last executing test programs: 3m27.250157736s ago: executing program 32 (id=47): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f00000008c0)={[{@noblock_validity}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x80000001}}, {@noload}]}, 0xf5, 0x49b, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000300)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) sysinfo(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r7}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m25.384791415s ago: executing program 33 (id=58): epoll_create1(0x80000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1010008, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$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") r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) writev(0xffffffffffffffff, &(0x7f0000002240), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800042, &(0x7f0000000780)={[{@minixdf}, {@noauto_da_alloc}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000000180)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0), 0x0) getegid() r4 = socket$inet6(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000c612e8789789d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000079006001000000001800000000130000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000740), &(0x7f0000000840)=@v2={0x5, 0x3, 0x4, 0x1000, 0xfc, "1b05c0ce4187b69bdccfe435678a1b0e8220b0b942f89b96769c33a1b3251946efac544ea21927c862506f580e223b99cd5790d2e1922d103863968c426f5b0567a99233dffd7f2d66164b8365fe74ddc663fb99ecba30fcf666a24b9782132efc66e208d2bc7a3218ba5c4bed6d9927ff3594ad4ce28881617f045083e409151500742dcdc30503796a25576af20f78c67ff4b46d026aa63bf013464adf4655de80f3b2415f647437b89d3d434ca3c7b4224e95b52ea5aee9560c91846cae54552465fdcce7785e71a8bf2ec831c9ba5aa9ab41432b7eda2dbd92de41f3fac4f22da32cee9a65c1f8c7ce147b80271fc099f7e515cc41f32af990fa"}, 0x105, 0x1) sendmmsg$inet(r4, &(0x7f0000000e00), 0x0, 0x40000) fallocate(r0, 0x0, 0xbf5, 0x2000402) 3m21.362925091s ago: executing program 34 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a00)={"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"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000000)={'pimreg\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r8, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r8, 0x0) 2m29.760168638s ago: executing program 35 (id=420): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.log\x00', 0x8180, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x6, 0x2, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1, 0x1, 0x7}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002a80)={{{@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e20, 0x9c66, 0x2, 0x80, 0x0, 0x3c, r4, r5}, {0x9, 0xa, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x6, 0x3, 0xf}, {0x0, 0x9, 0x5, 0x4}, 0x0, 0x6e6bb7}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x3c}, 0x672f3c3b3227b4c1, @in=@broadcast, 0x3506, 0x7, 0x0, 0x4, 0x4, 0x0, 0x5}}, 0xe8) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x9, 0xf, 0x7, 0xff, "ecea7024ef29dab8f7c86be1aba7e0319c8ce8769db896c4c783a8106962f9a6"}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 2m15.015986579s ago: executing program 36 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb"], 0xbc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m53.830758056s ago: executing program 37 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x2, 0x12) unshare(0x60000600) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7}, 0x1c) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x7, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/sem\x00', 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x30000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0xd, 0x10, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001980)=0x0) ptrace$setopts(0x2103, r6, 0x1, 0x100040) bind$tipc(0xffffffffffffffff, &(0x7f00000019c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}, 0x2}}, 0x10) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 1m50.83654259s ago: executing program 38 (id=630): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17f, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x24008004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)=ANY=[], 0x50) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r5, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x5}, {0x36, 0xb, 0x3, 0x5, 0x9, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x6}, {0x7}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200450c0}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071181c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE(r2, &(0x7f0000000800)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x7, 0xa, 0x5, 0x7f, 0x3}}, 0x120) 1m47.063363238s ago: executing program 39 (id=650): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'f2fs\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x94) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xfffd, 0xe9, @mcast1, 0x5}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0xbc, 0x10, 0x2, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}]}}}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_team\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'pim6reg1\x00'}, {0x14, 0x35, 'ip6_vti0\x00'}, {0x14, 0x35, 'veth0_to_bond\x00'}, {0x14, 0x35, 'tunl0\x00'}]}]}, 0xbc}}, 0x4010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', r5, 0x29, 0xcd, 0xd, 0x1, 0x10, @mcast1, @remote, 0x40, 0x7, 0x1, 0x1}}) 1m41.683643315s ago: executing program 40 (id=674): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x803e}, 0x20000000) 47.264615484s ago: executing program 5 (id=928): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 47.264450864s ago: executing program 5 (id=929): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r0, &(0x7f0000001680)=@known='system.sockprotoname\x00', 0x0, 0x0) 47.263483644s ago: executing program 5 (id=930): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") (async) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f00000001c0)={0x12, {{0x29, 0x0, 0x4000000, @loopback, 0x1}}}, 0x88) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x4002}], 0x1, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x4e22, 0x200, 0x4e22, 0x7ff, 0x2, 0x20, 0x0, 0x29, 0x0, 0xee00}, {0x0, 0x401, 0x7, 0x7f, 0x8, 0x2d, 0x1ff, 0x7fff}, {0x6, 0x80000000, 0x140000000000000, 0x6}, 0x200, 0x6e6bb3, 0x1, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x4d5, 0x33}, 0x1e, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34ff, 0x0, 0x0, 0x4, 0x4, 0x5, 0x10}}, 0xe8) ioctl$TCSBRKP(r4, 0x5425, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20000023896) (async) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0x4, 0x1, 0x7d8485a2, 0x0, 0x9, "6005a405f7dced38323e0058367fb23603a736"}) (async) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7c92}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff4b}]}]}, 0xa0}}, 0x400d4) r7 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000800)) (async) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 46.326933055s ago: executing program 5 (id=935): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000b40)) read$FUSE(r4, &(0x7f0000001300)={0x2020}, 0x2020) syz_io_uring_complete(0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000010280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) 45.186156054s ago: executing program 7 (id=937): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, 0x0, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 44.954942168s ago: executing program 5 (id=941): epoll_create1(0x80000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1010008, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$eJzs289qE1EUB+CT2Na0LpKFK3Ex4MZVaPoEBqkgBgQlCwVBsQ1IRwIWArow2bnwIfRx3OqTuCwiXEmmf5Iai5Q2A+n3bXKYub9w7pDkMIF5efvt3k5/v/ei9y1qlUpU76UUB5VoRDWOjAIAWCYHKcWXiEjXR7H+NdKvVCi7LwDg8ozn/8/xwD+c/yY/ACy/p8+eP2p3OttPsqwWkX8adAfd4rU43+7Fm8hjNzajHr8j0rGifvCws72ZTTTicz48zA8H3Wuz+VbUozE/3yry2Wx+NTam81tRj5vz81tz82tx985Uvhn1+PE6+pHHToyzJ/mPrSy7/7hzKn9jsg4AAACWQTM7Nvf+vdn81/ki36789/8Dp+6vV+LWSrl7B4Crav/9h71Xeb77bqHF2tSRiBidsfj7RtHo4jrMzhk/uqSLvpgXV6zHxb/zapS/r+Up+tXzx1NKw/Hn8+zFtYiYFOX9JgGLcfLtnzlcL60hAAAAAAAAAAAAAADgL4t4dKnsPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw9fwJAAD//xQYkLQ=") creat(&(0x7f0000000e40)='./bus\x00', 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) writev(0xffffffffffffffff, &(0x7f0000002240), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800042, &(0x7f0000000780)={[{@minixdf}, {@noauto_da_alloc}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000000180)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0), 0x0) getegid() r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000c612e8789789d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000079006001000000001800000000130000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000740), &(0x7f0000000840)=@v2={0x5, 0x3, 0x4, 0x1000, 0xfc, "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"}, 0x105, 0x1) 44.695069319s ago: executing program 5 (id=944): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0xc, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x602}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) 44.689208081s ago: executing program 41 (id=944): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0xc, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x602}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) 44.507629813s ago: executing program 7 (id=949): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, &(0x7f0000000540)={0x0, 0xb4a7, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6053, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 44.385474882s ago: executing program 7 (id=951): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1206000, &(0x7f0000000300), 0x0, 0x246, &(0x7f0000003a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003880), 0x0, 0x10002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x22020600) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300, 0xfdfe}, &(0x7f0000000440)={0x0, 0x2710}) 43.831473813s ago: executing program 7 (id=952): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000b40)) read$FUSE(r4, &(0x7f0000001300)={0x2020}, 0x2020) syz_io_uring_complete(0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000010280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) 41.981640208s ago: executing program 7 (id=964): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x87) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x200000, 0x0, 0x6}, 0x77) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x2040, 0x102, 0x1}, 0x18) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000840)=""/184, 0x26, 0xb8, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x46db10dae92eea88, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/149, 0x95}}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000000040)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRESDEC, @ANYRES32=0x0], 0xff, 0x1211, &(0x7f0000000900)="$eJzs3U+LG2UcB/Dfptlmu3W3679qe/HBm5fB9uCpIIvsgjSgtI3QCsKUzWrYmCyZHJLioeDNk69DPHoTxDew78LbIohe6sWR/Nn+WdOaYrdb2c/nMr/k+0zmeYZJYIbnIftXvv1yZ7vItvN+VBYWorq7GOleihSVOBUTd+Odrzf/+Ob6zVtX1+v1jWspba7fuPReSmn1rZ8+/er7t3/un/3kh9Ufa7G39tn+b5d/2Tu/d2H/rxtftIrUKlKn2095ut3t9vPb7WbaahU7WUoft5t50UytTtHsPZJvt7u7u8OUd7ZWlnd7zaJIeWeYdprD1O+mfm+Y8s/zVidlWZZWloPDyrIs523b+O7eqPWf0/NYvl+eubIcZ+OlWInVOBdr8XK8Eq/Ga/F6nI834s248FSfDwAAAAAAAAAAAAAAAAAAAMxjvP4/ynIxTo9X9p8J6/8BAAAAAAAAAAAAAAAAAADgeRuv/18I6/8BAAAAAAAAAAAAAAAAAADgGPn/fwAAAAAAAAAAAAAAAAAAADh+12/eurper29cS2kp4te7g8agMdlO8s0P6xvvprG1B3v9Phg0Tt3PL03y9Ghei+VpfnlmvhS16atR9sFH9YfzSjQuxtbRDh0AAABOjCzdN/P+Pssel0+qh54PHLq/r8bF6qwjLk235bmjGA9Ppxje2cnb7WavGC4eFHeecVGNeRsvTHt1JN14cYsTOOTHF7XRyZgZHTwvHL1zUL8YfX5QVONf2lSetPuMb+WzvMZG5t7ref4KcVz+ee0BAAAAAAAAAADwfzCZ/1WLJ80HPP0f5x4ePmYlYubMcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/ZgQMBAAAAAEH+1oNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFMAAAD//67hfQ0=") open(&(0x7f0000000140)='./file1\x00', 0x2, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 41.787001854s ago: executing program 7 (id=966): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000000)={0x2, 0xfffffffffffffffe, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x8000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = socket(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 41.763861909s ago: executing program 42 (id=966): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000000)={0x2, 0xfffffffffffffffe, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x8000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = socket(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 41.656554844s ago: executing program 8 (id=968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001002bbd14792ca938700000dcdf25"], 0x20}}, 0x2000e844) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fstat(r2, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0x40, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0x8, 0x7, @vifc_lcl_ifindex=r5, @multicast2}, 0x10) 41.33504787s ago: executing program 8 (id=970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x80ff, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 41.326526162s ago: executing program 8 (id=971): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, &(0x7f0000000540)={0x0, 0xb4a7, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6053, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 41.297641398s ago: executing program 8 (id=972): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x3, 0x1}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") open(&(0x7f00000002c0)='./bus\x00', 0x400143042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x10, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0xffffffffffff8000, 0x3]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r3, 0x5602, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 40.95385456s ago: executing program 8 (id=974): prctl$PR_SET_SECUREBITS(0x1c, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0xe3, 0x501301) syslog(0xf6a0db57, 0x0, 0x0) 40.686923682s ago: executing program 8 (id=975): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000b40)) read$FUSE(r4, &(0x7f0000001300)={0x2020}, 0x2020) syz_io_uring_complete(0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000010280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) 40.57050195s ago: executing program 43 (id=975): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$eJzs3M1rHOUfAPDvbDZJ35Nff/WltdpoFYsvSZNWLShUBcGDgqCHepKYpKU2baSJ0JZgo5R6EbTgXQQvon+BJ0+ingSvepdC0VxaPa1MZma7SXe3ed+8fD4w2Xl2npnn+c4zL8/M7CSATasn/ZNE7IiI3yOiKyJKtRm2ZkOa79b05NA/05NDSVQqb/6VpLPFzenJoSJrkn9uzxLldEGlK0m8WKfc8YuXzgyOjo6cz9N9E2ff7xu/eOnp02cHT42cGjk3cOzY0SP9zz078MyyxJnW6ea+D8f273317WuvD5249u7P3yUR24rptXEs0fNd1dHJ6jqZ67FlKmyt2FkznpRbWBEWpDMi0uZqn9n/u6Ltyq7qtK545eOWVg5YUZVKpTLQePJUBdjAkljMXG35sQNYv4oTfXr9Wwyr1PVYE268lF0ApXHfyodsSjm7D9KZXRvtXKHyeyLixNS/X6ZDLPg+RPsK1QoA2Mh+SPs/T9Xp/5Uj7s2y/H08Inblz4a6I+J/EbE7Iv4fEXsi4p7I8t4XEffXL6bnnQbl98xJ39n/KV1faozNpP2/F/JnW7P7f9WnYN1teWrnTPztycnToyOH83VyKNo703R/3aUnEVPp52+fNSq/tv+XDmn5RV8wr8f1cufseYYHJwaXHHjuxkcR+8r14k+ifDuK2BsR+xZZxuknvtk/+5u26tjd429iGZ4zVb6KeDxr/6mYE38haf58sm9LjI4c7iu2iojpOWX88uvVNxqVn8Vfiubxb116oA2k7b+t3vZ/vBp/d1L7vHb8jkV03K2Mq3980vCaZrHbf0fy1qzCLwxOTJzvj+hIXrvz+5ob3EX6wvC3M/nT+A8drL//787nSeN/ICLSjfjBiHgoIg7kdX84Ih6JiINN4v/p5Uffaxj/gflv/1PZx7I+XU3jH657/GvU/gsY2ZIv4cyP3zeMv2j/osHqtv/RIjFTqfkc/+Zb08WsMwAAAFhvShGxI5JSb3W8VOrtzX4vvye2lUbHxieePDn2wbnh7B2B7mgvFXe6umruh/bn94aL9ECevpynj+T3jb9o2zqT7h0aGx1udfCwyW1vsP+n/mxrde2AFVee+5papatVVQFWmfc1YfNa/P7vyAHr3V324tJq1QNYfc7isHnV2/8v1yaSyH4lD2w4zv+weVX3/8/nkbnmda+5L28C60+z87+fAsDGpv8Pm9Ki3utfSyPxdUTzPMlaqeqCRj5dyuzllapY5+1votTC9dPRkkYZaIto4SZRnu9/tYiLlctLLrTVRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDl8V8AAAD//3Y422k=") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000b40)) read$FUSE(r4, &(0x7f0000001300)={0x2020}, 0x2020) syz_io_uring_complete(0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000010280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) 27.7407602s ago: executing program 0 (id=1034): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000e10000000000ffff000000000800080009030000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101202, 0x1ac) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x81717b5f57185b22, 0x80010, r4, 0xa9928000) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee00, 0x0) setregid(0xee00, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000040)=r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r6) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r11 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0) request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r11) keyctl$KEYCTL_MOVE(0x1e, 0x0, r11, 0xfffffffffffffffe, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r10, &(0x7f0000000000)="953e", 0x2) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r9, 0x722, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004881}, 0x4000020) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000255000/0x1000)=nil, 0x1000}, 0x4}) 27.648663931s ago: executing program 0 (id=1035): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, r4}, 0x14) syz_emit_ethernet(0xb2, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd60000000007c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a0b000000000000c91000000000000000000000ffffac1e010107100000000102050200000000000006000005028001c204000000bfc91000000000000000000000000000000000c204000000ac010400000000c91000000000000000000000000000000000000006000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780010237baecd402992c0763751745daf66a2f346971bd3894dd5bc941f4b274b1406efee89575920e56242dd6017d29c9f"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001002dbd7040ffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000080000000000000000000000000000000fcffffff00000000000000000000000084010500fc000000000000000000000000000004000000053c000000000000000000000000000000000000000000000002350000000200000000000000000000fc7f0000fe8000000000000000000000000000bb000000003c0000000200000000000000000000000000000000000001fdffffff0403000000080000000800000000000000000000000000000000000000000001000000003200000000000000000000000000000000000000000000000335000001000400080000000000000000000000e00000020000000000000000000000000001000033"], 0x23c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) syz_usb_control_io$printer(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000001dc0)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(r0, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x13, 0x1, {0x6, 0x7, 0xffffffffffffff78, 0x6, 0x0, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, r8, r9, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) read$FUSE(r11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="e0880600000031a30a65b7a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 24.023130065s ago: executing program 0 (id=1051): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mkdirat(r0, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") setresgid(0xee00, 0xee01, 0x0) syz_clone(0x80000211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x5, 0x4, 0x2, 0x18000000, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x11}) 22.13377539s ago: executing program 0 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0x8}}) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(r1, &(0x7f0000004000)=ANY=[], 0x1358) read$snapshot(r1, &(0x7f00000000c0)=""/250, 0xfa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000380)={[{@resuid}, {@data_err_ignore}], [{@euid_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x32, 0x33, 0x32, 0x38, 0x36, 0x39, 0x65], 0x2d, [0x36, 0x39, 0x35, 0x62], 0x2d, [0x0, 0x64, 0x34, 0x38], 0x2d, [0x33, 0x33, 0x31, 0x32], 0x2d, [0x30, 0x33, 0x35, 0x34, 0x37, 0x64, 0x38, 0x38]}}}, {@obj_type={'obj_type', 0x3d, 'uid'}}, {@measure}]}, 0x2, 0xbdb, &(0x7f0000000c00)="$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") syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fdatasync(r1) 19.780396234s ago: executing program 0 (id=1062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, 0x0, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.791243536s ago: executing program 0 (id=1064): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xf4, 0x30, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{0xe0, 0x1, [@m_simple={0xdc, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x1b, 0x3, ',-,-\\)&}-\x91(#%[++-#\\@-)\x00'}, @TCA_DEF_DATA={0x1b, 0x3, ',-,-\\)&}-\x91(#%[++-#\\@-)\x00'}]}, {0x76, 0x6, "d45d2bdac3720e78f7a00600600ba353d33968aeb3e0e1850a48bc89e888e4379a1db6140aa0f8bd85aad045336d143d22dbba666a77cdfc0ae19e216e89958f998609a010dade2ea29c188896c5f4f816234a1fe2cec561c355c386d55ec08032a3ead385643e8fdde23ef9c3b2f26b4fc4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000033d4caa2feb3e16aae30735bb206e585533e869118b2593943a03e98603738be2a50744bca2acb3f393ae1ebbd3775f0c8025da32a95b4e8612ffc3f56dc863d52c2ac77d452cc8dba2130164a1b417196e324ba5d8eff3519daf267129cc441b8f8369202adfc32cd3a9faef1ae6d2901a88b211241b4fdfb59c61bddaf67add17c8b4891c0eeb0df116fcc246dd0ff4a754405e06f0ac61d0776b31fb3d10a01bbc5f3da643df99b32a4e97da57f76b83e6425", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYRESDEC=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x1, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000031c0)={0xffffffffffffffff, 0x0, 0x7d, 0x1000, &(0x7f0000000380)="7b415f4ce3b8c6156e95d51f6c8286063b693d2932c506f63fdc74d3f053db7035acd249d917e9592ca340095f330f527f23c4d72d8320e891d89f6433cff43c939034b56f6bb92f98a6d62b910a3e92fe44c78028877c61e9c037623a4bba0c7fd8be1bbe803d37b67bfcf7496c5f98ac437a3c599d8e168d102255b4", &(0x7f0000001140)=""/4096, 0x5, 0x0, 0x1000, 0x49, &(0x7f0000002140)="fc65d92f5f3fb9a811fe24674022c36beadd0fdf9d157bc43fba2982119a3005f03ca471f35039a57f6a752d6a5f1cdaeec4c5ded8394985f245c2aefc62def7f2038741137af683e0d8113740460fb5290799d6d1edd0c2004d70460125989a2433afc7019be0565ea20344cd6a2d50b987c63a741b4c65bb4d691f1e041933416af96d16237b9c726367b053fd1509715e0aa54db34b908b95ef2b98f5267b2e531c3abc496a00bdd3425be61945e44d91f8a2d5500807536f21fa7dbbcd35b24e64bdb8dd0e7220635e27b08e655a89f1b737d70790d6f717db41a73cd0dd17d2cd40b6ec77de74f308d77d6c5e83507a18411e68984b674331f97b3967492c0787513dd04022e6e1613602c5a9293b5cbdff8d7881e93a7fed111e1d79c269afc6ecabac84bb8ac92adafdeea9234c889f88a16789a3cf5ec2745d683c2026865a1d4a2a345d8375162c7a25a6b69e9a8d8322fd339e6242b45650fa7f5d79e97df5570a5cb3555e2a16fff36141b3054cd492c4a3b4aa2577cb75fe17b8e60ac8a724dd2f1ee66df0b7714dd9b42b84084e678b95585b397d1e33a85e107e8a2ec2758965d6c4bed3f8cf3846b53f0f8b2a0e8077efc38b3ad7c71178fbcb799ec23540e14793b693cd37864a70c51a14e614ac228bee61c3ab0a68547bc91fc6d7a45a8e9711605505746d43c71cf346a1310ac7e81320c651b09556b7aff4bb21a05278ebcb8b080926fe5a50db05a6ec840cc57db5771517a66e7ed9c1e132e99098b613e77e466d3aa699dbab2ae72926f766903a638845997d2be1dac88596d20ec6214f12d8ffcefbf652ae37a8b0d2e287a38fbf6dc91a7f78a21c77c9ecc3dba5459c87a9f5791366693a89c91b0bd3ce9c6e7fe13cb130f8527d57774025cc6a231e2053e12a91d9067dabe9a1e16e622264a81cec1a4f44ccb8b3c51bc85e0f75316c71be65435d87171760ffaf464b65243404d51e67d36be8eed68cc6efd6d692c7d00842f461318292b412dd81a69d94fcd5b2d251ba8bdbbe872b098f4894ef561216a91f72c6dad3c4148befeb192c008beefa9ae8711a382e02ea9c0b84bb567bad6bf67aa349a8969072a959cb5aec8585c4f3330c9e40c35fca927fe5e1149ec6a60cc808ca791909f0206ead2bc3bfeea90b83b0ad796b9d159ed5da84433a06b2f7007c5bf20aa3fe6a5a2e64810c5438354523593688e68013046d85f1f6708ec4a8b4feda76576544c4dfc48999c813f3d5cf18017575c88f8e59669959de2a5b5345db1de018a8ae6f3981e195b14a66b2008cd8c833cc15cbe5977ad59611c006e2664536e718fbfd72b8e6c3c1b8e4a0d771950cb8090cfaa0c34e4b03c87fa8877034c269516aa381fb099245075aac483c4b39d9ef0da08c0a84b447ffac06e610e30cefb79ee7a3ce6d7445be0730f05008963a9df0c6afd800f95b26414f2780a6623c83628cce10f62e43bfe3f1451de76accd154f0ed82eebabc0c0e64f827b326d70bed1e6e47a4bfa82efb8791279150bd637fb87f0e80c8345becd29fa4f41a9ca7dd86e9fb4b94eb9c08aeb0711614aaf5775625b96c8a335293852029ff230cf34590b9e49b089dde0d9d6a9631c307ef1c58ac5e0bf6d36eacce81fa002a9c6c2e20c9bceedef25c563c2e0d60b4b3276ed0bf4c5ae063ac40b8603735889a1653b95ba50544ef168a63235a3032fac2bd4199f962db3dd51e4ddb603bb1178bd8a8681fa58afc34c1d126dfe875e835bb8dc2a24febbdd7e0602af425ec1a47522f04352770ce974378be99d5fed44ec61319103f2bda891c8f4807b1074580e855eae3dcd517c2faac37165732292b59381e96e1fe7037211574d7d1f9484e77f284ea58a08c0dc79a3fb7afdf2f6653820dc459ba69c8a1c16265eca6dbad4e99e5809a6ec3ce445eedd8d2f70539b262413f77f800e116abf85808a786544f43b0123ff24e2786a02460ec5eed9f722a72ce8361aea9a71568e3af3ab4285dca83701efaa0dff15d7cfb659d403a4109a50cf7f491e95cd297201704b31e829d344058ae1999f2641297bf1b08ad1ac03e4c9b76d3b3bf3f62fdd187973e879d0623932aee30abee66ddd5b079a719310e027984b4578806ad43bf011d96a4f50ea33700352489e0ed02bc59b8301238c77f0bbd828e9d26df04d0bd17d04b38ccffd401e3be2af301de136911517b8919392fe09d976a811d6cd9c08493cfdb3428292605cae36952c011aae856ee04fc089e9f9f3914aeaa22c39e96cd4ef7507a399f7970f891116afc2743cb73fd71e579f595051d6cde933b0e7a68c58172376dbab7e3d35bc8dfc3d479da443dc59eccfbff5d8b7fc7d786c469dabde171168e2b90a931393df9336c9e33e0ddd8043852558db19102711502451ec02a05f0a1e29099980d43ae34c2f92a74a757a1ca8b01ac1e128d11bacc0f4e3ed4a5d9553855e05129d593c1d876b39633fb121967989bff2ce86607711ca8c8e2eefce16be00b93b6140df873288c66644168839bad76ddea17228a576f0bea6dddcdc3fad40df2c0810f36ca80d511e5322eda11d6010c05543c8f2bf5e9fae4a9bec32b145e69916005e2c1f54020917d8313e6fee62a0d5d77ac2cf13b86f33a24796d36e3b1d247802197ed5ce1670790a5132895004198c37241a72b205ee14eba90b790b2558235c6643ad4a0e4185436ddf2d8f948339ad80c22f1ccc8271d3e5909c7f7cb3677b6b52bbd5ccaa5cbd0f7f4316b939f2a9f0e1aeccdc55d7273fc209aeb9f69d4691b3cf880026a7de8a1c4a64590654c55bb16496d24ba969419b2884d43727a70a86c8279b0a2283b04e2fcf6b90d85ce7500d47d1aa3190cba468af97c274d0448ac5eb26defe5f072543cdd2bd62c11ab91ab2a9ba499179d349fdbef82d73e93058acc29ba794396ae934c54be5296cd0907721708c658c94282ef72e22aec09d30e1a08e6224278839c6516d5200700589a352f34b583490b87c718101ad1655c04734d7345e2fbfcd40a90d6183e38673995ad66dc9188d25289011fac2d839323b53997112f57282211d0c25bf64af709afd40c417b3ca8d6424b084544c16210f5c9d1c6bdde921d75a2eefa164d8379b4ad44de6a4a68ecc27cfe9b51e3da8dea3eaad76708023e06ca32a5e3e383017af33ad738a08498020e6f2920cf965b8632c3869294763e08151af93eda832963ebc73054cbad133634b340f16ca9e1b1561edc6c6247f81cfced3d504a666c88b85d90c8810cec4a21d90aef0bd50552813d6f25194a53b269003da44de1435e72020fb2987700bc22e77f2b0d81a03b6e29212df16541afd7d9ea9c09b29bf10904c78d228416527923cd932f8cbefe7698b85031c0e872df3b9a7141714672511a373fb609ee958ba00de3be0d791ec8dc41ee688ade58dd3eafd8226c8d075ef75b3c44b691b371d6a51deb8b189b2d5720287922d3e49fc3b47136fde9042fee4a33f4c144f0bd230f9203a965e1bc3eeaf292e0682d5b4070ddf90ffaeccc8d65681f98b5948900f80a1db824e6924770b52a787ee036a8483642c06323ae5002e09b5b6d093f8cd1af6997e0f408b6982748fc18a6d55e534f0c5976a60fc891d98dfc329786d056598c42e76ef33646318d27517db06d2fc60655432a0c17d188d8a1979625e371e510d05af4009b3e1394956db9c9a7b5f52be1ffbadf8835db747c5fbdd725dd3348676509e1eff539e25f614229a6357824dbb75aa310af5585d09bd7f4b67a2d76cb3e6f2dcb5ecdee49564253dd36daecc68090268e350b30eb79513b072ab9ac318796ed803ad4c0e11ba78892dda57586c047d0e2db693301e9ebf4b99519cd3b71367774d04630c8cbd5c7d56148f93c3f134899cf72c4e5696a4d086df4711cc43383ddbdbd9041aa8657e4f643012767f8f3d4c2ac5d00bac9e87bed099953b52cf4750de073b9d010f839a21f33e34c8e39e720e29035bf95a571b036299a43b551e6309adccb03fdca2bb33add8ebddaa8ca6ee6b6252a60ecd98efe5c61dc76ed93a965fe16a9acb11e224b693a3345bc31ef09c1a8cba26c0a99229f0c9255d9bcf498236c985bab1476279ab4f01e6671b87745cfa9831b3495404e292d38971336c89fd88204d8315ac80fba2ab0723c7ef645ee06782ad308445c8d02eeba48bc2671719a512a25a4336c4823919bb40e5c58d73495cb55250d32348537df88320c2a1b73c8278e2bd78b14aec251aeb4864f1e5e5675d4b82055735b08ef898738fca33d47a8fce08f61fe23222bdf1a017321f41c5cfc02e2ce1ac2945013fc3bcf31e45a8d9dec24068257e51a3fa901a2b8aa8d3307cba5c998c409cc23dab3c2f8631ad5154ea94523861043b74e503391608cfdc335d1f201744f211980985f34056009340fd0bebf848ac7f07445c06c20e83983cd8ce3492e3cfc54593805da4fa101bf5aa57b15b3a11e6b95819456041e2c026e026a8123e354aca2459f974c59f14bfa9b9692533a4f699b0e6a376fa8e849176b9869af2a4bb050128cb3a8d01fe0c934255b48e177f02430a3d02f71770759ec9bd151048091eef1bcba195d3b00ce49e8e98e29488fdeb7ddc5f2687fa1bca2a2c984db8eaf7ca3d0a560b234abafa5e7d60381962495b72376f4784fd3b58cc1e89511a365b4dae38ec87dae3aa177698f6192762b7d2f3db91cd81422b7ba5f77b8ce5aeb85d9ca6e8d7163954fc5e208ab0ca29c959e982c63b0224309bfc509570aed0074de91dd17b771f40737f85afa6823e4c6dd981afeeedbf63ea82374ec79ffd4d1e8ff917c1821dba2006f30d768231c37e96dc470f412b1f5833fbecb05884f06724d9753cf4adf3c4b91275bccadc293596ac9f739337f4a56fc720841cef9cf9a2413e420c60a9480a5cbaf6b5c3bba12bb575514dbb9026841b8b1219d6b88479d3b2cda86ed2ff3a18bf0b875380834c0663e3591d0411d731621263c7e577e905fcaca99da69cc5dcd79f7180ca6c192d61e8b853df00b32e9c5beca534b0629bdc81e9ef30721d5e47930c6b2c20cb1172493d2d348d3abeec6411ba937a74bb081436740f942ce0e3a0a7c0e71d5f728c502461cb6a5383d109b962ad49242d5730cad02d36abee92c83e90702e70086f974b373d7d551bbef4a7b1f20950f7d758c8bc71a452b7a5a07b9a8d673a0a91fb020ed816b993439a48bfecff9e1d0de460a615a3ba7c5ce0fbcd69f3904ae2451927fb12f4d06767de52d5bf28d7029006d4350081581fcd032423f900644fc1da4949678cad407abbfb573bfec0af956d4355e7d7ef55ad08d33ed1c9ea25a58dcf4f09974c46e4564187da7cb0dc030808c6bd7afc7517190d78cc2b5ff07b214b14501360cf8c5a8691f32753aa73e6b4e7215677bcb3caeef84eed7582f3f26f7dfa2f326e8f9c1b4a37ec7ca755f94a11d30bd3a170fd0fa61146d3e1901e524e29c0b53e9c9b9f9b2417b58daf9aef5c19d7b3cbfa7c02be1f809364ec3df628f945353fbd0e99de2e576c903a8af55ea4065b34d6575f94f5d4e2c5589ae42817abce349b4f23f81a0e22d1b82456fb263744541dc40219d67264581018914212045ffd0bc0f31b530171c65954699b6aa8a476e9a61ab0bf40d8c5e05f7acec737d01fbfca4032b3e21825d1df8469506a8a23c2bc8f69ee1845dff0b07c9b99e3b49fbe21f93a53bb4f271a438194082c1cf901c08f871e870c346f3afca", &(0x7f0000003140)="b8091f6b5f71b0d59920cebca932ebcde5775401627bda89ca4f82f76db7b4cd189d69a83637212a0333b52d56eb802de4de5e32c9e863e505ff072fd5be9047df60548d2878f27437", 0x2, 0x0, 0xb983}, 0x50) 18.365479996s ago: executing program 44 (id=1064): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xf4, 0x30, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{0xe0, 0x1, [@m_simple={0xdc, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x1b, 0x3, ',-,-\\)&}-\x91(#%[++-#\\@-)\x00'}, @TCA_DEF_DATA={0x1b, 0x3, ',-,-\\)&}-\x91(#%[++-#\\@-)\x00'}]}, {0x76, 0x6, "d45d2bdac3720e78f7a00600600ba353d33968aeb3e0e1850a48bc89e888e4379a1db6140aa0f8bd85aad045336d143d22dbba666a77cdfc0ae19e216e89958f998609a010dade2ea29c188896c5f4f816234a1fe2cec561c355c386d55ec08032a3ead385643e8fdde23ef9c3b2f26b4fc4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000033d4caa2feb3e16aae30735bb206e585533e869118b2593943a03e98603738be2a50744bca2acb3f393ae1ebbd3775f0c8025da32a95b4e8612ffc3f56dc863d52c2ac77d452cc8dba2130164a1b417196e324ba5d8eff3519daf267129cc441b8f8369202adfc32cd3a9faef1ae6d2901a88b211241b4fdfb59c61bddaf67add17c8b4891c0eeb0df116fcc246dd0ff4a754405e06f0ac61d0776b31fb3d10a01bbc5f3da643df99b32a4e97da57f76b83e6425", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYRESDEC=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x1, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000031c0)={0xffffffffffffffff, 0x0, 0x7d, 0x1000, &(0x7f0000000380)="7b415f4ce3b8c6156e95d51f6c8286063b693d2932c506f63fdc74d3f053db7035acd249d917e9592ca340095f330f527f23c4d72d8320e891d89f6433cff43c939034b56f6bb92f98a6d62b910a3e92fe44c78028877c61e9c037623a4bba0c7fd8be1bbe803d37b67bfcf7496c5f98ac437a3c599d8e168d102255b4", &(0x7f0000001140)=""/4096, 0x5, 0x0, 0x1000, 