4-1: SerialNumber: 〉 [ 108.331024][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.336391][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.351335][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.371054][ T2168] device veth0_vlan entered promiscuous mode [ 108.379450][ T10] device bridge_slave_1 left promiscuous mode [ 108.385725][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.393679][ T10] device bridge_slave_0 left promiscuous mode [ 108.400234][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.408815][ T10] device veth1_macvtap left promiscuous mode [ 108.414917][ T10] device veth0_vlan left promiscuous mode [ 108.545384][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.553739][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.574682][ T2168] device veth1_macvtap entered promiscuous mode [ 108.603820][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.611803][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.621595][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.630881][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.639796][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.678178][ T2210] loop5: detected capacity change from 0 to 1024 [ 108.689178][ T2210] EXT4-fs: Ignoring removed orlov option [ 108.704143][ T2210] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 108.739021][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.748236][ T229] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.755656][ T229] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.755925][ T2210] EXT4-fs error (device loop5): ext4_free_inode:355: comm syz.5.516: bit already cleared for inode 13 [ 108.762449][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.780917][ T2210] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 108.782403][ T2199] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.790934][ T39] usb 4-1: 2:1: invalid format type 0xa192 is detected, processed as PCM [ 108.796931][ T2199] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.808204][ T39] usb 4-1: 2:1 : sample bitwidth 190 in over sample bytes 2 [ 108.822204][ T39] usb 4-1: failed to enable PITCH for EP 0x82 [ 108.828632][ T2199] device bridge_slave_0 entered promiscuous mode [ 108.835217][ T39] usb 4-1: 2:1: cannot set freq 13431035 to ep 0x82 [ 108.843014][ T2199] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.850061][ T2199] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.862739][ T39] usb 4-1: USB disconnect, device number 10 [ 108.869101][ T2199] device bridge_slave_1 entered promiscuous mode [ 108.891440][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.901490][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.910283][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.917343][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.924885][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.946823][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.955372][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.964021][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.971071][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.993042][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.001334][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.016517][ T10] tipc: Left network mode [ 109.026163][ T10] tipc: Disabling bearer [ 109.031579][ T10] tipc: Left network mode [ 109.036153][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.045828][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.054120][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.070854][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.079815][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.087686][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.096352][ T2189] device veth0_vlan entered promiscuous mode [ 109.139464][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.161255][ T2189] device veth1_macvtap entered promiscuous mode [ 109.180988][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.199732][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.208239][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.216995][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.252606][ T2232] loop7: detected capacity change from 0 to 1024 [ 109.259667][ T2232] EXT4-fs: Ignoring removed orlov option [ 109.288885][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.300812][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.309079][ T2232] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 109.316225][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.324636][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.332310][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.404189][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.412724][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.419839][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.427907][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.440766][ T2241] loop3: detected capacity change from 0 to 512 [ 109.451386][ T2246] netlink: 12 bytes leftover after parsing attributes in process `syz.8.523'. [ 109.453850][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.474708][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.504530][ T2199] device veth0_vlan entered promiscuous mode [ 109.560005][ T2247] EXT4-fs error (device loop7): ext4_free_inode:355: comm syz.7.520: bit already cleared for inode 13 [ 109.577432][ T340] Bluetooth: hci1: Frame reassembly failed (-84) [ 109.657101][ T2199] device veth1_macvtap entered promiscuous mode [ 109.724320][ T2013] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.735364][ T2241] loop3: detected capacity change from 0 to 512 [ 109.735422][ T2013] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.744009][ T2241] EXT4-fs: Ignoring removed orlov option [ 109.758790][ T2241] EXT4-fs (loop3): Test dummy encryption mode enabled [ 109.771124][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.779937][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.788121][ T2241] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.789413][ T2241] EXT4-fs (loop3): 1 truncate cleaned up [ 109.803812][ T2241] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.813974][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.823025][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.831732][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.839530][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.962552][ T10] device bridge_slave_1 left promiscuous mode [ 109.969040][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.977456][ T10] device bridge_slave_0 left promiscuous mode [ 109.983816][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.992545][ T10] device bridge_slave_1 left promiscuous mode [ 109.998742][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.006454][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.015500][ T10] device veth1_macvtap left promiscuous mode [ 110.021713][ T10] device veth0_vlan left promiscuous mode [ 110.174382][ T288] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 110.370572][ T288] usb 10-1: Using ep0 maxpacket: 8 [ 110.380253][ T288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.391337][ T288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.401189][ T288] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 110.410390][ T288] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.436024][ T288] usb 10-1: config 0 descriptor?? [ 110.695007][ T284] EXT4-fs (loop3): unmounting filesystem. [ 110.710764][ T2262] loop3: detected capacity change from 0 to 256 [ 110.721806][ T2262] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 110.817177][ T2256] loop8: detected capacity change from 0 to 1024 [ 110.831207][ T2269] syz.3.528[2269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.831320][ T2269] syz.3.528[2269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.844169][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 110.844185][ T28] audit: type=1400 audit(1771540596.292:644): avc: denied { create } for pid=2268 comm="syz.3.528" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.884753][ T288] prodikeys 0003:041E:2801.000C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.9-1/input0 [ 110.932481][ T2277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.530'. [ 110.942475][ T2277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'. [ 110.958179][ T28] audit: type=1400 audit(1771540596.338:645): avc: denied { setattr } for pid=2268 comm="syz.3.528" name="file0" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.963922][ T2277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.530'. [ 110.980921][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 110.995568][ T517] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.011090][ T597] EXT4-fs (loop5): unmounting filesystem. [ 111.017513][ T28] audit: type=1400 audit(1771540596.338:646): avc: denied { read write } for pid=2268 comm="syz.3.528" name="file0" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.041199][ T2277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'. [ 111.050596][ T28] audit: type=1400 audit(1771540596.338:647): avc: denied { open } for pid=2268 comm="syz.3.528" path="/88/file0" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.083100][ T28] audit: type=1400 audit(1771540596.347:648): avc: denied { unlink } for pid=284 comm="syz-executor" name="file0" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.109164][ T564] usb 10-1: USB disconnect, device number 2 [ 111.124091][ T2282] binder: 2281:2282 ioctl c0306201 200000000640 returned -22 [ 111.131892][ T2282] binder: 2281:2282 ioctl c0481273 200000000d80 