last executing test programs: 6m48.100974255s ago: executing program 4 (id=664): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x808) inotify_rm_watch(r3, r4) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)="01000000", 0x4}, {&(0x7f0000000500)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000540)="747369587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x2000000000000004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m45.922954126s ago: executing program 4 (id=671): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2446a, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[]) read$FUSE(r0, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x202f) mknodat$null(0xffffffffffffff9c, &(0x7f0000002b40)='./file0/file0\x00', 0xc01, 0x103) write$FUSE_INIT(r0, &(0x7f0000002b80)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffd, 0xffffffffc1001081, 0x800, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x20, 0x400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002c00)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df00", 0x2000, &(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004cc0)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0xffffffffffffffd, 0x0, 0x22000000, {0x1, 0x1003, 0x2, 0x2, 0x4, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004d80)="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", 0x2000, &(0x7f0000006d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006e40)={0x90, 0x0, 0x0, {0x2, 0x3, 0x4, 0x7, 0x9e3, 0x1003, {0x6, 0x4, 0x0, 0x7, 0x801, 0x20e, 0x80000000, 0x80000001, 0x100, 0x6000, 0x6909, r2, r3, 0x1, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0), 0x307017fdb7a66cb, 0x3ec0) 6m45.826770745s ago: executing program 4 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x1, 0x3adc, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000fddfffff7a0af0ff0500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000fdffffff850000000200000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r4}, &(0x7f00000001c0), &(0x7f0000000880)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000a40)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 6m45.663804812s ago: executing program 4 (id=673): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x190864, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x200008, &(0x7f0000005b00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000005b40)='./bus\x00', &(0x7f0000005b80), 0x8, &(0x7f0000005bc0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000005c00), &(0x7f0000005c40)='./bus\x00', 0x323020, &(0x7f0000005c80)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000005cc0)='./file1\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000005d00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000005d40)='./file0/file1\x00', 0x2) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)) 6m44.188621302s ago: executing program 4 (id=679): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0x8, 0x4, 0xad0, 0xffffffff, 0x938, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xa38, 0xa38, 0xa38, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {[], [], 0xfc}], 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_to_bond\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'dvmrp0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb30) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "24d31a04abcb4277062fd2861f1012377b0ef20847ccbfde85f70e8d4da6179f55fe4986bbdd1294be2a2d8e91456c48a5b2e4019b693400bf59303dd67f12be", 0x13}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r1, r1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x2, 'syzkaller1\x00', {0x81}}) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x17, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000004850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000e3008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000fc0)="b9ff03316844268cb89e14f086dd", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250e0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="100002800a"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) add_key(&(0x7f0000000100)='.request_key_auth\x00', 0x0, &(0x7f0000002a80)="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", 0x559, r1) 6m43.667004695s ago: executing program 4 (id=684): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000059078ac141400ac1e010100000100", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907800002f80ec66cd63027bdc3eb48d43a8e5af8b05c5d28b0ba44d190e1f8511d45291888eff621438d8acad0820e8f907396ee78c45ffbe0a295ff9bf9bb1356090269f3cd2e3a2d6a0d2053a70ad92d77544970cc29c3892387b7cebfae834d946cf30f081"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000700), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000740), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000980), 0x0, &(0x7f00000009c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000a00)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x158) socket$nl_xfrm(0x10, 0x3, 0x6) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x1) syz_create_resource$futex(&(0x7f0000000780)=0x1) 6m43.666681755s ago: executing program 32 (id=684): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000059078ac141400ac1e010100000100", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907800002f80ec66cd63027bdc3eb48d43a8e5af8b05c5d28b0ba44d190e1f8511d45291888eff621438d8acad0820e8f907396ee78c45ffbe0a295ff9bf9bb1356090269f3cd2e3a2d6a0d2053a70ad92d77544970cc29c3892387b7cebfae834d946cf30f081"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000700), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000740), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000980), 0x0, &(0x7f00000009c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000a00)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x158) socket$nl_xfrm(0x10, 0x3, 0x6) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x1) syz_create_resource$futex(&(0x7f0000000780)=0x1) 5m12.109036994s ago: executing program 2 (id=1104): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000300)='.\x00', 0x808) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f00000004c0)="01000000", 0x4}, {&(0x7f0000000500)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000540)="747369587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x2000000000000004) 5m9.216409247s ago: executing program 2 (id=1117): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x400000000000041, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r2, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x2a00091, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRES32=r4, @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1c6, &(0x7f0000001440)="$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") syz_mount_image$ext4(&(0x7f0000006040)='ext4\x00', &(0x7f0000006080)='./file0\x00', 0x10000, &(0x7f00000060c0), 0x1, 0x50a, &(0x7f0000006100)="$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") 5m8.185637252s ago: executing program 2 (id=1122): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000300)='.\x00', 0x808) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f00000004c0)="01000000", 0x4}, {&(0x7f0000000500)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000540)="747369587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2000000000000004) ptrace(0x10, r0) 5m7.212103761s ago: executing program 2 (id=1124): syz_mount_image$f2fs(&(0x7f0000000a00), &(0x7f0000000a40)='./file1\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858", @ANYBLOB="13381f1a42a7d4b39f5fbeb72d8e2fcc845965ecf02f1aebc7b164ba1f2bcedc5e1d48c53c3dff65a89b1d5b891f654b24b4e69a7f31cca9e32e3c9b435bea8bd0ff2eddce2ccff8c5f02635d1a4df4a7f233101d247d239229e196e2b4b1c2f2185e4c0336c905fb1e4bde135cac8278f0c836c9068257293552611484d5aecdcd6f744bebf81fbfca81fc9dbf1a8bb5f863d5466ef1d4466e153feb9d722167bc090abb9635b1ef2e34e5cd7dd5d95b07bf24d2ae8f3d0b2576a06e0ffd94ba28af029f8f151fd261269359b0712431724c4b90aa95fa5e10ce69b460f281922f30900750cb41ce1521c4aa3da82368c9504", @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRES16], 0x1, 0x5507, &(0x7f0000002480)="$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") r0 = open(&(0x7f00000079c0)='./file1\x00', 0x14e142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000007a00)='./file1\x00', 0x42, 0x42) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000007a40)=0x10) pwritev2(r0, &(0x7f0000007a80)=[{&(0x7f0000007ac0)="85", 0x1}], 0x1, 0x10c6b, 0x0, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000007b00)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x42, '\x00', 0x0, r0, 0x2, 0x5, 0x1}, 0x50) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000cc0)=0x9969, 0x4) listen(r2, 0xe0000000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2200002, &(0x7f0000000080)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000000140)="$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") write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/sys/net/ipv4/conf/syz_tun/route_localnet\x00', 0x1, 0x0) write(r3, &(0x7f00000007c0)='1', 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080600010800060400010180c200efd3030002ac1e0101bbbbbbbbbbbb00"], 0x0) syz_mount_image$exfat(&(0x7f0000000940), &(0x7f0000000980)='./file2\x00', 0x8, &(0x7f00000009c0)=ANY=[], 0x1, 0x1520, &(0x7f0000000d00)="$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") chdir(&(0x7f0000002240)='./file0\x00') mount(&(0x7f00000022c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000002300)='./bus\x00', 0x0, 0x1084, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000226bd7000fedbdf25060000000800030063750000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8004) r5 = openat(0xffffffffffffff9c, &(0x7f0000002380)='./bus\x00', 0x8840, 0xa2) r6 = openat(0xffffffffffffff9c, &(0x7f00000023c0)='./bus\x00', 0x1c1002, 0x12) write(r6, &(0x7f0000002400)="d4", 0x1) sendfile(r6, r5, 0x0, 0x3ffff) truncate(&(0x7f0000002440)='./file3\x00', 0x10004) 5m6.368056896s ago: executing program 2 (id=1129): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="bce4422272454f19f89b37a37aa36b684e5f741cb4d2efa8c781856038c90f88ba4b0a1e8ec1bae88bf48a6d4fd0616c2707697ba7db2728b9ef7140369ec03c94bac8591dbe03ed4c721ad684d8bbc72fd34d3b17a55518678fc6df6b27170002d9de50bb4a6694db61612b99803e28431285c9df8b1b6b39cd66c90596bfb683f8af812b49c4afd1006c64edf8f7b4a6376a6ac8ac1ad8ab69bcd137709d3468bcd01bee53fbe69af8cd8a7593c905ef61540bde327f438ee283606bbcf265fb708657b7", 0xc5}, {&(0x7f00000016c0)="52760333e6612af9c35fea464ad54c5ccebed1efed19d54296a51354676ca8017f36c628abd746f5081bede844d15c095f30f2417a090d11a8467290bb591eb39171280d876322a283fd8a488855bcb304c4292b9c7146e10620c656de564571919fd19145887d3e59ab034392da06ab73cd66047cd6fd2025e9f4cfefc485b36af391c21fa80b6b97eb911ea7ae2d60415c49b10525f3bac3f3129949dc27fd15e7a2012f8c1aa598a1b60a1d36", 0xae}, {&(0x7f0000001780)="d4100cc14b15a8ca65cc253c5f6cc0427f5b12bf0063dc0324c3e432793e8c4114b2a32059ba011114557c71bae8aedc417b9660a7bb72b90a56eadf2adf1e4b0ef7dcf227c333517178dbf907d8604312efeb0923077d00c7cccfd25a754f2409cdde61ddacc3d7e81fa38cc41cbe3e14c8db9fc5b4113a21e3a3de68a8dc9c764e3f02d9af494820490b637245ac11a4328f7ac7181f5ff5b4afa62b8eb5a7eb77", 0xa2}, {&(0x7f0000001840)="afb6817ed11c46c37e4fd3bb1fd4b2230971c8ed810d89400a41b7d79fd5d9c76d24a31ece47b805c48336baeacb7847d90458921f305d17984699346dc0fdb76dc750d9", 0x44}], 0x5, &(0x7f0000001940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@noop, @generic={0x89, 0xf, "a2c045cbd81f5c242c425fdd22"}, @end, @rr={0x7, 0x7, 0x60, [@multicast1]}, @generic={0x88, 0x9, "7ee0a236668aff"}, @lsrr={0x83, 0x7, 0x1a, [@empty]}, @cipso={0x86, 0x74, 0x3, [{0x0, 0x6, "975b1135"}, {0x6, 0x12, "5c304f0646d63a58671473112ea9dbf4"}, {0x6, 0xe, "f7199709464f906ebad65891"}, {0x6, 0x9, "9dc727fbe5ff4b"}, {0x6, 0x3, "f7"}, {0x5, 0x10, "d2ccde9eaa9c2c283ee3b5d38e95"}, {0x1, 0x12, "e54c6c4b6bd9e12cab1e5ea0593e7215"}, {0x7, 0xf, "0ea4ab0cee87659f16dc41e87a"}, {0x0, 0xb, "ad1fbd754090061318"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0xa6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @multicast2, @rand_addr=0x64010100]}]}}}], 0x118}}, {{&(0x7f0000001a80)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002000)=[{&(0x7f0000001ac0)="36da43dd26a303cf398616f3194176df3abcebd4e327e9268fd096a8e6480df05c7097e4dee7f9994949c4e836e0a45072d81e3f5f03a279480575619090b9fbdd72d91a6b13fc76b8d4d5b5908abc9bf4e5a5dcaf38947c7058244b5b02348f149159a36650bfc4a239557909a29146a706aeb32725f51dfcd6f89a51cc45f3ea95002f102378252f1644f8e57d800ec153ea2ddb5cb51fc6c1bbfdeafa897f3b4d1c165a350f51e00e515f62d67f4ad1a3999fc1fa7f1f51230ede00c6", 0xbe}, {&(0x7f0000001b80)="5c690595899c6a855dc120c8e6b8762deea4b876ff7ac9051831731630007139d3d5db", 0x23}, {&(0x7f0000001bc0)="685ad7707e880af957bf3e0b1b81e3ee172f28f362ed2d260554d06d1f8c4f3b9f57e455b94d1356a9060fde9b6f46d461e7d1cdaf2887027396a8833baef12a4d1d57f69222e60c6161e9b2b01beeae65d2ce3844837fbb708e88ad0fe21f486e516761998ed2f0961e95af884d4c87fdda41fa8569501c6d1b32dd3ba82d1936b2d7e223a74639b16b367b2e03b6bde08a7588931c2a8950bf4ec4fb4b83372a63bc9279478c5ea223399c46064b7bdf39a32772a2c17203d79ade5fdd2553cfb7d0070b8e59b460d8cd9f1858ad1d60f87ed6785a48d6ca86cbbf68aafecd76f9a066e347008990cf01fb13a2c1b1da4d3a3150b5", 0xf6}, {&(0x7f0000001cc0)="e35a02", 0x3}, {&(0x7f0000001d00)="6bc535dff95e1e348ea1ca7746eb4734b2e8fb7b257e223316e8df24de22f7c2cc684971b26cdfed78d3251145adb0936253b466080ae249792b2f5f90296693205dddb2fc85716a7c2793f09a4816d088836dc825e2b7c78141fbb47e1591a9ddcb177de4c795b00c1fb90bf62d03c8716841d4fa8a24c09126706172d62c511bc183f03414c7df2f57290706c0639153a807497fc86cb4379521021a5915fc4f072a4f5dbf73c07afc29de8e23feeefc802fd91e220a00883c14fc54075902c234b4", 0xc3}, {&(0x7f0000001e00)="fd5e5c66e87c778d9871a1c427db1b630dc3e8c9f1317106681771bf994df8df1beb8e7dd1357fe78d9f1bc94df23bb8b08df47325d0310b371ae7e1f1913317ce36da4656cd87de9154e23286f0dce458a7b4caeee78da020568693f64cda8755a27de88b79c49f1d77e21e8b584fb2329cf09c2f8e16db364cfde7b07586d0f09abfa619d3180729e05c25760f2612b572dbb5fb68cc09de0d38e35add46adecb11f407f07cf00f87fc10df30adfd1f5bbb560f0262b82", 0xb8}, {&(0x7f0000001ec0)="c94d978e489e7a6997364ffde21c01b2039251a05c9bca53c600ad42b4b18dde7100fedba2af7816987fd4b33648c36121d56294e13e2f300984d6ed7142475d4ee89072acf5fa96a6d1c485a154e1009c75ae94c10819cc7898c6b71fbbb1a7539b09fec3a94674", 0x68}, {&(0x7f0000001f40)="6074bc26f8fc3422e1140aa43c4ecc9530ca6ac5ca7f86e06c82440f3017adc2163756b3fa21841804d6d84039b2e0352d6403e4239a028efb6b3d0d088c988effe64e3db77f11cdc534cf2b6d04b34be26f9eeaeedcbff23b97b3bc2cc09d2ba1b89de8274b22e1c63c9d759e", 0x6d}, {&(0x7f0000001fc0)="08b6ca95a691046f6d44474414a62d4154133e91f5335e7f5c69e103", 0x1c}], 0x9, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000000000000000000000200000009000000000000002c000000000000000000000007000000441ca880000000010000000600000002000000070000001000000001000000001400000000000000000000000200000009000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000027f000001001900001c0e0000000004000000000008000000", @ANYRES32=0x0, @ANYBLOB="ffffffffac1414bb00000000"], 0xa0}}], 0x2, 0x4000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = timerfd_create(0x1, 0x800) timerfd_settime(r2, 0x0, &(0x7f0000002a00)={{0x0, 0x1000}, {0x0, 0x1000}}, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/68, 0x0, 0x60000}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000002200)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002240)=@bpf_tracing={0x1a, 0xf, &(0x7f0000002300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f00000023c0)=@generic={0x0, r6}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000002400)={r5, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000002440)='./file2\x00', 0x0, &(0x7f0000002480)={[{@abort}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}, {@nolazytime}, {@nobh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_journal}, {@grpjquota}]}, 0x1, 0x484, &(0x7f0000002540)="$eJzs3MuPFMUfAPBv9z748frtiPjgoayikWjcZRdUDh7AaOJBExM94HHdXQiysIZdEyFEFw94NCTejUcT/wJPejHqycSr3g0JMVxAT216pnsfszOTYZjdAebzSYap6q5O1Xeqa6a6i94A+tZo/k8SsSMi/oiIkVp2bYHR2tvtm5en/7l5eTqJLHv376Ra7tbNy9Nl0fK47WVmqZbf16DehYuXzk7Nzc1eKPLji+c+Gl+4eOnFM+emTs+enj0/eezY0SMTr7w8+VJ1/3Cjxiftx5m36dbeT+f373nz/WtvT5+89sEv3yVl/HVxdMlog20DZeLZLlfWaztXpZPBIjHQo8bQtryL8u4aqo7/kRiIweV9I/HG5z1tHLChsizLtjTbmcRSBjzAkuh1C4DeKH/q8+vf8rVpk497wI0TtQugPO7bxau2ZzDSosxQ3fVtN+VXWyeX/v06f8XG3IcAAFjjhxO19/XzvzQeXVXueLE2VImIhyJiV0Q8HBG7I+KRiGrZxyLi8ZVDsnaWZ+oXSdbPf9LrHYbWlnz+92qxtrV2/lfO/qIyUOR2VuMfSk6dmZs9HBH/j4hDMbQlz0+0qOPH13//stm+0YisnP/lr7z+ci5YtCOtP2ZmanGq84jXunElYu9go/iT5ZWAvB/3RMTeA53Vceb5b/c32ze6av7bOP4WBjtrz2rZNxHP1fp/KeriLyWt1yfH/xdzs4fHy7NivV9/u/pOs/rvKv4uyPt/W8Pzfzn+SrJ6vXahum3dOdnK1T+/aHhNM9RW/On1wbob1Pn5P5y8V02X68KfTC0uXpiIGE7eKrYfX9k+uXJsmS/L5/EfOth4/O+KlU9iX0TkJ/ETEfFkRBwo2v5URDwdEQdbxP/za8982GzfvdD/M3fU/3eeGDj70/drKq20iD+JBv1/tJo6VGxp5/uveXNW7nnkYXX6uQEAAMD9JI2IHZGkY8vpNB0bq/1/+d2xLZ2bX1h84dT8x+dnas8IVGIoLe90jay6HzpR3DEo85PFZX6ZP1LcN/5qYGs1PzY9PzfT6+Chz21vMv5zf3l+Ax58XVhHA+5TnY7/LMs+63JTgE3m9x/6l/EP/avB+N9al2/6NwKA+1uj3//lC/vK5rYF2Fzm/9C/jH/oX8Y/9C/jH/rS3TzXXySutHjYvr1E/v1z183YxESW9aj24d7HvpyI9J5oxkYlotJm4TQiNqwZld59CL3+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiO/wIAAP//cAfiFg==") ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000003c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000000440)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x4008af04, &(0x7f0000000540)) 5m4.409130905s ago: executing program 2 (id=1136): r0 = socket(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x68, 0x14, 0xf0b, 0x80000, 0x0, {0x2, 0x0, 0x0, r1, {}, {0x10, 0xfffe}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x7d, 0x204, 0xa, 0x1, 0xfffffffc, 0x7b}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x5, 0x8, 0x2801, 0x2, 0xc, 0x1ff}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048814}, 0x20008090) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1, 0x804, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000680)=0x5, 0x4) bind$inet6(r5, &(0x7f00000006c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f0000000700), 0x0, 0x24008051, &(0x7f0000000740)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000780)={0x3, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020400060200000000bd7002fddbdf2571b3032604c12d1480aaed6f4ac5b975fdd9b603cff66aeb4c2f17bdbf9d6aa39ff300f9b5cb258e82bb96bfccc0a19cc0fdc5c61905392b332316c2c737917ea0f10cadb5dedbc7fc60b16658d5549bdc14b5d8f7a568f1094685d99764117e587c9fe22730a2e66f6b825d574ac55c2174b2b6f65f9fa8"], 0x10}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0xfffffffffffffe8c) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) 5m4.321487214s ago: executing program 33 (id=1136): r0 = socket(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x68, 0x14, 0xf0b, 0x80000, 0x0, {0x2, 0x0, 0x0, r1, {}, {0x10, 0xfffe}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x7d, 0x204, 0xa, 0x1, 0xfffffffc, 0x7b}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x5, 0x8, 0x2801, 0x2, 0xc, 0x1ff}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048814}, 0x20008090) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1, 0x804, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000680)=0x5, 0x4) bind$inet6(r5, &(0x7f00000006c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f0000000700), 0x0, 