0x49, &(0x7f0000002140)="fc65d92f5f3fb9a811fe24674022c36beadd0fdf9d157bc43fba2982119a3005f03ca471f35039a57f6a752d6a5f1cdaeec4c5ded8394985f245c2aefc62def7f2038741137af683e0d8113740460fb5290799d6d1edd0c2004d70460125989a2433afc7019be0565ea20344cd6a2d50b987c63a741b4c65bb4d691f1e041933416af96d16237b9c726367b053fd1509715e0aa54db34b908b95ef2b98f5267b2e531c3abc496a00bdd3425be61945e44d91f8a2d5500807536f21fa7dbbcd35b24e64bdb8dd0e7220635e27b08e655a89f1b737d70790d6f717db41a73cd0dd17d2cd40b6ec77de74f308d77d6c5e83507a18411e68984b674331f97b3967492c0787513dd04022e6e1613602c5a9293b5cbdff8d7881e93a7fed111e1d79c269afc6ecabac84bb8ac92adafdeea9234c889f88a16789a3cf5ec2745d683c2026865a1d4a2a345d8375162c7a25a6b69e9a8d8322fd339e6242b45650fa7f5d79e97df5570a5cb3555e2a16fff36141b3054cd492c4a3b4aa2577cb75fe17b8e60ac8a724dd2f1ee66df0b7714dd9b42b84084e678b95585b397d1e33a85e107e8a2ec2758965d6c4bed3f8cf3846b53f0f8b2a0e8077efc38b3ad7c71178fbcb799ec23540e14793b693cd37864a70c51a14e614ac228bee61c3ab0a68547bc91fc6d7a45a8e9711605505746d43c71cf346a1310ac7e81320c651b09556b7aff4bb21a05278ebcb8b080926fe5a50db05a6ec840cc57db5771517a66e7ed9c1e132e99098b613e77e466d3aa699dbab2ae72926f766903a638845997d2be1dac88596d20ec6214f12d8ffcefbf652ae37a8b0d2e287a38fbf6dc91a7f78a21c77c9ecc3dba5459c87a9f5791366693a89c91b0bd3ce9c6e7fe13cb130f8527d57774025cc6a231e2053e12a91d9067dabe9a1e16e622264a81cec1a4f44ccb8b3c51bc85e0f75316c71be65435d87171760ffaf464b65243404d51e67d36be8eed68cc6efd6d692c7d00842f461318292b412dd81a69d94fcd5b2d251ba8bdbbe872b098f4894ef561216a91f72c6dad3c4148befeb192c008beefa9ae8711a382e02ea9c0b84bb567bad6bf67aa349a8969072a959cb5aec8585c4f3330c9e40c35fca927fe5e1149ec6a60cc808ca791909f0206ead2bc3bfeea90b83b0ad796b9d159ed5da84433a06b2f7007c5bf20aa3fe6a5a2e64810c5438354523593688e68013046d85f1f6708ec4a8b4feda76576544c4dfc48999c813f3d5cf18017575c88f8e59669959de2a5b5345db1de018a8ae6f3981e195b14a66b2008cd8c833cc15cbe5977ad59611c006e2664536e718fbfd72b8e6c3c1b8e4a0d771950cb8090cfaa0c34e4b03c87fa8877034c269516aa381fb099245075aac483c4b39d9ef0da08c0a84b447ffac06e610e30cefb79ee7a3ce6d7445be0730f05008963a9df0c6afd800f95b26414f2780a6623c83628cce10f62e43bfe3f1451de76accd154f0ed82eebabc0c0e64f827b326d70bed1e6e47a4bfa82efb8791279150bd637fb87f0e80c8345becd29fa4f41a9ca7dd86e9fb4b94eb9c08aeb0711614aaf5775625b96c8a335293852029ff230cf34590b9e49b089dde0d9d6a9631c307ef1c58ac5e0bf6d36eacce81fa002a9c6c2e20c9bceedef25c563c2e0d60b4b3276ed0bf4c5ae063ac40b8603735889a1653b95ba50544ef168a63235a3032fac2bd4199f962db3dd51e4ddb603bb1178bd8a8681fa58afc34c1d126dfe875e835bb8dc2a24febbdd7e0602af425ec1a47522f04352770ce974378be99d5fed44ec61319103f2bda891c8f4807b1074580e855eae3dcd517c2faac37165732292b59381e96e1fe7037211574d7d1f9484e77f284ea58a08c0dc79a3fb7afdf2f6653820dc459ba69c8a1c16265eca6dbad4e99e5809a6ec3ce445eedd8d2f70539b262413f77f800e116abf85808a786544f43b0123ff24e2786a02460ec5eed9f722a72ce8361aea9a71568e3af3ab4285dca83701efaa0dff15d7cfb659d403a4109a50cf7f491e95cd297201704b31e829d344058ae1999f2641297bf1b08ad1ac03e4c9b76d3b3bf3f62fdd187973e879d0623932aee30abee66ddd5b079a719310e027984b4578806ad43bf011d96a4f50ea33700352489e0ed02bc59b8301238c77f0bbd828e9d26df04d0bd17d04b38ccffd401e3be2af301de136911517b8919392fe09d976a811d6cd9c08493cfdb3428292605cae36952c011aae856ee04fc089e9f9f3914aeaa22c39e96cd4ef7507a399f7970f891116afc2743cb73fd71e579f595051d6cde933b0e7a68c58172376dbab7e3d35bc8dfc3d479da443dc59eccfbff5d8b7fc7d786c469dabde171168e2b90a931393df9336c9e33e0ddd8043852558db19102711502451ec02a05f0a1e29099980d43ae34c2f92a74a757a1ca8b01ac1e128d11bacc0f4e3ed4a5d9553855e05129d593c1d876b39633fb121967989bff2ce86607711ca8c8e2eefce16be00b93b6140df873288c66644168839bad76ddea17228a576f0bea6dddcdc3fad40df2c0810f36ca80d511e5322eda11d6010c05543c8f2bf5e9fae4a9bec32b145e69916005e2c1f54020917d8313e6fee62a0d5d77ac2cf13b86f33a24796d36e3b1d247802197ed5ce1670790a5132895004198c37241a72b205ee14eba90b790b2558235c6643ad4a0e4185436ddf2d8f948339ad80c22f1ccc8271d3e5909c7f7cb3677b6b52bbd5ccaa5cbd0f7f4316b939f2a9f0e1aeccdc55d7273fc209aeb9f69d4691b3cf880026a7de8a1c4a64590654c55bb16496d24ba969419b2884d43727a70a86c8279b0a2283b04e2fcf6b90d85ce7500d47d1aa3190cba468af97c274d0448ac5eb26defe5f072543cdd2bd62c11ab91ab2a9ba499179d349fdbef82d73e93058acc29ba794396ae934c54be5296cd0907721708c658c94282ef72e22aec09d30e1a08e6224278839c6516d5200700589a352f34b583490b87c718101ad1655c04734d7345e2fbfcd40a90d6183e38673995ad66dc9188d25289011fac2d839323b53997112f57282211d0c25bf64af709afd40c417b3ca8d6424b084544c16210f5c9d1c6bdde921d75a2eefa164d8379b4ad44de6a4a68ecc27cfe9b51e3da8dea3eaad76708023e06ca32a5e3e383017af33ad738a08498020e6f2920cf965b8632c3869294763e08151af93eda832963ebc73054cbad133634b340f16ca9e1b1561edc6c6247f81cfced3d504a666c88b85d90c8810cec4a21d90aef0bd50552813d6f25194a53b269003da44de1435e72020fb2987700bc22e77f2b0d81a03b6e29212df16541afd7d9ea9c09b29bf10904c78d228416527923cd932f8cbefe7698b85031c0e872df3b9a7141714672511a373fb609ee958ba00de3be0d791ec8dc41ee688ade58dd3eafd8226c8d075ef75b3c44b691b371d6a51deb8b189b2d5720287922d3e49fc3b47136fde9042fee4a33f4c144f0bd230f9203a965e1bc3eeaf292e0682d5b4070ddf90ffaeccc8d65681f98b5948900f80a1db824e6924770b52a787ee036a8483642c06323ae5002e09b5b6d093f8cd1af6997e0f408b6982748fc18a6d55e534f0c5976a60fc891d98dfc329786d056598c42e76ef33646318d27517db06d2fc60655432a0c17d188d8a1979625e371e510d05af4009b3e1394956db9c9a7b5f52be1ffbadf8835db747c5fbdd725dd3348676509e1eff539e25f614229a6357824dbb75aa310af5585d09bd7f4b67a2d76cb3e6f2dcb5ecdee49564253dd36daecc68090268e350b30eb79513b072ab9ac318796ed803ad4c0e11ba78892dda57586c047d0e2db693301e9ebf4b99519cd3b71367774d04630c8cbd5c7d56148f93c3f134899cf72c4e5696a4d086df4711cc43383ddbdbd9041aa8657e4f643012767f8f3d4c2ac5d00bac9e87bed099953b52cf4750de073b9d010f839a21f33e34c8e39e720e29035bf95a571b036299a43b551e6309adccb03fdca2bb33add8ebddaa8ca6ee6b6252a60ecd98efe5c61dc76ed93a965fe16a9acb11e224b693a3345bc31ef09c1a8cba26c0a99229f0c9255d9bcf498236c985bab1476279ab4f01e6671b87745cfa9831b3495404e292d38971336c89fd88204d8315ac80fba2ab0723c7ef645ee06782ad308445c8d02eeba48bc2671719a512a25a4336c4823919bb40e5c58d73495cb55250d32348537df88320c2a1b73c8278e2bd78b14aec251aeb4864f1e5e5675d4b82055735b08ef898738fca33d47a8fce08f61fe23222bdf1a017321f41c5cfc02e2ce1ac2945013fc3bcf31e45a8d9dec24068257e51a3fa901a2b8aa8d3307cba5c998c409cc23dab3c2f8631ad5154ea94523861043b74e503391608cfdc335d1f201744f211980985f34056009340fd0bebf848ac7f07445c06c20e83983cd8ce3492e3cfc54593805da4fa101bf5aa57b15b3a11e6b95819456041e2c026e026a8123e354aca2459f974c59f14bfa9b9692533a4f699b0e6a376fa8e849176b9869af2a4bb050128cb3a8d01fe0c934255b48e177f02430a3d02f71770759ec9bd151048091eef1bcba195d3b00ce49e8e98e29488fdeb7ddc5f2687fa1bca2a2c984db8eaf7ca3d0a560b234abafa5e7d60381962495b72376f4784fd3b58cc1e89511a365b4dae38ec87dae3aa177698f6192762b7d2f3db91cd81422b7ba5f77b8ce5aeb85d9ca6e8d7163954fc5e208ab0ca29c959e982c63b0224309bfc509570aed0074de91dd17b771f40737f85afa6823e4c6dd981afeeedbf63ea82374ec79ffd4d1e8ff917c1821dba2006f30d768231c37e96dc470f412b1f5833fbecb05884f06724d9753cf4adf3c4b91275bccadc293596ac9f739337f4a56fc720841cef9cf9a2413e420c60a9480a5cbaf6b5c3bba12bb575514dbb9026841b8b1219d6b88479d3b2cda86ed2ff3a18bf0b875380834c0663e3591d0411d731621263c7e577e905fcaca99da69cc5dcd79f7180ca6c192d61e8b853df00b32e9c5beca534b0629bdc81e9ef30721d5e47930c6b2c20cb1172493d2d348d3abeec6411ba937a74bb081436740f942ce0e3a0a7c0e71d5f728c502461cb6a5383d109b962ad49242d5730cad02d36abee92c83e90702e70086f974b373d7d551bbef4a7b1f20950f7d758c8bc71a452b7a5a07b9a8d673a0a91fb020ed816b993439a48bfecff9e1d0de460a615a3ba7c5ce0fbcd69f3904ae2451927fb12f4d06767de52d5bf28d7029006d4350081581fcd032423f900644fc1da4949678cad407abbfb573bfec0af956d4355e7d7ef55ad08d33ed1c9ea25a58dcf4f09974c46e4564187da7cb0dc030808c6bd7afc7517190d78cc2b5ff07b214b14501360cf8c5a8691f32753aa73e6b4e7215677bcb3caeef84eed7582f3f26f7dfa2f326e8f9c1b4a37ec7ca755f94a11d30bd3a170fd0fa61146d3e1901e524e29c0b53e9c9b9f9b2417b58daf9aef5c19d7b3cbfa7c02be1f809364ec3df628f945353fbd0e99de2e576c903a8af55ea4065b34d6575f94f5d4e2c5589ae42817abce349b4f23f81a0e22d1b82456fb263744541dc40219d67264581018914212045ffd0bc0f31b530171c65954699b6aa8a476e9a61ab0bf40d8c5e05f7acec737d01fbfca4032b3e21825d1df8469506a8a23c2bc8f69ee1845dff0b07c9b99e3b49fbe21f93a53bb4f271a438194082c1cf901c08f871e870c346f3afca", &(0x7f0000003140)="b8091f6b5f71b0d59920cebca932ebcde5775401627bda89ca4f82f76db7b4cd189d69a83637212a0333b52d56eb802de4de5e32c9e863e505ff072fd5be9047df60548d2878f27437", 0x2, 0x0, 0xb983}, 0x50) 12.422962255s ago: executing program 2 (id=1086): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000a80)=@ethtool_channels={0x4f}}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) 12.35948549s ago: executing program 2 (id=1087): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x90, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x320, 0xa, 0x148, 0x0, 0x60, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x59}, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0xffffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x56}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4b0) 12.120445606s ago: executing program 2 (id=1089): getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000640)={'mangle\x00', 0xab, "afcb5b57c46717d0b67a8d07ab72eb1eb4fba9cf188c2987a3b39f3aec9a55cd45469a1e4f9125adbfa9da7a1998ad609ada915d273a9f0e92f9b4693228d718e7f99aad5928bbc287cca5e0a516e7d7ccaf06a6d9a310cdfc8bbf54dc0f506977b616782262299728d62f52694acc7eea2283ec6cd2484ba7c1c7d15f6ef48c21eace7117f9ad3d476e901ee5c8f90e613de6b8650e9beb594f0cd6e43717a639a18a8ec6e80d68fe3485"}, &(0x7f0000000740)=0xcf) r0 = timerfd_create(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x10000008) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x5]}, 0x0, 0x8) r5 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r5}, &(0x7f0000000580)=0x0) timer_settime(r6, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_gettime(r6, 0x0) timer_gettime(r6, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r7 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) setns(0xc9, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14381}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x884) signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) 10.239138769s ago: executing program 9 (id=1093): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000f4000040961b1100000000000001090224000100000001090400080203000300092104000001221800090511039bcf7a25d2a2560ed0b172aa83240ed7371ee2ad447f983bba4cbd74312c60896a306b415ad6dcc8ad7a77a099be0a8e747c5666526004a427cb154c4de40b3b76e49e7b04fb138166914d4ac4f79eaac5876f6bb3dccedf42ef75a2ff8e1fd4", @ANYRESHEX=0x0], 0x0) socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x7012}) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1], 0x6e8a) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) unshare(0x22020600) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2c2, &(0x7f0000000a00)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 9.753839244s ago: executing program 2 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0x8}}) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(r1, &(0x7f0000004000)=ANY=[], 0x1358) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r1, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fdatasync(r1) 8.499182859s ago: executing program 2 (id=1104): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x120181, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@unlock_all, 0xb) 8.330973449s ago: executing program 2 (id=1108): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000240)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r2, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=r2, @ANYBLOB="8d0000000000b5", @ANYRES32=r3], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect$uac2(0x0, 0xa1, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) 8.312023023s ago: executing program 45 (id=1108): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000240)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r2, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=r2, @ANYBLOB="8d0000000000b5", @ANYRES32=r3], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect$uac2(0x0, 0xa1, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) 7.275264267s ago: executing program 6 (id=1116): r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x2004080, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES64], 0x0, 0x3a2, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x3c, 0x42}, 0x50) r2 = socket(0xa, 0x3, 0xfb) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="071404"], 0xa8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x1, 0x70bd27, 0x25dfd402, {0x0, 0x0, 0x0, r5, 0x65e98, 0x16ac1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x3}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c844}, 0x200088c2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7800, 0xc1a1414b3b1d5d37, 0xb3, 0x3, {{0x16, 0x4, 0x1, 0x6, 0x58, 0x68, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@generic={0x88, 0xf, "a5c4c60c262061712e02f6c97a"}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0x4, [0x400]}, @noop, @ssrr={0x89, 0x7, 0x66, [@loopback]}, @cipso={0x86, 0x23, 0x0, [{0x6, 0xa, "8c46f7675646a93e"}, {0x7, 0x4, "68b5"}, {0x2, 0xc, "cc8f5a6deced8e78f343"}, {0x4, 0x3, 'c'}]}]}}}}}) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0xfffffffffffffff1, 0x6, 0x6, 0x5, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x5}, {0x4, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xac3b, 0x2, 0x6, 0x2, 0xffffffff}}}}]}, 0x4c}}, 0x8010) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xc0, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xc0}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r14, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r15 = dup(r14) write$FUSE_BMAP(r15, &(0x7f0000000100)={0x18, 0xb, 0x0, {0x1}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r13, @ANYBLOB=',wfdno=', @ANYRESHEX=r15, @ANYBLOB=',access=', @ANYRESDEC=0x0]) 6.047824616s ago: executing program 9 (id=1121): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0xfffffffd, 0x3, 0xffff0099, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c2}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000200)=0x53, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00110204000000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="6f00f2040a00020001"], 0x28}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000040)="99c9137c0740efb04eab19d42b20", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x19, r1, 0x1, 0xd4, 0x6, @random="eda14b0b3712"}, 0x14) 6.047367106s ago: executing program 6 (id=1122): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x110, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1276, &(0x7f0000000100)=0x3) 5.950942949s ago: executing program 6 (id=1123): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4101, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x4, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000002c0)={0x3f}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x81, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x6, 0x0, 0x3, 0x0, 0x0, 0xe8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0xfffffffd, 0xfaea, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x38000], [0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x37, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80b8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x10000]}, 0x45c) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.950530469s ago: executing program 9 (id=1124): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = io_uring_setup(0x1b57, &(0x7f0000000300)={0x0, 0xb92d, 0x10, 0x5, 0x21000c}) close(r2) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/242, 0xf2}], 0x1}, 0x1f00) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) r6 = socket(0x25, 0x6, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x81f, 0x0, 0x1, 0x0, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x200000004, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0xb, 0x13}) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/133, 0x85}], 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in=@broadcast, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x7, 0x100}, 0x4}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0x4, 0xffff, 0x9}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) 5.833200997s ago: executing program 4 (id=1125): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.832850297s ago: executing program 6 (id=1126): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a68daa40d35b7c315e04000013170902120001000000000904000000ef0101"], 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x1511, &(0x7f0000000a00)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041809}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000100)="bfc42f6fd7d894d806a765731ded58538ce3c3b3ab0c67d05a3d311928595d7f55c66cb7dd08c6d41584b64612de0d06c043ca374fe9fa339cd4ab08972134fd9fd302cc05c96e4009271873b84a0043e0a6d880b726a2dcc6822178541ebdfd4b5fe220d5c5fbdd0be606219ab5", 0x6e}, {&(0x7f0000000080)="a7479f878efc69ef96900a9d51", 0xffffff07}, {&(0x7f0000000180)="1c4b49a4ef61908b6cab91c60ea0f1c48cb38d9c5fd4e499abc075125ee9d8dbeeba507bc91585fc2253cbaf67f8c0786a8e02a1e10dfaf3d089121ed3bed7795762cd7e9d5c5d1b2b3ccd83613da70bea3583d792fcbd7809ca120de76a23263d69b8d5881ba3284f51a1df431225f30ad1f32fff075ef4b92a64d3a02c9ee1f47445c29926121d7f8f26f29309ea2bfdd01b0339", 0x95}], 0x3, 0x5412, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES16=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x2004c014) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x53180}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0xff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7, 0x8282cff54199d3bf, 0x9, 0x85, {{0x2b, 0x4, 0x2, 0x27, 0xac, 0x67, 0x0, 0x31, 0x4, 0x0, @empty, @multicast2, {[@rr={0x7, 0x23, 0x78, [@multicast1, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local]}, @rr={0x7, 0x1f, 0xd1, [@private=0xa010101, @multicast2, @multicast2, @multicast2, @local, @broadcast, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x73, 0x0, 0x8, [0x9, 0x3, 0x100000, 0x1, 0x9]}, @timestamp_addr={0x44, 0x34, 0xe1, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x6}, {@multicast2, 0x1}, {@multicast2, 0x7fffffff}, {@local, 0x60}, {@private=0xa010102, 0x6}, {@private=0xa010100}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fedbdf2518000000680001801400f9086772657461703000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="1400020076657468305f746f5f626f6e64000000140002006e6963766630000000000000000000000800030003000000080003000000000008000100", @ANYRES32=r11, @ANYBLOB="0800030002000000050005000000000018000180140002006e657464657673696d300000000000000800070000040000"], 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x844) 5.802528294s ago: executing program 4 (id=1127): ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) madvise(&(0x7f0000bff000/0x1000)=nil, 0x1000, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0xffffffffffffff9f, &(0x7f0000000240)={&(0x7f0000000080)=""/238, 0xee, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000500000000000000020000009500000000000000e04f9ffb37d01f8c31276657cc97e90c006282120e129109f56e4831afa94b4b01f0480d7e5cfb71df41d8c359f176f020768b44aab851aab5fbc4915c6feddede982c2f624b4ac8a98dce2b45ae2ae270e133e56f738050761b95f16bfe6708e05c75a28161bb86a45c58868a7a21b03c169188245a9d0693654c6c58b6a1166b9d32d19d312166316315839c38167b9c44f50221073a70e6c1a3c94bac31e7d3c7b0d0dcb046baac04e8b4fa950e3846a082a19fe91119016a756a97e34a927935"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpgrp(0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sched_setaffinity(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) getpid() sched_setscheduler(r4, 0x2, &(0x7f00000002c0)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020100030a0000002abd700000000000030006000000000002000000e00000090000000000000000030005000000000002000000e00000010000000000000000020010"], 0x50}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12, 0x0, 0xd, "2afe6e0900cf0ac2d0a41597f0"}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socket$xdp(0x2c, 0x3, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x7a) 2.894812568s ago: executing program 4 (id=1128): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) r0 = socket(0x11, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x82, 0x64, 0x1ac9ee85, 0x0, @empty, @empty, 0x0, 0x1, 0x2, 0x9}}) 2.857351427s ago: executing program 3 (id=1129): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f00000008c0)={[{@noblock_validity}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x80000001}}, {@noload}]}, 0xf5, 0x49b, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000300)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) sysinfo(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r8}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffc, 0x0, {}, [@NHA_ID={0x8, 0x1, 0xffffffff}]}, 0x20}}, 0x0) 2.856883347s ago: executing program 9 (id=1130): socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000001e0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x48}}, 0x2400c808) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x81) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000f00)={0x2, 0x0, 0x16, 0x19, 0xcc, &(0x7f0000000b00)="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"}) keyctl$clear(0x3, 0xfffffffffffffffd) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000380)) 2.855739207s ago: executing program 1 (id=1131): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)="b2", 0x1, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 3) 2.742913504s ago: executing program 4 (id=1132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x6c}, 0xa}, {{@in=@broadcast, 0x0, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4, 0x0, 0xf4}]}]}, 0x1fc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0) 2.742592574s ago: executing program 4 (id=1133): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x20000003, 0x8, 0x4, 0x8, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0x8000, 0x0, r2, r3, 0x80, 0x8}}, {0xffffdfffffffffff, 0x401, 0x6, 0x8100008, '\x9e\xaf\x82\xa7\x13&'}}]}, 0x0, 0x0, 0x0}) r4 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x5015062, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r5}}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000400)={[], [{@euid_eq={'euid', 0x3d, r2}}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r5}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x1000) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f00000001c0)={0x401, 0x3a0f}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x4, 0x3, 0x72, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x1, 0xdf, 0x3}}) syz_usb_connect$uac3(0x0, 0x80, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_clone3(&(0x7f0000000140)={0x21000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) recvfrom$packet(r6, &(0x7f0000000200)=""/154, 0x9a, 0xc0000062, &(0x7f00000003c0)={0x11, 0x1, r8, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r9, 0xc013fd03, &(0x7f0000001000)) 1.390983322s ago: executing program 3 (id=1134): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x11, 0x0, &(0x7f00000000c0)) 1.390545892s ago: executing program 6 (id=1135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 1.387388563s ago: executing program 9 (id=1136): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000002000)="ba", 0x1, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0xfffffffffffffdf1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x43, &(0x7f0000000000)=0xffffffff, 0x4) sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 1.330938936s ago: executing program 1 (id=1137): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000020000100000000000000000002200018000000000000000005001500"], 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.330603986s ago: executing program 3 (id=1138): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101c8ca, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000004140)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x0, 0x7, 0x9, 0x8, 0x4, 0x8000000000000001}, {0x0, 0x4, 0x9, 0x3, 0xb, 0x81}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) timer_gettime(0x0, &(0x7f0000000100)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) copy_file_range(r4, &(0x7f0000000000)=0x7, r4, 0x0, 0x7, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000140)={{r2}, r3, 0x8, @inherit={0x0, 0x0}, @subvolid=0x435}) r5 = fsmount(r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001140)={0xc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xbe, "9361900487b82d"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002140)={0x0, 0x0, "b614279ff644eaa1e0240e19243b8161b0bcc2ee415906ac5149c33d024ae0057a9e6da3c6ad27870a345efa6044ba43c325b3413391e0dcd03ee82ca1869ea3092cc3f047720270b0e9cf4273b65c135ecfce21dae4c7c872f2f98872f36fe47581b9f91bc1eeb828e7cc5af669bdb962f048b6a46a0e785b42048a55376f011a8a6eb09fd2720cce99c973a8b7fb7a72004ae0a97f01fc435392a5a9ba5887ebedbf3af943b2818b2efecd7503a902bfa1da7e87ffbdf076ef393875d2f2f423095c040bbff8643a97c52cd9de2ecd11834a039877c3e2992e344d3b0c561d82ba9694b194287b59477b52117abea9688cfdc9fc490afcaa6fe5f32edadead", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000003140)={r6, r7, "4a1ccdb7199e605c19fb037f8938e44c2da5eb0f4c3d71c6f8b26841c8b270da94d89075b8fe5833914b41259f95149ad88fc89cbf5175316ab350402dbec0831c9d5ed7b6d35add5e155e077641d0e16087a18f3b9ecf0edba56d2e895248601104a06d9484349a2cddb48e117ff0412fb1e4691b3211a5cef1cd548f3c664b6d4191818f399fbc30bc1541d8a5e02037ad9b80a145adab277fe6bef9a7d4afc920bbcd092d8f41f3122ead902634d0a04cbe81d7cd111aa242f737870c3fe8dc62dbe79527bb822bedd2e1c1a12883b5c927ac787d89efd00a737e5c162f41da095e92f4be033f1d65bbebb6984f2a4e74cdea9cdddf146032c6076f6ef219", "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"}) openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") ppoll(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffff81a83b1aadb6a6e5fbc66d51ffffbbbbbbbbbbbb0800460000240066000000119007000000000a00000044048d0000014e20000c907801000000"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x15) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r9, &(0x7f0000000000)="2c0000001d0005000100000000000000010100000c00010011111111111111110c0003002222222222222222", 0x2c, 0x0, 0x0, 0x0) r10 = socket(0x28, 0x5, 0x0) accept4$unix(r10, 0x0, 0x0, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000000000010ac00000000ffff040000000700000008"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) 1.320628499s ago: executing program 6 (id=1139): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a19a0cd7c2441453f3442c475794010f743704425120b24282226e7b51a7f5f9842fdecb098d69800ee19ad332", 0x2d}], 0x1, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x78}, 0x80008c4) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x20, 0x81}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x843}}, {0x4a, &(0x7f00000003c0)=@string={0x4a, 0x3, "67b7cfae874aa17dfcc7769557c4cfa7b3ecd7913f506691c72575f3fc8c2b807f3cf695cc744a4e033e2eb699d1ec25b0a0019edfd27bb3219e717e45cf18f87bdf1bda4edd7ad8"}}]}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) write(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000001bc0)=ANY=[@ANYRES64], 0x15) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$midi(0x5, 0x7b, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x2, 0x0, 0x6e, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x0, 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x4, 0xa}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x4, 0xe8}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x1, 0x80, 0x7, [{0x1, 0xf2}, {0x4, 0x7}, {0xf, 0x78}, {0x0, 0x9}, {0x5, 0x8}, {0x2a, 0x7}, {0x4, 0x18}], 0xc}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x1, 0x6b}], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x3, 0x4, 0x9, {0x13, 0x25, 0x1, 0xf, "063102a287c0a8c03b19ad06ffce45"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x6, 0x1, 0x58, 0x20, 0x46}, 0x19, &(0x7f0000000580)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "908903b6bb04fdb3d56ce64d5bd6194e"}]}, 0x1, [{0x69, &(0x7f0000000680)=@string={0x69, 0x3, "a0731b586030711fb1ad9234438743668f7cc6fa017a087acc71e487e513d9b47a74c759378bab38462c6611ff53cb8ea46d216fa2f4164fa454efae08d7834605c911a873e928f64d6adfef97a30b56fef3ae2b018530637e59a352de393bc3a16d8e3ba22937"}}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) r6 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) uname(0x0) r7 = dup(r5) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x2, 0x7}}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0xa00010, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r7}, 0x20) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x6c}, 0xa}, {{@in=@broadcast, 0x0, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x7, 0x32}, 0x0, @in=@remote, 0x0, 0x4, 0x0, 0xf4}]}]}, 0x1fc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414bb12345000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="27bd49f90a37a696aeddcae8c91debc9"], 0x0) 1.265906292s ago: executing program 1 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0x8}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r1, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fdatasync(r1) 1.259700853s ago: executing program 3 (id=1141): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x3c, 0x14, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x50) r5 = getuid() syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)={[{@barrier}, {@nodioread_nolock}, {@nojournal_checksum}, {@acl}, {@errors_remount}, {@auto_da_alloc}, {@bh}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_user}, {@permit_directio}, {@uid_lt={'uid<', r5}}]}, 0xfe, 0x59c, &(0x7f0000000300)="$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") setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0xe75, 0x4e21, 0x3, 0x2, 0x0, 0xa0, 0x11, 0x0, r5}, {0x9, 0x200, 0x0, 0x7, 0xc3, 0x7, 0x6, 0x11e}, {0x2, 0x7, 0x8, 0x2}, 0xb8e, 0x6e6bb9, 0x1, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d3, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3505, 0x1, 0x0, 0x2, 0x800, 0xffff, 0x7fffffff}}, 0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r2, 0x15, 0x0, @val=@perf_event={0x4b}}, 0x18) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000480)) 1.207132786s ago: executing program 1 (id=1142): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) r0 = socket(0x11, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x82, 0x64, 0x1ac9ee85, 0x0, @empty, @empty, 0x0, 0x1, 0x2, 0x9}}) 1.206765395s ago: executing program 3 (id=1143): r0 = socket$inet_tcp(0x2, 0x1, 0x0) futex(0x0, 0x80, 0x2, 0x0, 0x0, 0x2) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000087c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x38, 0x81}}], 0x2, 0x0) setrlimit(0x1, &(0x7f0000000140)={0x80000000, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r4, &(0x7f0000000080), r3, 0x0, 0xfffffffffffffff8, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='mnt/encrypted_dir\x00', 0x1946461278647c64, 0x8) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='O', 0x1, r6) keyctl$read(0xb, r6, &(0x7f0000000200)=""/4, 0x1001) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000206c0)=@v2={0x2, @aes128, 0x8, '\x00', @auto="728665aeeea39781db97ae95cb86c80e"}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x4, r2, 0xa, {0x5, 0x8000000000000001}, 0x4}, 0x1) 1.206044356s ago: executing program 1 (id=1144): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) r2 = socket$inet6(0x10, 0x1, 0x3) write(r2, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000380)="16", 0x1}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {}, {0x1, 0xa}, {0x7, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x2, 0x9, 0x4, 0xfffffe01, 0x204}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x6, 