returned -22 [ 111.355365][ T288] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 111.496164][ T6] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 111.550387][ T288] usb 4-1: Using ep0 maxpacket: 16 [ 111.556702][ T288] usb 4-1: config 132 has an invalid descriptor of length 127, skipping remainder of the config [ 111.567359][ T288] usb 4-1: config 132 has 0 interfaces, different from the descriptor's value: 1 [ 111.578062][ T288] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=e8.0c [ 111.587278][ T288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.595422][ T288] usb 4-1: Product: syz [ 111.599588][ T288] usb 4-1: Manufacturer: syz [ 111.604180][ T288] usb 4-1: SerialNumber: syz [ 111.691264][ T6] usb 6-1: Using ep0 maxpacket: 32 [ 111.698231][ T6] usb 6-1: config 1 has an invalid interface number: 5 but max is 2 [ 111.706561][ T6] usb 6-1: config 1 has no interface number 1 [ 111.712925][ T6] usb 6-1: too many endpoints for config 1 interface 5 altsetting 8: 173, using maximum allowed: 30 [ 111.724027][ T6] usb 6-1: config 1 interface 5 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 173 [ 111.737102][ T28] audit: type=1400 audit(1771540597.113:649): avc: denied { append } for pid=2284 comm="syz.9.533" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.760901][ T6] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 111.767077][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 111.772191][ T6] usb 6-1: config 1 interface 5 has no altsetting 0 [ 111.777952][ T831] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 111.814072][ T2168] EXT4-fs (loop7): unmounting filesystem. [ 111.814125][ T6] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.995989][ T2277] xt_hashlimit: size too large, truncated to 1048576 [ 112.287729][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.295795][ T6] usb 6-1: Product: ࠄ [ 112.301583][ T6] usb 6-1: Manufacturer: 㐁 [ 112.306209][ T6] usb 6-1: SerialNumber: 〉 [ 112.406368][ T39] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 112.450937][ T288] usb 4-1: USB disconnect, device number 11 [ 112.476849][ T2306] tipc: Started in network mode [ 112.481766][ T2306] tipc: Node identity , cluster identity 4711 [ 112.488614][ T2306] tipc: Failed to set node id, please configure manually [ 112.495951][ T2306] tipc: Enabling of bearer rejected, failed to enable media [ 112.549539][ T6] usb 6-1: 2:1: invalid format type 0xa192 is detected, processed as PCM [ 112.558195][ T6] usb 6-1: 2:1 : sample bitwidth 190 in over sample bytes 2 [ 112.566415][ T6] usb 6-1: failed to enable PITCH for EP 0x82 [ 112.573095][ T6] usb 6-1: 2:1: cannot set freq 13431035 to ep 0x82 [ 112.593159][ T2311] loop8: detected capacity change from 0 to 1024 [ 112.600818][ T2311] EXT4-fs: Ignoring removed orlov option [ 112.610610][ T6] usb 6-1: USB disconnect, device number 18 [ 112.624651][ T2311] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 112.624740][ T39] usb 8-1: unable to get BOS descriptor or descriptor too short [ 112.682411][ T39] usb 8-1: config 63 has an invalid interface number: 66 but max is 0 [ 112.690761][ T39] usb 8-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 112.706811][ T39] usb 8-1: config 63 has no interface number 0 [ 112.713404][ T39] usb 8-1: config 63 interface 66 has no altsetting 0 [ 112.722063][ T39] usb 8-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 112.731269][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.739309][ T39] usb 8-1: Product: syz [ 112.742762][ T28] audit: type=1326 audit(1771540598.045:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2316 comm="syz.9.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35a79c629 code=0x7ffc0000 [ 112.743620][ T39] usb 8-1: Manufacturer: syz [ 112.771462][ T39] usb 8-1: SerialNumber: syz [ 112.777340][ T28] audit: type=1326 audit(1771540598.082:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2316 comm="syz.9.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff35a79c629 code=0x7ffc0000 [ 112.801427][ T28] audit: type=1326 audit(1771540598.082:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2316 comm="syz.9.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35a79c629 code=0x7ffc0000 [ 112.833506][ T229] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.847409][ T28] audit: type=1326 audit(1771540598.082:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2316 comm="syz.9.