0x24008051, &(0x7f0000000740)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000780)={0x3, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020400060200000000bd7002fddbdf2571b3032604c12d1480aaed6f4ac5b975fdd9b603cff66aeb4c2f17bdbf9d6aa39ff300f9b5cb258e82bb96bfccc0a19cc0fdc5c61905392b332316c2c737917ea0f10cadb5dedbc7fc60b16658d5549bdc14b5d8f7a568f1094685d99764117e587c9fe22730a2e66f6b825d574ac55c2174b2b6f65f9fa8"], 0x10}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0xfffffffffffffe8c) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) 3m44.390178754s ago: executing program 6 (id=1568): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1100, 0x2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000780)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000e00)="1c73d79a4fdd5bc70adea395c06200bca34beb36a5049e851aab7260555cf66056039cc418b05890926e8c2e9173c55c9788a52a9e4ac05527de2f1506146d828421e0c3645528da2a513773d9efdb510372aa9bc6b684ab460610a4421e723f543574c3e8744872f3a2db01bef7af35248fd93fc92f89f86620000000350c182de03ba35a5b7fca8dfe66d3020220c514d82c74cdc33897542188af705194df2dd7342787c8866b70a2ce0041639ab8e3fb5419cafe67cc8e68dcd738e56e58809edaaf0999746495505d539b555ee97dec0f203516fcca5c654cd46c246073ebe748551d1ff52fa7006434fdb8131fe2b7ef1e0f", 0xf5}, {&(0x7f0000000800)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000840)="8a", 0x1}, {&(0x7f0000000880)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="ce90bfdb", 0x4}, {&(0x7f0000000a00)="f2e659", 0x3}, {&(0x7f0000000a40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000b00)="e1", 0x1}, {&(0x7f0000000b40)="fa", 0x1}, {&(0x7f0000000b80)="d8", 0x1}, {&(0x7f0000000bc0)="f2964dd1", 0x4}, {&(0x7f0000000c00)="b8a2f6", 0x3}, {&(0x7f0000000c40)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000d00)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)="87", 0x1}, {&(0x7f0000000dc0)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs]}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x26}, 0x28) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) write(r6, &(0x7f0000000080)="fa", 0xfffffdef) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$XFS_IOC_GETBMAPA(r7, 0xc020582c, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0x100, 0x7fff}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@acquire]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001740)={@flat=@weak_binder={0x77622a85, 0x100, 0x3, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x14}, @flat=@handle={0x73682a85, 0x10b, 0x1, 0x3}}, &(0x7f0000000580)={0x0, 0x18, 0x40}}, 0x4000}]}) 3m43.471185317s ago: executing program 6 (id=1572): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000600)={0x20071026}, &(0x7f0000000640)={0x200000, 0x200003, 0x0, 0x0, 0x3}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, 0x0) 3m43.430361361s ago: executing program 6 (id=1573): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xffe, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m43.323410842s ago: executing program 6 (id=1577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x100305) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000e40)={&(0x7f0000000b40)="293f0564407ab048aa090fd8f0130f0b86a56c72d5ba0ff319b775b9829b832f87b5bf83fe2dd5ee5a77ad835ab0a618d4852ebdeffa620d3e709dda256330632d7332dcff8c91e29dbecb2816900f1e139550eecab8224c1e130839cf1a6cf3e0146c27c864b76b9b8e20a96c80fce2b2fde9fad9db0b7dc68f329d1a9b7744a6178fd551bbaca7b7bb165cb6e36028efbe85c28c36d6ac5a02dce6b6a2dd8b77596799c03bfb69e02b7f797d9f0c097a0d914c0f608e0ccc84bba6dab643272752319dab4e0adf362b2edbbfe8bb887e5e882a892d128404aa2bd23cce", &(0x7f0000000c40)=""/97, &(0x7f0000000cc0)="0969c03bc93e3e3ad38f01d4e511887cf26542d70bdf9d4022fb4f9deb8bfd163a93f38b8987a81e78fb81194798", &(0x7f0000000d00)="f2a935d68f72a00848d42fee508b201d5e9e28b9dd11221c51eeb1e691e4a868de7cd78ef7044bf5543110d4beadf7babb60ac1be369c6adc492b7b9fd024472b47f3f9c3744c77c49e086753eea7d0598bf854a5ba7d5cecf462bcf5a2c9d88efe491e6b1067a61b901be5c4be89bfb959b8b2740bce14822a55d2688298b134150e912", 0x5, r1}, 0x38) r2 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x240}) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0x90000014}) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x8012, &(0x7f0000000640)={[{@noinit_itable}, {@nobh}, {@barrier}, {@sb={'sb', 0x3d, 0x1}}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x45e, &(0x7f00000006c0)="$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") statx(0xffffffffffffff9c, 0x0, 0x100, 0x1, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x44, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3cf4ff001300010029bd700032f1df2500000000b200bbbf7faa7a2daeaa0709e6e2e211fc3eef943c6a344a94165e747416283f13861731ed68adb6c2b9a06d8891fcb865bb1a2d6ee808f4561eed8f70e61ae9d5e8ec24c386829baee92cee445bb1b3618440d00a82cf8363b0b4c360f9ef9ba3ad606ef2845e4c339d5dff2b1b2c9c096ee0080c5ad0fa3ada3e97000905ed23338fe2ba079d9697117c6b8720a2ca63e0c7ce7cd0f196e97c2dbb534cd6657ebaad7566ec5c0f91d02f3793fd863ca9422b5938c43e974d4a3217d56064675f00000000000000", @ANYRES32=r8, @ANYBLOB="242400002248000008001300", @ANYRES32=r6, @ANYBLOB="140003006970766c616e31000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x0) 3m43.015168233s ago: executing program 6 (id=1583): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000600)={0x20071026}, &(0x7f0000000640)={0x200000, 0x200003, 0x0, 0x0, 0x3}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, 0x0) 3m42.770054158s ago: executing program 6 (id=1585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000203010100000000000000000200"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x121002, 0x5, 0x0, 0xa, 0x8000000000000001, 0x2, 0xdc2, 0x101, 0x3, 0x2], 0x4000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000200)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m42.701322915s ago: executing program 34 (id=1585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000203010100000000000000000200"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x121002, 0x5, 0x0, 0xa, 0x8000000000000001, 0x2, 0xdc2, 0x101, 0x3, 0x2], 0x4000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000200)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m9.429842488s ago: executing program 3 (id=2058): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x40040c0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000840)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000a00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a80)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b00), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000b40), 0x4000087, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000680)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xffe, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r7 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=r8, 0x22, 0x1, 0xa6f, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0}, 0x40) 2m7.813843392s ago: executing program 3 (id=2061): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000300)='.\x00', 0x808) inotify_rm_watch(r4, r5) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) pwritev(r7, &(0x7f00000002c0)=[{&(0x7f00000004c0)="01000000", 0x4}, {&(0x7f0000000500)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000540)="747369587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x2000000000000004) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) clock_getres(0xfffffffffffffffb, 0x0) ptrace(0x10, r0) 2m6.84975545s ago: executing program 3 (id=2070): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x808) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f00000004c0)="01000000", 0x4}, {&(0x7f0000000500)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000540)="747369587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x2000000000000004) 2m4.171676222s ago: executing program 3 (id=2086): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x280400b, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8, @ANYRES16], 0x1, 0x23a, &(0x7f0000000080)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00009d2000/0x400000)=nil) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socket$can_raw(0x1d, 0x3, 0x1) syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0xa0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x74, 0x2, [@TCA_BPF_ACT={0x70, 0x1, [@m_mirred={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x3c, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "a1b660f5208936232c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000004c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f00000005c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000640)=[{&(0x7f00000006c0)=""/100, 0x365}, {&(0x7f0000000740)=""/85, 0x7c}, {&(0x7f00000007c0)=""/4096, 0x197}, {&(0x7f00000017c0)=""/106, 0x645}, {&(0x7f0000001840)=""/73, 0x1b}, {&(0x7f00000018c0)=""/77, 0x14}, {&(0x7f0000001940)=""/154, 0x21}, {&(0x7f0000001a00)=""/17, 0x1d8}], 0x21, &(0x7f0000001a40)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000001b00)={0x77359400}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 2m4.119073137s ago: executing program 3 (id=2087): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x1b0, &(0x7f0000000300)="$eJzslDGPEkEUx/8zC7tuYoRWKxNJxMJld1EjhQW1hSYajZ1EVoIuYmALoPNTWPsxiA3fQwu96hquu+qKuczsLAzk7uAuB1vc+xVv/rP7dubN28kfBEHcWA7+H//jqLhS30YFjn5+aC1zuJE/LZ08+tN99funf/R3OnvZWF+PARBi+/0LAGZNC4meC7H6dUWPb8EzXTTfvweDp/VHcLzTOgLDB62/GLov8z3vczeOvE/9uC2FL0MgQyhDfb2++Q+GdipVicx4PxxPvrbiOBrsUGzq37zJ8cLon/m/st744FbWywAcgdZ1MLzR+jmcrDdpS4zz3yss17eudn55k3bfrC3EHV37fja9W9qQU0Su3di/kFdp7CLvMi4UtzIfufTnDOqqK/I+RZ5i6U/iF8NDw58Khn/Ukt732nA8edzttTpRJ/oWhvVn/hPffxrWlBGlccXz7BX/c5U/wVi/eI5X2szGqJUkgyCNi3k4cpAMwrMc11b+x1F9kFbN1vbPnqHM7suhauk5QRAEQRAEQRAEQRAEQRDEtVLWo1C4CyUamRDCSYfwtco8DQAA//8J4Fqh") unshare(0x22020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) fstatfs(r0, &(0x7f0000000740)=""/200) r1 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000100)='ro\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x1000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 2m3.914737828s ago: executing program 3 (id=2090): mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = inotify_init() inotify_rm_watch(r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x2000000000000004) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m3.914524418s ago: executing program 35 (id=2090): mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = inotify_init() inotify_rm_watch(r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x2000000000000004) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 10.967032258s ago: executing program 0 (id=2667): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040a41535900002000000010902270001010080fa0904000003ff00000007050202000200070581"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f00000001c0)) 7.923934276s ago: executing program 0 (id=2693): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="401001"], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f00000006c0)="9001000000000000") read$char_usb(r2, &(0x7f0000000700)=""/243, 0xf3) 4.277601456s ago: executing program 0 (id=2710): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000300)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000380), 0x4) 4.276650557s ago: executing program 0 (id=2711): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES8], 0x0) 3.15180863s ago: executing program 1 (id=2715): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) 3.100942126s ago: executing program 1 (id=2716): unshare(0x2000400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000900)='\x00', 0x89901) recvmmsg(r0, 0x0, 0x0, 0x40010022, 0x0) 2.933498462s ago: executing program 1 (id=2717): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000040)={{0x1, @rand_addr, 0xfffd, 0x2, 'wlc\x00', 0x8, 0x2, 0x3}, {@private=0xa010100, 0xfffd, 0x3, 0x8, 0x0, 0x40}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0)) 2.922475594s ago: executing program 1 (id=2718): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/4096, 0x8ff8}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.827215333s ago: executing program 0 (id=2719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20049000) 2.826981753s ago: executing program 0 (id=2720): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ptrace(0x10, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 2.523163204s ago: executing program 8 (id=2725): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000180), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000001c0)={0x4000}) 2.402395666s ago: executing program 8 (id=2726): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x107, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000b2111d40c71b10905336000000010902f50001000000000904"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="0f20c035000000200f22c0b9b1030000b8f0ffffffbaffffff7f0f3066baf80cb8bb0e708bef66bafc0cb044ee440f20c03507000000440f22c0410f185e4666b86a008ed8440f0748b80d180000000000000f23c00f21f835010002000f23f8c4217d29d9a20068000000000000", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000540)=0xc) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000580)=0x1, 0x4) bind$inet6(r6, &(0x7f00000005c0)={0xa, 0x20e6, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000600)=0x80000000, 0x4) write$tun(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="010530000a0028000600000060000000003011402001000000000000"], 0x64) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000480)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000300), 0x3, 0x88000) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0xa2080, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) read(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2.07044805s ago: executing program 1 (id=2727): r0 = fsopen(&(0x7f00000006c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000700)='cgroup2\x00', &(0x7f0000000740)='./file0\x00', r1) 2.011123566s ago: executing program 1 (id=2728): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x240, 0x2e8, 0x2e8, 0x240, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xffffffff, 0xff, 0xff, 0xffffffff], [0xff, 0xff, 0x0, 0xff000000], 'veth1_to_hsr\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x0, 0x4}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x69, 0x5}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xff000000, 0xffffff00, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'pimreg1\x00', {0xcf0f066856f06171}, {0xff}, 0x1d, 0x5, 0x2, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x4a3, 0xd, 0x3, '\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[]) 1.759137282s ago: executing program 7 (id=2731): r0 = socket$inet6(0xa, 0x80002, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x5, 0xfffffffb, 0x0, 0x4}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x33}}}], 0x18}}], 0x1, 0x4001c00) 1.758977732s ago: executing program 7 (id=2732): add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="000000000000000463656c6c00000002000000440000000600000000000000000200000000000000020000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000140000000200"/112, 0x70, 0xffffffffffffffff) 1.758794622s ago: executing program 7 (id=2733): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3508, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.730375125s ago: executing program 7 (id=2734): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1002000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x2000000000000) 1.668623901s ago: executing program 7 (id=2735): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0x55, &(0x7f00000003c0)=""/108) 1.611116247s ago: executing program 7 (id=2736): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000180)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000440)={0x40, 0x1, 0x5, "7fcbb85aa9"}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 1.595237328s ago: executing program 5 (id=2737): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e00000034004109080008000600000006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x4]}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 933.762796ms ago: executing program 8 (id=2738): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x200, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000180)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000002c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000120001f525bd7000fcdb", @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 852.036154ms ago: executing program 8 (id=2739): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0xfffffffffffffffc, 0x608000, 0x800, 0x0, 0x2}, 0x5d) 795.04795ms ago: executing program 8 (id=2740): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) getpeername$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340, 0x210}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000740)={0x0, @multicast2, @dev}, &(0x7f0000000780)=0xc) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x8000) fchdir(r2) exit(0xfffffffffffffffd) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f00000001c0)=0x1f00, 0x12) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xffffffffffffff71) ioctl$int_in(r8, 0x5452, &(0x7f0000000100)=0x10001) write(r6, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000) 604.836769ms ago: executing program 5 (id=2741): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0xfffa83) 209.400049ms ago: executing program 5 (id=2742): mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f00000002c0)={0x18, 0x2, {0xfff8, @private=0xa010102}}, 0x1e) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002380), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000023c0)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002780)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(r1, &(0x7f0000002400)=[{&(0x7f0000002440)='}m', 0x2}], 0x1) 131.106207ms ago: executing program 5 (id=2743): unshare(0x2c020400) pidfd_send_signal(0xffffffffffffffff, 0x23, 0x0, 0x0) 130.810337ms ago: executing program 5 (id=2744): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 89.764881ms ago: executing program 5 (id=2745): r0 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) 0s ago: executing program 8 (id=2746): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @private=0xa010100}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e26, @multicast2}, {0x20000010304, @local}, 0x12, {0x2, 0x4e24, @multicast1}, 'lo\x00'}) kernel console output (not intermixed with test programs): ered promiscuous mode [ 513.448750][T19893] loop5: detected capacity change from 0 to 1024 [ 513.874633][T19893] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 514.326103][ T2880] EXT4-fs (loop5): unmounting filesystem. [ 514.340575][T20003] binder: 19998:20003 ioctl c0306201 0 returned -14 [ 514.388997][T20007] binder_alloc: 20000: binder_alloc_buf size 16496 failed, no address space [ 514.393643][T20009] loop5: detected capacity change from 0 to 1024 [ 514.397678][T20007] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 514.489272][T20009] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 514.565648][T20006] loop0: detected capacity change from 0 to 40427 [ 514.567061][ T2880] EXT4-fs (loop5): unmounting filesystem. [ 514.581591][T20006] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 514.591688][T20006] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 514.595950][T20010] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.614237][T20006] F2FS-fs (loop0): invalid crc value [ 