0x74f5, 0x9}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xd81bbd458f997ad}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x441) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808042, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$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") 1.146977889s ago: executing program 3 (id=1145): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000300)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@dioread_lock}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000340), 0x0) socket$netlink(0x10, 0x3, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r4, &(0x7f0000000240)=""/2, 0x49) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000380)=""/190, 0xbe}], 0x1, 0x5e73, 0x5) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x58}, 0x1, 0x7}, 0x0) 975.27371ms ago: executing program 1 (id=1146): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x1f, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xf3, 0x4, @mcast1, 0x9}, 0x1c) dup2(r4, r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r8 = eventfd(0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r10, 0x4018aebd, &(0x7f0000000200)={0x1, r8}) r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000b19000/0x400000)=nil) r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@wrmsr={0x65, 0x20, {0x40000000, 0x10000}}, @code={0xa, 0x25, {"48c7c15d00010048c7c2010000000f01c10f01d9"}}], 0x45}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x40, 0x2c, 0x1, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r7, {0x3}, {0xe, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x40}}, 0x0) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r13, 0xffffffffffffffff, 0x0) 856.794108ms ago: executing program 4 (id=1147): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@generic={0x71, 0x0, 0x1, 0x51}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r3, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07e", 0x43) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061100800000000007b019a00000000009500040000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) 0s ago: executing program 9 (id=1148): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1010008, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$eJzs289qE1EUB+CT2Na0LpKFK3Ex4MZVaPoEBqkgBgQlCwVBsQ1IRwIWArow2bnwIfRx3OqTuCwiXEmmf5Iai5Q2A+n3bXKYub9w7pDkMIF5efvt3k5/v/ei9y1qlUpU76UUB5VoRDWOjAIAWCYHKcWXiEjXR7H+NdKvVCi7LwDg8ozn/8/xwD+c/yY/ACy/p8+eP2p3OttPsqwWkX8adAfd4rU43+7Fm8hjNzajHr8j0rGifvCws72ZTTTicz48zA8H3Wuz+VbUozE/3yry2Wx+NTam81tRj5vz81tz82tx985Uvhn1+PE6+pHHToyzJ/mPrSy7/7hzKn9jsg4AAACWQTM7Nvf+vdn81/ki36789/8Dp+6vV+LWSrl7B4Crav/9h71Xeb77bqHF2tSRiBidsfj7RtHo4jrMzhk/uqSLvpgXV6zHxb/zapS/r+Up+tXzx1NKw/Hn8+zFtYiYFOX9JgGLcfLtnzlcL60hAAAAAAAAAAAAAADgL4t4dKnsPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw9fwJAAD//xQYkLQ=") r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) writev(0xffffffffffffffff, &(0x7f0000002240), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800042, &(0x7f0000000780)={[{@minixdf}, {@noauto_da_alloc}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000000180)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0), 0x0) getegid() socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000c612e8789789d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000079006001000000001800000000130000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000740), &(0x7f0000000840)=@v2={0x5, 0x3, 0x4, 0x1000, 0xfc, "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"}, 0x105, 0x1) fallocate(r0, 0x0, 0xbf5, 0x2000402) kernel console output (not intermixed with test programs): [ 179.503549][ T3208] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 179.524601][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 179.597095][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 179.655471][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 179.672065][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 179.684813][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 179.699614][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 179.711287][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 179.737153][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 179.749311][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 179.763341][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 179.809984][ T3220] loop8: detected capacity change from 0 to 512 [ 179.886050][ T3202] netlink: 'syz.7.837': attribute type 12 has an invalid length. [ 179.939369][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.001658][ T3220] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 180.011146][ T3220] EXT4-fs error (device loop8): ext4_iget_extra_inode:4765: inode #15: comm syz.8.839: corrupted in-inode xattr [ 180.024438][ T3220] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.839: couldn't read orphan inode 15 (err -117) [ 180.037700][ T3220] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 180.050966][ T3220] EXT4-fs (loop8): unmounting filesystem. [ 180.089573][ T3202] netlink: 'syz.7.837': attribute type 29 has an invalid length. [ 180.171742][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.224682][ T3202] netlink: 148 bytes leftover after parsing attributes in process `syz.7.837'. [ 180.290709][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.374866][ T3202] netlink: 59 bytes leftover after parsing attributes in process `syz.7.837'. [ 180.417749][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.436180][ T24] r8152-cfgselector 8-1: Unknown version 0x0000 [ 180.444530][ T24] r8152-cfgselector 8-1: USB disconnect, device number 12 [ 180.461593][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.481756][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.535109][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.556546][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.568057][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.651025][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.662350][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.673602][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 180.710482][ T3190] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 181.643903][ T3240] loop8: detected capacity change from 0 to 512 [ 181.690252][ T3240] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 181.758996][ T3240] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.895444][ T3249] loop5: detected capacity change from 0 to 512 [ 182.024554][ T3249] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 182.034342][ T3249] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.845: corrupted in-inode xattr [ 182.048076][ T3249] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.845: couldn't read orphan inode 15 (err -117) [ 182.060320][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 182.069776][ T3249] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 182.081674][ T3249] EXT4-fs (loop5): unmounting filesystem. [ 182.164828][ T3254] loop7: detected capacity change from 0 to 256 [ 182.238190][ T3254] exfat: Deprecated parameter 'utf8' [ 182.293888][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.340390][ T3254] exfat: Deprecated parameter 'utf8' [ 182.348039][ T24] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.401838][ T3254] exfat: Deprecated parameter 'namecase' [ 182.572504][ T3254] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 182.604334][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 182.697143][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.896537][ T24] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 182.903382][ T3262] loop7: detected capacity change from 0 to 128 [ 182.905747][ T3260] loop0: detected capacity change from 0 to 512 [ 182.917128][ T24] cdc_acm 9-1:1.0: This needs exactly 3 endpoints [ 182.931525][ T24] cdc_acm: probe of 9-1:1.0 failed with error -22 [ 182.936217][ T3260] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.850: bad orphan inode 15 [ 185.236512][ T3260] ext4_test_bit(bit=14, block=5) = 0 [ 185.258285][ T3260] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 185.409666][ T24] usb 9-1: USB disconnect, device number 14 [ 185.429222][ T1788] EXT4-fs (loop8): unmounting filesystem. [ 186.254067][ T2583] EXT4-fs (loop0): unmounting filesystem. [ 186.567783][ T3269] kvm: pic: non byte write [ 186.636419][ T3294] loop7: detected capacity change from 0 to 512 [ 186.692525][ T3294] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.858: bad orphan inode 15 [ 186.733485][ T3294] ext4_test_bit(bit=14, block=5) = 0 [ 186.748819][ T3294] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 186.796195][ T3282] kvm: pic: non byte write [ 187.163109][ T39] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 187.442960][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 187.545458][ T39] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 187.572981][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.593797][ T3308] loop0: detected capacity change from 0 to 128 [ 187.601119][ T39] usb 4-1: Product: syz [ 187.615586][ T39] usb 4-1: Manufacturer: syz [ 187.620312][ T39] usb 4-1: SerialNumber: syz [ 187.663321][ T39] r8152-cfgselector 4-1: config 0 descriptor?? [ 187.702705][ T3311] loop0: detected capacity change from 0 to 128 [ 187.738559][ T3311] FAT-fs (loop0): Directory bread(block 32) failed [ 187.759340][ T3311] FAT-fs (loop0): Directory bread(block 33) failed [ 187.773073][ T3311] FAT-fs (loop0): Directory bread(block 34) failed [ 187.781090][ T578] EXT4-fs (loop7): unmounting filesystem. [ 187.791214][ T3311] FAT-fs (loop0): Directory bread(block 35) failed [ 187.797868][ T3311] FAT-fs (loop0): Directory bread(block 36) failed [ 187.804533][ T3311] FAT-fs (loop0): Directory bread(block 37) failed [ 187.811090][ T3311] FAT-fs (loop0): Directory bread(block 38) failed [ 187.817975][ T3311] FAT-fs (loop0): Directory bread(block 39) failed [ 187.824577][ T3311] FAT-fs (loop0): Directory bread(block 40) failed [ 187.831090][ T3311] FAT-fs (loop0): Directory bread(block 41) failed [ 187.904649][ T3299] netlink: 'syz.3.859': attribute type 12 has an invalid length. [ 187.912437][ T3299] netlink: 'syz.3.859': attribute type 29 has an invalid length. [ 187.920600][ T3299] netlink: 148 bytes leftover after parsing attributes in process `syz.3.859'. [ 187.931564][ T3299] netlink: 59 bytes leftover after parsing attributes in process `syz.3.859'. [ 188.001287][ T39] r8152-cfgselector 4-1: Unknown version 0x0000 [ 188.042717][ T3320] loop7: detected capacity change from 0 to 512 [ 188.153403][ T39] r8152-cfgselector 4-1: USB disconnect, device number 21 [ 188.816177][ T3324] FAT-fs (loop0): Filesystem has been set read-only [ 189.031833][ T3306] kvm: pic: non byte write [ 189.043900][ T3320] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 189.052282][ T3320] EXT4-fs error (device loop7): ext4_iget_extra_inode:4765: inode #15: comm syz.7.865: corrupted in-inode xattr [ 189.069611][ T3320] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.865: couldn't read orphan inode 15 (err -117) [ 189.081682][ T3320] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 189.091223][ T3320] EXT4-fs (loop7): unmounting filesystem. [ 189.613149][ T3338] loop7: detected capacity change from 0 to 512 [ 189.777772][ T3338] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 189.787137][ T3338] EXT4-fs error (device loop7): ext4_iget_extra_inode:4765: inode #15: comm syz.7.879: corrupted in-inode xattr [ 189.801403][ T3338] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.879: couldn't read orphan inode 15 (err -117) [ 189.814239][ T3338] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 189.826025][ T3338] EXT4-fs (loop7): unmounting filesystem. [ 190.031454][ T3342] 9pnet: Could not find request transport:  [ 190.495805][ T28] audit: type=1400 audit(1790323411.501:1199): avc: denied { write } for pid=3335 comm="syz.3.869" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 190.561003][ T28] audit: type=1326 audit(1790323411.491:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3347 comm="syz.8.873" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dac79e159 code=0x7ffc0000 [ 190.602662][ T28] audit: type=1326 audit(1790323411.501:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3347 comm="syz.8.873" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dac79e159 code=0x7ffc0000 [ 190.635449][ T28] audit: type=1326 audit(1790323411.501:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3347 comm="syz.8.873" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dac79e159 code=0x7ffc0000 [ 190.645717][ T3357] netlink: 'syz.5.876': attribute type 10 has an invalid length. [ 190.675454][ T28] audit: type=1326 audit(1790323411.501:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3347 comm="syz.8.873" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dac79e159 code=0x7ffc0000 [ 190.710854][ T28] audit: type=1326 audit(1790323411.501:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3347 comm="syz.8.873" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1dac79e159 code=0x7ffc0000 [ 190.743226][ T28] audit: type=1326 audit(1790323411.501:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3347 comm="syz.8.873" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dac79e159 code=0x7ffc0000 [ 190.769347][ T28] audit: type=1326 audit(1790323411.501:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3347 comm="syz.8.873" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dac79e159 code=0x7ffc0000 [ 190.833733][ T1249] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 190.862850][ T28] audit: type=1326 audit(1790323411.501:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3347 comm="syz.8.873" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dac79e159 code=0x7ffc0000 [ 190.892432][ T3355] xt_hashlimit: size too large, truncated to 1048576 [ 191.054100][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 191.088050][ T1249] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.136384][ T1249] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.211076][ T28] audit: type=1326 audit(1790323411.501:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3347 comm="syz.8.873" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dac79e159 code=0x7ffc0000 [ 191.252374][ T1249] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 191.323679][ T1249] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.355636][ T24] usb 6-1: config index 0 descriptor too short (expected 64729, got 47) [ 191.436852][ T1249] usb 9-1: SerialNumber: syz [ 191.441589][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.455044][ T3369] loop7: detected capacity change from 0 to 128 [ 191.494108][ T24] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 191.503235][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.516260][ T3369] FAT-fs (loop7): Directory bread(block 32) failed [ 191.584387][ T3369] FAT-fs (loop7): Directory bread(block 33) failed [ 191.590849][ T24] usb 6-1: Product: syz [ 191.595373][ T24] usb 6-1: Manufacturer: syz [ 191.598052][ T3369] FAT-fs (loop7): Directory bread(block 34) failed [ 191.600147][ T24] usb 6-1: SerialNumber: syz [ 191.611989][ T3369] FAT-fs (loop7): Directory bread(block 35) failed [ 191.622875][ T3369] FAT-fs (loop7): Directory bread(block 36) failed [ 191.630658][ T3369] FAT-fs (loop7): Directory bread(block 37) failed [ 191.637458][ T3369] FAT-fs (loop7): Directory bread(block 38) failed [ 191.644027][ T3369] FAT-fs (loop7): Directory bread(block 39) failed [ 191.650588][ T3369] FAT-fs (loop7): Directory bread(block 40) failed [ 191.657157][ T3369] FAT-fs (loop7): Directory bread(block 41) failed [ 191.696069][ T1249] usb 9-1: 0:2 : does not exist [ 191.701156][ T1249] usb 9-1: unit 5 not found! [ 191.789131][ T1249] usb 9-1: USB disconnect, device number 15 [ 191.881119][ T3360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.877'. [ 191.957099][ T2958] udevd[2958]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.206624][ T3360] Config c/1 of g1 needs at least one function. [ 192.365534][ T3360] udc dummy_udc.0: failed to start g1: -22 [ 192.470917][ T3360] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 192.512915][ T3360] UDC core: g1: couldn't find an available UDC or it's busy [ 192.625063][ T24] rtl8150 6-1:1.0: couldn't reset the device [ 192.635003][ T24] rtl8150: probe of 6-1:1.0 failed with error -5 [ 192.636265][ T3387] loop8: detected capacity change from 0 to 128 [ 194.755284][ T3390] FAT-fs (loop7): Filesystem has been set read-only [ 194.769735][ T3392] loop0: detected capacity change from 0 to 512 [ 194.822716][ T24] usb 6-1: USB disconnect, device number 9 [ 195.280352][ T1487] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.338723][ T3392] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 195.347568][ T3392] EXT4-fs error (device loop0): ext4_iget_extra_inode:4765: inode #15: comm syz.0.889: corrupted in-inode xattr [ 195.360763][ T3392] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.889: couldn't read orphan inode 15 (err -117) [ 195.373626][ T3392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 195.386853][ T3392] EXT4-fs (loop0): unmounting filesystem. [ 195.836970][ T3408] netlink: 24 bytes leftover after parsing attributes in process `syz.7.894'. [ 195.867109][ T3410] loop8: detected capacity change from 0 to 128 [ 195.885349][ T3413] loop5: detected capacity change from 0 to 512 [ 195.893827][ T3408] netlink: 24 bytes leftover after parsing attributes in process `syz.7.894'. [ 196.420118][ T3410] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 196.858946][ T3413] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 196.871744][ T3413] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.892824][ T3413] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.896: corrupted inode contents [ 197.000110][ T3410] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.018407][ T3413] EXT4-fs (loop5): Remounting filesystem read-only [ 197.052487][ T3430] loop7: detected capacity change from 0 to 128 [ 197.060260][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 197.060276][ T28] audit: type=1400 audit(1790323418.069:1292): avc: denied { write } for pid=3409 comm="syz.8.895" name="encrypted_dir" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 197.100294][ T3413] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.896: mark_inode_dirty error [ 197.114869][ T1788] EXT4-fs (loop8): unmounting filesystem. [ 197.142371][ T3430] FAT-fs (loop7): Directory bread(block 32) failed [ 197.156626][ T3413] EXT4-fs (loop5): Remounting filesystem read-only [ 197.165850][ T3430] FAT-fs (loop7): Directory bread(block 33) failed [ 197.172612][ T3413] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.896: corrupted inode contents [ 197.186949][ T28] audit: type=1400 audit(1790323418.099:1293): avc: denied { add_name } for pid=3409 comm="syz.8.895" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 197.215797][ T3430] FAT-fs (loop7): Directory bread(block 34) failed [ 197.225753][ T3430] FAT-fs (loop7): Directory bread(block 35) failed [ 197.232548][ T3413] EXT4-fs (loop5): Remounting filesystem read-only [ 197.245949][ T3430] FAT-fs (loop7): Directory bread(block 36) failed [ 197.256125][ T3429] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.896: corrupted inode contents [ 197.272250][ T28] audit: type=1400 audit(1790323418.109:1294): avc: denied { create } for pid=3409 comm="syz.8.895" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 197.293057][ T3430] FAT-fs (loop7): Directory bread(block 37) failed [ 197.305693][ T3430] FAT-fs (loop7): Directory bread(block 38) failed [ 197.313374][ T3429] EXT4-fs (loop5): Remounting filesystem read-only [ 197.325687][ T3430] FAT-fs (loop7): Directory bread(block 39) failed [ 197.332252][ T3430] FAT-fs (loop7): Directory bread(block 40) failed [ 197.345672][ T3429] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.896: mark_inode_dirty error [ 197.362602][ T3430] FAT-fs (loop7): Directory bread(block 41) failed [ 197.385735][ T3429] EXT4-fs (loop5): Remounting filesystem read-only [ 197.392383][ T3429] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.896: corrupted inode contents [ 197.401423][ T3434] netlink: 'syz.8.901': attribute type 12 has an invalid length. [ 197.417492][ T3429] EXT4-fs (loop5): Remounting filesystem read-only [ 197.424036][ T3429] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.896: mark_inode_dirty error [ 197.426942][ T3434] netlink: 'syz.8.901': attribute type 29 has an invalid length. [ 197.450218][ T3434] netlink: 148 bytes leftover after parsing attributes in process `syz.8.901'. [ 197.460122][ T3434] netlink: 59 bytes leftover after parsing attributes in process `syz.8.901'. [ 197.511180][ T3438] device sit0 entered promiscuous mode [ 197.516034][ T3429] EXT4-fs (loop5): Remounting filesystem read-only [ 197.520824][ T3438] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 197.523519][ T3429] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.896: corrupted inode contents [ 197.530925][ T3438] netlink: 1 bytes leftover after parsing attributes in process `syz.3.903'. [ 197.551588][ T3429] EXT4-fs (loop5): Remounting filesystem read-only [ 197.558641][ T3440] loop0: detected capacity change from 0 to 4096 [ 197.565399][ T3429] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.896: mark_inode_dirty error [ 197.584105][ T3429] EXT4-fs (loop5): Remounting filesystem read-only [ 197.592497][ T3431] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.896: corrupted inode contents [ 197.611881][ T3440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 197.645302][ T3448] FAT-fs (loop7): Filesystem has been set read-only [ 197.656459][ T28] audit: type=1400 audit(1790323418.669:1295): avc: denied { append } for pid=3437 comm="syz.3.903" name="cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 197.696510][ T28] audit: type=1400 audit(1790323418.689:1296): avc: denied { open } for pid=3437 comm="syz.3.903" path="/212/dev/cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 197.749240][ T3440] device syzkaller0 entered promiscuous mode [ 197.774014][ T3440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 197.902809][ T3457] xt_CT: No such helper "netbios-ns" [ 197.937020][ T28] audit: type=1400 audit(1790323418.949:1297): avc: denied { create } for pid=3456 comm="syz.8.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.735053][ T3459] loop5: detected capacity change from 0 to 128 [ 198.745110][ T3459] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 199.010223][ T3463] xt_CT: No such helper "netbios-ns" [ 199.043225][ T2583] EXT4-fs (loop0): unmounting filesystem. [ 199.123902][ T28] audit: type=1400 audit(1790323420.129:1298): avc: denied { write } for pid=3468 comm="syz.5.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.587267][ T28] audit: type=1400 audit(1790323420.159:1299): avc: denied { nlmsg_write } for pid=3468 comm="syz.5.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.183046][ T3496] netlink: 'syz.8.925': attribute type 13 has an invalid length. [ 200.422302][ T3485] kvm: pic: non byte write [ 200.565629][ T3496] loop8: detected capacity change from 0 to 40427 [ 200.604884][ T3496] F2FS-fs (loop8): invalid crc value [ 200.632432][ T3496] F2FS-fs (loop8): Found nat_bits in checkpoint [ 200.681509][ T3501] loop7: detected capacity change from 0 to 512 [ 200.698538][ T3496] F2FS-fs (loop8): Start checkpoint disabled! [ 200.705647][ T3501] EXT4-fs (loop7): 1 truncate cleaned up [ 200.712131][ T3501] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 200.721417][ T3496] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 200.736346][ T3496] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 200.744085][ T2956] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 200.790271][ T43] kworker/u4:2: attempt to access beyond end of device [ 200.790271][ T43] loop8: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 200.850187][ T3517] loop8: detected capacity change from 0 to 256 [ 200.963789][ T2956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.975225][ T2956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.985010][ T2956] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.997948][ T2956] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.007054][ T2956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.015462][ T2956] usb 1-1: config 0 descriptor?? [ 201.026957][ T399] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 201.287128][ T443] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 201.317068][ T399] usb 8-1: Using ep0 maxpacket: 8 [ 201.324138][ T399] usb 8-1: config 1 interface 0 altsetting 240 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 201.383394][ T399] usb 8-1: config 1 interface 0 altsetting 240 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.453780][ T399] usb 8-1: config 1 interface 0 has no altsetting 0 [ 201.478836][ T443] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.505038][ T399] usb 8-1: New USB device found, idVendor=0461, idProduct=4e05, bcdDevice= 0.40 [ 201.522823][ T443] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.561017][ T399] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.579891][ T443] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.660254][ T399] usb 8-1: Product: Ð’ [ 201.721170][ T399] usb 8-1: Manufacturer: 鰒䊆눸農诟〉瓎æ·Ù”䥂뱉צå®é£°ä¿’淆鴭疸ﳲߧîªïŽ£å¡á˜á“æžî¬€ë£¶å¾ æŸ»á²‹î§„ç‹ë¢Œé¥¿å…暅䷣궇ꬅꤲçœìªŒé®”꯬蒯캟ã©ï§‹î™¼î­„轾븫䙥ášâ¾ƒì©¼èˆ—䳽ꡳ鄵ꈤ脼é·ë‘’潖ꊚ潱᧖팰â¦ç£¦ï’é’䪽库ﮜ邥⥑B쌷緣âƒë¾€è ²æ¼ á˜„䡠탙㶨 [ 201.772592][ T3504] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 201.792818][ T3532] loop5: detected capacity change from 0 to 512 [ 201.799332][ T443] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.820943][ T3504] EXT4-fs (loop7): Remounting filesystem read-only [ 201.829801][ T3532] EXT4-fs (loop5): Test dummy encryption mode enabled [ 201.839484][ T443] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.844094][ T3532] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #11: comm syz.5.935: casefold flag without casefold feature [ 201.860898][ T3532] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.935: couldn't read orphan inode 11 (err -117) [ 201.872123][ T443] usb 9-1: config 0 descriptor?? [ 201.877803][ T3532] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 201.907233][ T399] usb 8-1: SerialNumber: á ˜ [ 202.011181][ T2956] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 202.019975][ T2956] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 202.040546][ T2956] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 202.314041][ T443] usbhid 9-1:0.0: can't add hid device: -71 [ 202.323450][ T399] usbhid 8-1:1.0: can't add hid device: -71 [ 202.336916][ T443] usbhid: probe of 9-1:0.0 failed with error -71 [ 202.343676][ T399] usbhid: probe of 8-1:1.0 failed with error -71 [ 202.354474][ T443] usb 9-1: USB disconnect, device number 16 [ 202.363749][ T399] usb 8-1: USB disconnect, device number 13 [ 202.364588][ T6] usb 1-1: USB disconnect, device number 6 [ 202.837839][ T578] EXT4-fs (loop7): unmounting filesystem. [ 202.889683][ T3548] loop8: detected capacity change from 0 to 16 [ 202.912916][ T3548] erofs: (device loop8): mounted with root inode @ nid 36. [ 203.009685][ T3548] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -56 in[58, 4038] out[2639] [ 203.030734][ T3548] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 203.040462][ T2662] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /41/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 203.041984][ T3548] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -56 in[58, 4038] out[2639] [ 203.071057][ T3548] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 203.091524][ T2662] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 203.118108][ T2662] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 203.154718][ T28] audit: type=1400 audit(1790323424.157:1300): avc: denied { write } for pid=3553 comm="syz.8.942" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 203.217670][ T443] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 203.232221][ T2662] EXT4-fs (loop5): unmounting filesystem. [ 203.238858][ T28] audit: type=1400 audit(1790323424.247:1301): avc: denied { mounton } for pid=3553 comm="syz.8.942" path="/97/file0" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 203.407730][ T443] usb 1-1: Using ep0 maxpacket: 16 [ 203.415632][ T443] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 203.459831][ T443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.479849][ T443] usb 1-1: Product: syz [ 203.484053][ T443] usb 1-1: Manufacturer: syz [ 203.498135][ T443] usb 1-1: SerialNumber: syz [ 203.515794][ T443] r8152-cfgselector 1-1: config 0 descriptor?? [ 203.570726][ T3571] loop7: detected capacity change from 0 to 128 [ 203.642618][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.649718][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.657112][ T3563] device bridge_slave_0 entered promiscuous mode [ 203.664548][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.671740][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.673295][ T2958] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.679681][ T3563] device bridge_slave_1 entered promiscuous mode [ 203.753287][ T3550] netlink: 'syz.0.940': attribute type 12 has an invalid length. [ 203.769559][ T3550] netlink: 'syz.0.940': attribute type 29 has an invalid length. [ 204.154308][ T28] audit: type=1326 audit(1790323425.157:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.8.950" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dac79e159 code=0x0 [ 204.248078][ T39] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 204.284742][ T3550] netlink: 148 bytes leftover after parsing attributes in process `syz.0.940'. [ 204.300765][ T3581] loop7: detected capacity change from 0 to 512 [ 204.340305][ T3581] EXT4-fs (loop7): Test dummy encryption mode enabled [ 204.377287][ T3550] netlink: 59 bytes leftover after parsing attributes in process `syz.0.940'. [ 204.464982][ T3581] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #11: comm syz.7.952: casefold flag without casefold feature [ 204.480791][ T443] r8152-cfgselector 1-1: Unknown version 0x0000 [ 204.481534][ T3581] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.952: couldn't read orphan inode 11 (err -117) [ 204.490888][ T443] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 204.546357][ T3581] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 204.547144][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.562456][ T3587] loop8: detected capacity change from 0 to 128 [ 204.567091][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.582367][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.595347][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.604529][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.615285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.620148][ T3587] FAT-fs (loop8): Directory bread(block 32) failed [ 204.628835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.630994][ T3587] FAT-fs (loop8): Directory bread(block 33) failed [ 204.645030][ T39] usb 4-1: config 0 descriptor?? [ 204.650551][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.659416][ T3587] FAT-fs (loop8): Directory bread(block 34) failed [ 204.659850][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.666014][ T3587] FAT-fs (loop8): Directory bread(block 35) failed [ 204.681374][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.688448][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.696408][ T3587] FAT-fs (loop8): Directory bread(block 36) failed [ 204.703114][ T3587] FAT-fs (loop8): Directory bread(block 37) failed [ 204.709926][ T3587] FAT-fs (loop8): Directory bread(block 38) failed [ 204.710257][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.716826][ T3587] FAT-fs (loop8): Directory bread(block 39) failed [ 204.725189][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.739473][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.746525][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.754534][ T3587] FAT-fs (loop8): Directory bread(block 40) failed [ 204.754696][ T807] device bridge_slave_1 left promiscuous mode [ 204.761133][ T3587] FAT-fs (loop8): Directory bread(block 41) failed [ 204.773855][ T807] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.781751][ T807] device bridge_slave_0 left promiscuous mode [ 204.795099][ T807] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.803514][ T807] device veth1_macvtap left promiscuous mode [ 204.809613][ T807] device veth0_vlan left promiscuous mode [ 204.861582][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 204.867550][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 204.885970][ T39] usb 4-1: USB disconnect, device number 22 [ 204.928114][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.946357][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.956389][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.978902][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.987504][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.995781][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.003869][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.020925][ T3563] device veth0_vlan entered promiscuous mode [ 205.051892][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.070782][ T3563] device veth1_macvtap entered promiscuous mode [ 205.086707][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.096889][ T3595] FAT-fs (loop8): Filesystem has been set read-only [ 205.107289][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.198705][ T3602] loop0: detected capacity change from 0 to 512 [ 205.224715][ T3602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 205.238676][ T3602] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.280613][ T3602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 205.300068][ T28] audit: type=1400 audit(1790323426.306:1303): avc: denied { setattr } for pid=3601 comm="syz.0.957" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 205.341423][ T2583] EXT4-fs (loop0): unmounting filesystem. [ 205.370936][ T3607] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 205.432953][ T28] audit: type=1400 audit(1790323426.436:1304): avc: denied { write } for pid=3608 comm="syz.3.959" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 205.489215][ T28] audit: type=1400 audit(1790323426.456:1305): avc: denied { open } for pid=3608 comm="syz.3.959" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 205.538525][ T28] audit: type=1400 audit(1790323426.476:1306): avc: denied { ioctl } for pid=3608 comm="syz.3.959" path="/227/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 205.644736][ T3598] kvm: pic: non byte write [ 205.700441][ T292] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 205.721222][ T292] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.738965][ T399] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 205.928679][ T399] usb 4-1: Using ep0 maxpacket: 32 [ 205.934878][ T399] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 205.953286][ T3622] loop0: detected capacity change from 0 to 1024 [ 205.969106][ T399] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 96, changing to 7 [ 205.990387][ T399] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 206.003789][ T3622] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.019241][ T3622] EXT4-fs (loop0): unmounting filesystem. [ 206.025034][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.031172][ T578] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /182/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 206.044048][ T399] usb 4-1: Product: syz [ 206.054265][ T578] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 206.067376][ T399] usb 4-1: Manufacturer: syz [ 206.068709][ T578] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 206.088729][ T399] usb 4-1: SerialNumber: syz [ 206.154552][ T578] EXT4-fs (loop7): unmounting filesystem. [ 206.161537][ T3626] 9pnet_fd: Insufficient options for proto=fd [ 206.170146][ T3626] loop8: detected capacity change from 0 to 128 [ 206.176871][ T3626] FAT-fs (loop8): Unrecognized mount option "ÿ" or missing value [ 206.238804][ T2956] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 206.361079][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.368179][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.376220][ T3630] device bridge_slave_0 entered promiscuous mode [ 206.383664][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.391130][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.398758][ T3630] device bridge_slave_1 entered promiscuous mode [ 206.428882][ T2956] usb 7-1: Using ep0 maxpacket: 16 [ 206.436744][ T2956] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 206.446118][ T2956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.461523][ T2956] usb 7-1: Product: syz [ 206.465752][ T2956] usb 7-1: Manufacturer: syz [ 206.467780][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.470697][ T2956] usb 7-1: SerialNumber: syz [ 206.477403][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.486190][ T2956] r8152-cfgselector 7-1: config 0 descriptor?? [ 206.489325][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.502459][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.540316][ T807] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.553064][ T807] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.586060][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.604241][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.639813][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.658425][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.666737][ T807] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.673807][ T807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.699033][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.709253][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.717791][ T807] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.724874][ T807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.732830][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.734605][ T3645] loop8: detected capacity change from 0 to 512 [ 206.741360][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.755824][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.761937][ T3645] EXT4-fs (loop8): Test dummy encryption mode enabled [ 206.764105][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.772448][ T3645] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.972: inode has both inline data and extents flags [ 206.791486][ T3645] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.972: couldn't read orphan inode 15 (err -117) [ 206.804459][ T3645] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 206.814274][ T3621] netlink: 'syz.6.963': attribute type 12 has an invalid length. [ 206.822672][ T3621] netlink: 'syz.6.963': attribute type 29 has an invalid length. [ 206.822832][ T2956] r8152-cfgselector 7-1: Unknown version 0x0000 [ 206.830656][ T3621] netlink: 148 bytes leftover after parsing attributes in process `syz.6.963'. [ 206.847172][ T3621] netlink: 59 bytes leftover after parsing attributes in process `syz.6.963'. [ 206.848696][ T399] usb 4-1: Fast Track Pro switching to config #2 [ 206.857163][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.871177][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.881404][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.890644][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.899643][ T3630] device veth0_vlan entered promiscuous mode [ 206.907492][ T3645] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 206.908400][ T2956] r8152-cfgselector 7-1: USB disconnect, device number 11 [ 206.922324][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.925393][ T399] hub 4-1:1.2: Invalid hub with more than one config or interface [ 206.930453][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.937743][ T399] hub: probe of 4-1:1.2 failed with error -22 [ 206.951371][ T3630] device veth1_macvtap entered promiscuous mode [ 206.958086][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 206.962880][ T399] usb 4-1: USB disconnect, device number 23 [ 206.966165][ T3645] loop8: detected capacity change from 512 to 64 [ 206.980393][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.988642][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.006876][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.007171][ T1788] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 207.015394][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.039667][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.048033][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.048692][ T1788] EXT4-fs (loop8): unmounting filesystem. [ 207.063481][ T350] device bridge_slave_1 left promiscuous mode [ 207.069929][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.077365][ T350] device bridge_slave_0 left promiscuous mode [ 207.083545][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.091394][ T350] device veth1_macvtap left promiscuous mode [ 207.097420][ T350] device veth0_vlan left promiscuous mode [ 207.129162][ T443] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 207.310245][ T443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.331803][ T3658] loop9: detected capacity change from 0 to 40427 [ 207.332266][ T443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.350906][ T3658] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 207.358142][ T3658] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 207.373500][ T3658] F2FS-fs (loop9): Image doesn't support compression [ 207.381563][ T3658] F2FS-fs (loop9): Image doesn't support compression [ 207.388687][ T3658] F2FS-fs (loop9): invalid crc value [ 207.389179][ T443] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.394969][ T3658] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 207.435722][ T443] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.455937][ T443] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.465234][ T3658] F2FS-fs (loop9): Start checkpoint disabled! [ 207.468732][ T443] usb 1-1: config 0 descriptor?? [ 207.498921][ T3658] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 207.516746][ T3658] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 207.527536][ T3658] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 207.634814][ T1142] kworker/u4:8: attempt to access beyond end of device [ 207.634814][ T1142] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.634958][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.656300][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.665350][ T3665] device bridge_slave_0 entered promiscuous mode [ 207.688729][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.702569][ T443] usbhid 1-1:0.0: can't add hid device: -71 [ 207.708528][ T443] usbhid: probe of 1-1:0.0 failed with error -71 [ 207.715244][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.722956][ T3665] device bridge_slave_1 entered promiscuous mode [ 207.759340][ T2956] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 207.771137][ T443] usb 1-1: USB disconnect, device number 8 [ 207.929504][ T2956] usb 7-1: device descriptor read/64, error -71 [ 207.977555][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.984747][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.992048][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.999073][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.050572][ T350] device bridge_slave_1 left promiscuous mode [ 208.057005][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.079683][ T350] device bridge_slave_0 left promiscuous mode [ 208.085860][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.097944][ T350] device veth1_macvtap left promiscuous mode [ 208.104023][ T350] device veth0_vlan left promiscuous mode [ 208.199897][ T2956] usb 7-1: device descriptor read/64, error -71 [ 208.229746][ T3675] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 208.285597][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.300504][ T3683] loop9: detected capacity change from 0 to 256 [ 208.308280][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.316371][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.343010][ T3683] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 208.360593][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.362156][ T3683] exFAT-fs (loop9): hint_cluster is invalid (1) [ 208.375792][ T3683] exFAT-fs (loop9): error, invalid access to exfat cache (entry 0x00000000) [ 208.376050][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.384921][ T3683] exFAT-fs (loop9): Filesystem has been set read-only [ 208.391563][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.406116][ T3683] exFAT-fs (loop9): error, failed to bmap (inode : ffff88813a863250 iblock : 9, err : -5) [ 208.409170][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.416749][ T3683] syz.9.983: attempt to access beyond end of device [ 208.416749][ T3683] loop9: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 208.439278][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.446357][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.466697][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.489656][ T2956] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 208.489991][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.519900][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.553334][ T3665] device veth0_vlan entered promiscuous mode [ 208.559850][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.568388][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.582549][ T399] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 208.595140][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.609148][ T3665] device veth1_macvtap entered promiscuous mode [ 208.621133][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.633958][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.642514][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.660113][ T2956] usb 7-1: device descriptor read/64, error -71 [ 208.666482][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.674859][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.691283][ T3688] loop1: detected capacity change from 0 to 128 [ 208.703587][ T3683] syz.9.983: attempt to access beyond end of device [ 208.703587][ T3683] loop9: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 208.722708][ T3683] exFAT-fs (loop9): error, invalid access to exfat cache (entry 0x00000000) [ 208.731706][ T3683] exFAT-fs (loop9): error, failed to bmap (inode : ffff88813a863250 iblock : 9, err : -5) [ 208.760671][ T3688] FAT-fs (loop1): Directory bread(block 32) failed [ 208.799747][ T399] usb 1-1: Using ep0 maxpacket: 16 [ 208.807482][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.817182][ T3688] FAT-fs (loop1): Directory bread(block 33) failed [ 208.826116][ T399] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.839290][ T3688] FAT-fs (loop1): Directory bread(block 34) failed [ 208.847661][ T3688] FAT-fs (loop1): Directory bread(block 35) failed [ 208.849083][ T399] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.858825][ T3688] FAT-fs (loop1): Directory bread(block 36) failed [ 208.864081][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.949251][ T2956] usb 7-1: device descriptor read/64, error -71 [ 209.299682][ T3688] FAT-fs (loop1): Directory bread(block 37) failed [ 209.307775][ T3688] FAT-fs (loop1): Directory bread(block 38) failed [ 209.398175][ T399] usb 1-1: config 0 descriptor?? [ 209.420233][ T2956] usb usb7-port1: attempt power cycle [ 209.480317][ T3688] FAT-fs (loop1): Directory bread(block 39) failed [ 209.519097][ T3688] FAT-fs (loop1): Directory bread(block 40) failed [ 209.547245][ T3688] FAT-fs (loop1): Directory bread(block 41) failed [ 209.846454][ T28] audit: type=1400 audit(1790323430.845:1307): avc: denied { map } for pid=3697 comm="syz.3.987" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 209.910162][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 210.017456][ T399] HID 045e:07da: Invalid code 65791 type 1 [ 210.029514][ T399] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0016/input/input25 [ 210.044304][ T399] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 210.060931][ T3702] FAT-fs (loop1): Filesystem has been set read-only [ 210.100233][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 210.110983][ T24] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 210.126411][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.134766][ T2956] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 210.142510][ T24] usb 10-1: Product: syz [ 210.146915][ T24] usb 10-1: Manufacturer: syz [ 210.151791][ T24] usb 10-1: SerialNumber: syz [ 210.157523][ T24] r8152-cfgselector 10-1: config 0 descriptor?? [ 210.171276][ T2956] usb 7-1: device descriptor read/8, error -71 [ 210.331525][ T2956] usb 7-1: device descriptor read/8, error -71 [ 210.365324][ T3696] netlink: 'syz.9.986': attribute type 12 has an invalid length. [ 210.373399][ T3696] netlink: 'syz.9.986': attribute type 29 has an invalid length. [ 210.381356][ T3696] netlink: 148 bytes leftover after parsing attributes in process `syz.9.986'. [ 210.390749][ T3696] netlink: 59 bytes leftover after parsing attributes in process `syz.9.986'. [ 210.457356][ T24] r8152-cfgselector 10-1: Unknown version 0x0000 [ 210.487585][ T24] r8152-cfgselector 10-1: USB disconnect, device number 3 [ 210.610814][ T3709] xt_CT: No such helper "netbios-ns" [ 210.777562][ T3717] device sit0 entered promiscuous mode [ 210.784400][ T3717] netlink: 'syz.6.992': attribute type 1 has an invalid length. [ 210.792415][ T3717] netlink: 1 bytes leftover after parsing attributes in process `syz.6.992'. [ 210.900549][ T292] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 210.962954][ T3685] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 210.980740][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 210.984797][ T3685] loop0: detected capacity change from 0 to 2048 [ 211.045440][ T3725] loop9: detected capacity change from 0 to 256 [ 211.076950][ T3725] exfat: Deprecated parameter 'utf8' [ 211.084114][ T3685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 211.088769][ T3725] exfat: Deprecated parameter 'utf8' [ 211.103613][ T292] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.119195][ T3725] exfat: Deprecated parameter 'namecase' [ 211.126112][ T3685] EXT4-fs (loop0): shut down requested (1) [ 211.127370][ T292] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.134625][ T28] audit: type=1400 audit(1790323432.134:1308): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 211.167355][ T28] audit: type=1400 audit(1790323432.134:1309): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.167767][ T292] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.199487][ T28] audit: type=1400 audit(1790323432.134:1310): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.201761][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.232018][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.232047][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.250159][ T3725] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 211.252034][ T292] usb 4-1: SerialNumber: syz [ 211.262456][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.276978][ T28] audit: type=1400 audit(1790323432.134:1311): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.280691][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.312301][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.341362][ T24] usb 2-1: config 0 descriptor?? [ 211.341992][ T28] audit: type=1400 audit(1790323432.134:1312): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.369707][ T28] audit: type=1400 audit(1790323432.134:1313): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.393960][ T28] audit: type=1400 audit(1790323432.134:1314): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.413072][ T3729] loop6: detected capacity change from 0 to 40427 [ 211.423648][ T28] audit: type=1400 audit(1790323432.164:1315): avc: denied { ioctl } for pid=3708 comm="syz.3.989" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.450003][ T3729] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 211.457791][ T3729] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 211.466119][ T3729] F2FS-fs (loop6): Image doesn't support compression [ 211.472935][ T3729] F2FS-fs (loop6): Image doesn't support compression [ 211.482533][ T3729] F2FS-fs (loop6): invalid crc value [ 211.488732][ T3729] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 211.501364][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.9.997'. [ 211.519639][ T292] usb 4-1: 0:2 : does not exist [ 211.520458][ T3729] F2FS-fs (loop6): Start checkpoint disabled! [ 211.530992][ T292] usb 4-1: USB disconnect, device number 24 [ 211.533101][ T3729] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 211.547215][ T3729] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 211.554566][ T3729] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 211.555761][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 211.572856][ T24] usbhid: probe of 2-1:0.0 failed with error -71 [ 211.582507][ T28] audit: type=1400 audit(1790323432.584:1316): avc: denied { getopt } for pid=3728 comm="syz.6.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 211.604154][ T24] usb 2-1: USB disconnect, device number 4 [ 211.682949][ T474] usb 1-1: USB disconnect, device number 9 [ 211.690021][ T2583] EXT4-fs (loop0): unmounting filesystem. [ 211.727535][ T3739] loop0: detected capacity change from 0 to 512 [ 211.737276][ T3739] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.998: bad orphan inode 15 [ 211.747546][ T3739] ext4_test_bit(bit=14, block=5) = 0 [ 211.753109][ T3739] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 211.881039][ T2956] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 212.072586][ T2956] usb 7-1: device descriptor read/64, error -71 [ 212.863594][ T2956] usb 7-1: device descriptor read/64, error -71 [ 213.341543][ T2956] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 213.426104][ T2583] EXT4-fs (loop0): unmounting filesystem. [ 213.471623][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 213.491618][ T2956] usb 7-1: device descriptor read/64, error -71 [ 213.651693][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 213.659431][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 213.676176][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.692922][ T24] usb 2-1: Product: syz [ 213.701495][ T24] usb 2-1: Manufacturer: syz [ 213.711670][ T24] usb 2-1: SerialNumber: syz [ 213.752013][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 213.761798][ T2956] usb 7-1: device descriptor read/64, error -71 [ 213.882299][ T2956] usb usb7-port1: attempt power cycle [ 213.963583][ T3749] netlink: 'syz.1.1002': attribute type 12 has an invalid length. [ 213.988889][ T3749] netlink: 'syz.1.1002': attribute type 29 has an invalid length. [ 214.019033][ T3749] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1002'. [ 214.051830][ T3749] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1002'. [ 214.110942][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 214.150884][ T24] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 214.242210][ T3779] xt_CT: No such helper "netbios-ns" [ 214.399741][ T3792] loop6: detected capacity change from 0 to 128 [ 214.410540][ T3792] FAT-fs (loop6): Directory bread(block 32) failed [ 214.417456][ T3792] FAT-fs (loop6): Directory bread(block 33) failed [ 214.424444][ T3792] FAT-fs (loop6): Directory bread(block 34) failed [ 214.431403][ T3792] FAT-fs (loop6): Directory bread(block 35) failed [ 214.438029][ T3792] FAT-fs (loop6): Directory bread(block 36) failed [ 214.445255][ T3792] FAT-fs (loop6): Directory bread(block 37) failed [ 214.452527][ T3792] FAT-fs (loop6): Directory bread(block 38) failed [ 214.459145][ T3792] FAT-fs (loop6): Directory bread(block 39) failed [ 214.465736][ T3792] FAT-fs (loop6): Directory bread(block 40) failed [ 214.472273][ T3792] FAT-fs (loop6): Directory bread(block 41) failed [ 214.482014][ T60] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 214.542189][ T19] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 214.645086][ T3794] FAT-fs (loop6): Filesystem has been set read-only [ 214.682124][ T60] usb 10-1: Using ep0 maxpacket: 16 [ 214.692834][ T60] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 214.721272][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.786246][ T60] usb 10-1: Product: syz [ 214.808621][ T60] usb 10-1: Manufacturer: syz [ 214.830090][ T3796] loop1: detected capacity change from 0 to 512 [ 214.836858][ T60] usb 10-1: SerialNumber: syz [ 214.863486][ T60] r8152-cfgselector 10-1: config 0 descriptor?? [ 214.956150][ T3796] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1015: bad orphan inode 15 [ 214.967203][ T3796] ext4_test_bit(bit=14, block=5) = 0 [ 215.001144][ T3796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 215.090272][ T3775] netlink: 'syz.9.1005': attribute type 12 has an invalid length. [ 215.154835][ T3775] netlink: 'syz.9.1005': attribute type 29 has an invalid length. [ 215.222465][ T3798] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 215.392648][ T3775] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1005'. [ 215.401977][ T3775] netlink: 59 bytes leftover after parsing attributes in process `syz.9.1005'. [ 215.437224][ T3804] loop6: detected capacity change from 0 to 128 [ 215.447618][ T3804] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 215.456425][ T3804] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.600638][ T60] r8152-cfgselector 10-1: Unknown version 0x0000 [ 215.646090][ T60] r8152-cfgselector 10-1: USB disconnect, device number 4 [ 216.202802][ T3665] EXT4-fs (loop1): unmounting filesystem. [ 216.223844][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.242724][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.279144][ T19] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 216.293264][ T3563] EXT4-fs (loop6): unmounting filesystem. [ 216.299473][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 216.323648][ T19] usb 1-1: SerialNumber: syz [ 216.528240][ T3823] FAULT_INJECTION: forcing a failure. [ 216.528240][ T3823] name failslab, interval 1, probability 0, space 0, times 0 [ 216.541096][ T3823] CPU: 1 PID: 3823 Comm: syz.6.1022 Not tainted syzkaller #0 [ 216.548484][ T3823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.558550][ T3823] Call Trace: [ 216.561828][ T3823] [ 216.564758][ T3823] __dump_stack+0x21/0x24 [ 216.569086][ T3823] dump_stack_lvl+0x110/0x170 [ 216.573752][ T3823] ? __cfi_dump_stack_lvl+0x8/0x8 [ 216.578770][ T3823] ? preempt_count_sub+0x66/0x170 [ 216.583807][ T3823] dump_stack+0x15/0x24 [ 216.587961][ T3823] should_fail_ex+0x3bf/0x510 [ 216.592625][ T3823] __should_failslab+0xac/0xf0 [ 216.597382][ T3823] should_failslab+0x9/0x20 [ 216.601875][ T3823] __kmem_cache_alloc_node+0x3d/0x2d0 [ 216.607234][ T3823] ? inode_doinit_use_xattr+0x5d/0x3f0 [ 216.612764][ T3823] ? inode_doinit_use_xattr+0x5d/0x3f0 [ 216.618213][ T3823] kmalloc_trace+0x29/0xb0 [ 216.622619][ T3823] inode_doinit_use_xattr+0x5d/0x3f0 [ 216.627892][ T3823] inode_doinit_with_dentry+0x945/0xd90 [ 216.633436][ T3823] ? sb_finish_set_opts+0xa10/0xa10 [ 216.638976][ T3823] ? preempt_schedule_thunk+0x16/0x18 [ 216.644363][ T3823] selinux_d_instantiate+0x27/0x40 [ 216.649489][ T3823] security_d_instantiate+0xb3/0x110 [ 216.654774][ T3823] d_splice_alias+0x6d/0x390 [ 216.659355][ T3823] kernfs_iop_lookup+0x2c2/0x310 [ 216.664286][ T3823] ? __cfi_kernfs_iop_lookup+0x10/0x10 [ 216.669742][ T3823] path_openat+0x13fe/0x2f30 [ 216.674343][ T3823] ? do_filp_open+0x420/0x420 [ 216.679025][ T3823] do_filp_open+0x1ee/0x420 [ 216.683535][ T3823] ? __cfi_do_filp_open+0x10/0x10 [ 216.688565][ T3823] ? alloc_fd+0x4c1/0x570 [ 216.692905][ T3823] do_sys_openat2+0x15e/0x820 [ 216.697583][ T3823] ? do_sys_open+0xe0/0xe0 [ 216.702021][ T3823] ? ksys_write+0x1fa/0x260 [ 216.706525][ T3823] __x64_sys_openat+0x136/0x160 [ 216.711383][ T3823] x64_sys_call+0x783/0x9a0 [ 216.715901][ T3823] do_syscall_64+0x4c/0xa0 [ 216.720327][ T3823] ? clear_bhb_loop+0x30/0x80 [ 216.725003][ T3823] ? clear_bhb_loop+0x30/0x80 [ 216.729673][ T3823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.735565][ T3823] RIP: 0033:0x7f492db9e159 [ 216.739988][ T3823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.759584][ T3823] RSP: 002b:00007f492eaf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.767990][ T3823] RAX: ffffffffffffffda RBX: 00007f492de26180 RCX: 00007f492db9e159 [ 216.775961][ T3823] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000005 [ 216.783923][ T3823] RBP: 00007f492eaf0090 R08: 0000000000000000 R09: 0000000000000000 [ 216.791882][ T3823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.799908][ T3823] R13: 00007f492de26218 R14: 00007f492de26180 R15: 00007ffdc2f67288 [ 216.807903][ T3823] [ 216.817106][ T3823] syz.6.1022 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 217.126321][ T19] usb 1-1: 0:2 : does not exist [ 217.145900][ T19] usb 1-1: USB disconnect, device number 10 [ 217.160499][ T1487] udevd[1487]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.406973][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 217.407066][ T28] audit: type=1400 audit(1790323438.392:1324): avc: denied { read } for pid=3824 comm="syz.9.1025" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 217.503451][ T28] audit: type=1400 audit(1790323438.392:1325): avc: denied { create } for pid=3824 comm="syz.9.