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff35a79c629 code=0x7ffc0000 [ 112.917681][ T2322] EXT4-fs error (device loop8): ext4_free_inode:355: comm syz.8.542: bit already cleared for inode 13 [ 112.929149][ T2322] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem [ 113.046738][ T39] usb 8-1: Found UVC 0.07 device syz (174f:8acf) [ 113.053214][ T39] usb 8-1: No valid video chain found. [ 113.053329][ T2326] loop3: detected capacity change from 0 to 1024 [ 113.060644][ T39] usb 8-1: USB disconnect, device number 2 [ 113.070167][ T2326] EXT4-fs: Ignoring removed orlov option [ 113.090115][ T2326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.152488][ T776] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 113.186440][ T2332] binder: BINDER_SET_CONTEXT_MGR already set [ 113.192504][ T2332] binder: 2329:2332 ioctl 4018620d 200000004a80 returned -16 [ 113.301620][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 113.316490][ T776] usb 10-1: device descriptor read/64, error -71 [ 113.365040][ T2336] EXT4-fs error (device loop3): ext4_free_inode:355: comm syz.3.547: bit already cleared for inode 13 [ 113.508433][ T2338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.549'. [ 113.518571][ T2338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.549'. [ 113.630517][ T776] usb 10-1: device descriptor read/64, error -71 [ 113.750683][ T2345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.552'. [ 113.760336][ T2345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.552'. [ 113.769482][ T39] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 113.781867][ T2347] xt_connbytes: Forcing CT accounting to be enabled [ 113.796877][ T2347] loop5: detected capacity change from 0 to 128 [ 113.811316][ T2347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.824488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 113.832898][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.841239][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 113.849660][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.857938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.866079][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.874498][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.882816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.890975][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 113.898365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 113.906068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 113.913592][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 113.921068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 113.928805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 113.944760][ T776] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 113.987566][ T39] usb 8-1: unable to get BOS descriptor or descriptor too short [ 113.998563][ T39] usb 8-1: not running at top speed; connect to a high speed hub [ 114.007385][ T39] usb 8-1: config 63 has an invalid interface number: 66 but max is 0 [ 114.015986][ T39] usb 8-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 114.026350][ T39] usb 8-1: config 63 has no interface number 0 [ 114.032948][ T39] usb 8-1: config 63 interface 66 has no altsetting 0 [ 114.043576][ T39] usb 8-1: string descriptor 0 read error: -22 [ 114.049810][ T39] usb 8-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 114.059290][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.071697][ T39] usb 8-1: Found UVC 0.07 device (174f:8acf) [ 114.078780][ T39] usb 8-1: No valid video chain found. [ 114.118066][ T776] usb 10-1: device descriptor read/64, error -71 [ 114.291497][ T24] usb 8-1: USB disconnect, device number 3 [ 114.421427][ T776] usb 10-1: device descriptor read/64, error -71 [ 114.551498][ T776] usb usb10-port1: attempt power cycle [ 114.866982][ T2355] netlink: 'syz.7.557': attribute type 4 has an invalid length. [ 114.881238][ T2355] netlink: 'syz.7.557': attribute type 4 has an invalid length. [ 114.911639][ T2355] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.918856][ T2355] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.995714][ T776] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 115.007055][ T2360] binder: 2359:2360 ioctl c0306201 200000000640 returned -22 [ 115.014621][ T2360] binder: 2359:2360 ioctl c0481273 200000000d80 returned -22 [ 115.040401][ T776] usb 10-1: device descriptor read/8, error -71 [ 115.050053][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.050373][ T517] Bluetooth: hci0: command 0x1003 tx timeout [ 115.062480][ T2320] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 115.068564][ T2335] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 115.125141][ T2189] EXT4-fs (loop8): unmounting filesystem. [ 115.126049][ T2363] loop5: detected capacity change from 0 to 16 [ 115.152795][ T2363] erofs: (device loop5): mounted with root inode @ nid 36. [ 115.206687][ T776] usb 10-1: device descriptor read/8, error -71 [ 115.422017][ T2384] netlink: 60 bytes leftover after parsing attributes in process `syz.7.568'. [ 115.483241][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 115.483240][ T831] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 115.504860][ T776] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 115.528082][ T284] EXT4-fs (loop3): unmounting