514.619857][T20010] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.628254][T20010] device bridge_slave_0 entered promiscuous mode [ 514.648077][T20010] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.656859][T20006] F2FS-fs (loop0): Mismatch valid blocks 5 vs. 7 [ 514.665702][T20010] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.673202][T20010] device bridge_slave_1 entered promiscuous mode [ 514.709593][T20006] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 514.750427][T20010] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.757495][T20010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.764775][T20010] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.771812][T20010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.797110][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.805343][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.818664][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.836267][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.848631][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.864042][ T4888] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.871114][ T4888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.890687][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 514.898953][ T4888] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.906018][ T4888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.914020][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.924091][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.018281][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.031610][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.045804][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.057679][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 515.058206][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.158698][T20026] loop0: detected capacity change from 0 to 256 [ 515.989418][T20010] device veth0_vlan entered promiscuous mode [ 516.011078][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.026160][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.038409][T20010] device veth1_macvtap entered promiscuous mode [ 516.049930][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.063403][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 516.071874][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.105819][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 516.117438][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.166857][T20042] FAULT_INJECTION: forcing a failure. [ 516.166857][T20042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.180003][T20042] CPU: 0 PID: 20042 Comm: syz.5.2446 Not tainted syzkaller #0 [ 516.187474][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 516.197533][T20042] Call Trace: [ 516.200810][T20042] [ 516.203738][T20042] __dump_stack+0x21/0x24 [ 516.208069][T20042] dump_stack_lvl+0x110/0x170 [ 516.212740][T20042] ? __cfi_dump_stack_lvl+0x8/0x8 [ 516.217757][T20042] dump_stack+0x15/0x24 [ 516.221903][T20042] should_fail_ex+0x3bf/0x510 [ 516.226571][T20042] should_fail+0xb/0x10 [ 516.230726][T20042] should_fail_usercopy+0x1a/0x20 [ 516.235748][T20042] _copy_from_user+0x1e/0xc0 [ 516.240316][T20042] iovec_from_user+0x1aa/0x2e0 [ 516.245057][T20042] __import_iovec+0x6d/0x460 [ 516.249624][T20042] ? kstrtoull+0x137/0x1d0 [ 516.254017][T20042] import_iovec+0x7c/0xb0 [ 516.258324][T20042] ___sys_sendmsg+0x252/0x360 [ 516.262977][T20042] ? __sys_sendmsg+0x290/0x290 [ 516.267716][T20042] ? __kasan_check_write+0x14/0x20 [ 516.272803][T20042] ? proc_fail_nth_write+0x180/0x200 [ 516.278078][T20042] ? vfs_write+0xa51/0xd00 [ 516.282470][T20042] ? __fdget+0x19c/0x220 [ 516.286697][T20042] __x64_sys_sendmsg+0x20d/0x2e0 [ 516.291633][T20042] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 516.297088][T20042] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 516.303154][T20042] x64_sys_call+0x171/0x9a0 [ 516.307659][T20042] do_syscall_64+0x4c/0xa0 [ 516.312067][T20042] ? clear_bhb_loop+0x30/0x80 [ 516.316741][T20042] ? clear_bhb_loop+0x30/0x80 [ 516.321414][T20042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.327305][T20042] RIP: 0033:0x7f8eb419fb19 [ 516.331717][T20042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.351320][T20042] RSP: 002b:00007f8eb503e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.359736][T20042] RAX: ffffffffffffffda RBX: 00007f8eb4425fa0 RCX: 00007f8eb419fb19 [ 516.367701][T20042] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 516.375660][T20042] RBP: 00007f8eb503e090 R08: 0000000000000000 R09: 0000000000000000 [ 516.383623][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.391581][T20042] R13: 00007f8eb4426038 R14: 00007f8eb4425fa0 R15: 00007fffc9ea89a8 [ 516.399549][T20042] [ 516.417714][T20044] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 516.426553][T20044] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 517.204021][ T328] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 517.444099][ T28] kauditd_printk_skb: 1247 callbacks suppressed [ 517.444115][ T28] audit: type=1326 audit(1794037103.957:31206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.1.2447" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 517.550793][ T28] audit: type=1326 audit(1794037103.987:31207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.1.2447" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 517.576178][ T28] audit: type=1326 audit(1794037103.987:31208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.1.2447" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 517.748971][T20054] loop7: detected capacity change from 0 to 1024 [ 517.838238][ T28] audit: type=1326 audit(1794037103.987:31209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.1.2447" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 517.868815][ T425] device bridge_slave_1 left promiscuous mode [ 517.898227][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.914339][T20054] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 518.053066][ T425] device bridge_slave_0 left promiscuous mode [ 518.089681][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.098804][ T999] Bluetooth: hci1: command 0x1003 tx timeout [ 518.098827][ T329] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 518.152394][ T425] device veth1_macvtap left promiscuous mode [ 518.159694][ T28] audit: type=1326 audit(1794037103.987:31210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.1.2447" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 518.186046][ T425] device veth0_vlan left promiscuous mode [ 518.240221][ T28] audit: type=1326 audit(1794037103.987:31211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.1.2447" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 518.267374][ T28] audit: type=1326 audit(1794037103.987:31212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.1.2447" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 518.424845][ T28] audit: type=1326 audit(1794037103.987:31213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.1.2447" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 518.425151][ T6404] EXT4-fs (loop7): unmounting filesystem. [ 518.449858][ T28] audit: type=1326 audit(1794037103.987:31214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.1.2447" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 518.449905][ T28] audit: type=1326 audit(1794037103.987:31215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.1.2447" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 518.569019][T20165] loop1: detected capacity change from 0 to 16 [ 518.579964][T20165] erofs: (device loop1): mounted with root inode @ nid 36. [ 518.606038][T20165] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 518.615074][T20165] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 518.624362][T20165] syz.1.2447: attempt to access beyond end of device [ 518.624362][T20165] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 518.638714][T20165] syz.1.2447: attempt to access beyond end of device [ 518.638714][T20165] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 518.722887][T20163] binder: 20061:20163 ioctl c0306201 0 returned -14 [ 519.315419][T20175] loop5: detected capacity change from 0 to 16 [ 519.385115][T20175] erofs: (device loop5): mounted with root inode @ nid 36. [ 519.403425][T20179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2454'. [ 519.440138][T20175] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 519.464135][T20175] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 519.495152][T20175] syz.5.2449: attempt to access beyond end of device [ 519.495152][T20175] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 519.558534][T20175] syz.5.2449: attempt to access beyond end of device [ 519.558534][T20175] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 519.659149][T20185] loop1: detected capacity change from 0 to 512 [ 519.668874][T20185] EXT4-fs: Ignoring removed nobh option [ 519.685452][T20185] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 519.711087][T20185] EXT4-fs (loop1): Remounting filesystem read-only [ 519.719280][T20185] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2456: invalid indirect mapped block 4278190080 (level 0) [ 519.766392][T20185] EXT4-fs (loop1): Remounting filesystem read-only [ 519.794046][T20185] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2456: invalid indirect mapped block 1 (level 1) [ 519.868896][T20185] EXT4-fs (loop1): Remounting filesystem read-only [ 519.876833][T20189] loop0: detected capacity change from 0 to 1024 [ 519.877567][T20185] EXT4-fs (loop1): 1 truncate cleaned up [ 519.898172][T20185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 519.919384][T20189] EXT4-fs: Ignoring removed i_version option [ 519.940345][T20189] EXT4-fs: Ignoring removed oldalloc option [ 519.964710][T20010] EXT4-fs (loop1): unmounting filesystem. [ 519.982953][T20189] EXT4-fs (loop0): can't mount with commit=4, fs mounted w/o journal [ 520.090683][T20295] binder_alloc: 20193: binder_alloc_buf size 16496 failed, no address space [ 520.099554][T20295] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 520.148043][T20388] loop7: detected capacity change from 0 to 128 [ 520.651138][T20507] loop5: detected capacity change from 0 to 256 [ 520.697189][T20507] FAT-fs (loop5): Unrecognized mount option "xœìÝ»‹cU" or missing value [ 520.813284][T20507] loop5: detected capacity change from 0 to 256 [ 520.874051][T20507] FAT-fs (loop5): Unrecognized mount option "utf8=1(uni_xlate=1" or missing value [ 521.134198][T20515] loop1: detected capacity change from 0 to 16 [ 521.145662][T20515] erofs: (device loop1): mounted with root inode @ nid 36. [ 521.174518][T20515] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 521.183596][T20515] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 521.192779][T20515] syz.1.2465: attempt to access beyond end of device [ 521.192779][T20515] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 521.207123][T20515] syz.1.2465: attempt to access beyond end of device [ 521.207123][T20515] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 522.215258][ T308] kworker/u4:3: attempt to access beyond end of device [ 522.215258][ T308] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 522.609782][T20524] loop7: detected capacity change from 0 to 16 [ 523.240471][ T28] kauditd_printk_skb: 832 callbacks suppressed [ 523.240490][ T28] audit: type=1326 audit(1794037108.927:32048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.7.2469" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751ad9fb19 code=0x7ffc0000 [ 523.271168][T20511] loop5: detected capacity change from 0 to 40427 [ 523.355097][T20524] erofs: (device loop7): mounted with root inode @ nid 36. [ 523.394985][T20511] F2FS-fs (loop5): invalid crc value [ 523.439861][T20511] F2FS-fs (loop5): Found nat_bits in checkpoint [ 523.454328][T20527] loop8: detected capacity change from 0 to 512 [ 523.469877][T20527] EXT4-fs: Ignoring removed nobh option [ 523.482047][T20531] 9pnet_fd: Insufficient options for proto=fd [ 523.509081][ T28] audit: type=1326 audit(1794037108.927:32049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.7.2469" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f751ad9f882 code=0x7ffc0000 [ 523.559680][ T28] audit: type=1326 audit(1794037108.927:32050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.7.2469" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f751ad9f917 code=0x7ffc0000 [ 523.569551][T20527] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 523.586504][ T28] audit: type=1326 audit(1794037108.927:32051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.7.2469" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f751ad5c811 code=0x7ffc0000 [ 523.607525][T20527] EXT4-fs (loop8): Remounting filesystem read-only [ 523.624775][ T28] audit: type=1326 audit(1794037108.927:32052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.7.2469" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f751ada0909 code=0x7ffc0000 [ 523.630811][T20527] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2470: invalid indirect mapped block 4278190080 (level 0) [ 523.655437][T20511] F2FS-fs (loop5): Start checkpoint disabled! [ 523.669902][T20527] EXT4-fs (loop8): Remounting filesystem read-only [ 523.675504][ T28] audit: type=1326 audit(1794037108.927:32053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.7.2469" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f751ad5c87b code=0x7ffc0000 [ 523.682217][T20527] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2470: invalid indirect mapped block 1 (level 1) [ 523.706706][ T28] audit: type=1326 audit(1794037108.927:32054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.7.2469" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751ad9fb19 code=0x7ffc0000 [ 523.720777][T20511] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 523.752752][T20527] EXT4-fs (loop8): Remounting filesystem read-only [ 523.760489][T20527] EXT4-fs (loop8): 1 truncate cleaned up [ 523.766417][T20511] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 523.772448][ T28] audit: type=1326 audit(1794037108.927:32055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.7.2469" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751ad9fb19 code=0x7ffc0000 [ 523.774426][T20527] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 523.816921][ T28] audit: type=1326 audit(1794037108.927:32056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.7.2469" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f751ad5bf6c code=0x7ffc0000 [ 523.843128][ T28] audit: type=1326 audit(1794037108.927:32057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.7.2469" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f751ad5bfce code=0x7ffc0000 [ 523.875386][T20524] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 523.884900][T20524] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 523.896625][T20524] syz.7.2469: attempt to access beyond end of device [ 523.896625][T20524] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 523.911130][T20524] syz.7.2469: attempt to access beyond end of device [ 523.911130][T20524] loop7: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 524.022516][ T9679] EXT4-fs (loop8): unmounting filesystem. [ 524.300650][T21151] binder_alloc: 21145: binder_alloc_buf size 16496 failed, no address space [ 524.309419][T21151] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 524.532361][T21156] loop1: detected capacity change from 0 to 1024 [ 524.710289][T21158] binder: 21157:21158 ioctl c0306201 200000000880 returned -14 [ 524.817078][T21156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 525.011043][T21144] loop0: detected capacity change from 0 to 40427 [ 525.100808][T21158] loop7: detected capacity change from 0 to 1024 [ 525.371610][T21144] F2FS-fs (loop0): invalid crc value [ 525.413121][T20010] EXT4-fs (loop1): unmounting filesystem. [ 525.421766][T21144] F2FS-fs (loop0): Found nat_bits in checkpoint [ 525.428945][T21158] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 525.439060][T21158] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.457640][T21158] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.2476: lblock 0 mapped to illegal pblock 0 (length 1) [ 525.486206][T21158] EXT4-fs (loop7): Remounting filesystem read-only [ 525.500577][T21158] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.2476: lblock 0 mapped to illegal pblock 0 (length 1) [ 525.514075][T21158] EXT4-fs (loop7): Remounting filesystem read-only [ 525.520671][T21158] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.2476: lblock 0 mapped to illegal pblock 0 (length 1) [ 525.534498][T21158] EXT4-fs (loop7): Remounting filesystem read-only [ 525.543895][T21158] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.2476: lblock 0 mapped to illegal pblock 0 (length 1) [ 525.544245][T21144] F2FS-fs (loop0): Start checkpoint disabled! [ 525.700753][T21158] EXT4-fs (loop7): Remounting filesystem read-only [ 525.710431][T21144] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 525.751758][T21157] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.2476: lblock 0 mapped to illegal pblock 0 (length 1) [ 525.797711][T21144] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 525.895085][T21157] EXT4-fs (loop7): Remounting filesystem read-only [ 526.018436][T21158] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.2476: lblock 0 mapped to illegal pblock 0 (length 1) [ 526.185035][T21158] EXT4-fs (loop7): Remounting filesystem read-only [ 526.348892][T21157] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.2476: lblock 0 mapped to illegal pblock 0 (length 1) [ 526.381786][T21157] EXT4-fs (loop7): Remounting filesystem read-only [ 526.391400][T21158] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.2476: lblock 0 mapped to illegal pblock 0 (length 1) [ 526.413652][T21158] EXT4-fs (loop7): Remounting filesystem read-only [ 526.438764][T21157] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.2476: lblock 0 mapped to illegal pblock 0 (length 1) [ 526.497467][T21157] EXT4-fs (loop7): Remounting filesystem read-only [ 526.765530][T21278] device vlan2 entered promiscuous mode [ 527.488166][T21169] loop1: detected capacity change from 0 to 40427 [ 527.560909][T21169] F2FS-fs (loop1): invalid crc value [ 527.611502][T21169] F2FS-fs (loop1): Found nat_bits in checkpoint [ 527.882004][T21287] loop8: detected capacity change from 0 to 16 [ 528.719157][ T28] kauditd_printk_skb: 284 callbacks suppressed [ 528.719282][ T28] audit: type=1326 audit(1794037114.387:32342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.8.2482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 528.753409][T21287] erofs: (device loop8): mounted with root inode @ nid 36. [ 528.783195][T21287] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 528.792244][T21287] erofs: (device loop8): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 528.801480][T21287] syz.8.2482: attempt to access beyond end of device [ 528.801480][T21287] loop8: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 528.815844][T21287] syz.8.2482: attempt to access beyond end of device [ 528.815844][T21287] loop8: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 529.027112][T21169] F2FS-fs (loop1): Start checkpoint disabled! [ 529.132686][T21169] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 529.239015][ T28] audit: type=1326 