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 217.613244][ T2956] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 217.857602][ T3834] loop0: detected capacity change from 0 to 128 [ 217.893273][ T2956] usb 4-1: Using ep0 maxpacket: 16 [ 217.924202][ T2956] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 217.962161][ T3834] FAT-fs (loop0): Directory bread(block 32) failed [ 218.064032][ T2956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.077579][ T3834] FAT-fs (loop0): Directory bread(block 33) failed [ 218.107936][ T3834] FAT-fs (loop0): Directory bread(block 34) failed [ 218.119087][ T2956] usb 4-1: Product: syz [ 218.138258][ T2956] usb 4-1: Manufacturer: syz [ 218.142990][ T2956] usb 4-1: SerialNumber: syz [ 218.152867][ T3834] FAT-fs (loop0): Directory bread(block 35) failed [ 218.169349][ T3834] FAT-fs (loop0): Directory bread(block 36) failed [ 218.175944][ T3834] FAT-fs (loop0): Directory bread(block 37) failed [ 218.176206][ T2956] r8152-cfgselector 4-1: config 0 descriptor?? [ 218.182494][ T3834] FAT-fs (loop0): Directory bread(block 38) failed [ 218.195223][ T3834] FAT-fs (loop0): Directory bread(block 39) failed [ 218.201768][ T3834] FAT-fs (loop0): Directory bread(block 40) failed [ 218.208564][ T3834] FAT-fs (loop0): Directory bread(block 41) failed [ 218.271647][ T3810] loop1: detected capacity change from 0 to 131072 [ 218.289990][ T3810] F2FS-fs (loop1): invalid crc value [ 218.338527][ T3810] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.377828][ T3810] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 218.517395][ T3843] FAT-fs (loop0): Filesystem has been set read-only [ 218.955160][ T3830] netlink: 'syz.3.1026': attribute type 12 has an invalid length. [ 218.980930][ T3830] netlink: 'syz.3.1026': attribute type 29 has an invalid length. [ 218.989321][ T3830] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1026'. [ 219.856323][ T3830] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1026'. [ 219.898500][ T3850] loop0: detected capacity change from 0 to 512 [ 219.920993][ T28] audit: type=1400 audit(1790323441.918:1326): avc: denied { watch watch_reads } for pid=3849 comm="syz.0.1031" path="/61/file0/file0" dev="loop0" ino=1048770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 219.948062][ T3850] FAULT_INJECTION: forcing a failure. [ 219.948062][ T3850] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 219.968381][ T3850] CPU: 1 PID: 3850 Comm: syz.0.1031 Not tainted syzkaller #0 [ 219.975792][ T3850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.986286][ T3850] Call Trace: [ 219.989591][ T3850] [ 219.992537][ T3850] __dump_stack+0x21/0x24 [ 219.996871][ T3850] dump_stack_lvl+0x110/0x170 [ 220.001554][ T3850] ? __cfi_dump_stack_lvl+0x8/0x8 [ 220.006584][ T3850] ? format_decode+0x1bb/0x1520 [ 220.011438][ T3850] dump_stack+0x15/0x24 [ 220.015596][ T3850] should_fail_ex+0x3bf/0x510 [ 220.020271][ T3850] should_fail+0xb/0x10 [ 220.024423][ T3850] should_fail_usercopy+0x1a/0x20 [ 220.029447][ T3850] _copy_from_user+0x1e/0xc0 [ 220.034049][ T3850] kstrtouint_from_user+0xda/0x170 [ 220.039177][ T3850] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 220.044910][ T3850] ? __cfi_selinux_file_permission+0x10/0x10 [ 220.050912][ T3850] proc_fail_nth_write+0x8b/0x200 [ 220.055949][ T3850] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 220.061591][ T3850] ? security_file_permission+0x8a/0xb0 [ 220.067152][ T3850] ? security_file_permission+0x94/0xb0 [ 220.072702][ T3850] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 220.078337][ T3850] vfs_write+0x3fb/0xd00 [ 220.082577][ T3850] ? __kasan_check_read+0x11/0x20 [ 220.087592][ T3850] ? __cfi_vfs_write+0x10/0x10 [ 220.092375][ T3850] ? __kasan_check_write+0x14/0x20 [ 220.097677][ T3850] ? mutex_lock+0x93/0x1b0 [ 220.102091][ T3850] ? __cfi_mutex_lock+0x10/0x10 [ 220.107034][ T3850] ? __fdget_pos+0x2cd/0x380 [ 220.111636][ T3850] ? ksys_write+0x70/0x260 [ 220.116053][ T3850] ksys_write+0x14a/0x260 [ 220.120472][ T3850] ? __cfi_ksys_write+0x10/0x10 [ 220.125410][ T3850] ? debug_smp_processor_id+0x17/0x20 [ 220.130798][ T3850] __x64_sys_write+0x7b/0x90 [ 220.135376][ T3850] x64_sys_call+0x27b/0x9a0 [ 220.139873][ T3850] do_syscall_64+0x4c/0xa0 [ 220.144277][ T3850] ? clear_bhb_loop+0x30/0x80 [ 220.148937][ T3850] ? clear_bhb_loop+0x30/0x80 [ 220.153605][ T3850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.159480][ T3850] RIP: 0033:0x7f2702b5e98e [ 220.163888][ T3850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.183587][ T3850] RSP: 002b:00007f27015f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.192014][ T3850] RAX: ffffffffffffffda RBX: 00007f27015f76c0 RCX: 00007f2702b5e98e [ 220.200668][ T3850] RDX: 0000000000000001 RSI: 00007f27015f70a0 RDI: 0000000000000009 [ 220.208622][ T3850] RBP: 00007f27015f7090 R08: 0000000000000000 R09: 0000000000000000 [ 220.216576][ T3850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.224527][ T3850] R13: 00007f2702e26038 R14: 00007f2702e25fa0 R15: 00007fff643ad698 [ 220.232496][ T3850] [ 220.441702][ T3865] loop1: detected capacity change from 0 to 16 [ 220.458780][ T3865] erofs: (device loop1): mounted with root inode @ nid 36. [ 220.733020][ T28] audit: type=1400 audit(1790323443.703:1327): avc: denied { accept } for pid=3864 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.988406][ T2956] r8152-cfgselector 4-1: Unknown version 0x0000 [ 221.036769][ T2956] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 221.486259][ T3870] loop6: detected capacity change from 0 to 40427 [ 221.525308][ T3870] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 221.526195][ T19] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 221.534577][ T3870] F2FS-fs (loop6): invalid crc value [ 221.549480][ T3870] F2FS-fs (loop6): invalid crc value [ 221.555146][ T3870] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 221.557744][ T3881] loop9: detected capacity change from 0 to 512 [ 221.569322][ T3881] EXT4-fs: Ignoring removed orlov option [ 221.591678][ T3881] EXT4-fs error (device loop9): ext4_orphan_get:1431: comm syz.9.1041: bad orphan inode 15 [ 221.607658][ T3881] ext4_test_bit(bit=14, block=18) = 1 [ 221.613715][ T3881] is_bad_inode(inode)=0 [ 221.617956][ T3881] NEXT_ORPHAN(inode)=1023 [ 221.622277][ T3881] max_ino=32 [ 221.625552][ T3881] i_nlink=0 [ 221.628883][ T3881] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2918: inode #15: comm syz.9.1041: corrupted xattr block 19 [ 221.648267][ T3881] EXT4-fs warning (device loop9): ext4_evict_inode:301: xattr delete (err -117) [ 221.658608][ T3881] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 221.667601][ T3881] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.684256][ T3886] loop6: detected capacity change from 0 to 512 [ 221.731999][ T3886] EXT4-fs (loop6): orphan cleanup on readonly fs [ 221.738606][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 221.745611][ T3886] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 221.753751][ T3886] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 221.762687][ T3886] EXT4-fs (loop6): 1 truncate cleaned up [ 221.762753][ T19] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 221.768449][ T3886] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 221.777894][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.794714][ T19] usb 1-1: Product: syz [ 221.798896][ T19] usb 1-1: Manufacturer: syz [ 221.803580][ T19] usb 1-1: SerialNumber: syz [ 221.808637][ T3563] EXT4-fs (loop6): unmounting filesystem. [ 221.809341][ T19] r8152-cfgselector 1-1: config 0 descriptor?? [ 221.884697][ T3893] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1041: bg 0: block 449: padding at end of block bitmap is not set [ 222.483107][ T24] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 222.749427][ T3898] MTRR 0 not used [ 222.784117][ T3630] EXT4-fs (loop9): unmounting filesystem. [ 222.794627][ T28] audit: type=1400 audit(1790323445.743:1328): avc: denied { ioctl } for pid=3896 comm="syz.6.1046" path="/20/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 222.825236][ T3903] loop1: detected capacity change from 0 to 512 [ 222.861461][ T3903] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1048: bad orphan inode 15 [ 222.872120][ T3903] ext4_test_bit(bit=14, block=5) = 0 [ 222.877798][ T3903] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 222.969163][ T3859] netlink: 'syz.0.1035': attribute type 12 has an invalid length. [ 222.977159][ T3859] netlink: 'syz.0.1035': attribute type 29 has an invalid length. [ 222.985790][ T3859] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1035'. [ 222.995126][ T3859] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1035'. [ 223.414994][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 223.452669][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.503541][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.547946][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 223.594054][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.734752][ T24] usb 4-1: Found UVC 1.00 device (046d:0825) [ 223.920140][ T474] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 223.928369][ T19] r8152-cfgselector 1-1: Unknown version 0x0000 [ 223.928418][ T3665] EXT4-fs (loop1): unmounting filesystem. [ 223.937070][ T19] r8152-cfgselector 1-1: USB disconnect, device number 11 [ 223.945943][ T24] usb 4-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -32 (exp. 1). [ 223.963455][ T3888] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.970622][ T3888] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.999724][ T24] usb 4-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 224.071803][ T3920] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1052'. [ 224.092219][ T24] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 224.101226][ T24] usb 4-1: No streaming interface found for terminal 2. [ 224.112307][ T24] usb 4-1: USB disconnect, device number 26 [ 224.112826][ T474] usb 7-1: Using ep0 maxpacket: 16 [ 224.124734][ T3924] xt_CT: No such helper "netbios-ns" [ 224.133892][ T474] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 225.047458][ T3925] loop0: detected capacity change from 0 to 2048 [ 225.074660][ T3925] loop0: p1 < > p4 [ 225.084773][ T3925] loop0: p4 size 722688 extends beyond EOD, truncated [ 225.424805][ T103] loop0: p1 < > p4 [ 225.431366][ T103] loop0: p4 size 722688 extends beyond EOD, truncated [ 225.492940][ T443] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 226.087580][ T474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.096982][ T474] usb 7-1: Product: syz [ 226.101171][ T474] usb 7-1: Manufacturer: syz [ 226.105821][ T474] usb 7-1: SerialNumber: syz [ 226.121178][ T1487] udevd[1487]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 226.128215][ T474] r8152-cfgselector 7-1: config 0 descriptor?? [ 226.134468][ T2958] udevd[2958]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 226.192454][ T474] r8152-cfgselector 7-1: can't set config #0, error -71 [ 226.199108][ T3932] loop0: detected capacity change from 0 to 4096 [ 226.219900][ T474] r8152-cfgselector 7-1: Unknown version 0x0000 [ 226.233668][ T474] r8152-cfgselector 7-1: USB disconnect, device number 19 [ 226.243109][ T3932] ext4: Unknown parameter 'euid>00000000000000000000' [ 227.421686][ T443] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.005925][ T443] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.201800][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 228.209754][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 228.217029][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 228.240903][ T1487] udevd[1487]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 228.242565][ T443] usb 10-1: string descriptor 0 read error: -71 [ 228.257572][ T3950] loop1: detected capacity change from 0 to 512 [ 228.851969][ T2958] udevd[2958]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 229.034371][ T443] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.142443][ T3950] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1060: bad orphan inode 15 [ 229.172678][ T3950] ext4_test_bit(bit=14, block=5) = 0 [ 229.172938][ T443] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.179859][ T3950] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 229.325992][ T2961] udevd[2961]: inotify_add_watch(7, /dev/sda8, 10) failed: No such file or directory [ 229.335769][ T443] usb 10-1: can't set config #1, error -71 [ 229.344861][ T443] usb 10-1: USB disconnect, device number 5 [ 229.922037][ T3970] device-mapper: ioctl: Unable to interpret geometry settings. [ 230.003833][ T3665] EXT4-fs (loop1): unmounting filesystem. [ 230.075455][ T474] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 230.122063][ T8] device bridge_slave_1 left promiscuous mode [ 230.128441][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.136278][ T8] device bridge_slave_0 left promiscuous mode [ 230.142588][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.150705][ T8] device veth1_macvtap left promiscuous mode [ 230.157331][ T8] device veth0_vlan left promiscuous mode [ 230.272449][ T474] usb 7-1: Using ep0 maxpacket: 16 [ 230.284964][ T3983] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.295231][ T474] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 230.304401][ T19] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 230.322165][ T474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.330355][ T474] usb 7-1: Product: syz [ 230.338447][ T3976] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.342462][ T474] usb 7-1: Manufacturer: syz [ 230.350090][ T474] usb 7-1: SerialNumber: syz [ 230.355718][ T3976] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.362984][ T474] r8152-cfgselector 7-1: config 0 descriptor?? [ 230.370487][ T3976] device bridge_slave_0 entered promiscuous mode [ 230.377981][ T3976] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.385226][ T3976] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.393009][ T3976] device bridge_slave_1 entered promiscuous mode [ 230.435052][ T3983] loop1: detected capacity change from 0 to 256 [ 230.457140][ T3976] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.464672][ T3976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.492614][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 230.501222][ T19] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 230.514302][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.521448][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.530379][ T19] usb 4-1: Product: syz [ 230.534918][ T19] usb 4-1: Manufacturer: syz [ 230.535145][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.539525][ T19] usb 4-1: SerialNumber: syz [ 230.552435][ T19] r8152-cfgselector 4-1: config 0 descriptor?? [ 230.560002][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.570182][ T3956] netlink: 'syz.6.1061': attribute type 12 has an invalid length. [ 230.581528][ T3956] netlink: 'syz.6.1061': attribute type 29 has an invalid length. [ 230.594306][ T3956] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1061'. [ 230.608369][ T3983] SELinux: failed to load policy [ 230.613965][ T3956] netlink: 59 bytes leftover after parsing attributes in process `syz.6.1061'. [ 230.643781][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.652595][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.660861][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.667941][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.676176][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.685691][ T3989] FAULT_INJECTION: forcing a failure. [ 230.685691][ T3989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.699236][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.706392][ T3710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.714170][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.722012][ T474] r8152-cfgselector 7-1: Unknown version 0x0000 [ 230.729514][ T474] r8152-cfgselector 7-1: USB disconnect, device number 20 [ 230.737036][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.746193][ T3989] CPU: 0 PID: 3989 Comm: syz.1.1071 Not tainted syzkaller #0 [ 230.753590][ T3989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.763650][ T3989] Call Trace: [ 230.765720][ T3991] loop9: detected capacity change from 0 to 512 [ 230.766932][ T3989] [ 230.766941][ T3989] __dump_stack+0x21/0x24 [ 230.780435][ T3989] dump_stack_lvl+0x110/0x170 [ 230.781343][ T3991] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 33619980: comm syz.9.1072: invalid block [ 230.785125][ T3989] ? __cfi_dump_stack_lvl+0x8/0x8 [ 230.785153][ T3989] dump_stack+0x15/0x24 [ 230.785173][ T3989] should_fail_ex+0x3bf/0x510 [ 230.797680][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 230.801919][ T3989] should_fail+0xb/0x10 [ 230.801942][ T3989] should_fail_usercopy+0x1a/0x20 [ 230.806675][ T3991] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:477: comm syz.9.1072: Invalid block bitmap block 0 in block_group 0 [ 230.810853][ T3989] _copy_from_user+0x1e/0xc0 [ 230.810882][ T3989] strndup_user+0xb6/0x150 [ 230.810898][ T3989] __se_sys_keyctl+0x49d/0xe10 [ 230.820619][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 230.821613][ T3989] ? __x64_sys_keyctl+0xd0/0xd0 [ 230.826836][ T3991] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 230.840057][ T3989] ? __cfi_vfs_write+0x10/0x10 [ 230.840089][ T3989] ? __kasan_check_write+0x14/0x20 [ 230.840106][ T3989] ? mutex_unlock+0x8f/0x230 [ 230.840121][ T3989] ? __cfi_mutex_unlock+0x10/0x10 [ 230.840137][ T3989] ? __kasan_check_write+0x14/0x20 [ 230.845526][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 230.849316][ T3989] ? fput+0x154/0x1a0 [ 230.849342][ T3989] ? ksys_write+0x1fa/0x260 [ 230.854439][ T3991] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #13: comm syz.9.1072: attempt to clear invalid blocks 983261 len 1 [ 230.860645][ T3989] ? __cfi_ksys_write+0x10/0x10 [ 230.860673][ T3989] __x64_sys_keyctl+0xbf/0xd0 [ 230.860694][ T3989] x64_sys_call+0x71a/0x9a0 [ 230.866095][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 230.874182][ T3989] do_syscall_64+0x4c/0xa0 [ 230.874213][ T3989] ? clear_bhb_loop+0x30/0x80 [ 230.874231][ T3989] ? clear_bhb_loop+0x30/0x80 [ 230.874247][ T3989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.879785][ T3991] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1072: invalid indirect mapped block 2683928664 (level 0) [ 230.884458][ T3989] RIP: 0033:0x7f8e4539e159 [ 230.884478][ T3989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.884491][ T3989] RSP: 002b:00007f8e4634f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 230.889568][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 230.894162][ T3989] RAX: ffffffffffffffda RBX: 00007f8e45625fa0 RCX: 00007f8e4539e159 [ 230.894178][ T3989] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000001 [ 230.894189][ T3989] RBP: 00007f8e4634f090 R08: 0000000000000000 R09: 0000000000000000 [ 230.894199][ T3989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.894209][ T3989] R13: 00007f8e45626038 R14: 00007f8e45625fa0 R15: 00007fff9a7e4da8 [ 230.899858][ T3991] EXT4-fs error (device loop9): __ext4_get_inode_loc:4522: comm syz.9.1072: Invalid inode table block 0 in block_group 0 [ 230.905786][ T3989] [ 230.931731][ T3994] xt_CT: No such helper "netbios-ns" [ 230.932785][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 230.948034][ T3973] netlink: 'syz.3.1067': attribute type 12 has an invalid length. [ 230.948768][ T3991] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 230.958227][ T3973] netlink: 'syz.3.1067': attribute type 29 has an invalid length. [ 230.963438][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 230.972989][ T3973] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1067'. [ 230.982168][ T3991] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 230.987913][ T3973] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1067'. [ 231.006741][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 231.015698][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.021522][ T3991] EXT4-fs error (device loop9): __ext4_get_inode_loc:4522: comm syz.9.1072: Invalid inode table block 0 in block_group 0 [ 231.174897][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 231.186664][ T3991] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 231.197476][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 231.199748][ T3976] device veth0_vlan entered promiscuous mode [ 231.204054][ T3991] EXT4-fs error (device loop9): ext4_truncate:4327: inode #13: comm syz.9.1072: mark_inode_dirty error [ 231.221662][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 231.228450][ T292] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 231.236046][ T3991] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 231.236530][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 231.252098][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.270067][ T28] audit: type=1400 audit(1790323456.262:1329): avc: denied { create } for pid=3997 comm="syz.6.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.272049][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.290846][ T3998] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1006 sclass=netlink_audit_socket pid=3998 comm=syz.6.1075 [ 231.298632][ T3991] EXT4-fs error (device loop9): __ext4_get_inode_loc:4522: comm syz.9.1072: Invalid inode table block 0 in block_group 0 [ 231.311530][ T28] audit: type=1400 audit(1790323456.312:1330): avc: denied { audit_write } for pid=3997 comm="syz.6.1075" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 231.324081][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.345972][ T28] audit: type=1107 audit(1790323456.352:1331): pid=3997 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 231.353455][ T3991] EXT4-fs (loop9): Remounting filesystem read-only [ 231.372118][ T3991] EXT4-fs (loop9): 1 truncate cleaned up [ 231.375787][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.377831][ T3991] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 231.387197][ T3976] device veth1_macvtap entered promiscuous mode [ 231.420766][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.430636][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.443011][ T3630] EXT4-fs (loop9): unmounting filesystem. [ 231.451866][ T292] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.462788][ T292] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.475721][ T292] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 231.475829][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.485097][ T292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 231.502170][ T292] usb 2-1: SerialNumber: syz [ 231.527365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.757135][ T4008] loop9: detected capacity change from 0 to 512 [ 232.729469][ T4010] loop2: detected capacity change from 0 to 512 [ 232.876189][ T4008] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 232.887657][ T4010] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 232.897347][ T4008] EXT4-fs error (device loop9): ext4_iget_extra_inode:4765: inode #15: comm syz.9.1077: corrupted in-inode xattr [ 232.912225][ T4010] EXT4-fs error (device loop2): ext4_iget_extra_inode:4765: inode #15: comm syz.2.1074: corrupted in-inode xattr [ 232.926830][ T4008] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.1077: couldn't read orphan inode 15 (err -117) [ 232.939490][ T4010] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1074: couldn't read orphan inode 15 (err -117) [ 232.953312][ T4008] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 233.404007][ T4010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 233.457401][ T292] usb 2-1: 0:2 : does not exist [ 234.093892][ T3630] EXT4-fs (loop9): unmounting filesystem. [ 234.116577][ T292] usb 2-1: USB disconnect, device number 6 [ 234.127716][ T19] r8152-cfgselector 4-1: Unknown version 0x0000 [ 234.142091][ T4016] loop1: detected capacity change from 0 to 128 [ 234.148946][ T19] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 234.197670][ T4021] loop9: detected capacity change from 0 to 512 [ 234.216372][ T4016] FAT-fs (loop1): Directory bread(block 32) failed [ 234.242384][ T4016] FAT-fs (loop1): Directory bread(block 33) failed [ 234.249034][ T4016] FAT-fs (loop1): Directory bread(block 34) failed [ 234.255697][ T4016] FAT-fs (loop1): Directory bread(block 35) failed [ 234.262462][ T4016] FAT-fs (loop1): Directory bread(block 36) failed [ 234.269001][ T4016] FAT-fs (loop1): Directory bread(block 37) failed [ 234.276324][ T3976] EXT4-fs (loop2): unmounting filesystem. [ 234.279798][ T4016] FAT-fs (loop1): Directory bread(block 38) failed [ 234.284150][ T28] audit: type=1400 audit(1790323459.282:1332): avc: denied { append } for pid=4023 comm="syz.6.1082" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:zero_device_t:s0" [ 234.289403][ T4021] EXT4-fs error (device loop9): ext4_orphan_get:1431: comm syz.9.1078: bad orphan inode 15 [ 234.326062][ T4016] FAT-fs (loop1): Directory bread(block 39) failed [ 234.332660][ T4016] FAT-fs (loop1): Directory bread(block 40) failed [ 234.340630][ T4016] FAT-fs (loop1): Directory bread(block 41) failed [ 234.360976][ T4024] loop6: detected capacity change from 0 to 2048 [ 234.372778][ T2958] udevd[2958]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 234.393448][ T4021] ext4_test_bit(bit=14, block=5) = 0 [ 234.475135][ T4021] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 234.482749][ T4024] Alternate GPT is invalid, using primary GPT. [ 234.492113][ T4024] loop6: p2 p3 p7 [ 235.014519][ T28] audit: type=1400 audit(1790323460.012:1333): avc: denied { write } for pid=4023 comm="syz.6.1082" name="loop6p3" dev="devtmpfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.118660][ T4024] input: syz0 as /devices/virtual/input/input26 [ 236.968889][ T4047] FAT-fs (loop1): Filesystem has been set read-only [ 237.059285][ T2958] I/O error, dev loop6, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.070874][ T3563] __loop_clr_fd: partition scan of loop6 failed (rc=-16) [ 237.378833][ T2958] I/O error, dev loop6, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.400261][ T4037] tap0: tun_chr_ioctl cmd 1074025677 [ 237.405748][ T4037] tap0: linktype set to 778 [ 237.411873][ T28] audit: type=1400 audit(1790323462.402:1334): avc: denied { connect } for pid=4035 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.444720][ T2958] Buffer I/O error on dev loop6p3, logical block 8, async page read [ 237.477776][ T4051] loop1: detected capacity change from 0 to 512 [ 237.484352][ T2958] I/O error, dev loop6, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.506739][ T2958] Buffer I/O error on dev loop6p3, logical block 9, async page read [ 237.514989][ T2958] I/O error, dev loop6, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.516690][ T3630] EXT4-fs (loop9): unmounting filesystem. [ 237.524672][ T2958] Buffer I/O error on dev loop6p3, logical block 10, async page read [ 237.539922][ T4052] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.547661][ T2958] I/O error, dev loop6, sector 211 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.547688][ T2958] Buffer I/O error on dev loop6p3, logical block 11, async page read [ 237.547718][ T2958] I/O error, dev loop6, sector 212 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.547744][ T2958] Buffer I/O error on dev loop6p3, logical block 12, async page read [ 237.547768][ T2958] I/O error, dev loop6, sector 213 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.547787][ T2958] Buffer I/O error on dev loop6p3, logical block 13, async page read [ 237.572891][ T4051] EXT4-fs (loop1): 1 truncate cleaned up [ 237.575269][ T2958] I/O error, dev loop6, sector 214 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.614875][ T2958] Buffer I/O error on dev loop6p3, logical block 14, async page read [ 237.623293][ T2958] I/O error, dev loop6, sector 215 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.632658][ T2958] Buffer I/O error on dev loop6p3, logical block 15, async page read [ 237.686806][ T2961] udevd[2961]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 237.693516][ T1487] udevd[1487]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 237.697823][ T2958] udevd[2958]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 237.724273][ T4051] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 237.775490][ T28] audit: type=1400 audit(1790323462.772:1335): avc: denied { wake_alarm } for pid=4042 comm="syz.2.1089" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 237.831060][ T4052] loop6: detected capacity change from 0 to 256 [ 237.840078][ T3665] EXT4-fs (loop1): unmounting filesystem. [ 237.898550][ T4052] SELinux: failed to load policy [ 237.941279][ T4064] overlayfs: missing 'lowerdir' [ 237.952069][ T60] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 238.112056][ T399] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 238.144329][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 238.160440][ T4076] loop1: detected capacity change from 0 to 256 [ 238.167897][ T60] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 238.186887][ T4076] exfat: Deprecated parameter 'utf8' [ 238.196384][ T60] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 238.206954][ T4076] exfat: Deprecated parameter 'namecase' [ 238.212836][ T4076] exfat: Deprecated parameter 'namecase' [ 238.218598][ T60] usb 4-1: config 4 has no interface number 0 [ 238.225159][ T4076] exfat: Deprecated parameter 'namecase' [ 238.230915][ T60] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.246442][ T4076] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 238.259215][ T60] usb 4-1: config 4 interface 51 has no altsetting 0 [ 238.278079][ T28] audit: type=1400 audit(1790323463.272:1336): avc: denied { watch watch_reads } for pid=4075 comm="syz.1.1094" path=2F31392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop1" ino=1048780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.317225][ T60] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 238.326601][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.335646][ T399] usb 10-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x11, skipping [ 238.346398][ T60] usb 4-1: Product: syz [ 238.350563][ T60] usb 4-1: Manufacturer: syz [ 238.355726][ T399] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.368837][ T60] usb 4-1: SerialNumber: syz [ 238.377428][ T399] usb 10-1: config 0 interface 0 has no altsetting 0 [ 238.384823][ T60] cdc_eem: probe of 4-1:4.51 failed with error -22 [ 238.392683][ T399] usb 10-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 238.429928][ T399] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.441283][ T4078] loop1: detected capacity change from 0 to 512 [ 238.450909][ T399] usb 10-1: config 0 descriptor?? [ 238.458915][ T4078] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1101: bad orphan inode 15 [ 238.492257][ T4062] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 238.500389][ T399] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 238.529986][ T4078] ext4_test_bit(bit=14, block=5) = 0 [ 238.543424][ T4078] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 238.560304][ T4081] loop2: detected capacity change from 0 to 256 [ 238.587195][ T4074] loop6: detected capacity change from 0 to 131072 [ 238.604431][ T4074] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 238.632891][ T4081] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 238.634204][ T4074] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 238.654961][ T28] audit: type=1400 audit(1790323463.652:1337): avc: denied { setopt } for pid=4054 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 238.774009][ T4074] F2FS-fs (loop6): invalid crc value [ 238.795174][ T28] audit: type=1400 audit(1790323463.782:1338): avc: denied { create } for pid=4061 comm="syz.9.