filesystem. [ 115.549523][ T776] usb 10-1: device descriptor read/8, error -71 [ 115.656328][ T2395] loop7: detected capacity change from 0 to 1024 [ 115.667552][ T2395] EXT4-fs: Ignoring removed orlov option [ 115.676499][ T2393] loop3: detected capacity change from 0 to 40427 [ 115.687437][ T2393] F2FS-fs (loop3): invalid crc value [ 115.695700][ T2395] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 115.704303][ T2393] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.711831][ T776] usb 10-1: device descriptor read/8, error -71 [ 115.753173][ T2393] F2FS-fs (loop3): Start checkpoint disabled! [ 115.759782][ T2393] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 115.767669][ T2393] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 115.794465][ T2393] syz.3.571: attempt to access beyond end of device [ 115.794465][ T2393] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 115.808687][ T2393] syz.3.571: attempt to access beyond end of device [ 115.808687][ T2393] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.841111][ T776] usb usb10-port1: unable to enumerate USB device [ 115.961560][ T1249] kworker/u4:7: attempt to access beyond end of device [ 115.961560][ T1249] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 115.981758][ T1249] kworker/u4:7: attempt to access beyond end of device [ 115.981758][ T1249] loop3: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 116.001906][ T2406] EXT4-fs error (device loop7): ext4_free_inode:355: comm syz.7.572: bit already cleared for inode 13 [ 116.063045][ T2406] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 116.132336][ T2420] loop9: detected capacity change from 0 to 256 [ 116.155354][ T2420] exfat: Deprecated parameter 'namecase' [ 116.176859][ T343] ================================================================== [ 116.185218][ T343] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 116.192248][ T343] Write of size 8 at addr ffff888112010a00 by task kworker/1:3/343 [ 116.200121][ T343] [ 116.202440][ T343] CPU: 1 PID: 343 Comm: kworker/1:3 Not tainted syzkaller #0 [ 116.209880][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.219917][ T343] Workqueue: usb_hub_wq hub_event [ 116.224929][ T343] Call Trace: [ 116.228193][ T343] [ 116.231123][ T343] __dump_stack+0x21/0x24 [ 116.235442][ T343] dump_stack_lvl+0x110/0x170 [ 116.240196][ T343] ? __cfi_dump_stack_lvl+0x8/0x8 [ 116.245211][ T343] ? enqueue_timer+0xae/0x480 [ 116.249873][ T343] print_address_description+0x71/0x200 [ 116.255402][ T343] print_report+0x4a/0x60 [ 116.259729][ T343] kasan_report+0x122/0x150 [ 116.264260][ T343] ? enqueue_timer+0xae/0x480 [ 116.268924][ T343] __asan_report_store8_noabort+0x17/0x20 [ 116.274629][ T343] enqueue_timer+0xae/0x480 [ 116.279119][ T343] __mod_timer+0x84c/0xc00 [ 116.283531][ T343] schedule_timeout+0x154/0x340 [ 116.288372][ T343] ? __cfi_schedule_timeout+0x10/0x10 [ 116.293731][ T343] ? __cfi_process_timeout+0x10/0x10 [ 116.299017][ T343] ? _raw_spin_lock+0x94/0xf0 [ 116.303770][ T343] wait_for_common+0x365/0x640 [ 116.308538][ T343] ? usb_hcd_giveback_urb+0x351/0x410 [ 116.313985][ T343] ? wait_for_completion+0x20/0x20 [ 116.319170][ T343] ? usb_submit_urb+0x1150/0x1820 [ 116.324196][ T343] wait_for_completion_timeout+0xe/0x10 [ 116.329737][ T343] usb_start_wait_urb+0x173/0x300 [ 116.334771][ T343] ? usb_api_blocking_completion+0xb0/0xb0 [ 116.340573][ T343] ? __kasan_check_write+0x14/0x20 [ 116.345668][ T343] usb_control_msg+0x241/0x3f0 [ 116.350437][ T343] hub_ext_port_status+0x100/0x6b0 [ 116.355554][ T343] hub_event+0x7da/0x46b0 [ 116.359887][ T343] ? rpm_suspend+0x1333/0x1650 [ 116.364653][ T343] ? pm_schedule_suspend+0x1f0/0x1f0 [ 116.369922][ T343] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 116.375370][ T343] ? __cfi_hub_event+0x10/0x10 [ 116.380141][ T343] ? _raw_spin_unlock_irq+0x48/0x70 [ 116.385356][ T343] process_one_work+0x71f/0xc40 [ 116.390206][ T343] worker_thread+0xa29/0x11e0 [ 116.394957][ T343] kthread+0x281/0x320 [ 116.399015][ T343] ? __cfi_worker_thread+0x10/0x10 [ 116.404110][ T343] ? __cfi_kthread+0x10/0x10 [ 116.408713][ T343] ret_from_fork+0x1f/0x30 [ 116.413131][ T343] [ 116.416137][ T343] [ 116.418455][ T343] Allocated by task 2320: [ 116.422812][ T343] kasan_set_track+0x4b/0x70 [ 116.427391][ T343] kasan_save_alloc_info+0x25/0x30 [ 116.432528][ T343] __kasan_kmalloc+0x95/0xb0 [ 116.437099][ T343] __kmalloc+0xb1/0x1e0 [ 116.441242][ T343] hci_alloc_dev_priv+0x27/0x1bd0 [ 116.446265][ T343] hci_uart_tty_ioctl+0x3d6/0xa20 [ 116.451291][ T343] tty_ioctl+0x8ef/0xc60 [ 116.455536][ T343] __se_sys_ioctl+0x12f/0x1b0 [ 116.460220][ T343] __x64_sys_ioctl+0x7b/0x90 [ 116.464828][ T343] x64_sys_call+0x58b/0x9a0 [ 116.469431][ T343] do_syscall_64+0x4c/0xa0 [ 116.473838][ T343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.479717][ T343] [ 116.482037][ T343] Freed by task 