audit(1794037114.387:32343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.8.2482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f717939f882 code=0x7ffc0000 [ 529.268759][ T28] audit: type=1326 audit(1794037114.387:32344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.8.2482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f717939f917 code=0x7ffc0000 [ 529.418705][ T28] audit: type=1326 audit(1794037114.387:32345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.8.2482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f717935c811 code=0x7ffc0000 [ 529.478722][ T28] audit: type=1326 audit(1794037114.387:32346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.8.2482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f71793a0909 code=0x7ffc0000 [ 529.548720][ T28] audit: type=1326 audit(1794037114.387:32347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.8.2482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f717935c87b code=0x7ffc0000 [ 529.628727][ T28] audit: type=1326 audit(1794037114.387:32348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.8.2482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 529.698739][ T28] audit: type=1326 audit(1794037114.387:32349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.8.2482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 529.768704][ T28] audit: type=1326 audit(1794037114.387:32350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.8.2482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f717935bf6c code=0x7ffc0000 [ 529.839452][T21303] loop1: detected capacity change from 0 to 16 [ 529.845678][ T28] audit: type=1326 audit(1794037114.387:32351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.8.2482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f717935bfce code=0x7ffc0000 [ 529.883175][T21303] erofs: (device loop1): mounted with root inode @ nid 36. [ 529.998967][T21311] incfs: Backing dir is not set, filesystem can't be mounted. [ 530.032331][T21311] incfs: mount failed -2 [ 530.122263][T21316] loop7: detected capacity change from 0 to 4096 [ 530.178230][T21316] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 530.527410][T21325] device vlan3 entered promiscuous mode [ 530.703505][T21328] loop1: detected capacity change from 0 to 1024 [ 530.850070][T21328] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.2493: lblock 2 mapped to illegal pblock 2 (length 1) [ 530.975144][T21328] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.2493: lblock 0 mapped to illegal pblock 48 (length 1) [ 531.201083][T21331] incfs: Backing dir is not set, filesystem can't be mounted. [ 531.208603][T21331] incfs: mount failed -2 [ 531.242694][T21328] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.2493: Failed to acquire dquot type 0 [ 531.255318][T21328] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 531.265132][T21328] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.2493: mark_inode_dirty error [ 531.276756][T21328] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 531.287015][T21328] EXT4-fs (loop1): 1 orphan inode deleted [ 531.292803][T21328] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 531.301338][ T308] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 531.328734][ T937] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 531.348835][ T308] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 0 [ 531.447491][T21414] loop5: detected capacity change from 0 to 1024 [ 531.571863][T21414] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 532.242799][ T2880] EXT4-fs (loop5): unmounting filesystem. [ 532.262204][T21447] loop5: detected capacity change from 0 to 256 [ 532.306171][T21447] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 532.436813][T20010] EXT4-fs (loop1): unmounting filesystem. [ 532.449983][ T10] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 532.450984][ T937] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.473900][ T937] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.484567][ T10] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 0 [ 532.486707][ T937] usb 9-1: config 0 interface 0 has no altsetting 0 [ 532.504656][ T937] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 532.513772][ T937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.514039][T20010] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 532.522626][ T937] usb 9-1: config 0 descriptor?? [ 532.539717][ T6404] EXT4-fs (loop7): unmounting filesystem. [ 532.540006][T20010] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 532.555253][T20010] EXT4-fs error (device loop1): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 532.613187][T21553] device vlan3 entered promiscuous mode [ 532.961272][ T937] hid-generic 0003:1B1C:0A55.0003: ignoring exceeding usage max [ 532.981318][ T937] hid-generic 0003:1B1C:0A55.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:0a55] on usb-dummy_hcd.8-1/input0 [ 532.984487][T21562] FAULT_INJECTION: forcing a failure. [ 532.984487][T21562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.006565][T21562] CPU: 1 PID: 21562 Comm: syz.7.2503 Not tainted syzkaller #0 [ 533.014027][T21562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 533.024068][T21562] Call Trace: [ 533.027329][T21562] [ 533.030241][T21562] __dump_stack+0x21/0x24 [ 533.034554][T21562] dump_stack_lvl+0x110/0x170 [ 533.039206][T21562] ? __cfi_dump_stack_lvl+0x8/0x8 [ 533.044210][T21562] ? memcpy+0x56/0x70 [ 533.048171][T21562] dump_stack+0x15/0x24 [ 533.052308][T21562] should_fail_ex+0x3bf/0x510 [ 533.056966][T21562] should_fail+0xb/0x10 [ 533.061100][T21562] should_fail_usercopy+0x1a/0x20 [ 533.066106][T21562] strncpy_from_user+0x24/0x2c0 [ 533.070939][T21562] bpf_prog_load+0x1f1/0x1670 [ 533.075677][T21562] ? map_freeze+0x3a0/0x3a0 [ 533.080162][T21562] ? selinux_bpf+0xc7/0xf0 [ 533.084559][T21562] ? security_bpf+0x93/0xb0 [ 533.089039][T21562] __sys_bpf+0x57b/0x850 [ 533.093260][T21562] ? bpf_link_show_fdinfo+0x330/0x330 [ 533.098613][T21562] ? __cfi_ksys_write+0x10/0x10 [ 533.103441][T21562] ? do_user_addr_fault+0x9a5/0x1030 [ 533.108710][T21562] ? debug_smp_processor_id+0x17/0x20 [ 533.114069][T21562] __x64_sys_bpf+0x7c/0x90 [ 533.118460][T21562] x64_sys_call+0x488/0x9a0 [ 533.122960][T21562] do_syscall_64+0x4c/0xa0 [ 533.127353][T21562] ? clear_bhb_loop+0x30/0x80 [ 533.132010][T21562] ? clear_bhb_loop+0x30/0x80 [ 533.136685][T21562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.142556][T21562] RIP: 0033:0x7f751ad9fb19 [ 533.146956][T21562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.166538][T21562] RSP: 002b:00007f751bc42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.174933][T21562] RAX: ffffffffffffffda RBX: 00007f751b025fa0 RCX: 00007f751ad9fb19 [ 533.182880][T21562] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000005 [ 533.190827][T21562] RBP: 00007f751bc42090 R08: 0000000000000000 R09: 0000000000000000 [ 533.198784][T21562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.206732][T21562] R13: 00007f751b026038 R14: 00007f751b025fa0 R15: 00007ffddd1aa0b8 [ 533.214685][T21562] [ 533.277550][T21566] loop0: detected capacity change from 0 to 16 [ 533.359434][T21566] erofs: (device loop0): mounted with root inode @ nid 36. [ 533.388893][T21566] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 533.397887][T21566] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 533.407127][T21566] syz.0.2502: attempt to access beyond end of device [ 533.407127][T21566] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 533.421481][T21566] syz.0.2502: attempt to access beyond end of device [ 533.421481][T21566] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 533.729029][ T28] kauditd_printk_skb: 559 callbacks suppressed [ 533.729050][ T28] audit: type=1326 audit(1794037120.247:32907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.0.2502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f41af56034e code=0x7ffc0000 [ 533.980410][ T28] audit: type=1326 audit(1794037120.277:32908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.0.2502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f41af56034e code=0x7ffc0000 [ 534.032631][ T292] usb 9-1: USB disconnect, device number 3 [ 534.050990][ T28] audit: type=1326 audit(1794037120.277:32909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.0.2502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f41af56034e code=0x7ffc0000 [ 534.076119][ T28] audit: type=1326 audit(1794037120.277:32910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.0.2502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f41af56034e code=0x7ffc0000 [ 534.079938][T21577] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 534.101091][ T28] audit: type=1326 audit(1794037120.277:32911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.0.2502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f41af56034e code=0x7ffc0000 [ 534.148803][ T28] audit: type=1326 audit(1794037120.277:32912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.0.2502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f41af56034e code=0x7ffc0000 [ 534.178549][ T28] audit: type=1326 audit(1794037120.277:32913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.0.2502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f41af56034e code=0x7ffc0000 [ 534.204693][ T28] audit: type=1326 audit(1794037120.277:32914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.0.2502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f41af56034e code=0x7ffc0000 [ 534.261272][ T28] audit: type=1326 audit(1794037120.287:32915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.0.2502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f41af56034e code=0x7ffc0000 [ 534.288531][ T28] audit: type=1326 audit(1794037120.287:32916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.0.2502" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f41af56034e code=0x7ffc0000 [ 534.533950][T22151] loop1: detected capacity change from 0 to 1024 [ 535.324375][T22151] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 535.490851][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 535.497835][T22223] binder_alloc: 22218: binder_alloc_buf size 16496 failed, no address space [ 535.506586][T22223] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 535.810660][T22225] loop0: detected capacity change from 0 to 1024 [ 535.847419][T20010] EXT4-fs (loop1): unmounting filesystem. [ 535.948988][T22225] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 536.581111][ T289] EXT4-fs (loop0): unmounting filesystem. [ 536.646170][T22240] loop8: detected capacity change from 0 to 16 [ 536.656136][T22240] erofs: (device loop8): mounted with root inode @ nid 36. [ 536.684440][T22240] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 536.693484][T22240] erofs: (device loop8): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 536.702676][T22240] syz.8.2518: attempt to access beyond end of device [ 536.702676][T22240] loop8: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 536.717037][T22240] syz.8.2518: attempt to access beyond end of device [ 536.717037][T22240] loop8: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 537.001024][T22239] device gretap0 entered promiscuous mode [ 537.042181][T22239] device vlan2 entered promiscuous mode [ 537.218757][ T999] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 537.218782][ T328] Bluetooth: hci0: command 0x1003 tx timeout [ 537.546223][ T999] Bluetooth: hci1: command 0x1003 tx timeout [ 537.552299][ T329] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 538.105514][T22257] device vlan3 entered promiscuous mode [ 538.959271][T22252] loop8: detected capacity change from 0 to 40427 [ 538.979228][T22252] F2FS-fs (loop8): invalid crc value [ 538.990208][T22252] F2FS-fs (loop8): Found nat_bits in checkpoint [ 539.037500][T22252] F2FS-fs (loop8): Start checkpoint disabled! [ 539.044996][T22252] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 539.067094][T22252] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 539.126640][T22374] binder_alloc: 22371: binder_alloc_buf size 16496 failed, no address space [ 539.135391][T22374] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 539.145045][ T292] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 539.158759][ T523] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 539.339749][ T292] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.364204][ T292] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 539.421617][T22380] loop1: detected capacity change from 0 to 1024 [ 539.513770][ T292] usb 1-1: config 0 interface 0 has no altsetting 0 [ 539.643886][T22380] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 539.912556][ T292] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 540.040108][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.240463][ T292] usb 1-1: config 0 descriptor?? [ 540.240729][T20010] EXT4-fs (loop1): unmounting filesystem. [ 540.252589][ T523] usb 8-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 540.261999][ T523] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.270045][ T523] usb 8-1: Product: syz [ 540.274315][ T523] usb 8-1: Manufacturer: syz [ 540.279223][ T523] usb 8-1: SerialNumber: syz [ 540.724710][T22390] loop5: detected capacity change from 0 to 1024 [ 541.524327][T22390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 541.681881][ T292] hid-generic 0003:1B1C:0A55.0004: ignoring exceeding usage max [ 541.709170][ T292] hid-generic 0003:1B1C:0A55.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:0a55] on usb-dummy_hcd.0-1/input0 [ 541.785874][ T2880] EXT4-fs (loop5): unmounting filesystem. [ 541.823846][ T28] kauditd_printk_skb: 647 callbacks suppressed [ 541.823859][ T28] audit: type=1326 audit(1794037128.337:33564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22403 comm="syz.5.2533" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb419fb19 code=0x7ffc0000 [ 541.857293][ T28] audit: type=1326 audit(1794037128.347:33565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22403 comm="syz.5.2533" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb419fb19 code=0x7ffc0000 [ 541.890847][ T4684] Bluetooth: hci0: Frame reassembly failed (-84) [ 541.910602][ T292] usb 1-1: USB disconnect, device number 21 [ 541.913234][ T523] usb 8-1: Can't get UAC3 power state for id 10 [ 541.916683][ T28] audit: type=1326 audit(1794037128.347:33566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22403 comm="syz.5.2533" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb419fb19 code=0x7ffc0000 [ 541.931780][ T523] usb 8-1: 2:0: failed to get current value for ch 0 (-71) [ 541.948632][ T28] audit: type=1326 audit(1794037128.347:33567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22403 comm="syz.5.2533" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb419fb19 code=0x7ffc0000 [ 541.981215][ T28] audit: type=1326 audit(1794037128.347:33568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22403 comm="syz.5.2533" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8eb419fb19 code=0x7ffc0000 [ 541.984429][ T523] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 542.007571][ T28] audit: type=1326 audit(1794037128.347:33569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22403 comm="syz.5.2533" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb419fb19 code=0x7ffc0000 [ 542.039485][ T28] audit: type=1326 audit(1794037128.347:33570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22403 comm="syz.5.2533" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb419fb19 code=0x7ffc0000 [ 542.064771][ T28] audit: type=1326 audit(1794037128.347:33571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22403 comm="syz.5.2533" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb419fb19 code=0x7ffc0000 [ 542.090076][ T28] audit: type=1326 audit(1794037128.347:33572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22403 comm="syz.5.2533" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb419fb19 code=0x7ffc0000 [ 542.103788][ T523] usb 8-1: USB disconnect, device number 4 [ 542.116009][ T28] audit: type=1326 audit(1794037128.347:33573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22403 comm="syz.5.2533" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8eb41a1387 code=0x7ffc0000 [ 542.206439][T22408] loop5: detected capacity change from 0 to 16 [ 542.239526][T22408] erofs: (device loop5): mounted with root inode @ nid 36. [ 542.321455][T22409] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 542.330608][T22409] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 542.339987][T22409] syz.5.2533: attempt to access beyond end of device [ 542.339987][T22409] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 542.354371][T22409] syz.5.2533: attempt to access beyond end of device [ 542.354371][T22409] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 542.986048][ T454] Bluetooth: hci1: Frame reassembly failed (-84) [ 543.003150][ T454] Bluetooth: hci1: Frame reassembly failed (-84) [ 543.467273][T22524] device vlan3 entered promiscuous mode [ 543.549358][ T292] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 543.772113][ T292] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 543.781727][ T292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.790645][ T292] usb 9-1: Product: syz [ 543.795169][ T292] usb 9-1: Manufacturer: syz [ 543.800567][ T292] usb 9-1: SerialNumber: syz [ 543.938917][ T328] Bluetooth: hci0: command 0x1003 tx timeout [ 543.945031][ T329] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 544.097920][T22534] loop7: detected capacity change from 0 to 512 [ 544.115759][T22535] binder_alloc: 22530: binder_alloc_buf size 16496 failed, no address space [ 544.124548][T22535] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 544.686402][T22541] device vlan2 entered promiscuous mode [ 545.238887][ T329] Bluetooth: hci1: command 0x1003 tx timeout [ 545.250162][ T999] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 545.259452][ T292] rtl8150 9-1:1.0: couldn't reset the device [ 545.265810][ T292] rtl8150: probe of 9-1:1.0 failed with error -5 [ 545.274966][ T292] usb 9-1: USB disconnect, device number 4 [ 545.437818][T22547] loop0: detected capacity change from 0 to 512 [ 545.564747][T22547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 545.585079][T22547] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.609531][T22564] loop5: detected capacity change from 0 to 16 [ 545.667232][T22564] erofs: (device loop5): mounted with root inode @ nid 36. [ 545.728907][T22564] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 545.776307][T22564] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 545.801727][T22564] syz.5.2543: attempt to access beyond end of device [ 545.801727][T22564] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 545.816083][T22564] syz.5.2543: attempt to access beyond end of device [ 545.816083][T22564] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 547.093906][T22580] binder_alloc: 22570: binder_alloc_buf size 16496 failed, no address space [ 547.102740][T22580] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 547.252559][T22585] device vlan2 entered promiscuous mode [ 548.110295][ T289] EXT4-fs (loop0): unmounting filesystem. [ 548.167855][T22588] loop8: detected capacity change from 0 to 256 [ 548.204383][T22593] loop1: detected capacity change from 0 to 1024 [ 548.372655][T22588] FAT-fs (loop8): Unrecognized mount option "xœìÝ»‹cU" or missing value [ 548.389522][ T454] Bluetooth: hci0: Frame reassembly failed (-84) [ 548.466754][ T28] kauditd_printk_skb: 571 callbacks suppressed [ 548.466769][ T28] audit: type=1326 audit(1794037134.977:34145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22544 comm="syz.5.2543" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8eb419fb19 code=0x7ffc0000 [ 548.489810][T22593] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.2555: lblock 2 mapped to illegal pblock 2 (length 1) [ 548.512188][T22593] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 548.520706][T22593] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.2555: lblock 0 mapped to illegal pblock 48 (length 1) [ 548.543643][ T28] audit: type=1326 audit(1794037135.027:34146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22544 comm="syz.5.2543" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8eb419fb19 code=0x7ffc0000 [ 548.554478][T22593] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 548.577475][T22593] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.2555: Failed to acquire dquot type 0 [ 548.589577][T22593] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 548.598581][T22588] loop8: detected capacity change from 0 to 256 [ 548.605499][T22593] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.2555: mark_inode_dirty error [ 548.625938][T22593] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 548.638799][T22593] EXT4-fs (loop1): 1 orphan inode deleted [ 548.644300][T22595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2552'. [ 548.647145][T22593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 548.656261][T22588] FAT-fs (loop8): Unrecognized mount option "utf8=1(uni_xlate=1" or missing value [ 548.671659][ T6337] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 548.694056][ T6337] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 548.705653][ T28] audit: type=1400 audit(1794037135.227:34147): avc: denied { create } for pid=22592 comm="syz.1.2555" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 548.731729][ T6337] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:13: Failed to release dquot type 0 [ 548.748842][T20010] EXT4-fs (loop1): unmounting filesystem. [ 548.762295][ T454] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 548.776808][ T454] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 548.785488][ T454] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:6: Failed to release dquot type 0 [ 548.798530][T20010] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 548.811745][T20010] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 548.821917][T20010] EXT4-fs error (device loop1): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 548.899706][T22608] FAULT_INJECTION: forcing a failure. [ 548.899706][T22608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.938686][T22608] CPU: 1 PID: 22608 Comm: syz.0.2558 Not tainted syzkaller #0 [ 548.946185][T22608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 548.956246][T22608] Call Trace: [ 548.959530][T22608] [ 548.962460][T22608] __dump_stack+0x21/0x24 [ 548.966795][T22608] dump_stack_lvl+0x110/0x170 [ 548.971475][T22608] ? __cfi_dump_stack_lvl+0x8/0x8 [ 548.976502][T22608] ? unwind_get_return_address+0x4d/0x90 [ 548.982137][T22608] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 548.988305][T22608] dump_stack+0x15/0x24 [ 548.992466][T22608] should_fail_ex+0x3bf/0x510 [ 548.996799][T22606] loop1: detected capacity change from 0 to 40427 [ 548.997142][T22608] should_fail_alloc_page+0x61/0x90 [ 549.004574][T22606] F2FS-fs (loop1): invalid crc value [ 549.008720][T22608] prepare_alloc_pages+0x131/0x570 [ 549.008749][T22608] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 549.008768][T22608] ? kasan_set_track+0x60/0x70 [ 549.008788][T22608] __alloc_pages+0x15b/0x610 [ 549.018212][T22606] F2FS-fs (loop1): Found nat_bits in checkpoint [ 549.019131][T22608] ? proc_tid_base_lookup+0x2b/0x30 [ 549.019154][T22608] ? path_openat+0x13fe/0x2f30 [ 549.019173][T22608] ? __cfi___alloc_pages+0x10/0x10 [ 549.019194][T22608] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.050445][T22606] F2FS-fs (loop1): Start checkpoint disabled! [ 549.054890][T22608] ? memcpy+0x56/0x70 [ 549.054915][T22608] ? avc_has_perm_noaudit+0x30a/0x490 [ 549.061535][T22606] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 549.067013][T22608] pte_alloc_one+0x70/0x190 [ 549.071629][T22606] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 549.076328][T22608] ? __cfi_pte_alloc_one+0x10/0x10 [ 549.100509][T22608] do_fault+0x1c15/0x1e30 [ 549.104916][T22608] ? mas_state_walk+0x7ab/0xa80 [ 549.109754][T22608] ? pte_marker_clear+0x220/0x220 [ 549.114759][T22608] ? __kasan_check_read+0x11/0x20 [ 549.119779][T22608] handle_mm_fault+0x1363/0x26b0 [ 549.124694][T22608] ? arch_stack_walk+0xfc/0x150 [ 549.129554][T22608] ? __cfi_handle_mm_fault+0x10/0x10 [ 549.134818][T22608] ? down_read_trylock+0x27f/0x660 [ 549.139916][T22608] ? __kasan_kmalloc+0x95/0xb0 [ 549.144662][T22608] ? __kmalloc+0xb4/0x1e0 [ 549.148971][T22608] ? trace_parser_get_init+0x3d/0xb0 [ 549.154319][T22608] ? ftrace_event_write+0x11d/0x2a0 [ 549.159547][T22608] ? vfs_write+0x3fb/0xd00 [ 549.163944][T22608] ? lock_mm_and_find_vma+0x9e/0x320 [ 549.169208][T22608] ? do_user_addr_fault+0x2eb/0x1030 [ 549.174476][T22608] do_user_addr_fault+0x61e/0x1030 [ 549.179574][T22608] exc_page_fault+0x51/0xb0 [ 549.184060][T22608] asm_exc_page_fault+0x27/0x30 [ 549.188892][T22608] RIP: 0010:__get_user_1+0x1c/0x30 [ 549.193989][T22608] Code: 89 e5 48 8d 3c bf e8 33 ff ff ff 5d c3 00 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 0f 83 f0 00 00 00 48 19 d2 48 21 d0 0f 01 cb <0f> b6 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 549.213574][T22608] RSP: 0018:ffffc90005547b10 EFLAGS: 00050206 [ 549.219621][T22608] RAX: 0000200000000400 RBX: dffffc0000000000 RCX: ffff888119a4bcc0 [ 549.227577][T22608] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 549.235529][T22608] RBP: ffffc90005547bb0 R08: 0000000000000100 R09: 0000000000000001 [ 549.243478][T22608] R10: ffff8881f5a00000 R11: 000000003d1f7fb7 R12: ffffc90005547c10 [ 549.251430][T22608] R13: 1ffff92000aa8fcc R14: ffffc90005547c00 R15: 0000200000000400 [ 549.259386][T22608] ? trace_get_user+0xb7/0x970 [ 549.264134][T22608] ? trace_parser_get_init+0x3d/0xb0 [ 549.269401][T22608] ? __kmalloc+0xb4/0x1e0 [ 549.273708][T22608] ftrace_event_write+0x16b/0x2a0 [ 549.278716][T22608] ? __cfi_ftrace_event_write+0x10/0x10 [ 549.284242][T22608] ? fsnotify_perm+0x67/0x5b0 [ 549.288901][T22608] ? security_file_permission+0x8a/0xb0 [ 549.294430][T22608] ? security_file_permission+0x94/0xb0 [ 549.299960][T22608] ? __cfi_ftrace_event_write+0x10/0x10 [ 549.305491][T22608] vfs_write+0x3fb/0xd00 [ 549.309715][T22608] ? __cfi_vfs_write+0x10/0x10 [ 549.314456][T22608] ? __kasan_check_write+0x14/0x20 [ 549.319544][T22608] ? mutex_lock+0x93/0x1b0 [ 549.323941][T22608] ? __cfi_mutex_lock+0x10/0x10 [ 549.328774][T22608] ? __fdget_pos+0x2cd/0x380 [ 549.333342][T22608] ? ksys_write+0x70/0x260 [ 549.337738][T22608] ksys_write+0x14a/0x260 [ 549.342047][T22608] ? __cfi_ksys_write+0x10/0x10 [ 549.346879][T22608] ? debug_smp_processor_id+0x17/0x20 [ 549.352237][T22608] __x64_sys_write+0x7b/0x90 [ 549.356808][T22608] x64_sys_call+0x27b/0x9a0 [ 549.361295][T22608] do_syscall_64+0x4c/0xa0 [ 549.365689][T22608] ? clear_bhb_loop+0x30/0x80 [ 549.370354][T22608] ? clear_bhb_loop+0x30/0x80 [ 549.375028][T22608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.380907][T22608] RIP: 0033:0x7f41af59fb19 [ 549.385308][T22608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.404900][T22608] RSP: 002b:00007f41b041f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.413298][T22608] RAX: ffffffffffffffda RBX: 00007f41af825fa0 RCX: 00007f41af59fb19 [ 549.421257][T22608] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 549.429208][T22608] RBP: 00007f41b041f090 R08: 0000000000000000 R09: 0000000000000000 [ 549.437157][T22608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.445106][T22608] R13: 00007f41af826038 R14: 00007f41af825fa0 R15: 00007fff90bcdd28 [ 549.453061][T22608] [ 549.788389][T22617] loop8: detected capacity change from 0 to 1024 [ 549.997943][T22617] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 550.429423][ T329] Bluetooth: hci0: command 0x1003 tx timeout [ 550.429450][ T999] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 550.630762][ T28] audit: type=1400 audit(1794037137.147:34148): avc: denied { accept } for pid=22613 comm="syz.0.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 550.705220][ T9679] EXT4-fs (loop8): unmounting filesystem. [ 550.882714][T22629] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 550.988741][ T424] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 551.002049][T22625] loop8: detected capacity change from 0 to 40427 [ 551.024832][T22625] F2FS-fs (loop8): invalid crc value [ 551.032213][T22625] F2FS-fs (loop8): Found nat_bits in checkpoint [ 551.076167][T22625] F2FS-fs (loop8): Start checkpoint disabled! [ 551.084125][T22625] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 551.092816][T22625] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 551.452182][T22635] device vlan3 entered promiscuous mode [ 551.503851][ T424] usb 8-1: Using ep0 maxpacket: 32 [ 551.644691][ T424] usb 8-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 551.957260][ T424] usb 8-1: config 1 interface 0 has no altsetting 0 [ 551.965800][ T424] usb 8-1: New USB device found, idVendor=1e71, idProduct=200d, bcdDevice= 0.40 [ 551.978725][ T424] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.986816][ T424] usb 8-1: Product: ည [ 551.991184][ T424] usb 8-1: Manufacturer: 㟈⟥䟢쬖㊇ë»ÄŸã¦…éŠé¿Šâ¬¢ã‹ªî­ë¯ˆï¶¹Í»à¹‘ᒸ鸩蜈쌌译닦â´å…¤ [ 552.002794][ T424] usb 8-1: SerialNumber: syz [ 552.331270][T22643] device vlan3 entered promiscuous mode [ 553.207258][ T424] usbhid 8-1:1.0: can't add hid device: -71 [ 553.225003][ T424] usbhid: probe of 8-1:1.0 failed with error -71 [ 553.257290][ T424] usb 8-1: USB disconnect, device number 5 [ 554.001932][T22766] loop1: detected capacity change from 0 to 1024 [ 554.259553][T22766] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 554.846499][T20010] EXT4-fs (loop1): unmounting filesystem. [ 555.213871][T22763] loop0: detected capacity change from 0 to 40427 [ 555.222197][T22781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 555.229166][T22763] F2FS-fs (loop0): fault_injection options not supported [ 555.243531][T22763] F2FS-fs (loop0): fault_type options not supported [ 555.250760][T22763] F2FS-fs (loop0): invalid crc value [ 555.257057][T22763] F2FS-fs (loop0): Found nat_bits in checkpoint [ 555.290734][T22763] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 555.307974][T22763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2571'. [ 555.317658][ T28] audit: type=1326 audit(1794037141.837:34149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.2571" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 555.319812][T22763] fuse: Bad value for 'group_id' [ 555.356787][ T28] audit: type=1326 audit(1794037141.837:34150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.2571" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 555.382111][ T28] audit: type=1326 audit(1794037141.837:34151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.2571" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 555.407117][ T28] audit: type=1326 audit(1794037141.837:34152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.2571" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 555.432140][ T28] audit: type=1326 audit(1794037141.837:34153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.2571" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 555.457184][ T28] audit: type=1326 audit(1794037141.837:34154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.2571" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 555.482214][ T28] audit: type=1326 audit(1794037141.837:34155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.2571" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 555.488796][ T999] Bluetooth: hci0: command 0x1003 tx timeout [ 555.507206][ T28] audit: type=1326 audit(1794037141.837:34156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.2571" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 555.513150][ T2755] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 555.544240][ T28] audit: type=1326 audit(1794037141.837:34157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.2571" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 555.569399][ T28] audit: type=1326 audit(1794037141.837:34158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.0.2571" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 556.211740][T22798] device vlan2 entered promiscuous mode [ 557.700002][T22910] loop0: detected capacity change from 0 to 256 [ 557.834482][T22905] loop7: detected capacity change from 0 to 40427 [ 557.849453][T22905] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 557.863715][T22905] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 557.873072][T22905] F2FS-fs (loop7): invalid crc value [ 557.887844][T22905] F2FS-fs (loop7): Found nat_bits in checkpoint [ 557.894952][T22908] loop1: detected capacity change from 0 to 40427 [ 557.910904][T22908] F2FS-fs (loop1): invalid crc value [ 557.932084][T22908] F2FS-fs (loop1): Found nat_bits in checkpoint [ 557.949082][T22905] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 557.956149][T22905] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 557.974586][T22905] FAULT_INJECTION: forcing a failure. [ 557.974586][T22905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.998957][T22905] CPU: 0 PID: 22905 Comm: syz.7.2581 Not tainted syzkaller #0 [ 558.006445][T22905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 558.016499][T22905] Call Trace: [ 558.019773][T22905] [ 558.022696][T22905] __dump_stack+0x21/0x24 [ 558.027025][T22905] dump_stack_lvl+0x110/0x170 [ 558.031700][T22905] ? __cfi_dump_stack_lvl+0x8/0x8 [ 558.036719][T22905] ? mutex_unlock+0x8f/0x230 [ 558.041306][T22905] dump_stack+0x15/0x24 [ 558.045458][T22905] should_fail_ex+0x3bf/0x510 [ 558.050134][T22905] should_fail+0xb/0x10 [ 558.054295][T22905] should_fail_usercopy+0x1a/0x20 [ 558.059321][T22905] strncpy_from_user+0x24/0x2c0 [ 558.064177][T22905] ? kmem_cache_alloc+0x166/0x320 [ 558.069203][T22905] ? getname_flags+0xba/0x510 [ 558.073880][T22905] getname_flags+0xf5/0x510 [ 558.078389][T22905] __x64_sys_mkdirat+0x7c/0xa0 [ 558.083154][T22905] x64_sys_call+0x73d/0x9a0 [ 558.087657][T22905] do_syscall_64+0x4c/0xa0 [ 558.092068][T22905] ? clear_bhb_loop+0x30/0x80 [ 558.096746][T22905] ? clear_bhb_loop+0x30/0x80 [ 558.101430][T22905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.107328][T22905] RIP: 0033:0x7f751ad9fb19 [ 558.111746][T22905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.131354][T22905] RSP: 002b:00007f751bc42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 558.139773][T22905] RAX: ffffffffffffffda RBX: 00007f751b025fa0 RCX: 00007f751ad9fb19 [ 558.147760][T22905] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 558.155741][T22905] RBP: 00007f751bc42090 R08: 0000000000000000 R09: 0000000000000000 [ 558.163720][T22905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.168718][T22988] device vlan3 entered promiscuous mode [ 558.171686][T22905] R13: 00007f751b026038 R14: 00007f751b025fa0 R15: 00007ffddd1aa0b8 [ 558.171707][T22905] [ 558.193800][T22908] F2FS-fs (loop1): Start checkpoint disabled! [ 558.201263][T22908] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 558.231292][T22908] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 558.499268][T23038] loop7: detected capacity change from 0 to 512 [ 558.521535][T23038] EXT4-fs: Ignoring removed nobh option [ 558.599097][T23038] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 558.616354][T23042] loop8: detected capacity change from 0 to 512 [ 558.659700][T23042] EXT4-fs: Ignoring removed nobh option [ 558.676133][T23038] EXT4-fs (loop7): Remounting filesystem read-only [ 558.700253][T23042] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 558.718859][T23038] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2587: invalid indirect mapped block 4278190080 (level 0) [ 558.748879][T23042] EXT4-fs (loop8): Remounting filesystem read-only [ 558.755478][T23042] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2588: invalid indirect mapped block 4278190080 (level 0) [ 558.779057][T23038] EXT4-fs (loop7): Remounting filesystem read-only [ 558.798868][T23042] EXT4-fs (loop8): Remounting filesystem read-only [ 558.805445][T23042] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2588: invalid indirect mapped block 1 (level 1) [ 558.805813][T23038] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2587: invalid indirect mapped block 1 (level 1) [ 558.841196][T23042] EXT4-fs (loop8): Remounting filesystem read-only [ 558.851039][T23042] EXT4-fs (loop8): 1 truncate cleaned up [ 558.868072][T23042] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 558.876829][T23038] EXT4-fs (loop7): Remounting filesystem read-only [ 558.898957][T23038] EXT4-fs (loop7): 1 truncate cleaned up [ 558.904810][T23038] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 558.929158][ T9679] EXT4-fs (loop8): unmounting filesystem. [ 558.967584][ T6404] EXT4-fs (loop7): unmounting filesystem. [ 559.057854][T23051] binder: 23046:23051 ioctl c0306201 0 returned -14 [ 559.067405][T23058] loop0: detected capacity change from 0 to 512 [ 559.102867][T23058] EXT4-fs: Ignoring removed nobh option [ 559.247850][T23058] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 559.346846][T23058] EXT4-fs (loop0): Remounting filesystem read-only [ 559.388815][T23058] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2594: invalid indirect mapped block 4278190080 (level 0) [ 559.433326][T23058] EXT4-fs (loop0): Remounting filesystem read-only [ 559.453349][T23058] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2594: invalid indirect mapped block 1 (level 1) [ 559.487026][T23058] EXT4-fs (loop0): Remounting filesystem read-only [ 559.493894][T23058] EXT4-fs (loop0): 1 truncate cleaned up [ 559.509847][T23058] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 559.574242][ T289] EXT4-fs (loop0): unmounting filesystem. [ 559.745600][T23069] loop0: detected capacity change from 0 to 16 [ 559.783431][T23069] erofs: (device loop0): mounted with root inode @ nid 36. [ 559.829721][T23069] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 559.863506][T23069] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 559.956244][T23069] syz.0.2595: attempt to access beyond end of device [ 559.956244][T23069] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 559.971857][T23069] syz.0.2595: attempt to access beyond end of device [ 559.971857][T23069] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 560.148611][T23408] loop1: detected capacity change from 0 to 40427 [ 560.166069][T23408] F2FS-fs (loop1): invalid crc value [ 560.172769][T23408] F2FS-fs (loop1): Found nat_bits in checkpoint [ 560.198696][ T523] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 560.215686][T23408] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 560.401120][ T523] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 560.417898][ T523] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.438729][ T523] usb 8-1: Product: syz [ 560.442927][ T523] usb 8-1: Manufacturer: syz [ 560.456442][ T523] usb 8-1: SerialNumber: syz [ 560.878772][T23501] loop0: detected capacity change from 0 to 512 [ 560.886007][T23501] EXT4-fs: Ignoring removed nobh option [ 560.893900][T23501] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 560.910300][T23501] EXT4-fs (loop0): Remounting filesystem read-only [ 560.917003][T23501] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2603: invalid indirect mapped block 4278190080 (level 0) [ 560.931248][T23501] EXT4-fs (loop0): Remounting filesystem read-only [ 560.937791][T23501] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2603: invalid indirect mapped block 1 (level 1) [ 560.951225][T23501] EXT4-fs (loop0): Remounting filesystem read-only [ 560.957917][T23501] EXT4-fs (loop0): 1 truncate cleaned up [ 560.963781][T23501] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 560.970849][T23505] device dummy0 entered promiscuous mode [ 560.977884][T23505] device vlan2 entered promiscuous mode [ 560.990125][ T289] EXT4-fs (loop0): unmounting filesystem. [ 561.006840][ T523] rtl8150 8-1:1.0: couldn't reset the device [ 561.020316][ T523] rtl8150: probe of 8-1:1.0 failed with error -5 [ 561.039690][ T523] usb 8-1: USB disconnect, device number 6 [ 561.112556][T23512] binder: 23509:23512 ioctl c0306201 0 returned -14 [ 561.192538][T23513] device vlan2 entered promiscuous mode [ 561.724638][T23624] device vlan2 entered promiscuous mode [ 562.061940][T23730] loop7: detected capacity change from 0 to 512 [ 562.124913][T23730] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.2612: iget: bad i_size value: 38620345925642 [ 562.161812][T23730] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.2612: couldn't read orphan inode 15 (err -117) [ 562.200791][T23730] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 562.285215][T23622] loop8: detected capacity change from 0 to 40427 [ 562.288012][ T28] kauditd_printk_skb: 615 callbacks suppressed [ 562.288025][ T28] audit: type=1326 audit(1794037148.797:34774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.0.2615" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 562.292745][T23622] F2FS-fs (loop8): invalid crc value [ 562.328196][ T28] audit: type=1326 audit(1794037148.817:34775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.0.2615" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 562.355707][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 562.367549][ T28] audit: type=1326 audit(1794037148.817:34776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.0.2615" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 562.392628][ T28] audit: type=1326 audit(1794037148.817:34777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.0.2615" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 562.418845][ T28] audit: type=1326 audit(1794037148.817:34778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.0.2615" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 562.444189][ T28] audit: type=1326 audit(1794037148.817:34779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.0.2615" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 562.469745][ T28] audit: type=1326 audit(1794037148.817:34780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.0.2615" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 562.469780][T23622] F2FS-fs (loop8): Found nat_bits in checkpoint [ 562.502033][ T28] audit: type=1326 audit(1794037148.817:34781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.0.2615" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 562.527206][ T28] audit: type=1326 audit(1794037148.817:34782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.0.2615" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 562.579069][T23622] F2FS-fs (loop8): Start checkpoint disabled! [ 562.585233][ T28] audit: type=1326 audit(1794037148.817:34783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.0.2615" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41af59fb19 code=0x7ffc0000 [ 562.610547][ T425] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 562.628346][ T425] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 562.640710][T23622] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 562.648632][ T425] EXT4-fs (loop7): This should not happen!! Data will be lost [ 562.648632][ T425] [ 562.706401][T23748] loop0: detected capacity change from 0 to 16 [ 562.716087][T23748] erofs: (device loop0): mounted with root inode @ nid 36. [ 562.760711][T23748] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 562.769723][T23748] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 562.778933][T23748] syz.0.2615: attempt to access beyond end of device [ 562.778933][T23748] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 562.793249][T23748] syz.0.2615: attempt to access beyond end of device [ 562.793249][T23748] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 562.830742][T23622] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 563.449033][ T425] EXT4-fs (loop7): Total free blocks count 0 [ 563.463283][ T425] EXT4-fs (loop7): Free/Dirty block details [ 563.488749][ T425] EXT4-fs (loop7): free_blocks=0 [ 563.498473][ T425] EXT4-fs (loop7): dirty_blocks=19 [ 563.537909][ T425] EXT4-fs (loop7): Block reservation details [ 563.580132][ T425] EXT4-fs (loop7): i_reserved_data_blocks=19 [ 563.586945][ T6404] EXT4-fs (loop7): unmounting filesystem. [ 564.418764][ T329] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 564.418794][ T2755] Bluetooth: hci0: command 0x1003 tx timeout [ 565.026307][T23872] device vlan3 entered promiscuous mode [ 565.318324][T23870] loop0: detected capacity change from 0 to 40427 [ 565.356536][T23870] F2FS-fs (loop0): invalid crc value [ 565.419841][T23882] loop1: detected capacity change from 0 to 16 [ 565.499005][T23870] F2FS-fs (loop0): Found nat_bits in checkpoint [ 565.508667][T23882] erofs: (device loop1): mounted with root inode @ nid 36. [ 565.562406][T23882] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 565.571499][T23870] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 565.619191][T23882] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 565.628267][T23882] syz.1.2622: attempt to access beyond end of device [ 565.628267][T23882] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 565.705154][T23887] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2623'. [ 565.715520][T23887] device ip6gretap1 entered promiscuous mode [ 565.760550][T23888] syz.0.2620 uses obsolete (PF_INET,SOCK_PACKET) [ 565.778715][ T999] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 565.790398][T23882] syz.1.2622: attempt to access beyond end of device [ 565.790398][T23882] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 565.795253][T23893] loop7: detected capacity change from 0 to 256 [ 565.823469][T23891] loop5: detected capacity change from 0 to 1024 [ 566.051904][T23891] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 566.072340][T23893] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 566.094575][T23891] EXT4-fs (loop5): barriers disabled [ 566.104196][T23891] JBD2: no valid journal superblock found [ 566.110118][T23891] EXT4-fs (loop5): error loading journal [ 566.128974][ T289] syz-executor: attempt to access beyond end of device [ 566.128974][ T289] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 566.222829][T23906] loop0: detected capacity change from 0 to 256 [ 566.242808][T23906] FAT-fs (loop0): Unrecognized mount option "xœìÝ»‹cU" or missing value [ 566.285575][T23906] loop0: detected capacity change from 0 to 256 [ 566.299696][T23906] FAT-fs (loop0): Unrecognized mount option "utf8=1(uni_xlate=1" or missing value [ 566.459883][ T425] Bluetooth: hci0: Frame reassembly failed (-84) [ 567.165158][T24252] loop8: detected capacity change from 0 to 128 [ 567.675319][T24303] device vlan3 entered promiscuous mode [ 568.122207][ T28] kauditd_printk_skb: 598 callbacks suppressed [ 568.122221][ T28] audit: type=1326 audit(1794037154.637:35382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.1.2635" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 568.233046][ T28] audit: type=1326 audit(1794037154.637:35383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.1.2635" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 568.278390][ T28] audit: type=1326 audit(1794037154.677:35384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.1.2635" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 568.328893][ T28] audit: type=1326 audit(1794037154.677:35385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.1.2635" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 568.384302][ T28] audit: type=1326 audit(1794037154.677:35386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.1.2635" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 568.428712][ T28] audit: type=1326 audit(1794037154.677:35387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.1.2635" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 568.478716][ T28] audit: type=1326 audit(1794037154.677:35388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.1.2635" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 568.503880][ T999] Bluetooth: hci0: command 0x1003 tx timeout [ 568.509909][ T329] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 568.553167][ T28] audit: type=1326 audit(1794037154.677:35389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.1.2635" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 568.622865][ T28] audit: type=1326 audit(1794037154.677:35390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.1.2635" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 568.689440][ T28] audit: type=1326 audit(1794037154.677:35391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.1.2635" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80da99fb19 code=0x7ffc0000 [ 568.790433][T24313] loop1: detected capacity change from 0 to 16 [ 569.592762][T24313] erofs: (device loop1): mounted with root inode @ nid 36. [ 569.654976][T24307] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 569.664069][T24307] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 569.673610][T24307] syz.1.2635: attempt to access beyond end of device [ 569.673610][T24307] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 569.687829][T24307] syz.1.2635: attempt to access beyond end of device [ 569.687829][T24307] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 569.701612][ T523] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 569.707554][T24418] loop8: detected capacity change from 0 to 128 [ 569.727639][T24418] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 569.785062][T24418] loop8: detected capacity change from 0 to 512 [ 569.786156][T24452] FAULT_INJECTION: forcing a failure. [ 569.786156][T24452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.792445][T24418] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 569.814982][T24452] CPU: 0 PID: 24452 Comm: syz.5.2641 Not tainted syzkaller #0 [ 569.822451][T24452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 569.832517][T24452] Call Trace: [ 569.834738][T24418] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #16: comm syz.8.2639: invalid indirect mapped block 32768 (level 2) [ 569.835791][T24452] [ 569.835801][T24452] __dump_stack+0x21/0x24 [ 569.849702][T24418] EXT4-fs (loop8): 1 orphan inode deleted [ 569.852142][T24452] dump_stack_lvl+0x110/0x170 [ 569.856448][T24418] EXT4-fs (loop8): 1 truncate cleaned up [ 569.862135][T24452] ? __cfi_dump_stack_lvl+0x8/0x8 [ 569.862151][T24452] dump_stack+0x15/0x24 [ 569.862163][T24452] should_fail_ex+0x3bf/0x510 [ 569.862179][T24452] should_fail+0xb/0x10 [ 569.867173][T24418] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 569.872442][T24452] should_fail_usercopy+0x1a/0x20 [ 569.872461][T24452] _copy_from_user+0x1e/0xc0 [ 569.908368][T24452] __se_sys_memfd_create+0x12b/0x3c0 [ 569.913644][T24452] __x64_sys_memfd_create+0x5b/0x70 [ 569.918831][T24452] x64_sys_call+0x235/0x9a0 [ 569.923313][T24452] do_syscall_64+0x4c/0xa0 [ 569.927702][T24452] ? clear_bhb_loop+0x30/0x80 [ 569.932357][T24452] ? clear_bhb_loop+0x30/0x80 [ 569.937031][T24452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.942898][T24452] RIP: 0033:0x7f8eb419fb19 [ 569.947290][T24452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.966871][T24452] RSP: 002b:00007f8eb503de08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 569.975275][T24452] RAX: ffffffffffffffda RBX: 00000000000004e9 RCX: 00007f8eb419fb19 [ 569.983221][T24452] RDX: 00007f8eb503dee0 RSI: 0000000000000000 RDI: 00007f8eb4237d63 [ 569.991167][T24452] RBP: 0000200000000280 R08: 00000000ffffffff R09: 0000000000000000 [ 569.999129][T24452] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000200 [ 570.007098][T24452] R13: 00007f8eb503dee0 R14: 00007f8eb503dea0 R15: 0000200000000240 [ 570.015048][T24452] [ 570.019771][ T9679] EXT4-fs (loop8): unmounting filesystem. [ 570.038950][T24514] ext4: Unknown parameter 'measure' [ 570.049830][ T523] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.065758][ T523] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.067546][T24562] overlayfs: missing 'lowerdir' [ 570.076245][ T523] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 570.090174][ T523] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.127839][ T523] usb 8-1: config 0 descriptor?? [ 571.051366][T24565] erofs: (device loop5): mounted with root inode @ nid 36. [ 571.124774][T24563] tipc: Started in network mode [ 571.129881][T24563] tipc: Node identity 4, cluster identity 4711 [ 571.136067][T24563] tipc: Node number set to 4 [ 571.449398][ T425] Bluetooth: hci0: Frame reassembly failed (-84) [ 571.508711][ T292] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 571.583769][T24577] set_capacity_and_notify: 2 callbacks suppressed [ 571.583788][T24577] loop0: detected capacity change from 0 to 512 [ 571.629423][ T314] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 571.700139][ T292] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.711022][ T292] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 571.720663][ T292] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 571.736301][ T292] usb 9-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 571.746270][ T292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.755294][ T292] usb 9-1: Product: syz [ 571.760142][ T292] usb 9-1: Manufacturer: syz [ 571.778312][ T292] usb 9-1: SerialNumber: syz [ 572.108233][ T292] usb 9-1: Found UVC 255.00 device syz (046d:0821) [ 572.132540][ T292] usb 9-1: No valid video chain found. [ 572.213125][ T292] usb 9-1: USB disconnect, device number 5 [ 572.255412][T24581] loop1: detected capacity change from 0 to 1024 [ 572.339646][T24581] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 572.602408][ T523] usbhid 8-1:0.0: can't add hid device: -71 [ 572.608394][ T523] usbhid: probe of 8-1:0.0 failed with error -71 [ 572.618124][T24581] EXT4-fs (loop1): barriers disabled [ 572.625243][T24581] JBD2: no valid journal superblock found [ 572.638718][T24581] EXT4-fs (loop1): error loading journal [ 572.655628][ T523] usb 8-1: USB disconnect, device number 7 [ 572.668768][T24585] FAULT_INJECTION: forcing a failure. [ 572.668768][T24585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.681930][T24585] CPU: 0 PID: 24585 Comm: syz.0.2651 Not tainted syzkaller #0 [ 572.689394][T24585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 572.699447][T24585] Call Trace: [ 572.702720][T24585] [ 572.705645][T24585] __dump_stack+0x21/0x24 [ 572.709976][T24585] dump_stack_lvl+0x110/0x170 [ 572.714648][T24585] ? __cfi_dump_stack_lvl+0x8/0x8 [ 572.719666][T24585] ? _parse_integer+0x2a/0x40 [ 572.724340][T24585] dump_stack+0x15/0x24 [ 572.728492][T24585] should_fail_ex+0x3bf/0x510 [ 572.733168][T24585] should_fail+0xb/0x10 [ 572.737324][T24585] should_fail_usercopy+0x1a/0x20 [ 572.742346][T24585] _copy_from_user+0x1e/0xc0 [ 572.746935][T24585] ___sys_sendmsg+0x1c3/0x360 [ 572.751617][T24585] ? __sys_sendmsg+0x290/0x290 [ 572.756378][T24585] ? __kasan_check_write+0x14/0x20 [ 572.761486][T24585] ? proc_fail_nth_write+0x180/0x200 [ 572.766773][T24585] ? vfs_write+0xa51/0xd00 [ 572.771191][T24585] ? __fdget+0x19c/0x220 [ 572.775430][T24585] __x64_sys_sendmsg+0x20d/0x2e0 [ 572.777745][T24586] binder: 24582:24586 ioctl c0306201 0 returned -14 [ 572.780399][T24585] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 572.780424][T24585] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 572.798461][T24585] x64_sys_call+0x171/0x9a0 [ 572.802954][T24585] do_syscall_64+0x4c/0xa0 [ 572.807354][T24585] ? clear_bhb_loop+0x30/0x80 [ 572.812012][T24585] ? clear_bhb_loop+0x30/0x80 [ 572.816670][T24585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.822542][T24585] RIP: 0033:0x7f41af59fb19 [ 572.826941][T24585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.846532][T24585] RSP: 002b:00007f41b041f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.854931][T24585] RAX: ffffffffffffffda RBX: 00007f41af825fa0 RCX: 00007f41af59fb19 [ 572.862927][T24585] RDX: 0000000000004000 RSI: 0000200000002e40 RDI: 0000000000000007 [ 572.870880][T24585] RBP: 00007f41b041f090 R08: 0000000000000000 R09: 0000000000000000 [ 572.878831][T24585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.886794][T24585] R13: 00007f41af826038 R14: 00007f41af825fa0 R15: 00007fff90bcdd28 [ 572.894751][T24585] [ 573.458704][ T999] Bluetooth: hci0: command 0x1003 tx timeout [ 573.464741][ T329] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 573.674501][T24906] loop5: detected capacity change from 0 to 2048 [ 573.748635][T24908] loop7: detected capacity change from 0 to 16 [ 573.839565][T24908] erofs: (device loop7): mounted with root inode @ nid 36. [ 573.856287][T24908] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 573.865335][T24908] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 573.874654][T24908] syz.7.2657: attempt to access beyond end of device [ 573.874654][T24908] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 573.889040][T24908] syz.7.2657: attempt to access beyond end of device [ 573.889040][T24908] loop7: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 574.292221][T24906] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 574.340170][T24906] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.409538][ T28] kauditd_printk_skb: 258 callbacks suppressed [ 574.409561][ T28] audit: type=1326 audit(1794037160.927:35650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24915 comm="syz.8.2660" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 574.566705][ T2880] EXT4-fs (loop5): unmounting filesystem. [ 574.588898][ T28] audit: type=1326 audit(1794037160.967:35651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24915 comm="syz.8.2660" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 574.623392][ T523] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 574.631137][ T28] audit: type=1326 audit(1794037160.967:35652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24915 comm="syz.8.2660" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 574.656314][ T28] audit: type=1326 audit(1794037160.967:35653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24915 comm="syz.8.2660" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 574.681710][ T28] audit: type=1326 audit(1794037160.967:35654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24915 