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 238.843093][ T4081] exFAT-fs (loop2): hint_cluster is invalid (1) [ 238.872442][ T4081] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 238.881713][ T4081] exFAT-fs (loop2): Filesystem has been set read-only [ 238.889754][ T4081] exFAT-fs (loop2): error, failed to bmap (inode : ffff888115a721d0 iblock : 9, err : -5) [ 238.903641][ T4081] syz.2.1100: attempt to access beyond end of device [ 238.903641][ T4081] loop2: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 239.332999][ T4074] F2FS-fs (loop6): Found nat_bits in checkpoint [ 239.399265][ T4074] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 239.412008][ T4074] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 239.482336][ T3665] EXT4-fs (loop1): unmounting filesystem. [ 239.533790][ T399] usb 4-1: USB disconnect, device number 28 [ 239.624057][ T4104] loop1: detected capacity change from 0 to 512 [ 239.659756][ T4104] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1107: bad orphan inode 15 [ 239.701366][ T4104] ext4_test_bit(bit=14, block=5) = 0 [ 239.726684][ T2958] udevd[2958]: inotify_add_watch(7, /dev/sda8, 10) failed: No such file or directory [ 239.737528][ T4104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 239.841799][ T4108] usb usb8: usbfs: process 4108 (syz.3.1106) did not claim interface 0 before use [ 240.031446][ T4115] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.038753][ T4115] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.048627][ T4115] device bridge_slave_0 entered promiscuous mode [ 240.058927][ T4115] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.066246][ T4115] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.078263][ T4115] device bridge_slave_1 entered promiscuous mode [ 240.648574][ T2958] udevd[2958]: inotify_add_watch(7, /dev/sda8, 10) failed: No such file or directory [ 240.667009][ T3665] EXT4-fs (loop1): unmounting filesystem. [ 240.688399][ T4132] loop1: detected capacity change from 0 to 512 [ 240.704686][ T418] device bridge_slave_1 left promiscuous mode [ 240.712111][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.715507][ T4132] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1114: bad orphan inode 15 [ 240.729571][ T418] device bridge_slave_0 left promiscuous mode [ 240.731032][ T4132] ext4_test_bit(bit=14, block=5) = 0 [ 240.742341][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.743971][ T4132] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 240.753602][ T4137] loop6: detected capacity change from 0 to 512 [ 240.769884][ T418] device veth1_macvtap left promiscuous mode [ 240.776167][ T4137] FAT-fs (loop6): Unrecognized mount option "01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 240.776399][ T418] device veth0_vlan left promiscuous mode [ 240.894332][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.902257][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.106107][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.116270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.129063][ T4137] netem: change failed [ 241.161697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.178050][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.187924][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.194990][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.205288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.215267][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.225513][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.232582][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.260354][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.305127][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.345839][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.392919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.444328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.770223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.780530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.800301][ T4115] device veth0_vlan entered promiscuous mode [ 241.806672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.836102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.871232][ T4115] device veth1_macvtap entered promiscuous mode [ 241.898069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.912137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.922817][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.941247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.952431][ T292] usb 10-1: USB disconnect, device number 6 [ 241.967230][ T3665] EXT4-fs (loop1): unmounting filesystem. [ 242.014876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.027916][ T4151] xt_CT: No such helper "netbios-ns" [ 242.039525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.056719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.068168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.077829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.104849][ T4153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4153 comm=syz.6.1123 [ 242.131510][ T4153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4153 comm=syz.6.1123 [ 242.194014][ T4160] loop6: detected capacity change from 0 to 256 [ 244.952336][ T4160] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 244.981759][ T292] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 245.174471][ T4174] FAULT_INJECTION: forcing a failure. [ 245.174471][ T4174] name failslab, interval 1, probability 0, space 0, times 0 [ 245.196972][ T4174] CPU: 0 PID: 4174 Comm: syz.1.1131 Not tainted syzkaller #0 [ 245.204380][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.214440][ T4174] Call Trace: [ 245.217729][ T4174] [ 245.220660][ T4174] __dump_stack+0x21/0x24 [ 245.225028][ T4174] dump_stack_lvl+0x110/0x170 [ 245.229724][ T4174] ? __cfi_dump_stack_lvl+0x8/0x8 [ 245.234753][ T4174] ? kernel_text_address+0xa0/0xd0 [ 245.239889][ T4174] ? unwind_get_return_address+0x4d/0x90 [ 245.240682][ T4180] loop4: detected capacity change from 0 to 1024 [ 245.246310][ T4174] dump_stack+0x15/0x24 [ 245.246338][ T4174] should_fail_ex+0x3bf/0x510 [ 245.246355][ T4174] ? mas_alloc_nodes+0x2d8/0x850 [ 245.254355][ T4180] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 245.256821][ T4174] __should_failslab+0xac/0xf0 [ 245.279380][ T4174] should_failslab+0x9/0x20 [ 245.284010][ T4174] kmem_cache_alloc+0x3b/0x320 [ 245.288787][ T4174] mas_alloc_nodes+0x2d8/0x850 [ 245.293564][ T4174] mas_preallocate+0xe3d/0x1430 [ 245.298420][ T4174] ? __cfi_mas_preallocate+0x10/0x10 [ 245.303708][ T4174] ? rwsem_write_trylock+0x136/0x300 [ 245.309007][ T4174] __vma_adjust+0x622/0x1f10 [ 245.313611][ T4174] ? __cfi___vma_adjust+0x10/0x10 [ 245.318650][ T4174] ? rwsem_write_trylock+0x136/0x300 [ 245.322948][ T28] audit: type=1400 audit(1790323471.310:1339): avc: denied { read } for pid=4179 comm="syz.4.1133" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 245.324057][ T4174] __split_vma+0x725/0x980 [ 245.324087][ T4174] split_vma+0x7c/0xd0 [ 245.355422][ T4174] mlock_fixup+0x7a9/0x8a0 [ 245.359839][ T4174] apply_vma_lock_flags+0x219/0x370 [ 245.365037][ T4174] ? do_mlock+0x670/0x670 [ 245.369360][ T4174] ? __kasan_check_write+0x14/0x20 [ 245.374457][ T4174] do_mlock+0x4d3/0x670 [ 245.378608][ T4174] ? __kasan_check_write+0x14/0x20 [ 245.383715][ T4174] ? fput+0x154/0x1a0 [ 245.387705][ T4174] ? lru_gen_add_folio+0x880/0x880 [ 245.392818][ T4174] ? ksys_write+0x1fa/0x260 [ 245.397307][ T4174] ? __cfi_ksys_write+0x10/0x10 [ 245.402155][ T4174] ? debug_smp_processor_id+0x17/0x20 [ 245.407529][ T4174] __x64_sys_mlock+0x60/0x70 [ 245.412118][ T4174] x64_sys_call+0x506/0x9a0 [ 245.416612][ T4174] do_syscall_64+0x4c/0xa0 [ 245.421016][ T4174] ? clear_bhb_loop+0x30/0x80 [ 245.425675][ T4174] ? clear_bhb_loop+0x30/0x80 [ 245.430376][ T4174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.436251][ T4174] RIP: 0033:0x7f8e4539e159 [ 245.440668][ T4174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.460253][ T4174] RSP: 002b:00007f8e4634f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 245.468656][ T4174] RAX: ffffffffffffffda RBX: 00007f8e45625fa0 RCX: 00007f8e4539e159 [ 245.476613][ T4174] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 245.484572][ T4174] RBP: 00007f8e4634f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.492524][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.500485][ T4174] R13: 00007f8e45626038 R14: 00007f8e45625fa0 R15: 00007fff9a7e4da8 [ 245.508548][ T4174] [ 245.920392][ T6] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 246.637519][ T4180] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 246.649064][ T4193] binder: BINDER_SET_CONTEXT_MGR already set [ 246.673455][ T4193] binder: 4192:4193 ioctl 4018620d 200000004a80 returned -16 [ 246.676339][ T4199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1137'. [ 246.693657][ T28] audit: type=1400 audit(1790323472.700:1340): avc: denied { ioctl } for pid=4197 comm="syz.3.1138" path="socket:[41402]" dev="sockfs" ino=41402 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.711202][ T4199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1137'. [ 246.730703][ T4198] netlink: 'syz.3.1138': attribute type 1 has an invalid length. [ 246.822576][ T2958] udevd[2958]: inotify_add_watch(7, /dev/sda8, 10) failed: No such file or directory [ 246.840339][ T28] audit: type=1400 audit(1790323472.840:1341): avc: denied { bind } for pid=4212 comm="syz.1.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.864103][ T4215] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 246.879525][ T4215] loop1: detected capacity change from 0 to 512 [ 246.911170][ T4215] EXT4-fs error (device loop1): ext4_quota_enable:7032: comm syz.1.1144: Bad quota inum: 2, type: 1 [ 246.923024][ T4215] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 246.940195][ T4215] EXT4-fs (loop1): mount failed [ 247.021539][ T6] usb 7-1: device descriptor read/64, error -71 [ 247.272674][ T4228] ------------[ cut here ]------------ [ 247.278194][ T4228] fmt: 'level=%s [ 247.278194][ T4228] ' current_buffer: ' <...>-553 [000] ..... 44.765832: dwc3_ctrl_req: Get Device Status(Length = 0) [ 247.278194][ T4228] <...>-1970561396 [000] .p.35 44.821125: Unknown type 25955 [ 247.278194][ T4228] -0 [000] ..... 44.846357: initcall_level: level=' [ 247.278328][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/trace.c:3890 trace_check_vprintf+0xd2c/0x1050 [ 247.321342][ T4228] Modules linked in: [ 247.325262][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Not tainted syzkaller #0 [ 247.332707][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.342795][ T4228] RIP: 0010:trace_check_vprintf+0xd2c/0x1050 [ 247.348832][ T4228] Code: ba ae fc ff c6 05 ca ea 1a 06 01 48 8b 7d 88 e8 5a 04 00 00 48 c7 c7 20 f3 aa 85 48 8b b5 60 ff ff ff 48 89 c2 e8 54 34 cd ff <0f> 0b e9 d6 fd ff ff 48 8b 4d 98 80 e1 07 38 c1 0f 8c d5 f7 ff ff [ 247.352889][ T6] usb 7-1: unable to get BOS descriptor or descriptor too short [ 247.368513][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010246 [ 247.377180][ T6] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.382260][ T4228] RAX: 0b8d30ae995fc300 RBX: dffffc0000000000 RCX: 0000000000080000 [ 247.382281][ T4228] RDX: ffffc90004214000 RSI: 00000000000025bb RDI: 00000000000025bc [ 247.392495][ T6] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 247.400346][ T4228] RBP: ffffc900046dfa10 R08: ffff8881f6f2759b R09: 1ffff1103ede4eb3 [ 247.400366][ T4228] R10: dffffc0000000000 R11: ffffed103ede4eb4 R12: ffffffff87017250 [ 247.400378][ T4228] R13: ffff8881389f4078 R14: 0000000000000000 R15: 0000000000000002 [ 247.400390][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 247.408551][ T6] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.417447][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.427430][ T6] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.433418][ T4228] CR2: 00007f8c4e87dff8 CR3: 000000013cb63000 CR4: 00000000003526a0 [ 247.433438][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 247.441619][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.450348][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.463613][ T6] usb 7-1: Product: syz [ 247.469745][ T4228] Call Trace: [ 247.469754][ T4228] [ 247.469764][ T4228] trace_event_printf+0xea/0x140 [ 247.479643][ T6] usb 7-1: Manufacturer: ë§ê»äª‡ç¶¡ìŸ¼é•¶ì‘—êŸî²³é‡—倿酦◇ïµè³¼è€«ã±¿é—¶ç“Œä¹Šã¸ƒë˜®í†™â—¬ê‚°é¸í‹Ÿë»é¸¡ç¹±ì½…ï ˜ò–µŽ [ 247.486794][ T4228] ? __cfi_trace_seq_printf+0x10/0x10 [ 247.495088][ T6] usb 7-1: SerialNumber: syz [ 247.502765][ T4228] ? __cfi_trace_event_printf+0x10/0x10 [ 247.554550][ T4228] ? trace_print_context+0x3a1/0x4d0 [ 247.559866][ T4228] ? trace_handle_return+0xa5/0xe0 [ 247.565009][ T4228] ? trace_raw_output_prep+0x1c9/0x240 [ 247.570481][ T4228] trace_raw_output_initcall_level+0x98/0xd0 [ 247.576492][ T4228] print_trace_fmt+0x4fe/0x720 [ 247.581254][ T4228] print_trace_line+0x393/0x6b0 [ 247.586124][ T4228] tracing_read_pipe+0x517/0xaf0 [ 247.591069][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 247.596544][ T4228] vfs_read+0x286/0x930 [ 247.600731][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 247.605432][ T4228] ? __kasan_check_write+0x14/0x20 [ 247.610539][ T4228] ? mutex_lock+0x93/0x1b0 [ 247.614979][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 247.619871][ T4228] ? __fdget_pos+0x2cd/0x380 [ 247.624491][ T4228] ? ksys_read+0x70/0x260 [ 247.629017][ T4228] ksys_read+0x14a/0x260 [ 247.633299][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 247.638253][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 247.643922][ T4228] __x64_sys_read+0x7b/0x90 [ 247.648427][ T4228] x64_sys_call+0x2f/0x9a0 [ 247.652890][ T4228] do_syscall_64+0x4c/0xa0 [ 247.657322][ T4228] ? clear_bhb_loop+0x30/0x80 [ 247.662027][ T4228] ? clear_bhb_loop+0x30/0x80 [ 247.666706][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.672634][ T4228] RIP: 0033:0x7f8c4d99e159 [ 247.677050][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.696685][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.705130][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 247.713119][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 247.721099][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 247.729117][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.737105][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 247.745120][ T4228] [ 247.748143][ T4228] ---[ end trace 0000000000000000 ]--- [ 247.758247][ T4228] ------------[ cut here ]------------ [ 247.763730][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 247.773970][ T4228] Modules linked in: [ 247.777859][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G W syzkaller #0 [ 247.786696][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.796742][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 247.802548][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 247.822233][ T4228] RSP: 0018:ffffc900046df820 EFLAGS: 00010002 [ 247.828287][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 247.836256][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 247.844228][ T4228] RBP: ffffc900046df990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 247.852200][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 247.860157][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 247.868123][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 247.877037][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.883603][ T4228] CR2: 00007f8c4e87dff8 CR3: 000000013cb63000 CR4: 00000000003526a0 [ 247.891566][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 247.899523][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.907481][ T4228] Call Trace: [ 247.910745][ T4228] [ 247.913663][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 247.919286][ T4228] ? __kasan_check_write+0x14/0x20 [ 247.924383][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 247.929046][ T4228] rb_buffer_peek+0x5f/0x930 [ 247.933620][ T4228] ring_buffer_peek+0x184/0x3b0 [ 247.938455][ T4228] ? __cfi_ring_buffer_peek+0x10/0x10 [ 247.943811][ T4228] ? __kasan_check_write+0x14/0x20 [ 247.948912][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 247.953579][ T4228] ? _find_next_bit+0x8a/0x130 [ 247.958343][ T4228] __find_next_entry+0x33c/0x6c0 [ 247.963273][ T4228] ? trace_find_next_entry+0x380/0x380 [ 247.968738][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 247.974353][ T4228] ? print_trace_line+0x31c/0x6b0 [ 247.979363][ T4228] ? print_trace_line+0x393/0x6b0 [ 247.984373][ T4228] tracing_read_pipe+0x3d2/0xaf0 [ 247.989307][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 247.994773][ T4228] vfs_read+0x286/0x930 [ 247.998926][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 248.003593][ T4228] ? __kasan_check_write+0x14/0x20 [ 248.008703][ T4228] ? mutex_lock+0x93/0x1b0 [ 248.013109][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 248.017948][ T4228] ? __fdget_pos+0x2cd/0x380 [ 248.022522][ T4228] ? ksys_read+0x70/0x260 [ 248.026837][ T4228] ksys_read+0x14a/0x260 [ 248.031066][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 248.035815][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 248.041434][ T4228] __x64_sys_read+0x7b/0x90 [ 248.045920][ T4228] x64_sys_call+0x2f/0x9a0 [ 248.050323][ T4228] do_syscall_64+0x4c/0xa0 [ 248.054733][ T4228] ? clear_bhb_loop+0x30/0x80 [ 248.059394][ T4228] ? clear_bhb_loop+0x30/0x80 [ 248.064136][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.070013][ T4228] RIP: 0033:0x7f8c4d99e159 [ 248.074413][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.094003][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.102400][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 248.110357][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 248.118309][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 248.126265][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.134225][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 248.142194][ T4228] [ 248.145212][ T4228] ---[ end trace 0000000000000000 ]--- [ 248.150667][ T4228] ================================================================== [ 248.158713][ T4228] BUG: KASAN: use-after-free in rb_buffer_peek+0x88d/0x930 [ 248.165902][ T4228] Read of size 4 at addr ffff88811e06b071 by task syz.4.1147/4228 [ 248.173990][ T4228] [ 248.176321][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G W syzkaller #0 [ 248.185163][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.195215][ T4228] Call Trace: [ 248.198493][ T4228] [ 248.201418][ T4228] __dump_stack+0x21/0x24 [ 248.205749][ T4228] dump_stack_lvl+0x110/0x170 [ 248.210417][ T4228] ? __cfi_dump_stack_lvl+0x8/0x8 [ 248.215438][ T4228] ? rb_get_reader_page+0x9f6/0xc60 [ 248.220630][ T4228] ? rb_buffer_peek+0x88d/0x930 [ 248.225470][ T4228] print_address_description+0x71/0x200 [ 248.231007][ T4228] print_report+0x4a/0x60 [ 248.235326][ T4228] kasan_report+0x122/0x150 [ 248.239818][ T4228] ? rb_buffer_peek+0x88d/0x930 [ 248.244663][ T4228] ? __kasan_check_write+0x14/0x20 [ 248.249763][ T4228] __asan_report_load4_noabort+0x14/0x20 [ 248.255565][ T4228] rb_buffer_peek+0x88d/0x930 [ 248.260251][ T4228] ring_buffer_peek+0x184/0x3b0 [ 248.265092][ T4228] ? __cfi_ring_buffer_peek+0x10/0x10 [ 248.270462][ T4228] ? __kasan_check_write+0x14/0x20 [ 248.276091][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 248.280772][ T4228] ? _find_next_bit+0x8a/0x130 [ 248.285526][ T4228] __find_next_entry+0x33c/0x6c0 [ 248.290480][ T4228] ? trace_find_next_entry+0x380/0x380 [ 248.295957][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 248.301591][ T4228] ? print_trace_line+0x31c/0x6b0 [ 248.306604][ T4228] ? print_trace_line+0x393/0x6b0 [ 248.311613][ T4228] tracing_read_pipe+0x3d2/0xaf0 [ 248.316824][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 248.322287][ T4228] vfs_read+0x286/0x930 [ 248.326439][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 248.331106][ T4228] ? __kasan_check_write+0x14/0x20 [ 248.336211][ T4228] ? mutex_lock+0x93/0x1b0 [ 248.340614][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 248.345453][ T4228] ? __fdget_pos+0x2cd/0x380 [ 248.350025][ T4228] ? ksys_read+0x70/0x260 [ 248.354340][ T4228] ksys_read+0x14a/0x260 [ 248.358597][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 248.363348][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 248.368972][ T4228] __x64_sys_read+0x7b/0x90 [ 248.373470][ T4228] x64_sys_call+0x2f/0x9a0 [ 248.377879][ T4228] do_syscall_64+0x4c/0xa0 [ 248.382284][ T4228] ? clear_bhb_loop+0x30/0x80 [ 248.386948][ T4228] ? clear_bhb_loop+0x30/0x80 [ 248.391706][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.397747][ T4228] RIP: 0033:0x7f8c4d99e159 [ 248.402150][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.421921][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.430330][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 248.438379][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 248.446704][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 248.454662][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.462710][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 248.470674][ T4228] [ 248.473679][ T4228] [ 248.475981][ T4228] Allocated by task 1487: [ 248.480288][ T4228] kasan_set_track+0x4b/0x70 [ 248.484864][ T4228] kasan_save_alloc_info+0x1f/0x30 [ 248.489960][ T4228] __kasan_slab_alloc+0x72/0x80 [ 248.494802][ T4228] slab_post_alloc_hook+0x4f/0x2d0 [ 248.499904][ T4228] kmem_cache_alloc+0x166/0x320 [ 248.504743][ T4228] getname_flags+0xba/0x510 [ 248.509334][ T4228] __x64_sys_unlink+0x3c/0x50 [ 248.514000][ T4228] x64_sys_call+0x958/0x9a0 [ 248.518490][ T4228] do_syscall_64+0x4c/0xa0 [ 248.522889][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.528775][ T4228] [ 248.531083][ T4228] Freed by task 1487: [ 248.535157][ T4228] kasan_set_track+0x4b/0x70 [ 248.539741][ T4228] kasan_save_free_info+0x2b/0x40 [ 248.544852][ T4228] ____kasan_slab_free+0x132/0x180 [ 248.549952][ T4228] __kasan_slab_free+0x11/0x20 [ 248.554711][ T4228] slab_free_freelist_hook+0xc2/0x190 [ 248.560072][ T4228] kmem_cache_free+0x12d/0x300 [ 248.564829][ T4228] do_unlinkat+0x630/0x6c0 [ 248.569246][ T4228] __x64_sys_unlink+0x49/0x50 [ 248.573912][ T4228] x64_sys_call+0x958/0x9a0 [ 248.578489][ T4228] do_syscall_64+0x4c/0xa0 [ 248.582899][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.588779][ T4228] [ 248.591087][ T4228] The buggy address belongs to the object at ffff88811e06a200 [ 248.591087][ T4228] which belongs to the cache names_cache of size 4096 [ 248.605211][ T4228] The buggy address is located 3697 bytes inside of [ 248.605211][ T4228] 4096-byte region [ffff88811e06a200, ffff88811e06b200) [ 248.618685][ T4228] [ 248.620997][ T4228] The buggy address belongs to the physical page: [ 248.627389][ T4228] page:ffffea0004781a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e068 [ 248.637618][ T4228] head:ffffea0004781a00 order:3 compound_mapcount:0 compound_pincount:0 [ 248.645927][ T4228] flags: 0x4000000000010200(slab|head|zone=1) [ 248.651996][ T4228] raw: 4000000000010200 dead000000000100 dead000000000122 ffff8881001ed200 [ 248.660652][ T4228] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 248.669210][ T4228] page dumped because: kasan: bad access detected [ 248.675618][ T4228] page_owner tracks the page as allocated [ 248.681329][ T4228] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 144, tgid 144 (dhcpcd), ts 5685815447, free_ts 0 [ 248.701034][ T4228] post_alloc_hook+0x1f5/0x210 [ 248.705800][ T4228] prep_new_page+0x1c/0x110 [ 248.710293][ T4228] get_page_from_freelist+0x2ca9/0x2d20 [ 248.715831][ T4228] __alloc_pages+0x1fa/0x610 [ 248.720413][ T4228] alloc_slab_page+0x6e/0xf0 [ 248.724987][ T4228] new_slab+0x98/0x3e0 [ 248.729039][ T4228] ___slab_alloc+0x70f/0xb70 [ 248.733627][ T4228] __slab_alloc+0x5e/0xa0 [ 248.737969][ T4228] kmem_cache_alloc+0x1a8/0x320 [ 248.742917][ T4228] getname_flags+0xba/0x510 [ 248.747408][ T4228] user_path_at_empty+0x2f/0x1c0 [ 248.752331][ T4228] __se_sys_chdir+0x98/0x280 [ 248.756910][ T4228] __x64_sys_chdir+0x38/0x40 [ 248.761492][ T4228] x64_sys_call+0xbb/0x9a0 [ 248.765901][ T4228] do_syscall_64+0x4c/0xa0 [ 248.770306][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.776180][ T4228] page_owner free stack trace missing [ 248.781530][ T4228] [ 248.783841][ T4228] Memory state around the buggy address: [ 248.789458][ T4228] ffff88811e06af00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.797505][ T4228] ffff88811e06af80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.805558][ T4228] >ffff88811e06b000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.813604][ T4228] ^ [ 248.821473][ T4228] ffff88811e06b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.829529][ T4228] ffff88811e06b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.837580][ T4228] ================================================================== [ 248.845633][ T4228] Disabling lock debugging due to kernel taint [ 248.871863][ T4228] ------------[ cut here ]------------ [ 248.877357][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 248.887620][ T4228] Modules linked in: [ 248.891520][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 248.900372][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.910423][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 248.916260][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 248.935948][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010002 [ 248.942005][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 248.949961][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 248.957916][ T4228] RBP: ffffc900046dfab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 248.965880][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 248.973835][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 248.981798][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 248.990735][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.997823][ T4228] CR2: 0000001b31d09ff8 CR3: 000000013cb63000 CR4: 00000000003526a0 [ 249.005783][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 249.013762][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.021724][ T4228] Call Trace: [ 249.024992][ T4228] [ 249.027922][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 249.033554][ T4228] ? __kasan_check_write+0x14/0x20 [ 249.038670][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 249.043341][ T4228] rb_buffer_peek+0x5f/0x930 [ 249.047920][ T4228] ring_buffer_consume+0x1aa/0x370 [ 249.053022][ T4228] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 249.059078][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 249.064720][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 249.069650][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 249.075097][ T4228] vfs_read+0x286/0x930 [ 249.079239][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 249.083909][ T4228] ? __kasan_check_write+0x14/0x20 [ 249.089020][ T4228] ? mutex_lock+0x93/0x1b0 [ 249.093434][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 249.098276][ T4228] ? __fdget_pos+0x2cd/0x380 [ 249.102855][ T4228] ? ksys_read+0x70/0x260 [ 249.107171][ T4228] ksys_read+0x14a/0x260 [ 249.111397][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 249.116144][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 249.121763][ T4228] __x64_sys_read+0x7b/0x90 [ 249.126251][ T4228] x64_sys_call+0x2f/0x9a0 [ 249.130678][ T4228] do_syscall_64+0x4c/0xa0 [ 249.135106][ T4228] ? clear_bhb_loop+0x30/0x80 [ 249.139785][ T4228] ? clear_bhb_loop+0x30/0x80 [ 249.144453][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.150346][ T4228] RIP: 0033:0x7f8c4d99e159 [ 249.154763][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.174366][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.182771][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 249.190737][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 249.198696][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 249.206657][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.214614][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 249.222579][ T4228] [ 249.225584][ T4228] ---[ end trace 0000000000000000 ]--- [ 249.231069][ T4228] ------------[ cut here ]------------ [ 249.236508][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 249.246740][ T4228] Modules linked in: [ 249.250706][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 249.259537][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.269754][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 249.275650][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 249.295257][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010006 [ 249.301323][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 249.309283][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 249.317329][ T4228] RBP: ffffc900046dfab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 249.325297][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 249.333259][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 249.341220][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 249.350135][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.356733][ T4228] CR2: 0000001b31d09ff8 CR3: 000000013cb63000 CR4: 00000000003526a0 [ 249.364693][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 249.372646][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.380609][ T4228] Call Trace: [ 249.383874][ T4228] [ 249.386795][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 249.392423][ T4228] rb_advance_reader+0x2b/0x770 [ 249.397778][ T4228] ring_buffer_consume+0x1e7/0x370 [ 249.402880][ T4228] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 249.408938][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 249.414642][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 249.419570][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 249.425011][ T4228] vfs_read+0x286/0x930 [ 249.429148][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 249.433808][ T4228] ? __kasan_check_write+0x14/0x20 [ 249.438903][ T4228] ? mutex_lock+0x93/0x1b0 [ 249.443307][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 249.448140][ T4228] ? __fdget_pos+0x2cd/0x380 [ 249.452716][ T4228] ? ksys_read+0x70/0x260 [ 249.457029][ T4228] ksys_read+0x14a/0x260 [ 249.461252][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 249.466000][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 249.471630][ T4228] __x64_sys_read+0x7b/0x90 [ 249.476118][ T4228] x64_sys_call+0x2f/0x9a0 [ 249.480543][ T4228] do_syscall_64+0x4c/0xa0 [ 249.484948][ T4228] ? clear_bhb_loop+0x30/0x80 [ 249.489614][ T4228] ? clear_bhb_loop+0x30/0x80 [ 249.494274][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.500152][ T4228] RIP: 0033:0x7f8c4d99e159 [ 249.504994][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.524601][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.533034][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 249.541003][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 249.548971][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 249.556945][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.564996][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 249.572973][ T4228] [ 249.575984][ T4228] ---[ end trace 0000000000000000 ]--- [ 249.581847][ T4201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.582630][ T4228] ------------[ cut here ]------------ [ 249.595633][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 249.605894][ T4228] Modules linked in: [ 249.609799][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 249.618661][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.619009][ T4231] loop9: detected capacity change from 0 to 128 [ 249.628713][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 249.628745][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 249.628759][ T4228] RSP: 0018:ffffc900046df820 EFLAGS: 00010002 [ 249.628775][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 249.628788][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 249.639172][ T4201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.641000][ T4228] RBP: ffffc900046df990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 249.698347][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 249.706317][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 249.714308][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 249.723231][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.731124][ T4228] CR2: 0000001b31d09ff8 CR3: 000000013cb63000 CR4: 00000000003526a0 [ 249.739634][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 249.748229][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.756375][ T4228] Call Trace: [ 249.760207][ T4228] [ 249.763140][ T4228] ? plist_del+0x3ec/0x400 [ 249.767559][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 249.773196][ T4228] ? __schedule+0xcbb/0x1700 [ 249.777790][ T4228] ? __kasan_check_write+0x14/0x20 [ 249.782899][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 249.787614][ T4228] rb_buffer_peek+0x5f/0x930 [ 249.792210][ T4228] ring_buffer_peek+0x184/0x3b0 [ 249.797055][ T4228] ? __kasan_check_read+0x11/0x20 [ 249.802081][ T4228] ? __cfi_ring_buffer_peek+0x10/0x10 [ 249.807482][ T4228] ? _find_next_bit+0x8a/0x130 [ 249.812253][ T4228] __find_next_entry+0x33c/0x6c0 [ 249.817215][ T4228] ? trace_find_next_entry+0x380/0x380 [ 249.822705][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 