2310: [ 116.486008][ T343] kasan_set_track+0x4b/0x70 [ 116.490583][ T343] kasan_save_free_info+0x31/0x50 [ 116.495690][ T343] ____kasan_slab_free+0x132/0x180 [ 116.500865][ T343] __kasan_slab_free+0x11/0x20 [ 116.505611][ T343] slab_free_freelist_hook+0xc2/0x190 [ 116.511056][ T343] __kmem_cache_free+0xb7/0x1b0 [ 116.515895][ T343] kfree+0x6f/0xf0 [ 116.519599][ T343] hci_release_dev+0x12a3/0x13b0 [ 116.524527][ T343] bt_host_release+0x82/0x90 [ 116.529097][ T343] device_release+0xa4/0x1d0 [ 116.533680][ T343] kobject_put+0x19d/0x280 [ 116.538084][ T343] put_device+0x1f/0x30 [ 116.542237][ T343] hci_free_dev+0x1c/0x20 [ 116.546552][ T343] hci_uart_tty_close+0x1a3/0x230 [ 116.551567][ T343] tty_ldisc_kill+0x10f/0x1f0 [ 116.556226][ T343] tty_ldisc_release+0x1a5/0x200 [ 116.561253][ T343] tty_release_struct+0x29/0xe0 [ 116.566100][ T343] tty_release+0xbfd/0x1210 [ 116.570678][ T343] __fput+0x1fc/0x8f0 [ 116.574656][ T343] ____fput+0x15/0x20 [ 116.578638][ T343] task_work_run+0x1e1/0x250 [ 116.583234][ T343] exit_to_user_mode_loop+0x9b/0xb0 [ 116.588434][ T343] exit_to_user_mode_prepare+0x87/0xd0 [ 116.593883][ T343] syscall_exit_to_user_mode+0x1a/0x30 [ 116.599448][ T343] do_syscall_64+0x58/0xa0 [ 116.603849][ T343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.609734][ T343] [ 116.612071][ T343] Last potentially related work creation: [ 116.617767][ T343] kasan_save_stack+0x3a/0x60 [ 116.622516][ T343] __kasan_record_aux_stack+0xb6/0xc0 [ 116.627887][ T343] kasan_record_aux_stack_noalloc+0xb/0x10 [ 116.633704][ T343] insert_work+0x51/0x300 [ 116.638034][ T343] __queue_work+0x9b1/0xd30 [ 116.642650][ T343] queue_work_on+0xde/0x150 [ 116.647163][ T343] __hci_cmd_sync_sk+0xa7f/0xd30 [ 116.652179][ T343] hci_cmd_sync_status+0x53/0x120 [ 116.657191][ T343] hci_dev_cmd+0x35b/0x740 [ 116.661608][ T343] hci_sock_ioctl+0x41e/0x7f0 [ 116.666269][ T343] sock_do_ioctl+0x114/0x330 [ 116.670853][ T343] sock_ioctl+0x4ca/0x720 [ 116.675162][ T343] __se_sys_ioctl+0x12f/0x1b0 [ 116.679831][ T343] __x64_sys_ioctl+0x7b/0x90 [ 116.684417][ T343] x64_sys_call+0x58b/0x9a0 [ 116.688904][ T343] do_syscall_64+0x4c/0xa0 [ 116.693310][ T343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.699193][ T343] [ 116.701498][ T343] Second to last potentially related work creation: [ 116.708060][ T343] kasan_save_stack+0x3a/0x60 [ 116.712724][ T343] __kasan_record_aux_stack+0xb6/0xc0 [ 116.718088][ T343] kasan_record_aux_stack_noalloc+0xb/0x10 [ 116.723877][ T343] insert_work+0x51/0x300 [ 116.728190][ T343] __queue_work+0x9b1/0xd30 [ 116.732675][ T343] queue_work_on+0xde/0x150 [ 116.737174][ T343] __hci_cmd_sync_sk+0xa7f/0xd30 [ 116.742120][ T343] hci_cmd_sync_status+0x53/0x120 [ 116.747132][ T343] hci_dev_cmd+0x35b/0x740 [ 116.751654][ T343] hci_sock_ioctl+0x41e/0x7f0 [ 116.756321][ T343] sock_do_ioctl+0x114/0x330 [ 116.760909][ T343] sock_ioctl+0x4ca/0x720 [ 116.765247][ T343] __se_sys_ioctl+0x12f/0x1b0 [ 116.769934][ T343] __x64_sys_ioctl+0x7b/0x90 [ 116.774529][ T343] x64_sys_call+0x58b/0x9a0 [ 116.779201][ T343] do_syscall_64+0x4c/0xa0 [ 116.783610][ T343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.789502][ T343] [ 116.791826][ T343] The buggy address belongs to the object at ffff888112010000 [ 116.791826][ T343] which belongs to the cache kmalloc-8k of size 8192 [ 116.805864][ T343] The buggy address is located 2560 bytes inside of [ 116.805864][ T343] 8192-byte region [ffff888112010000, ffff888112012000) [ 116.819490][ T343] [ 116.821887][ T343] The buggy address belongs to the physical page: [ 116.828281][ T343] page:ffffea0004480400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112010 [ 116.838498][ T343] head:ffffea0004480400 order:3 compound_mapcount:0 compound_pincount:0 [ 116.846815][ T343] flags: 0x4000000000010200(slab|head|zone=1) [ 116.852870][ T343] raw: 4000000000010200 ffffea00043a0600 dead000000000004 ffff888100043500 [ 116.861538][ T343] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 116.870099][ T343] page dumped because: kasan: bad access detected [ 116.876496][ T343] page_owner tracks the page as allocated [ 116.882288][ T343] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 287, tgid 287 (syz-executor), ts 21186115929, free_ts 21147813122 [ 116.903820][ T343] post_alloc_hook+0x1f5/0x210 [ 116.908574][ T343] prep_new_page+0x1c/0x110 [ 116.913066][ T343] get_page_from_freelist+0x2d12/0x2d80 [ 116.918685][ T343] __alloc_pages+0x1d9/0x480 [ 116.923265][ T343] alloc_slab_page+0x6e/0xf0 [ 116.927840][ T343] new_slab+0x98/0x3d0 [ 116.931902][ T343] ___slab_alloc+0x6bd/0xb20 [ 116.936488][ T343] __slab_alloc+0x5e/0xa0 [ 116.940807][ T343] __kmem_cache_alloc_node+0x203/0x2c0 [ 116.946271][ T343] __kmalloc_node+0xa1/0x1e0 [ 116.950852][ T343] kvmalloc_node+0x28a/0x460 [ 116.955421][ T343] pfifo_fast_init+0x260/0x7a0 [ 116.960169][ T343] qdisc_create_dflt+0x150/0x3b0 [ 116.965100][ T343] dev_activate+0x2cf/0x1040 [ 116.969683][ T343] __dev_open+0x40e/0x520 [ 116.974000][ T343] __dev_change_flags+0x21e/0x6b0 [ 116.979100][ T343] page last free stack trace: [ 116.983756][ T343] free_unref_page_prepare+0x742/0x750 [ 116.989213][ T343] free_unref_page+0x95/0x540 [ 116.994050][ T343] __free_pages+0x67/0x100 [ 116.998462][ T343] __free_slab+0xca/0x1a0 [ 117.002813][ T343] __unfreeze_partials+0x160/0x190 [ 117.007925][ T343] put_cpu_partial+0xa9/0x100 [ 117.012587][ T343] __slab_free+0x1c4/0x280 [ 117.017003][ T343] ___cache_free+0xbf/0xd0 [ 117.021403][ T343] qlist_free_all+0xc6/0x140 [ 117.025979][ T343] kasan_quarantine_reduce+0x14a/0x170 [ 117.031430][ T343] __kasan_slab_alloc+0x24/0x80 [ 117.036262][ T343] slab_post_alloc_hook+0x4f/0x2d0 [ 117.041382][ T343] __kmem_cache_alloc_node+0x192/0x2c0 [ 117.046827][ T343] __kmalloc+0xa1/0x1e0 [ 117.050968][ T343] fib6_info_alloc+0x34/0xe0 [ 117.055544][ T343] ip6_route_info_create+0x526/0x1510 [ 117.060908][ T343] [ 117.063219][ T343] Memory state around the buggy address: [ 117.068828][ T343] ffff888112010900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.076958][ T343] ffff888112010980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.085009][ T343] >ffff888112010a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.093155][ T343] ^ [ 117.097217][ T343] ffff888112010a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.105265][ T343] ffff888112010b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.113334][ T343] ================================================================== [ 117.121385][ T343] Disabling lock debugging due to kernel taint [ 117.154882][ T2420] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 117.208039][ T2420] exFAT-fs (loop9): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 117.275240][ T2422] binder: 2421:2422 ioctl c0306201 200000000640 returned -22 [ 117.291029][ T2422] binder: 2421:2422 ioctl c0481273 200000000d80 returned -22 [ 117.303293][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 117.315138][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 117.323563][ C1] CPU: 1 PID: 102 Comm: udevd Tainted: G B syzkaller #0 [ 117.331904][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.341972][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 117.347288][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 74 6e 00 49 8b 7d 00 e8 a3 2c [ 117.366915][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 117.372977][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811020d100 [ 117.380954][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 117.388914][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 117.396889][ C1] R10: dffffc0000000000 R11: ffffed1022402139 R12: dffffc0000000000 [ 117.404878][ C1] R13: 0000000000000000 R14: ffff8881120109c8 R15: 0000000000000008 [ 117.412863][ C1] FS: 00007f5e69c14880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 117.421817][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.428393][ C1] CR2: 00007f5e69c01000 CR3: 000000011066f000 CR4: 00000000003506a0 [ 117.436363][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.444439][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.452414][ C1] Call Trace: [ 117.455753][ C1] [ 117.458639][ C1] delayed_work_timer_fn+0x61/0x80 [ 117.463753][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 117.469575][ C1] call_timer_fn+0x46/0x2a0 [ 117.474077][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 117.479887][ C1] __run_timers+0x689/0x9f0 [ 117.484416][ C1] ? calc_index+0x200/0x200 [ 117.488936][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 117.494188][ C1] run_timer_softirq+0x6a/0xf0 [ 117.498969][ C1] handle_softirqs+0x1d7/0x600 [ 117.503756][ C1] ? irqtime_account_irq+0xc4/0x240 [ 117.508980][ C1] __irq_exit_rcu+0x52/0xf0 [ 117.513505][ C1] irq_exit_rcu+0x9/0x10 [ 117.517765][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 117.523393][ C1] [ 117.526336][ C1] [ 117.529273][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 117.535254][ C1] RIP: 0010:finish_task_switch+0x173/0x7b0 [ 117.541052][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 09 29 69 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 15 e5 b2 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 117.560648][ C1] RSP: 0018:ffffc90000a27580 EFLAGS: 00000282 [ 117.566722][ C1] RAX: 0000000080000001 RBX: ffff88811020dc48 RCX: 0000000000000000 [ 117.574738][ C1] RDX: 0000000000000001 RSI: ffffffff85ca6e20 RDI: 00000000ffffffff [ 117.582827][ C1] RBP: ffffc90000a275d0 R08: ffff88810ba62887 R09: 1ffff1102174c510 [ 117.590821][ C1] R10: dffffc0000000000 R11: ffffed102174c511 R12: ffff8881f6f37d80 [ 117.598811][ C1] R13: 0000000000000000 R14: ffff8881f6f388e0 R15: ffff88811020d100 [ 117.606921][ C1] ? __switch_to_asm+0x3a/0x60 [ 117.611697][ C1] __schedule+0xbae/0x1500 [ 117.616140][ C1] ? release_firmware_map_entry+0x190/0x190 [ 117.622034][ C1] preempt_schedule_irq+0xaa/0x120 [ 117.627152][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 117.632863][ C1] ? kernel_text_address+0xa0/0xd0 [ 117.637975][ C1] raw_irqentry_exit_cond_resched+0x29/0x30 [ 117.643876][ C1] irqentry_exit+0x37/0x40 [ 117.648296][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 117.653399][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 117.658951][ C1] RIP: 0010:__stack_depot_save+0x167/0x480 [ 117.664756][ C1] Code: c1 c6 04 29 f2 31 d1 c1 c2 0e 29 d1 41 31 cc c1 c1 18 41 29 cc 4c 8b 05 af f6 2e 05 44 8b 0d a4 f6 2e 05 45 21 e1 4b 8b 1c c8 <48> 85 db 74 63 44 89 f9 eb 08 48 8b 1b 48 85 db 74 56 44 39 63 08 [ 117.684358][ C1] RSP: 0018:ffffc90000a27880 EFLAGS: 00000206 [ 117.690432][ C1] RAX: 0000000000000000 RBX: ffff88810f25b470 RCX: 0000000017390404 [ 117.698399][ C1] RDX: 000000009ea7813d RSI: 000000004fa4cf5a RDI: 0000000000000800 [ 117.706365][ C1] RBP: ffffc90000a278e0 R08: ffff8881f5a00000 R09: 00000000000544de [ 117.714509][ C1] R10: 00000000e03a280a R11: 0000000000000001 R12: 0000000086c544de [ 117.722476][ C1] R13: 0000000000000000 R14: ffffc90000a278f0 R15: 000000000000000c [ 117.730447][ C1] kasan_set_track+0x60/0x70 [ 117.735037][ C1] ? kasan_set_track+0x4b/0x70 [ 117.739799][ C1] ? kasan_save_free_info+0x31/0x50 [ 117.745014][ C1] ? ____kasan_slab_free+0x132/0x180 [ 117.750302][ C1] ? __kasan_slab_free+0x11/0x20 [ 117.755238][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 117.760790][ C1] ? kmem_cache_free+0x12d/0x300 [ 117.765725][ C1] ? putname+0x111/0x160 [ 117.769969][ C1] ? __se_sys_newfstatat+0x14d/0x440 [ 117.775249][ C1] ? __x64_sys_newfstatat+0x9b/0xb0 [ 117.780454][ C1] ? x64_sys_call+0x77c/0x9a0 [ 117.785254][ C1] ? do_syscall_64+0x4c/0xa0 [ 117.789875][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.795958][ C1] ? kmem_cache_free+0x12d/0x300 [ 117.800896][ C1] kasan_save_free_info+0x31/0x50 [ 117.805929][ C1] ____kasan_slab_free+0x132/0x180 [ 117.811036][ C1] __kasan_slab_free+0x11/0x20 [ 117.815798][ C1] slab_free_freelist_hook+0xc2/0x190 [ 117.821178][ C1] ? putname+0x111/0x160 [ 117.825440][ C1] kmem_cache_free+0x12d/0x300 [ 117.830204][ C1] putname+0x111/0x160 [ 117.834269][ C1] __se_sys_newfstatat+0x14d/0x440 [ 117.839376][ C1] ? __x64_sys_newfstatat+0xb0/0xb0 [ 117.844571][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 117.849421][ C1] ? finish_task_switch+0x16b/0x7b0 [ 117.854618][ C1] ? __switch_to_asm+0x3a/0x60 [ 117.859552][ C1] ? __schedule+0xbae/0x1500 [ 117.864146][ C1] ? cp_old_stat+0x4a0/0x4a0 [ 117.868830][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 117.874460][ C1] __x64_sys_newfstatat+0x9b/0xb0 [ 117.879481][ C1] x64_sys_call+0x77c/0x9a0 [ 117.884080][ C1] do_syscall_64+0x4c/0xa0 [ 117.888494][ C1] ? clear_bhb_loop+0x30/0x80 [ 117.893166][ C1] ? clear_bhb_loop+0x30/0x80 [ 117.897836][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.903727][ C1] RIP: 0033:0x7f5e69511b0a [ 117.908317][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 117.927917][ C1] RSP: 002b:00007ffea6c08398 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 117.936328][ C1] RAX: ffffffffffffffda RBX: 00007ffea6c08830 RCX: 00007f5e69511b0a [ 117.944382][ C1] RDX: 00007ffea6c083a0 RSI: 00007ffea6c08830 RDI: 00000000ffffff9c [ 117.952345][ C1] RBP: 000055b05e15e2c0 R08: 0000000000000000 R09: 0000000000000000 [ 117.960309][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea6c08430 [ 117.968275][ C1] R13: 000055b043ed6100 R14: 0000000000000007 R15: 00007ffea6c09d30 [ 117.976246][ C1] [ 117.979349][ C1] Modules linked in: [ 117.983247][ C1] ---[ end trace 0000000000000000 ]--- [ 117.988693][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 117.994066][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 74 6e 00 49 8b 7d 00 e8 a3 2c [ 118.013667][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 118.019726][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811020d100 [ 118.027697][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 118.035674][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 118.043648][ C1] R10: dffffc0000000000 R11: ffffed1022402139 R12: dffffc0000000000 [ 118.051613][ C1] R13: 0000000000000000 R14: ffff8881120109c8 R15: 0000000000000008 [ 118.059594][ C1] FS: 00007f5e69c14880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 118.068517][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.075098][ C1] CR2: 00007f5e69c01000 CR3: 000000011066f000 CR4: 00000000003506a0 [ 118.083069][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.091036][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.099006][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 118.106553][ C1] Kernel Offset: disabled [ 118.110860][ C1] Rebooting in 86400 seconds..