comm="syz.8.2660" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 574.707950][ T28] audit: type=1326 audit(1794037160.967:35655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24915 comm="syz.8.2660" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 574.733150][ T28] audit: type=1326 audit(1794037160.967:35656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24915 comm="syz.8.2660" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 574.758141][ T28] audit: type=1326 audit(1794037160.967:35657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24915 comm="syz.8.2660" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 574.783032][ T28] audit: type=1326 audit(1794037160.967:35658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24915 comm="syz.8.2660" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 574.836622][ T28] audit: type=1326 audit(1794037160.967:35659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24915 comm="syz.8.2660" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717939fb19 code=0x7ffc0000 [ 575.014797][T24928] loop8: detected capacity change from 0 to 16 [ 575.024071][T24928] erofs: (device loop8): mounted with root inode @ nid 36. [ 575.046727][T24928] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 575.055912][T24928] erofs: (device loop8): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 575.065045][T24928] syz.8.2660: attempt to access beyond end of device [ 575.065045][T24928] loop8: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 575.079358][T24928] syz.8.2660: attempt to access beyond end of device [ 575.079358][T24928] loop8: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 575.178737][ T319] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 575.409761][ T319] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 575.428711][ T319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.465073][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 575.549580][ T523] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 575.558710][ T523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.566728][ T523] usb 2-1: Product: syz [ 575.570916][ T523] usb 2-1: Manufacturer: syz [ 575.575503][ T523] usb 2-1: SerialNumber: syz [ 575.628729][ T292] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 575.819755][ T292] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.830018][ T292] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.839967][ T292] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.853128][ T292] usb 1-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 575.862327][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.918715][ T2365] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 575.999431][ T523] rtl8150 2-1:1.0: couldn't reset the device [ 576.005492][ T523] rtl8150: probe of 2-1:1.0 failed with error -5 [ 576.013937][ T523] usb 2-1: USB disconnect, device number 11 [ 576.099721][ T2365] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.109833][ T2365] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.119411][ T2365] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 576.128426][ T2365] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 576.136417][ T2365] usb 9-1: SerialNumber: syz [ 576.343678][ T2365] usb 9-1: Unsupported UAC3 BADD profile [ 576.359649][ T2365] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 576.374852][ T375] udevd[375]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 576.392714][ T2365] usb 9-1: USB disconnect, device number 6 [ 576.858005][T24980] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2677'. [ 577.178698][ T2365] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 577.188702][ T523] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 577.320283][T25003] Disabled LAPIC found during irq injection [ 577.358711][ T2365] usb 9-1: Using ep0 maxpacket: 16 [ 577.365041][ T2365] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.377982][ T523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.390097][ T523] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 577.399350][ T2365] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.409222][ T523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.417561][ T2365] usb 9-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 577.427030][ T2365] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.435347][ T523] usb 2-1: config 0 descriptor?? [ 577.461413][ T2365] usb 9-1: config 0 descriptor?? [ 577.638757][ T937] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 577.829645][ T937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.840649][ T937] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 577.843335][ T292] usb 8-1: USB disconnect, device number 8 [ 577.849957][ T937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.864679][ T937] usb 6-1: config 0 descriptor?? [ 577.870821][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.877710][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.884836][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.893714][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.900922][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.907812][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.914907][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.921997][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.929050][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.935941][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.943024][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.950088][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.956973][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.964065][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.971096][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.977975][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.985058][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.992107][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 577.999125][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.006185][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.013274][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.020333][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.027219][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.034315][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.041378][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.048268][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.055358][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.062460][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.069497][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.077678][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.084940][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.092047][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.099860][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.106977][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.114233][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.121304][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.128214][ T937] usbhid 6-1:0.0: can't add hid device: -71 [ 578.134353][ T937] usbhid: probe of 6-1:0.0 failed with error -71 [ 578.140950][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.147830][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.156174][ T937] usb 6-1: USB disconnect, device number 15 [ 578.163053][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.170769][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.177690][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.184757][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.191794][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.198843][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.205715][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.212767][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.219727][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.226577][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.233474][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.240372][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.247215][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.254081][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.260952][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.267786][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.274714][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.281627][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.288470][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.295361][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.302254][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.309115][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.315963][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.322957][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.329837][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.336695][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.343624][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.350518][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.357395][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.361540][ T292] usb 1-1: USB disconnect, device number 22 [ 578.364305][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.378762][ T2365] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 578.386152][ T2365] apple 0003:05AC:024B.0005: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.8-1/input0 [ 578.400758][ T2365] usb 9-1: USB disconnect, device number 7 [ 578.415871][T25019] fido_id[25019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 578.678792][ T937] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 578.748743][ T292] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 578.778709][ T319] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 578.869775][ T937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.880759][ T937] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 578.889813][ T937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.898318][ T937] usb 6-1: config 0 descriptor?? [ 578.939718][ T292] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 578.948389][ T292] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.958558][ T292] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 578.967531][ T319] usb 8-1: Using ep0 maxpacket: 16 [ 578.972820][ T292] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.984662][ T319] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 578.995246][ T292] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 578.998721][ T2365] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 579.004348][ T292] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 579.019888][ T292] usb 1-1: Product: syz [ 579.024071][ T292] usb 1-1: Manufacturer: syz [ 579.029394][ T319] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 579.038433][ T319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.046849][ T319] usb 8-1: Product: syz [ 579.051078][ T319] usb 8-1: Manufacturer: syz [ 579.056046][ T292] cdc_wdm 1-1:1.0: skipping garbage [ 579.061296][ T292] cdc_wdm 1-1:1.0: skipping garbage [ 579.066918][ T319] usb 8-1: SerialNumber: syz [ 579.072122][ T292] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 579.079652][ T319] usb 8-1: config 0 descriptor?? [ 579.198681][ T2365] usb 9-1: Using ep0 maxpacket: 8 [ 579.204716][ T2365] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 579.213030][ T2365] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 579.221122][ T2365] usb 9-1: config 0 has no interface number 0 [ 579.227227][ T2365] usb 9-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 579.238500][ T2365] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 579.247573][ T2365] usb 9-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 579.255569][ T2365] usb 9-1: Product: syz [ 579.260651][ T2365] usb 9-1: config 0 descriptor?? [ 579.267788][ T292] usb 1-1: USB disconnect, device number 23 [ 579.469696][ T319] usb 9-1: USB disconnect, device number 8 [ 579.719043][ T937] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 579.726545][ T937] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11 [ 579.828699][ T292] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 579.931783][ T2365] usb 2-1: USB disconnect, device number 12 [ 580.010633][ T424] usb 6-1: USB disconnect, device number 16 [ 580.010727][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 580.019903][ T292] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 580.033797][ T292] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.045723][ T292] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 580.054722][ T292] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.066526][ T292] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 580.075576][ T292] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 580.083589][ T292] usb 1-1: Product: syz [ 580.087722][ T292] usb 1-1: Manufacturer: syz [ 580.093468][ T292] cdc_wdm 1-1:1.0: skipping garbage [ 580.098707][ T292] cdc_wdm 1-1:1.0: skipping garbage [ 580.104305][ T292] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 580.248717][ T319] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 580.398701][ T2365] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 580.428694][ T319] usb 9-1: Using ep0 maxpacket: 8 [ 580.434753][ T319] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 580.442927][ T319] usb 9-1: config 0 has no interface number 0 [ 580.449021][ T319] usb 9-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 580.459659][ T319] usb 9-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 580.470332][ T319] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 580.483454][ T319] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 580.492507][ T319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.501202][ T319] usb 9-1: config 0 descriptor?? [ 580.599963][ T2365] usb 2-1: unable to get BOS descriptor or descriptor too short [ 580.608342][ T2365] usb 2-1: config 2 has an invalid interface number: 69 but max is 0 [ 580.616463][ T2365] usb 2-1: config 2 has no interface number 0 [ 580.622648][ T2365] usb 2-1: config 2 interface 69 has no altsetting 0 [ 580.631011][ T2365] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=73.9f [ 580.635807][T25042] tipc: Enabling of bearer rejected, failed to enable media [ 580.640141][ T2365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.656902][ T2365] usb 2-1: Product: syz [ 580.661103][ T2365] usb 2-1: Manufacturer: syz [ 580.663828][ T319] input: syz0 as /devices/virtual/misc/uhid/0005:4000B05:0002.0006/input/input12 [ 580.665690][ T2365] usb 2-1: SerialNumber: syz [ 580.676278][ T319] hid-generic 0005:4000B05:0002.0006: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz1 [ 580.710087][T25047] fido_id[25047]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 580.710297][ T937] usb 9-1: USB disconnect, device number 9 [ 580.885774][ T2365] usb 2-1: USB disconnect, device number 13 [ 580.998707][ T319] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 581.189741][ T319] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.199918][ T319] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 581.209567][ T319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 581.219240][ T319] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.232032][ T319] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 581.241277][ T319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.506207][ T319] usb 8-1: USB disconnect, device number 9 [ 581.509059][ T2365] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 581.698703][ T2365] usb 9-1: Using ep0 maxpacket: 32 [ 581.704945][ T2365] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 581.712994][ T2365] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.723121][ T2365] usb 9-1: config 0 has no interface number 0 [ 581.729211][ T2365] usb 9-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.742105][ T2365] usb 9-1: config 0 interface 1 has no altsetting 0 [ 581.750017][ T2365] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 581.759099][ T2365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.767085][ T2365] usb 9-1: Product: syz [ 581.771255][ T2365] usb 9-1: Manufacturer: syz [ 581.775836][ T2365] usb 9-1: SerialNumber: syz [ 581.781258][ T2365] usb 9-1: config 0 descriptor?? [ 581.838709][ T424] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 581.948695][ T319] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 581.990522][ T2365] usb 9-1: USB disconnect, device number 10 [ 582.020823][ T24] usb 1-1: USB disconnect, device number 24 [ 582.030521][ T424] usb 2-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 582.040302][ T424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.051944][ T424] usb-storage 2-1:1.0: USB Mass Storage device detected [ 582.149882][ T319] usb 8-1: unable to get BOS descriptor or descriptor too short [ 582.158181][ T319] usb 8-1: not running at top speed; connect to a high speed hub [ 582.166697][ T319] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.176795][ T319] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 582.185685][ T319] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 582.199644][ T319] usb 8-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 582.208784][ T319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 582.216815][ T319] usb 8-1: Product: syz [ 582.221019][ T319] usb 8-1: Manufacturer: syz [ 582.226954][ T319] usb 8-1: Found UVC 1.00 device syz (8086:0ad2) [ 582.233513][ T319] usb 8-1: No streaming interface found for terminal 2. [ 582.435052][ T319] usb 8-1: USB disconnect, device number 10 [ 582.468698][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 582.488693][ T2365] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 582.648682][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 582.655808][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.666006][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.675559][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 582.678703][ T2365] usb 9-1: Using ep0 maxpacket: 32 [ 582.684718][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 582.691132][ T2365] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.698728][ T424] usb-storage: probe of 2-1:1.0 failed with error -5 [ 582.706382][ T2365] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.712494][ T24] usb 1-1: SerialNumber: syz [ 582.722731][ T2365] usb 9-1: config 0 has no interface number 0 [ 582.731057][ T424] usb 2-1: USB disconnect, device number 14 [ 582.736203][ T2365] usb 9-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 582.750884][ T24] usb 1-1: 0:2 : does not exist [ 582.752065][ T2365] usb 9-1: config 0 interface 1 has no altsetting 0 [ 582.765004][ T2365] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 582.774158][ T2365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.782164][ T2365] usb 9-1: Product: syz [ 582.786376][ T2365] usb 9-1: Manufacturer: syz [ 582.791073][ T2365] usb 9-1: SerialNumber: syz [ 582.796222][ T2365] usb 9-1: config 0 descriptor?? [ 582.953646][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 582.965680][ T24] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 582.977146][ T24] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 582.986725][ T24] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 