249.828431][ T4228] tracing_read_pipe+0x3d2/0xaf0 [ 249.833547][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 249.839017][ T4228] vfs_read+0x286/0x930 [ 249.843173][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 249.847841][ T4228] ? __kasan_check_write+0x14/0x20 [ 249.852960][ T4228] ? mutex_lock+0x93/0x1b0 [ 249.857383][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 249.862227][ T4228] ? __fdget_pos+0x2cd/0x380 [ 249.866809][ T4228] ? ksys_read+0x70/0x260 [ 249.871140][ T4228] ksys_read+0x14a/0x260 [ 249.875391][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 249.880162][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 249.885800][ T4228] __x64_sys_read+0x7b/0x90 [ 249.890296][ T4228] x64_sys_call+0x2f/0x9a0 [ 249.894796][ T4228] do_syscall_64+0x4c/0xa0 [ 249.899215][ T4228] ? clear_bhb_loop+0x30/0x80 [ 249.903885][ T4228] ? clear_bhb_loop+0x30/0x80 [ 249.908559][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.914443][ T4228] RIP: 0033:0x7f8c4d99e159 [ 249.918848][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.938454][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.946875][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 249.954839][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 249.962799][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 249.970764][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.978734][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 249.986707][ T4228] [ 249.989718][ T4228] ---[ end trace 0000000000000000 ]--- [ 249.995368][ T4228] ------------[ cut here ]------------ [ 250.000823][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 250.011082][ T4228] Modules linked in: [ 250.014980][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 250.023828][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.027393][ T6] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 250.033897][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 250.033924][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 250.060804][ T6] cdc_ncm 7-1:1.0: bind() failure [ 250.066077][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010006 [ 250.066097][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 250.066110][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 250.066122][ T4228] RBP: ffffc900046dfab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 250.090998][ T6] usb 7-1: USB disconnect, device number 21 [ 250.093112][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 250.093130][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 250.093143][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 250.093158][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.093170][ T4228] CR2: 0000001b31d09ff8 CR3: 000000013cb63000 CR4: 00000000003526a0 [ 250.093185][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 250.093197][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.137323][ T4231] FAT-fs (loop9): Directory bread(block 32) failed [ 250.138445][ T4228] Call Trace: [ 250.138453][ T4228] [ 250.138464][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 250.156826][ T4231] FAT-fs (loop9): Directory bread(block 33) failed [ 250.162350][ T4228] ? __kasan_check_write+0x14/0x20 [ 250.162375][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 250.177324][ T4231] FAT-fs (loop9): Directory bread(block 34) failed [ 250.180668][ T4228] rb_buffer_peek+0x5f/0x930 [ 250.194853][ T4231] FAT-fs (loop9): Directory bread(block 35) failed [ 250.196949][ T4228] ring_buffer_consume+0x1aa/0x370 [ 250.215960][ T4231] FAT-fs (loop9): Directory bread(block 36) failed [ 250.219634][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 250.219664][ T4228] ? print_trace_line+0x393/0x6b0 [ 250.233578][ T4231] FAT-fs (loop9): Directory bread(block 37) failed [ 250.236756][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 250.236787][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 250.253547][ T4231] FAT-fs (loop9): Directory bread(block 38) failed [ 250.253642][ T4228] vfs_read+0x286/0x930 [ 250.264266][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 250.268592][ T4231] FAT-fs (loop9): Directory bread(block 39) failed [ 250.268956][ T4228] ? __kasan_check_write+0x14/0x20 [ 250.280792][ T4228] ? mutex_lock+0x93/0x1b0 [ 250.282900][ T4231] FAT-fs (loop9): Directory bread(block 40) failed [ 250.285211][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 250.296533][ T4228] ? __fdget_pos+0x2cd/0x380 [ 250.300824][ T4231] FAT-fs (loop9): Directory bread(block 41) failed [ 250.301129][ T4228] ? ksys_read+0x70/0x260 [ 250.311943][ T4228] ksys_read+0x14a/0x260 [ 250.316200][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 250.320975][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 250.326622][ T4228] __x64_sys_read+0x7b/0x90 [ 250.331134][ T4228] x64_sys_call+0x2f/0x9a0 [ 250.335558][ T4228] do_syscall_64+0x4c/0xa0 [ 250.339997][ T4228] ? clear_bhb_loop+0x30/0x80 [ 250.344681][ T4228] ? clear_bhb_loop+0x30/0x80 [ 250.349364][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.355260][ T4228] RIP: 0033:0x7f8c4d99e159 [ 250.359675][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.379291][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.387804][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 250.395774][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 250.403735][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 250.411691][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.419649][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 250.427608][ T4228] [ 250.430608][ T4228] ---[ end trace 0000000000000000 ]--- [ 250.436080][ T4228] ------------[ cut here ]------------ [ 250.441517][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 250.451745][ T4228] Modules linked in: [ 250.455618][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 250.464706][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.474750][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 250.480986][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 250.500583][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010006 [ 250.506637][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 250.514595][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 250.522552][ T4228] RBP: ffffc900046dfab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 250.530506][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 250.538468][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 250.546429][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 250.555524][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.562104][ T4228] CR2: 0000001b31d09ff8 CR3: 000000013cb63000 CR4: 00000000003526a0 [ 250.570070][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 250.578033][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.586079][ T4228] Call Trace: [ 250.589346][ T4228] [ 250.592269][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 250.597899][ T4228] rb_advance_reader+0x2b/0x770 [ 250.602733][ T4228] ring_buffer_consume+0x1e7/0x370 [ 250.607831][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 250.613464][ T4228] ? print_trace_line+0x393/0x6b0 [ 250.618492][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 250.623465][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 250.628931][ T4228] vfs_read+0x286/0x930 [ 250.633087][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 250.637761][ T4228] ? __kasan_check_write+0x14/0x20 [ 250.642874][ T4228] ? mutex_lock+0x93/0x1b0 [ 250.647290][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 250.652132][ T4228] ? __fdget_pos+0x2cd/0x380 [ 250.656730][ T4228] ? ksys_read+0x70/0x260 [ 250.661063][ T4228] ksys_read+0x14a/0x260 [ 250.665309][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 250.670084][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 250.675735][ T4228] __x64_sys_read+0x7b/0x90 [ 250.680249][ T4228] x64_sys_call+0x2f/0x9a0 [ 250.684683][ T4228] do_syscall_64+0x4c/0xa0 [ 250.689110][ T4228] ? clear_bhb_loop+0x30/0x80 [ 250.693786][ T4228] ? clear_bhb_loop+0x30/0x80 [ 250.698462][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.704436][ T4228] RIP: 0033:0x7f8c4d99e159 [ 250.708846][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.728439][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.736849][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 250.744822][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 250.752794][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 250.760765][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.768726][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 250.776704][ T4228] [ 250.779716][ T4228] ---[ end trace 0000000000000000 ]--- [ 250.871473][ T4228] ------------[ cut here ]------------ [ 250.876976][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 250.887326][ T4228] Modules linked in: [ 250.891212][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 250.900044][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.910134][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 250.915937][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 250.935527][ T4228] RSP: 0018:ffffc900046df820 EFLAGS: 00010002 [ 250.941579][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 250.949622][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 250.957577][ T4228] RBP: ffffc900046df990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 250.965535][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 250.973593][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 250.981592][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 250.990518][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.997120][ T4228] CR2: 0000001b33612ff8 CR3: 000000013cb63000 CR4: 00000000003526a0 [ 251.005201][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 251.013259][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.021234][ T4228] Call Trace: [ 251.024512][ T4228] [ 251.027444][ T4228] ? update_rt_rq_load_avg+0x25/0x230 [ 251.032823][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 251.038457][ T4228] ? __schedule+0xcbb/0x1700 [ 251.043059][ T4228] ? __kasan_check_write+0x14/0x20 [ 251.048167][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 251.052840][ T4228] rb_buffer_peek+0x5f/0x930 [ 251.057417][ T4228] ring_buffer_peek+0x184/0x3b0 [ 251.062250][ T4228] ? __kasan_check_read+0x11/0x20 [ 251.067349][ T4228] ? __cfi_ring_buffer_peek+0x10/0x10 [ 251.072707][ T4228] ? _find_next_bit+0x8a/0x130 [ 251.077460][ T4228] __find_next_entry+0x33c/0x6c0 [ 251.082391][ T4228] ? trace_find_next_entry+0x380/0x380 [ 251.087837][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 251.093454][ T4228] ? print_trace_line+0x393/0x6b0 [ 251.098473][ T4228] tracing_read_pipe+0x3d2/0xaf0 [ 251.103421][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 251.108875][ T4228] vfs_read+0x286/0x930 [ 251.113018][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 251.117785][ T4228] ? __kasan_check_write+0x14/0x20 [ 251.122894][ T4228] ? mutex_lock+0x93/0x1b0 [ 251.127302][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 251.132144][ T4228] ? __fdget_pos+0x2cd/0x380 [ 251.136726][ T4228] ? ksys_read+0x70/0x260 [ 251.141039][ T4228] ksys_read+0x14a/0x260 [ 251.145265][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 251.150015][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 251.155633][ T4228] __x64_sys_read+0x7b/0x90 [ 251.160117][ T4228] x64_sys_call+0x2f/0x9a0 [ 251.164520][ T4228] do_syscall_64+0x4c/0xa0 [ 251.168923][ T4228] ? clear_bhb_loop+0x30/0x80 [ 251.173582][ T4228] ? clear_bhb_loop+0x30/0x80 [ 251.178256][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.184157][ T4228] RIP: 0033:0x7f8c4d99e159 [ 251.188563][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.208163][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.216764][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 251.224737][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 251.233229][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 251.241204][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.249176][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 251.257144][ T4228] [ 251.260155][ T4228] ---[ end trace 0000000000000000 ]--- [ 251.266072][ T4228] ------------[ cut here ]------------ [ 251.271537][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 251.281798][ T4228] Modules linked in: [ 251.285704][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 251.294556][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.306420][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 251.312511][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 251.332134][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010002 [ 251.338242][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 251.346204][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 251.354161][ T4228] RBP: ffffc900046dfab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 251.362121][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 251.370166][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 251.378127][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 251.387047][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.393614][ T4228] CR2: 0000001b33612ff8 CR3: 000000013cb63000 CR4: 00000000003526a0 [ 251.401574][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 251.409528][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.417480][ T4228] Call Trace: [ 251.420743][ T4228] [ 251.423663][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 251.429302][ T4228] ? irqentry_exit+0x37/0x40 [ 251.433879][ T4228] ? __kasan_check_write+0x14/0x20 [ 251.438976][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 251.443659][ T4228] rb_buffer_peek+0x5f/0x930 [ 251.448251][ T4228] ring_buffer_consume+0x1aa/0x370 [ 251.453354][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 251.458977][ T4228] ? print_trace_line+0x393/0x6b0 [ 251.464026][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 251.468954][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 251.474409][ T4228] vfs_read+0x286/0x930 [ 251.478568][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 251.483231][ T4228] ? __kasan_check_write+0x14/0x20 [ 251.488348][ T4228] ? mutex_lock+0x93/0x1b0 [ 251.492767][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 251.497635][ T4228] ? __fdget_pos+0x2cd/0x380 [ 251.502211][ T4228] ? ksys_read+0x70/0x260 [ 251.506528][ T4228] ksys_read+0x14a/0x260 [ 251.510756][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 251.515498][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 251.521117][ T4228] __x64_sys_read+0x7b/0x90 [ 251.525603][ T4228] x64_sys_call+0x2f/0x9a0 [ 251.530003][ T4228] do_syscall_64+0x4c/0xa0 [ 251.534410][ T4228] ? clear_bhb_loop+0x30/0x80 [ 251.539075][ T4228] ? clear_bhb_loop+0x30/0x80 [ 251.543737][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.549627][ T4228] RIP: 0033:0x7f8c4d99e159 [ 251.554045][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.573639][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.582047][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 251.590005][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 251.597980][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 251.606024][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.613984][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 251.621956][ T4228] [ 251.624963][ T4228] ---[ end trace 0000000000000000 ]--- [ 251.630441][ T4228] ------------[ cut here ]------------ [ 251.635884][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 251.646112][ T4228] Modules linked in: [ 251.649989][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 251.658912][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.668961][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 251.674767][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 251.694381][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010006 [ 251.700445][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 251.708402][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 251.716384][ T4228] RBP: ffffc900046dfab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 251.724339][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 251.732295][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 251.740255][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 251.749177][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.755764][ T4228] CR2: 0000001b33612ff8 CR3: 000000013cb63000 CR4: 00000000003526a0 [ 251.763726][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 251.771685][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.779659][ T4228] Call Trace: [ 251.782938][ T4228] [ 251.785868][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 251.791497][ T4228] rb_advance_reader+0x2b/0x770 [ 251.796349][ T4228] ring_buffer_consume+0x1e7/0x370 [ 251.801463][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 251.807086][ T4228] ? print_trace_line+0x393/0x6b0 [ 251.812100][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 251.817025][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 251.822469][ T4228] vfs_read+0x286/0x930 [ 251.826611][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 251.831268][ T4228] ? __kasan_check_write+0x14/0x20 [ 251.836450][ T4228] ? mutex_lock+0x93/0x1b0 [ 251.840851][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 251.845686][ T4228] ? __fdget_pos+0x2cd/0x380 [ 251.850262][ T4228] ? ksys_read+0x70/0x260 [ 251.854572][ T4228] ksys_read+0x14a/0x260 [ 251.858799][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 251.863544][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 251.869162][ T4228] __x64_sys_read+0x7b/0x90 [ 251.873646][ T4228] x64_sys_call+0x2f/0x9a0 [ 251.878047][ T4228] do_syscall_64+0x4c/0xa0 [ 251.882451][ T4228] ? clear_bhb_loop+0x30/0x80 [ 251.887113][ T4228] ? clear_bhb_loop+0x30/0x80 [ 251.892220][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.898296][ T4228] RIP: 0033:0x7f8c4d99e159 [ 251.902713][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.922395][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.930809][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 251.938809][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 251.946778][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 251.954744][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.962712][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 251.970687][ T4228] [ 251.973711][ T4228] ---[ end trace 0000000000000000 ]--- [ 251.979458][ T4228] ------------[ cut here ]------------ [ 251.984922][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 251.995179][ T4228] Modules linked in: [ 251.999080][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 252.007921][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.017966][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 252.023767][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 252.043545][ T4228] RSP: 0018:ffffc900046df820 EFLAGS: 00010006 [ 252.049613][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 252.057592][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 252.065549][ T4228] RBP: ffffc900046df990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 252.073509][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 252.081464][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 252.089421][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 252.098344][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.105963][ T4228] CR2: 0000001b33612ff8 CR3: 000000013cb63000 CR4: 00000000003526a0 [ 252.113936][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 252.121993][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.129953][ T4228] Call Trace: [ 252.133222][ T4228] [ 252.136142][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 252.141769][ T4228] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 252.147851][ T4228] ? __kasan_check_write+0x14/0x20 [ 252.152954][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 252.157624][ T4228] rb_buffer_peek+0x5f/0x930 [ 252.162222][ T4228] ring_buffer_peek+0x184/0x3b0 [ 252.167066][ T4228] ? __kasan_check_read+0x11/0x20 [ 252.172091][ T4228] ? __cfi_ring_buffer_peek+0x10/0x10 [ 252.177457][ T4228] ? _find_next_bit+0x8a/0x130 [ 252.182212][ T4228] __find_next_entry+0x33c/0x6c0 [ 252.187142][ T4228] ? trace_find_next_entry+0x380/0x380 [ 252.192593][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 252.198211][ T4228] ? print_trace_line+0x393/0x6b0 [ 252.203304][ T4228] tracing_read_pipe+0x3d2/0xaf0 [ 252.208231][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 252.213674][ T4228] vfs_read+0x286/0x930 [ 252.217816][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 252.222482][ T4228] ? __kasan_check_write+0x14/0x20 [ 252.227610][ T4228] ? mutex_lock+0x93/0x1b0 [ 252.232025][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 252.236866][ T4228] ? __fdget_pos+0x2cd/0x380 [ 252.241443][ T4228] ? ksys_read+0x70/0x260 [ 252.245777][ T4228] ksys_read+0x14a/0x260 [ 252.250005][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 252.254753][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 252.260396][ T4228] __x64_sys_read+0x7b/0x90 [ 252.264879][ T4228] x64_sys_call+0x2f/0x9a0 [ 252.269305][ T4228] do_syscall_64+0x4c/0xa0 [ 252.273711][ T4228] ? clear_bhb_loop+0x30/0x80 [ 252.278375][ T4228] ? clear_bhb_loop+0x30/0x80 [ 252.283035][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.288908][ T4228] RIP: 0033:0x7f8c4d99e159 [ 252.293309][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.312912][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.321315][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 252.329272][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 252.337236][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 252.345459][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.353865][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 252.361934][ T4228] [ 252.364947][ T4228] ---[ end trace 0000000000000000 ]--- [ 252.373757][ T4232] FAT-fs (loop9): Filesystem has been set read-only [ 252.887344][ T4228] ------------[ cut here ]------------ [ 252.892832][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 252.903099][ T4228] Modules linked in: [ 252.907064][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 252.915888][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.925921][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 252.931711][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 252.951297][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010002 [ 252.957458][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 252.966281][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 252.974261][ T4228] RBP: ffffc900046dfab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 252.982222][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 252.990184][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 252.998140][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 253.007056][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.013627][ T4228] CR2: 00005555703244e8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 253.021618][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 253.029574][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.037535][ T4228] Call Trace: [ 253.040798][ T4228] [ 253.043734][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 253.049359][ T4228] ? __kasan_check_write+0x14/0x20 [ 253.054458][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 253.059125][ T4228] rb_buffer_peek+0x5f/0x930 [ 253.063698][ T4228] ring_buffer_consume+0x1aa/0x370 [ 253.068787][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 253.074400][ T4228] ? print_trace_line+0x393/0x6b0 [ 253.079404][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 253.084329][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 253.089774][ T4228] vfs_read+0x286/0x930 [ 253.093920][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 253.098582][ T4228] ? __kasan_check_write+0x14/0x20 [ 253.103689][ T4228] ? mutex_lock+0x93/0x1b0 [ 253.108285][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 253.113138][ T4228] ? __fdget_pos+0x2cd/0x380 [ 253.117721][ T4228] ? ksys_read+0x70/0x260 [ 253.122039][ T4228] ksys_read+0x14a/0x260 [ 253.126285][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 253.131031][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 253.136670][ T4228] __x64_sys_read+0x7b/0x90 [ 253.141170][ T4228] x64_sys_call+0x2f/0x9a0 [ 253.145581][ T4228] do_syscall_64+0x4c/0xa0 [ 253.150002][ T4228] ? clear_bhb_loop+0x30/0x80 [ 253.154673][ T4228] ? clear_bhb_loop+0x30/0x80 [ 253.159349][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.165224][ T4228] RIP: 0033:0x7f8c4d99e159 [ 253.169632][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.189395][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.197806][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 253.205765][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 253.213717][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 253.221682][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.229662][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 253.237623][ T4228] [ 253.240641][ T4228] ---[ end trace 0000000000000000 ]--- [ 253.246152][ T4228] ------------[ cut here ]------------ [ 253.251599][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 253.261819][ T4228] Modules linked in: [ 253.265692][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 253.274775][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.285073][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 253.290882][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 253.310565][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010006 [ 253.316637][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 253.324613][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 253.332568][ T4228] RBP: ffffc900046dfab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 253.340535][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 253.348516][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 253.357599][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 253.366535][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.373122][ T4228] CR2: 00005555703244e8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 253.381079][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 253.389033][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.396998][ T4228] Call Trace: [ 253.400259][ T4228] [ 253.403181][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 253.408808][ T4228] rb_advance_reader+0x2b/0x770 [ 253.413640][ T4228] ring_buffer_consume+0x1e7/0x370 [ 253.418733][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 253.424346][ T4228] ? print_trace_line+0x393/0x6b0 [ 253.429358][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 253.434290][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 253.439736][ T4228] vfs_read+0x286/0x930 [ 253.443878][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 253.448540][ T4228] ? __kasan_check_write+0x14/0x20 [ 253.453642][ T4228] ? mutex_lock+0x93/0x1b0 [ 253.458047][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 253.462882][ T4228] ? __fdget_pos+0x2cd/0x380 [ 253.467459][ T4228] ? ksys_read+0x70/0x260 [ 253.471773][ T4228] ksys_read+0x14a/0x260 [ 253.476001][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 253.480758][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 253.486383][ T4228] __x64_sys_read+0x7b/0x90 [ 253.490886][ T4228] x64_sys_call+0x2f/0x9a0 [ 253.495297][ T4228] do_syscall_64+0x4c/0xa0 [ 253.499710][ T4228] ? clear_bhb_loop+0x30/0x80 [ 253.504552][ T4228] ? clear_bhb_loop+0x30/0x80 [ 253.509217][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.515128][ T4228] RIP: 0033:0x7f8c4d99e159 [ 253.519534][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.539211][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.547606][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 253.555562][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 253.563519][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 253.571504][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.579498][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 253.587463][ T4228] [ 253.590488][ T4228] ---[ end trace 0000000000000000 ]--- [ 253.596311][ T4228] ------------[ cut here ]------------ [ 253.601766][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 253.612040][ T4228] Modules linked in: [ 253.615922][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 253.624749][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.634792][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 253.640587][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 253.660186][ T4228] RSP: 0018:ffffc900046df820 EFLAGS: 00010002 [ 253.666240][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 253.674203][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 253.682159][ T4228] RBP: ffffc900046df990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 253.690114][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 253.698077][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 253.706065][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 253.714979][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.721546][ T4228] CR2: 00005555703244e8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 253.729568][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 253.737568][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.745560][ T4228] Call Trace: [ 253.748841][ T4228] [ 253.751762][ T4228] ? plist_del+0x3ec/0x400 [ 253.756175][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 253.761797][ T4228] ? __schedule+0xcbb/0x1700 [ 253.766380][ T4228] ? __kasan_check_write+0x14/0x20 [ 253.771474][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 253.776149][ T4228] rb_buffer_peek+0x5f/0x930 [ 253.780729][ T4228] ring_buffer_peek+0x184/0x3b0 [ 253.785562][ T4228] ? __kasan_check_read+0x11/0x20 [ 253.790568][ T4228] ? __cfi_ring_buffer_peek+0x10/0x10 [ 253.795922][ T4228] ? _find_next_bit+0x8a/0x130 [ 253.800671][ T4228] __find_next_entry+0x33c/0x6c0 [ 253.805618][ T4228] ? trace_find_next_entry+0x380/0x380 [ 253.811069][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 253.816684][ T4228] ? print_trace_line+0x393/0x6b0 [ 253.821694][ T4228] tracing_read_pipe+0x3d2/0xaf0 [ 253.826717][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 253.832174][ T4228] vfs_read+0x286/0x930 [ 253.836326][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 253.840999][ T4228] ? __kasan_check_write+0x14/0x20 [ 253.846128][ T4228] ? mutex_lock+0x93/0x1b0 [ 253.851154][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 253.856017][ T4228] ? __fdget_pos+0x2cd/0x380 [ 253.860604][ T4228] ? ksys_read+0x70/0x260 [ 253.864931][ T4228] ksys_read+0x14a/0x260 [ 253.869168][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 253.873925][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 253.879547][ T4228] __x64_sys_read+0x7b/0x90 [ 253.884037][ T4228] x64_sys_call+0x2f/0x9a0 [ 253.888451][ T4228] do_syscall_64+0x4c/0xa0 [ 253.892856][ T4228] ? clear_bhb_loop+0x30/0x80 [ 253.897531][ T4228] ? clear_bhb_loop+0x30/0x80 [ 253.902192][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.908065][ T4228] RIP: 0033:0x7f8c4d99e159 [ 253.912462][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.932058][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.940467][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 253.948440][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 253.956404][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 253.964806][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.972763][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 253.980733][ T4228] [ 253.984968][ T4228] ---[ end trace 0000000000000000 ]--- [ 253.990814][ T4228] ------------[ cut here ]------------ [ 253.996359][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 254.006611][ T4228] Modules linked in: [ 254.010496][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 254.019357][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.029495][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 254.035480][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 254.055088][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010002 [ 254.061151][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 254.069109][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 254.077063][ T4228] RBP: ffffc900046dfab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 254.085027][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 254.093002][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 254.101047][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 254.109963][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.116533][ T4228] CR2: 00005555703244e8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 254.124490][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 254.132446][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 254.140406][ T4228] Call Trace: [ 254.143668][ T4228] [ 254.146588][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 254.152224][ T4228] ? __kasan_check_write+0x14/0x20 [ 254.157414][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 254.162168][ T4228] rb_buffer_peek+0x5f/0x930 [ 254.166740][ T4228] ring_buffer_consume+0x1aa/0x370 [ 254.171837][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 254.177461][ T4228] ? print_trace_line+0x393/0x6b0 [ 254.182487][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 254.187424][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 254.192877][ T4228] vfs_read+0x286/0x930 [ 254.197030][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 254.201692][ T4228] ? __kasan_check_write+0x14/0x20 [ 254.206877][ T4228] ? mutex_lock+0x93/0x1b0 [ 254.211277][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 254.216112][ T4228] ? __fdget_pos+0x2cd/0x380 [ 254.220687][ T4228] ? ksys_read+0x70/0x260 [ 254.225001][ T4228] ksys_read+0x14a/0x260 [ 254.229231][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 254.233978][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 254.239599][ T4228] __x64_sys_read+0x7b/0x90 [ 254.244085][ T4228] x64_sys_call+0x2f/0x9a0 [ 254.248488][ T4228] do_syscall_64+0x4c/0xa0 [ 254.252892][ T4228] ? clear_bhb_loop+0x30/0x80 [ 254.257560][ T4228] ? clear_bhb_loop+0x30/0x80 [ 254.262933][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.270089][ T4228] RIP: 0033:0x7f8c4d99e159 [ 254.274504][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.294101][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.302503][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 254.310464][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 254.318419][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 254.326390][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.334357][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 254.342332][ T4228] [ 254.345342][ T4228] ---[ end trace 0000000000000000 ]--- [ 254.350825][ T4228] ------------[ cut here ]------------ [ 254.356263][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 254.366500][ T4228] Modules linked in: [ 254.370378][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 254.379207][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.389257][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 254.395086][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 254.414677][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010006 [ 254.420730][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 254.428688][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 254.436735][ T4228] RBP: ffffc900046dfab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 254.444689][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 254.452653][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 254.461130][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 254.470581][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.477175][ T4228] CR2: 00005555703244e8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 254.485924][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 254.494070][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 254.502054][ T4228] Call Trace: [ 254.505317][ T4228] [ 254.508239][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 254.513862][ T4228] rb_advance_reader+0x2b/0x770 [ 254.518700][ T4228] ring_buffer_consume+0x1e7/0x370 [ 254.523800][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 254.529430][ T4228] ? print_trace_line+0x393/0x6b0 [ 254.534440][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 254.539363][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 254.544812][ T4228] vfs_read+0x286/0x930 [ 254.548952][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 254.553634][ T4228] ? __kasan_check_write+0x14/0x20 [ 254.558731][ T4228] ? mutex_lock+0x93/0x1b0 [ 254.563128][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 254.567964][ T4228] ? __fdget_pos+0x2cd/0x380 [ 254.572550][ T4228] ? ksys_read+0x70/0x260 [ 254.576878][ T4228] ksys_read+0x14a/0x260 [ 254.581111][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 254.585864][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 254.591500][ T4228] __x64_sys_read+0x7b/0x90 [ 254.596004][ T4228] x64_sys_call+0x2f/0x9a0 [ 254.600420][ T4228] do_syscall_64+0x4c/0xa0 [ 254.604861][ T4228] ? clear_bhb_loop+0x30/0x80 [ 254.609530][ T4228] ? clear_bhb_loop+0x30/0x80 [ 254.614192][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.620073][ T4228] RIP: 0033:0x7f8c4d99e159 [ 254.624473][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.644065][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.652468][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 254.660423][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 254.668376][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 254.676332][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.684373][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 254.692332][ T4228] [ 254.695335][ T4228] ---[ end trace 0000000000000000 ]--- [ 254.871271][ T4228] ------------[ cut here ]------------ [ 254.876736][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 254.886959][ T4228] Modules linked in: [ 254.890827][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 254.899645][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.909671][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 254.915455][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 254.935046][ T4228] RSP: 0018:ffffc900046df820 EFLAGS: 00010012 [ 254.941086][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 254.949046][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 254.957457][ T4228] RBP: ffffc900046df990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 254.965421][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 254.973382][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 254.981359][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 254.990271][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.996834][ T4228] CR2: 00007f0d61def2f8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 255.004786][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 255.012738][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.020684][ T4228] Call Trace: [ 255.023993][ T4228] [ 255.026904][ T4228] ? update_rt_rq_load_avg+0x25/0x230 [ 255.032277][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 255.037891][ T4228] ? __schedule+0xcbb/0x1700 [ 255.042469][ T4228] ? __kasan_check_write+0x14/0x20 [ 255.047573][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 255.052245][ T4228] rb_buffer_peek+0x5f/0x930 [ 255.056830][ T4228] ring_buffer_peek+0x184/0x3b0 [ 255.061659][ T4228] ? __kasan_check_read+0x11/0x20 [ 255.066657][ T4228] ? __cfi_ring_buffer_peek+0x10/0x10 [ 255.072018][ T4228] ? _find_next_bit+0x8a/0x130 [ 255.076776][ T4228] __find_next_entry+0x33c/0x6c0 [ 255.081708][ T4228] ? trace_find_next_entry+0x380/0x380 [ 255.087166][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 255.092788][ T4228] ? print_trace_line+0x393/0x6b0 [ 255.097789][ T4228] tracing_read_pipe+0x3d2/0xaf0 [ 255.102719][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 255.108168][ T4228] vfs_read+0x286/0x930 [ 255.112305][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 255.116965][ T4228] ? __kasan_check_write+0x14/0x20 [ 255.122069][ T4228] ? mutex_lock+0x93/0x1b0 [ 255.126471][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 255.131321][ T4228] ? __fdget_pos+0x2cd/0x380 [ 255.135899][ T4228] ? ksys_read+0x70/0x260 [ 255.140210][ T4228] ksys_read+0x14a/0x260 [ 255.144435][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 255.149178][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 255.154814][ T4228] __x64_sys_read+0x7b/0x90 [ 255.159304][ T4228] x64_sys_call+0x2f/0x9a0 [ 255.163717][ T4228] do_syscall_64+0x4c/0xa0 [ 255.168109][ T4228] ? clear_bhb_loop+0x30/0x80 [ 255.172781][ T4228] ? clear_bhb_loop+0x30/0x80 [ 255.177436][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.183299][ T4228] RIP: 0033:0x7f8c4d99e159 [ 255.187690][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.207281][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.215688][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 255.223656][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 255.231622][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 255.239581][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.247535][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 255.256210][ T4228] [ 255.259275][ T4228] ---[ end trace 0000000000000000 ]--- [ 255.265104][ T4228] ------------[ cut here ]------------ [ 255.270567][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 255.280819][ T4228] Modules linked in: [ 255.284709][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 255.293544][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.303583][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 255.309391][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 255.328989][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010006 [ 255.335061][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 255.343029][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 255.351081][ T4228] RBP: ffffc900046dfab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 255.359049][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 255.367026][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 255.375010][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 255.383945][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.390527][ T4228] CR2: 00007f0d61def2f8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 255.398489][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 255.406454][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.414596][ T4228] Call Trace: [ 255.417880][ T4228] [ 255.420903][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 255.426546][ T4228] ? __kasan_check_write+0x14/0x20 [ 255.431658][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 255.436325][ T4228] rb_buffer_peek+0x5f/0x930 [ 255.440911][ T4228] ring_buffer_consume+0x1aa/0x370 [ 255.446106][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 255.451737][ T4228] ? print_trace_line+0x393/0x6b0 [ 255.456754][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 255.461687][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 255.467140][ T4228] vfs_read+0x286/0x930 [ 255.471298][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 255.475995][ T4228] ? __kasan_check_write+0x14/0x20 [ 255.481100][ T4228] ? mutex_lock+0x93/0x1b0 [ 255.485523][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 255.490365][ T4228] ? __fdget_pos+0x2cd/0x380 [ 255.494947][ T4228] ? ksys_read+0x70/0x260 [ 255.499265][ T4228] ksys_read+0x14a/0x260 [ 255.503494][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 255.508244][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 255.513958][ T4228] __x64_sys_read+0x7b/0x90 [ 255.518446][ T4228] x64_sys_call+0x2f/0x9a0 [ 255.522847][ T4228] do_syscall_64+0x4c/0xa0 [ 255.527251][ T4228] ? clear_bhb_loop+0x30/0x80 [ 255.531924][ T4228] ? clear_bhb_loop+0x30/0x80 [ 255.536586][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.542461][ T4228] RIP: 0033:0x7f8c4d99e159 [ 255.546860][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.566541][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.575378][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 255.583349][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 255.591311][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 255.599267][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.607223][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 255.615186][ T4228] [ 255.618196][ T4228] ---[ end trace 0000000000000000 ]--- [ 255.623675][ T4228] ------------[ cut here ]------------ [ 255.629107][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 255.639360][ T4228] Modules linked in: [ 255.643237][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 255.652065][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.662104][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 255.667900][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 255.687494][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010006 [ 255.693563][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 255.701534][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 255.709499][ T4228] RBP: ffffc900046dfab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 255.717459][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 255.725420][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 255.733468][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 255.742381][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.748956][ T4228] CR2: 00007f0d61def2f8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 255.757003][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 255.764963][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.772938][ T4228] Call Trace: [ 255.776206][ T4228] [ 255.779127][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 255.784752][ T4228] rb_advance_reader+0x2b/0x770 [ 255.789590][ T4228] ring_buffer_consume+0x1e7/0x370 [ 255.794686][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 255.800300][ T4228] ? print_trace_line+0x393/0x6b0 [ 255.805392][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 255.810316][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 255.815760][ T4228] vfs_read+0x286/0x930 [ 255.819953][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 255.824610][ T4228] ? __kasan_check_write+0x14/0x20 [ 255.829707][ T4228] ? mutex_lock+0x93/0x1b0 [ 255.834107][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 255.838941][ T4228] ? __fdget_pos+0x2cd/0x380 [ 255.843526][ T4228] ? ksys_read+0x70/0x260 [ 255.847873][ T4228] ksys_read+0x14a/0x260 [ 255.852101][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 255.856846][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 255.862551][ T4228] __x64_sys_read+0x7b/0x90 [ 255.867037][ T4228] x64_sys_call+0x2f/0x9a0 [ 255.871443][ T4228] do_syscall_64+0x4c/0xa0 [ 255.875848][ T4228] ? clear_bhb_loop+0x30/0x80 [ 255.880518][ T4228] ? clear_bhb_loop+0x30/0x80 [ 255.885181][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.891060][ T4228] RIP: 0033:0x7f8c4d99e159 [ 255.895456][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.915042][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.923441][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 255.931398][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 255.939353][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 255.947312][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.955270][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 255.963227][ T4228] [ 255.966230][ T4228] ---[ end trace 0000000000000000 ]--- [ 255.971862][ T4228] ------------[ cut here ]------------ [ 255.977315][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 255.987556][ T4228] Modules linked in: [ 255.991446][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 256.000279][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.010324][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 256.016129][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 256.035924][ T4228] RSP: 0018:ffffc900046df820 EFLAGS: 00010002 [ 256.042003][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 256.049962][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 256.057921][ T4228] RBP: ffffc900046df990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 256.065965][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 256.073921][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 256.081876][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 256.090813][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.097379][ T4228] CR2: 00007f0d61def2f8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 256.105429][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 256.113402][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 256.121365][ T4228] Call Trace: [ 256.124631][ T4228] [ 256.127551][ T4228] ? release_firmware_map_entry+0x190/0x190 [ 256.133468][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 256.139095][ T4228] ? __schedule+0xcbb/0x1700 [ 256.143679][ T4228] ? __kasan_check_write+0x14/0x20 [ 256.148777][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 256.153444][ T4228] rb_buffer_peek+0x5f/0x930 [ 256.158107][ T4228] ring_buffer_peek+0x184/0x3b0 [ 256.162942][ T4228] ? sysvec_reschedule_ipi+0x78/0x80 [ 256.168219][ T4228] ? __cfi_ring_buffer_peek+0x10/0x10 [ 256.173576][ T4228] ? __find_next_entry+0x2d8/0x6c0 [ 256.178678][ T4228] __find_next_entry+0x33c/0x6c0 [ 256.183613][ T4228] ? trace_find_next_entry+0x380/0x380 [ 256.189064][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 256.194687][ T4228] ? print_trace_line+0x393/0x6b0 [ 256.199719][ T4228] tracing_read_pipe+0x3d2/0xaf0 [ 256.204648][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 256.210109][ T4228] vfs_read+0x286/0x930 [ 256.214257][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 256.218918][ T4228] ? __kasan_check_write+0x14/0x20 [ 256.224013][ T4228] ? mutex_lock+0x93/0x1b0 [ 256.228420][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 256.233271][ T4228] ? __fdget_pos+0x2cd/0x380 [ 256.237870][ T4228] ? ksys_read+0x70/0x260 [ 256.242199][ T4228] ksys_read+0x14a/0x260 [ 256.246441][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 256.251198][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 256.256841][ T4228] __x64_sys_read+0x7b/0x90 [ 256.261342][ T4228] x64_sys_call+0x2f/0x9a0 [ 256.265755][ T4228] do_syscall_64+0x4c/0xa0 [ 256.270169][ T4228] ? clear_bhb_loop+0x30/0x80 [ 256.274839][ T4228] ? clear_bhb_loop+0x30/0x80 [ 256.279506][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.285395][ T4228] RIP: 0033:0x7f8c4d99e159 [ 256.289799][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.309480][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.317894][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 256.325862][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 256.333832][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 256.341793][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.349748][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 256.357801][ T4228] [ 256.360803][ T4228] ---[ end trace 0000000000000000 ]--- [ 256.871235][ T4228] ------------[ cut here ]------------ [ 256.876714][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 256.886939][ T4228] Modules linked in: [ 256.890859][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 256.899687][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.909722][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 256.915515][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 256.935536][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010006 [ 256.941592][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 256.949564][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 256.957521][ T4228] RBP: ffffc900046dfab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 256.965487][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 256.973468][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 256.981422][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 256.990332][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.996899][ T4228] CR2: 00007f0d61def2f8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 257.004883][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 257.012841][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.020807][ T4228] Call Trace: [ 257.024100][ T4228] [ 257.027039][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 257.032659][ T4228] ? __kasan_check_write+0x14/0x20 [ 257.037804][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 257.042474][ T4228] rb_buffer_peek+0x5f/0x930 [ 257.047048][ T4228] ring_buffer_consume+0x1aa/0x370 [ 257.052159][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 257.057774][ T4228] ? print_trace_line+0x393/0x6b0 [ 257.062783][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 257.067711][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 257.073164][ T4228] vfs_read+0x286/0x930 [ 257.077319][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 257.081979][ T4228] ? __kasan_check_write+0x14/0x20 [ 257.087083][ T4228] ? mutex_lock+0x93/0x1b0 [ 257.091489][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 257.096325][ T4228] ? __fdget_pos+0x2cd/0x380 [ 257.100904][ T4228] ? ksys_read+0x70/0x260 [ 257.105224][ T4228] ksys_read+0x14a/0x260 [ 257.109464][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 257.114216][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 257.119851][ T4228] __x64_sys_read+0x7b/0x90 [ 257.124358][ T4228] x64_sys_call+0x2f/0x9a0 [ 257.128803][ T4228] do_syscall_64+0x4c/0xa0 [ 257.134182][ T4228] ? clear_bhb_loop+0x30/0x80 [ 257.138867][ T4228] ? clear_bhb_loop+0x30/0x80 [ 257.143533][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.149586][ T4228] RIP: 0033:0x7f8c4d99e159 [ 257.153990][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.173597][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.182237][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 257.190297][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 257.198263][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 257.206228][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.214187][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 257.222153][ T4228] [ 257.225151][ T4228] ---[ end trace 0000000000000000 ]--- [ 257.230628][ T4228] ------------[ cut here ]------------ [ 257.236058][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 257.246283][ T4228] Modules linked in: [ 257.250160][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 257.258988][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.269025][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 257.274825][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 257.294414][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010002 [ 257.300467][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 257.308423][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 257.316388][ T4228] RBP: ffffc900046dfab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 257.325673][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 257.333643][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 257.341603][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 257.350525][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.357110][ T4228] CR2: 00007f0d61def2f8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 257.365162][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 257.373127][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.381092][ T4228] Call Trace: [ 257.384361][ T4228] [ 257.387285][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 257.392961][ T4228] rb_advance_reader+0x2b/0x770 [ 257.397980][ T4228] ring_buffer_consume+0x1e7/0x370 [ 257.403083][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 257.409334][ T4228] ? print_trace_line+0x393/0x6b0 [ 257.414360][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 257.419292][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 257.424748][ T4228] vfs_read+0x286/0x930 [ 257.428990][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 257.433661][ T4228] ? __kasan_check_write+0x14/0x20 [ 257.438778][ T4228] ? mutex_lock+0x93/0x1b0 [ 257.443204][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 257.448052][ T4228] ? __fdget_pos+0x2cd/0x380 [ 257.452642][ T4228] ? ksys_read+0x70/0x260 [ 257.456964][ T4228] ksys_read+0x14a/0x260 [ 257.461191][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 257.465943][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 257.471564][ T4228] __x64_sys_read+0x7b/0x90 [ 257.476052][ T4228] x64_sys_call+0x2f/0x9a0 [ 257.480460][ T4228] do_syscall_64+0x4c/0xa0 [ 257.484864][ T4228] ? clear_bhb_loop+0x30/0x80 [ 257.489526][ T4228] ? clear_bhb_loop+0x30/0x80 [ 257.494187][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.500064][ T4228] RIP: 0033:0x7f8c4d99e159 [ 257.504465][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.524151][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.532700][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 257.540683][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 257.548816][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 257.556771][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.564723][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 257.572679][ T4228] [ 257.575678][ T4228] ---[ end trace 0000000000000000 ]--- [ 257.581547][ T4228] ------------[ cut here ]------------ [ 257.587006][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 257.597324][ T4228] Modules linked in: [ 257.601202][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 257.610029][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.620065][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 257.625959][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 257.645572][ T4228] RSP: 0018:ffffc900046df820 EFLAGS: 00010002 [ 257.651655][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 257.659613][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 257.667598][ T4228] RBP: ffffc900046df990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 257.675569][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 257.683535][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 257.691496][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 257.701554][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.708233][ T4228] CR2: 00007f0d61def2f8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 257.716211][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 257.724172][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.732132][ T4228] Call Trace: [ 257.735402][ T4228] [ 257.738316][ T4228] ? plist_del+0x3ec/0x400 [ 257.742724][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 257.748438][ T4228] ? __schedule+0xcbb/0x1700 [ 257.753029][ T4228] ? __kasan_check_write+0x14/0x20 [ 257.758219][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 257.762890][ T4228] rb_buffer_peek+0x5f/0x930 [ 257.767471][ T4228] ring_buffer_peek+0x184/0x3b0 [ 257.772305][ T4228] ? __kasan_check_read+0x11/0x20 [ 257.777314][ T4228] ? __cfi_ring_buffer_peek+0x10/0x10 [ 257.782673][ T4228] ? _find_next_bit+0x8a/0x130 [ 257.787419][ T4228] __find_next_entry+0x33c/0x6c0 [ 257.792355][ T4228] ? trace_find_next_entry+0x380/0x380 [ 257.797818][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 257.803450][ T4228] ? print_trace_line+0x393/0x6b0 [ 257.808467][ T4228] tracing_read_pipe+0x3d2/0xaf0 [ 257.813401][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10 [ 257.818849][ T4228] vfs_read+0x286/0x930 [ 257.822988][ T4228] ? __cfi_vfs_read+0x10/0x10 [ 257.827648][ T4228] ? __kasan_check_write+0x14/0x20 [ 257.832743][ T4228] ? mutex_lock+0x93/0x1b0 [ 257.837140][ T4228] ? __cfi_mutex_lock+0x10/0x10 [ 257.841971][ T4228] ? __fdget_pos+0x2cd/0x380 [ 257.846544][ T4228] ? ksys_read+0x70/0x260 [ 257.850858][ T4228] ksys_read+0x14a/0x260 [ 257.855086][ T4228] ? __cfi_ksys_read+0x10/0x10 [ 257.859831][ T4228] ? fpregs_restore_userregs+0x128/0x260 [ 257.865445][ T4228] __x64_sys_read+0x7b/0x90 [ 257.869933][ T4228] x64_sys_call+0x2f/0x9a0 [ 257.874330][ T4228] do_syscall_64+0x4c/0xa0 [ 257.878735][ T4228] ? clear_bhb_loop+0x30/0x80 [ 257.883397][ T4228] ? clear_bhb_loop+0x30/0x80 [ 257.888062][ T4228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.893937][ T4228] RIP: 0033:0x7f8c4d99e159 [ 257.898334][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.917921][ T4228] RSP: 002b:00007f8c4e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.926408][ T4228] RAX: ffffffffffffffda RBX: 00007f8c4dc26090 RCX: 00007f8c4d99e159 [ 257.934369][ T4228] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 257.942322][ T4228] RBP: 00007f8c4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 257.950273][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.958222][ T4228] R13: 00007f8c4dc26128 R14: 00007f8c4dc26090 R15: 00007ffcb84cc438 [ 257.966183][ T4228] [ 257.969183][ T4228] ---[ end trace 0000000000000000 ]--- [ 257.974841][ T4228] ------------[ cut here ]------------ [ 257.980292][ T4228] WARNING: CPU: 1 PID: 4228 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 257.990543][ T4228] Modules linked in: [ 257.994440][ T4228] CPU: 1 PID: 4228 Comm: syz.4.1147 Tainted: G B W syzkaller #0 [ 258.003285][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.013337][ T4228] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 258.019163][ T4228] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe [ 258.038774][ T4228] RSP: 0018:ffffc900046df940 EFLAGS: 00010006 [ 258.044835][ T4228] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6 [ 258.052791][ T4228] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 258.060746][ T4228] RBP: ffffc900046dfab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 258.068698][ T4228] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 258.076685][ T4228] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 000000000000027c [ 258.084646][ T4228] FS: 00007f8c4e87e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 258.093556][ T4228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.100120][ T4228] CR2: 00007f0d61def2f8 CR3: 000000013cb63000 CR4: 00000000003506a0 [ 258.108075][ T4228] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 258.116032][ T4228] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.123985][ T4228] Call Trace: [ 258.127255][ T4228] [ 258.130193][ T4228] ? ring_buffer_read_page+0x1260/0x1260 [ 258.135857][ T4228] ? __kasan_check_write+0x14/0x20 [ 258.140983][ T4228] ? _raw_spin_lock+0x94/0xf0 [ 258.145758][ T4228] rb_buffer_peek+0x5f/0x930 [ 258.150588][ T4228] ring_buffer_consume+0x1aa/0x370 [ 258.155714][ T4228] ? __cfi_ring_buffer_consume+0x10/0x10 [ 258.161343][ T4228] ? print_trace_line+0x393/0x6b0 [ 258.166361][ T4228] tracing_read_pipe+0x5b3/0xaf0 [ 258.171305][ T4228] ? __cfi_tracing_read_pipe+0x10/0x10