582.996247][ T24] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 583.009717][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 583.017669][T25083] ------------[ cut here ]------------ [ 583.023177][T25083] WARNING: CPU: 1 PID: 25083 at crypto/rsa-pkcs1pad.c:540 pkcs1pad_verify+0x4b8/0x600 [ 583.032861][T25083] Modules linked in: [ 583.036752][T25083] CPU: 1 PID: 25083 Comm: syz.7.2714 Not tainted syzkaller #0 [ 583.044231][T25083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 583.054312][T25083] RIP: 0010:pkcs1pad_verify+0x4b8/0x600 [ 583.060014][T25083] Code: 44 89 f6 e8 4a 0f 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 56 1b 2c ff 0f 0b b8 ea ff ff ff eb e3 e8 48 1b 2c ff <0f> 0b b8 ea ff ff ff eb d5 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 85 [ 583.079704][T25083] RSP: 0018:ffffc900035df728 EFLAGS: 00010283 [ 583.085772][T25083] RAX: ffffffff824556d8 RBX: ffff888111e5e800 RCX: 0000000000080000 [ 583.093764][T25083] RDX: ffffc90002761000 RSI: 00000000000009ca RDI: 00000000000009cb [ 583.101755][T25083] RBP: ffffc900035df770 R08: ffffc900035df8af R09: ffffc900035df898 [ 583.109741][T25083] R10: 0000000000000000 R11: ffffffff82455220 R12: 0000000000000000 [ 583.117708][T25083] R13: ffff88812160c400 R14: dffffc0000000000 R15: ffff888111e5e838 [ 583.125707][T25083] FS: 00007f751bc426c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 583.134658][T25083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.141257][T25083] CR2: 000000110c31a0ed CR3: 000000012a29b000 CR4: 00000000003506a0 [ 583.149254][T25083] Call Trace: [ 583.152518][T25083] [ 583.155465][T25083] ? sg_init_one+0x93/0x140 [ 583.159995][T25083] public_key_verify_signature+0x90f/0xd80 [ 583.165927][T25083] ? __cfi_public_key_verify_signature+0x10/0x10 [ 583.172282][T25083] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 583.178171][T25083] ? memdup_user+0x2a/0xc0 [ 583.182622][T25083] ? keyctl_pkey_verify+0x3a4/0x460 [ 583.188069][T25083] ? __se_sys_keyctl+0x817/0xe10 [ 583.193292][T25083] ? __x64_sys_keyctl+0xbf/0xd0 [ 583.198180][T25083] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 583.204729][T25083] public_key_verify_signature_2+0x43/0x50 [ 583.207748][ T2365] usb 9-1: USB disconnect, device number 11 [ 583.210564][T25083] verify_signature+0xe4/0x110 [ 583.221299][T25083] asymmetric_key_verify_signature+0x177/0x220 [ 583.227469][T25083] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 583.234189][T25083] ? __kasan_check_write+0x14/0x20 [ 583.239430][T25083] keyctl_pkey_verify+0x434/0x460 [ 583.244531][T25083] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 583.250129][T25083] __se_sys_keyctl+0x817/0xe10 [ 583.254896][T25083] ? __x64_sys_keyctl+0xd0/0xd0 [ 583.259772][T25083] ? do_futex+0x2bf/0x430 [ 583.264094][T25083] ? __cfi_do_futex+0x10/0x10 [ 583.268779][T25083] ? __se_sys_futex+0x136/0x310 [ 583.273635][T25083] ? __this_cpu_preempt_check+0x13/0x20 [ 583.279217][T25083] ? xfd_validate_state+0x70/0x150 [ 583.284345][T25083] ? __kasan_check_write+0x14/0x20 [ 583.289538][T25083] ? fpregs_restore_userregs+0x128/0x260 [ 583.295208][T25083] __x64_sys_keyctl+0xbf/0xd0 [ 583.299901][T25083] x64_sys_call+0x71a/0x9a0 [ 583.304399][T25083] do_syscall_64+0x4c/0xa0 [ 583.308832][T25083] ? clear_bhb_loop+0x30/0x80 [ 583.313510][T25083] ? clear_bhb_loop+0x30/0x80 [ 583.318188][T25083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.324128][T25083] RIP: 0033:0x7f751ad9fb19 [ 583.328538][T25083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.348204][T25083] RSP: 002b:00007f751bc42028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 583.356642][T25083] RAX: ffffffffffffffda RBX: 00007f751b025fa0 RCX: 00007f751ad9fb19 [ 583.364626][T25083] RDX: 0000200000000c80 RSI: 0000200000000c40 RDI: 000000000000001c [ 583.372612][T25083] RBP: 00007f751ae37b70 R08: 0000200000000cc0 R09: 0000000000000000 [ 583.380598][T25083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.388563][T25083] R13: 00007f751b026038 R14: 00007f751b025fa0 R15: 00007ffddd1aa0b8 [ 583.396551][T25083] [ 583.399576][T25083] ---[ end trace 0000000000000000 ]--- [ 583.409272][ T24] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 583.422105][ T24] usb 1-1: USB disconnect, device number 25 [ 583.714880][ T2365] usb 6-1: USB disconnect, device number 17 [ 583.775289][ T937] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 583.787187][ T937] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 583.828710][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 584.008701][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 584.015073][ T24] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 584.026622][ T24] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.039731][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 584.046430][ T24] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 584.055821][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.064781][ T24] usb 1-1: config 0 descriptor?? [ 584.208704][ T2365] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 584.399817][ T2365] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.410148][ T2365] usb 9-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 584.419244][ T2365] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.441698][ T2365] usb 9-1: config 0 descriptor?? [ 584.474313][ T24] input: HID 044e:120b as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:044E:120B.0008/input/input13 [ 584.487586][ T24] hid-generic 0003:044E:120B.0008: input,hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 584.548690][ T319] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 584.709355][T25116] rtc_cmos 00:00: Alarms can be up to one day in the future [ 584.748774][ T319] usb 2-1: Using ep0 maxpacket: 32 [ 584.763225][ T319] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 584.771670][ T319] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 584.780490][ T319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 584.789670][ T319] usb 2-1: config 1 has no interface number 0 [ 584.795753][ T319] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.806877][ T319] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 584.819943][ T319] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 584.829112][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.892301][ T319] usb 9-1: USB disconnect, device number 12 [ 584.988710][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 585.168684][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 585.175317][ T24] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 585.183603][ T24] usb 8-1: config 0 has no interface number 0 [ 585.189905][ T24] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 585.200550][ T24] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 585.212243][ T24] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 585.221599][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.229769][ T24] usb 8-1: Product: syz [ 585.234116][ T24] usb 8-1: Manufacturer: syz [ 585.238936][ T24] usb 8-1: SerialNumber: syz [ 585.247558][ T24] usb 8-1: config 0 descriptor?? [ 585.253068][T25140] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 585.260621][T25140] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 585.412329][T25149] usb 2-1: USB disconnect, device number 15 [ 585.426480][T25149] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 585.434391][T25149] usb usb2: Process 25149 (syz.8.2738) called USBDEVFS_RESETEP for active endpoint 0x81 [ 585.445181][T25149] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2738'. [ 585.454444][T25149] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2738'. [ 585.471919][T25140] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 585.480355][T25140] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 585.702426][ T24] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 585.738488][ T28] kauditd_printk_skb: 236 callbacks suppressed [ 585.738513][ T28] audit: type=1400 audit(1794037172.247:35896): avc: denied { write } for pid=25158 comm="syz.5.2741" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 586.134731][ T28] audit: type=1400 audit(1794037172.647:35897): avc: denied { bind } for pid=25160 comm="syz.5.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 586.154445][ T28] audit: type=1400 audit(1794037172.647:35898): avc: denied { write } for pid=25160 comm="syz.5.2742" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 586.177489][ T28] audit: type=1400 audit(1794037172.647:35899): avc: denied { ioctl } for pid=25160 comm="syz.5.2742" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 586.191625][T25165] device bridge_slave_0 left promiscuous mode [ 586.208921][T25165] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.216975][T25165] device bridge_slave_1 left promiscuous mode [ 586.223187][T25165] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.232534][T25165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 586.388772][ C1] ================================================================== [ 586.396850][ C1] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 586.404211][ C1] Read of size 8 at addr ffff88810f5d5d90 by task ksoftirqd/1/23 [ 586.411907][ C1] [ 586.414210][ C1] CPU: 1 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 [ 586.422964][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 586.432998][ C1] Call Trace: [ 586.436274][ C1] [ 586.439185][ C1] __dump_stack+0x21/0x24 [ 586.443494][ C1] dump_stack_lvl+0x110/0x170 [ 586.448145][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 586.453171][ C1] ? debug_smp_processor_id+0x17/0x20 [ 586.458542][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 586.463545][ C1] print_address_description+0x71/0x200 [ 586.469071][ C1] print_report+0x4a/0x60 [ 586.473381][ C1] kasan_report+0x122/0x150 [ 586.477869][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 586.482887][ C1] __asan_report_load8_noabort+0x14/0x20 [ 586.488515][ C1] rcu_cblist_dequeue+0x6c/0xb0 [ 586.493349][ C1] rcu_do_batch+0x4bc/0xc30 [ 586.497838][ C1] ? rcu_core+0xf00/0xf00 [ 586.502147][ C1] ? timerqueue_del+0xd3/0x120 [ 586.506890][ C1] rcu_core+0x486/0xf00 [ 586.511025][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 586.516202][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 586.521731][ C1] ? rcu_softirq_qs+0xd5/0x340 [ 586.526480][ C1] ? __cfi_rcu_softirq_qs+0x10/0x10 [ 586.531662][ C1] rcu_core_si+0x9/0x10 [ 586.535803][ C1] handle_softirqs+0x1dd/0x5f0 [ 586.540550][ C1] ? __cfi_run_ksoftirqd+0x10/0x10 [ 586.545648][ C1] run_ksoftirqd+0x28/0x30 [ 586.550053][ C1] smpboot_thread_fn+0x48c/0x8e0 [ 586.554997][ C1] kthread+0x281/0x320 [ 586.559055][ C1] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 586.564519][ C1] ? __cfi_kthread+0x10/0x10 [ 586.569096][ C1] ret_from_fork+0x1f/0x30 [ 586.573505][ C1] [ 586.576504][ C1] [ 586.578807][ C1] Allocated by task 25172: [ 586.583198][ C1] kasan_set_track+0x4b/0x70 [ 586.587772][ C1] kasan_save_alloc_info+0x1f/0x30 [ 586.592864][ C1] __kasan_kmalloc+0x95/0xb0 [ 586.597436][ C1] __kmalloc+0xb4/0x1e0 [ 586.601568][ C1] l2tp_session_create+0x38/0xbd0 [ 586.606696][ C1] pppol2tp_connect+0xbf5/0x1640 [ 586.611618][ C1] __sys_connect+0x3da/0x460 [ 586.616192][ C1] __x64_sys_connect+0x7a/0x90 [ 586.620940][ C1] x64_sys_call+0x88d/0x9a0 [ 586.625427][ C1] do_syscall_64+0x4c/0xa0 [ 586.629821][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.635698][ C1] [ 586.638003][ C1] Freed by task 454: [ 586.641884][ C1] kasan_set_track+0x4b/0x70 [ 586.646511][ C1] kasan_save_free_info+0x2b/0x40 [ 586.651537][ C1] ____kasan_slab_free+0x132/0x180 [ 586.656630][ C1] __kasan_slab_free+0x11/0x20 [ 586.661377][ C1] slab_free_freelist_hook+0xc2/0x190 [ 586.666728][ C1] __kmem_cache_free+0xb7/0x1b0 [ 586.671561][ C1] kfree+0x6f/0xf0 [ 586.675261][ C1] l2tp_session_put+0xaf/0x1a0 [ 586.680010][ C1] l2tp_session_delete+0x3df/0x4d0 [ 586.685104][ C1] l2tp_tunnel_del_work+0x199/0x410 [ 586.690290][ C1] process_one_work+0x717/0xc30 [ 586.695168][ C1] worker_thread+0xa4d/0x11d0 [ 586.699823][ C1] kthread+0x281/0x320 [ 586.703873][ C1] ret_from_fork+0x1f/0x30 [ 586.708272][ C1] [ 586.710611][ C1] Last potentially related work creation: [ 586.716301][ C1] kasan_save_stack+0x3a/0x60 [ 586.720959][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 586.726308][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 586.732094][ C1] call_rcu+0xcf/0xf50 [ 586.736147][ C1] pppol2tp_release+0x1e3/0x2b0 [ 586.740987][ C1] sock_close+0xc9/0x220 [ 586.745209][ C1] __fput+0x1fd/0x8f0 [ 586.749174][ C1] ____fput+0x15/0x20 [ 586.753152][ C1] task_work_run+0x1e1/0x250 [ 586.757723][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 586.762902][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 586.768340][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 586.773783][ C1] do_syscall_64+0x58/0xa0 [ 586.778179][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.784061][ C1] [ 586.786363][ C1] Second to last potentially related work creation: [ 586.792940][ C1] kasan_save_stack+0x3a/0x60 [ 586.797614][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 586.802975][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 586.808757][ C1] kvfree_call_rcu+0x8b/0x7a0 [ 586.813416][ C1] drop_sysctl_table+0x2f5/0x430 [ 586.818344][ C1] drop_sysctl_table+0x2e4/0x430 [ 586.823262][ C1] unregister_sysctl_table+0x75/0x120 [ 586.828614][ C1] unregister_net_sysctl_table+0x15/0x20 [ 586.834322][ C1] addrconf_ifdown+0x15ff/0x1950 [ 586.839294][ C1] addrconf_notify+0x39f/0xe30 [ 586.844040][ C1] raw_notifier_call_chain+0xa1/0x110 [ 586.849389][ C1] unregister_netdevice_many+0x104a/0x1910 [ 586.855283][ C1] default_device_exit_batch+0x951/0x9f0 [ 586.860899][ C1] cleanup_net+0x630/0xb10 [ 586.865337][ C1] process_one_work+0x717/0xc30 [ 586.870166][ C1] worker_thread+0xa4d/0x11d0 [ 586.874822][ C1] kthread+0x281/0x320 [ 586.878873][ C1] ret_from_fork+0x1f/0x30 [ 586.883271][ C1] [ 586.885572][ C1] The buggy address belongs to the object at ffff88810f5d5c00 [ 586.885572][ C1] which belongs to the cache kmalloc-512 of size 512 [ 586.899603][ C1] The buggy address is located 400 bytes inside of [ 586.899603][ C1] 512-byte region [ffff88810f5d5c00, ffff88810f5d5e00) [ 586.912856][ C1] [ 586.915157][ C1] The buggy address belongs to the physical page: [ 586.921544][ C1] page:ffffea00043d7500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f5d4 [ 586.931759][ C1] head:ffffea00043d7500 order:2 compound_mapcount:0 compound_pincount:0 [ 586.940061][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 586.946137][ C1] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100042f00 [ 586.954702][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 586.963258][ C1] page dumped because: kasan: bad access detected [ 586.969649][ C1] page_owner tracks the page as allocated [ 586.975343][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 288, tgid 288 (syz-executor), ts 21017791085, free_ts 20958815883 [ 586.996506][ C1] post_alloc_hook+0x1f5/0x210 [ 587.001260][ C1] prep_new_page+0x1c/0x110 [ 587.005748][ C1] get_page_from_freelist+0x2ca9/0x2d20 [ 587.011283][ C1] __alloc_pages+0x1fa/0x610 [ 587.015857][ C1] alloc_slab_page+0x6e/0xf0 [ 587.020424][ C1] new_slab+0x98/0x3e0 [ 587.024471][ C1] ___slab_alloc+0x70f/0xb70 [ 587.029045][ C1] __slab_alloc+0x5e/0xa0 [ 587.033350][ C1] __kmem_cache_alloc_node+0x204/0x2d0 [ 587.038791][ C1] __kmalloc_node_track_caller+0xa1/0x1e0 [ 587.044491][ C1] __alloc_skb+0x226/0x4a0 [ 587.048890][ C1] inet_netconf_notify_devconf+0x169/0x220 [ 587.054765][ C1] __devinet_sysctl_register+0x2af/0x320 [ 587.060381][ C1] devinet_sysctl_register+0x169/0x1e0 [ 587.065830][ C1] inetdev_init+0x2ca/0x510 [ 587.070317][ C1] inetdev_event+0x1f4/0x10a0 [ 587.074980][ C1] page last free stack trace: [ 587.079637][ C1] free_unref_page_prepare+0x81b/0x820 [ 587.085080][ C1] free_unref_page+0x93/0x530 [ 587.089744][ C1] __free_pages+0x67/0x100 [ 587.094141][ C1] __free_slab+0xc7/0x1a0 [ 587.098446][ C1] __unfreeze_partials+0x15a/0x190 [ 587.103569][ C1] put_cpu_partial+0xa9/0x100 [ 587.108225][ C1] __slab_free+0x1c4/0x280 [ 587.112617][ C1] ___cache_free+0xbf/0xd0 [ 587.117018][ C1] qlist_free_all+0xc6/0x140 [ 587.121588][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 587.127029][ C1] __kasan_slab_alloc+0x24/0x80 [ 587.131862][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 587.136956][ C1] __kmem_cache_alloc_node+0x194/0x2d0 [ 587.142401][ C1] kmalloc_trace+0x29/0xb0 [ 587.146799][ C1] kset_create_and_add+0x59/0x2c0 [ 587.151804][ C1] netdev_register_kobject+0x1be/0x330 [ 587.157334][ C1] [ 587.159635][ C1] Memory state around the buggy address: [ 587.165278][ C1] ffff88810f5d5c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 587.173318][ C1] ffff88810f5d5d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 587.181355][ C1] >ffff88810f5d5d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 587.189389][ C1] ^ [ 587.193951][ C1] ffff88810f5d5e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 587.201985][ C1] ffff88810f5d5e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 587.210021][ C1] ================================================================== [ 587.218130][ C1] Disabling lock debugging due to kernel taint [ 587.226361][ T309] usb 1-1: USB disconnect, device number 26 [ 587.231973][ T28] audit: type=1400 audit(1794037173.747:35900): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.288692][ T2365] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 587.368716][ T937] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 587.478686][ T2365] usb 6-1: Using ep0 maxpacket: 16 [ 587.484946][ T2365] usb 6-1: config 0 has no interfaces? [ 587.491833][ T2365] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 587.500962][ T2365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.508989][ T2365] usb 6-1: Product: syz [ 587.513161][ T2365] usb 6-1: Manufacturer: syz [ 587.517745][ T2365] usb 6-1: SerialNumber: syz [ 587.523044][ T2365] usb 6-1: config 0 descriptor?? [ 587.548702][ T937] usb 9-1: Using ep0 maxpacket: 8 [ 587.554809][ T937] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.565712][ T937] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 587.578497][ T937] usb 9-1: config 0 interface 0 has no altsetting 0 [ 587.585119][ T937] usb 9-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 587.594188][ T937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.603018][ T937] usb 9-1: config 0 descriptor?? [ 587.730963][ T2365] usb 6-1: USB disconnect, device number 18 [ 588.011001][ T937] pantherlord 0003:0810:0002.0009: unknown main item tag 0x2 [ 588.018474][ T937] pantherlord 0003:0810:0002.0009: unknown main item tag 0x0 [ 588.025973][ T937] pantherlord 0003:0810:0002.0009: unknown main item tag 0x0 [ 588.034114][ T937] input: HID 0810:0002 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0810:0002.0009/input/input14 [ 588.112813][ T937] pantherlord 0003:0810:0002.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0810:0002] on usb-dummy_hcd.8-1/input0 [ 588.125354][ T937] pantherlord 0003:0810:0002.0009: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 588.221124][ T937] usb 9-1: USB disconnect, device number 13 [ 588.248911][ T24] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 588.259110][ T24] asix: probe of 8-1:0.34 failed with error -71 [ 588.267068][ T24] usb 8-1: USB disconnect, device number 11