last executing test programs: 2m8.124988298s ago: executing program 32 (id=20): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) 2m0.985251149s ago: executing program 33 (id=49): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@auto_da_alloc}]}, 0x3, 0x5d3, &(0x7f0000001200)="$eJzs3V2IXGcdB+D/mdlN87E1aWzV1tishtpA6M5mswmJeGGJH7UmtaJ4EQphyU53Q2Z31uwGulPBFm+KggjeiCBU7IUV0UBuKqW2Fy3eKCj1g0qNARVEKFopiKCOnJk56ZicZIu7OyfueR44u+95z9l539nhN+f7nABKazT9kUSMRMSFiNjeHf3vGUa7v1oHzs+mQxLt9qf/knTmmz5wfjabNfu7bemPoYjNEbHzaBJ7hq9ud3G5dWaq0aif7Y3XluYWaovLrXtOz03N1Gfq8wcPTx6ZODR5eHLt3uv4T7fe9se7Hrj01It//+c3f33o+2l/R3rT+t/HWhmN0d7/ZDhu6asfSiLuX+vGClLtftRxV19dMlRgh3jL2u2d30s/v7dHxJ5O/rdHNbof3ivPPvS37fHL+4ruI7B+2pn8ya+3gQ2r0lkHTipjEdEtVypjY911+Ftja6XRXFza93Dz3Px0d115RwxXHj7dqI/3thV2xHCSju/vlN8cn7hi/EBEZx34ieqWzvjYqWZjetBfdkDHSMTFC587tWnbFfn/U7Wbf2DjSvP/i5eeeT4tv1EtujfAIKX5/+4bc58I+YfSkX8oL/mH8pJ/KC/5h/KSfygv+YcN7bpXYcg/lJf8Q3nJP5RXlv8Hjx+PB48fb7d617/PN2dOn5ldODIxPjZ37tTYqebZhbGZZnOmc8XO3Mqv22g2F/ZPxLlHakv1xaXa4nLr5Fzz3PzSyc51/SfrObcCAApw4tLm+2/Z/cIrSUQ89oEtnSG1qTddVmFja7eTKPoaZKAYNv2hvNyqDcrLNj6QrDB987UmNNa+L8BgVIruAFCYu293/A/Kyv5/KC/7/6G8rOMDufv/+zYO7P+Hjcf+fyivkWs8/+vmvmd3jUfE2yLiJ9Xhm7JnfQH/Z/oW9iMRFy9++7O1y8/hVrjhC9W4IbqhcEUh23a+UfqzNoWivqSAQXkz9EX3BCjK9IHzs9kwqDafmxlUS0Ce1+7tngSU5r7VG7pThi7vLhhep/OEXn0iYjR++Nsn985W0yF630Pr0BSQ47HHI+Jdecv/pHNsYEdvvp3d2eLWiLgtIt4REe9cZdtf/1Sa/5fq/XXyD4PzVvN/e0TcGRF3RMS7I2JXRLxnlW3//EKa/19t6a+TfyiHz79YdA+Aonz8maJ7ABTlhHMMoLS+82jRPQCK8uwPiu4BUJSvvFx0D6DcXrg3Isbzjv9VOsf7M8O9+wLe1LsXwJaI2BoR23rXEN7cu0Zwe98xw5Wc/GTEaNz5o/46x/9gcLLz/1pXnf9XuXz+XzUidq+ijec+OPLlvPqpXWn+n3o0O/8vHdL2s3MBgfX12uMRd+TmP7l8zm8SaU4j3vs/tjH6hUtP59W//ED6usM/k38oRvtbEe+P/Pxn0lJtaW6htrjcuqfzHO+Z+vzBw5NHJg5NHp6sdW4RUstuFJLj2F9f35dX/+pEmv9vHJR/KEa6/N96jfz3r/+/bxVtHP3al07k1Y/8Ps3/ruevn//Knzcln+mMZ88leGRqaens/ohNybGr6ydW0VHY4LKMZBlK8793T/72/87e36TL/6MR8eF0fSEi/hUR/46Ij0TERyPiYxFx33Xa/OrdM5fy6n/3dJr/J89Y/kMx0vxPr7D8T3//YxVt7Nv74y/m1X9od5r/sd/84dhDQ+kg/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABrb3G5dWaq0aifXcdC0e8RAAAAAAAAyuI/AQAA//93ljCr") symlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000ec0)) 1m30.756219982s ago: executing program 34 (id=228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000080), 0x10) 1m24.725865028s ago: executing program 35 (id=280): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) unshare(0x2040400) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000840)={[{@dmask}, {@dmask={'dmask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x5}}, {@fmask={'fmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@dmask={'dmask', 0x3d, 0x401}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0xe309b000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x33, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 58.343356393s ago: executing program 36 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x19) bpf$MAP_CREATE(0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x3, 0x1016}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)) 36.966408646s ago: executing program 8 (id=536): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40500000000000061100c000000000063014800000000009500090000000000754b4452fdb1181ab26c4541b8c458fc53fcd0450a1e2a572800eee205d03aba5962569a6cfd0778ca17b2879501b9cf40a4f8d1b376177b9bc312b6b4aa88ef8551894b42be5e35a86a76008a1cacdd492621533dbc5828a84745c1e8416a725c3a7a6d783c9aa15c1980d36def4f81f4a559f5141eba"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000340)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001a00010000000080fbdbdf250a80800000000000000000000c0416800500040008000000"], 0x28}}, 0x20000050) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 36.563542925s ago: executing program 7 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) fallocate(r1, 0x0, 0x1, 0x2000404) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003, 0x1000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.748586734s ago: executing program 8 (id=540): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) syz_emit_ethernet(0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x37b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x7d, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20312b0000003a0af17d3816e9bc787a4d4cdbb387f1b59c7b4e3dff23e96f12b5b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(r1) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000001440)={0x1, [{0x0, 0x10, 0x8, &(0x7f0000000740)="dd5e"}, {0x3, 0x0, 0x5, 0x0}, {0x2, 0x0, 0xd, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x773, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x7, 0x0, 0x81, 0x0}, {0x0, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x1, 0x0}]}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0x1c) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 35.488285169s ago: executing program 7 (id=543): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x20000008, 0x80400008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) setpgid(r0, r3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000800, &(0x7f0000000000)={[{@usrquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1}}]}, 0x1, 0x781, &(0x7f0000000800)="$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") 33.507409744s ago: executing program 8 (id=550): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000e00400000004000000010000000080003fd327dfb336b7ba00", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148cd, &(0x7f0000000a00)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@utf8no}, {@shortname_win95}, {@numtail}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r5, 0x4236}, {r6, 0x3328}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000300)={0x1a}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000440)=0x4) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r3, &(0x7f0000004c40)={0x2020}, 0x2020) 33.171635401s ago: executing program 7 (id=552): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000000c0)) r1 = timerfd_create(0x0, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000180)={0x9, 0x80007, 0x9ea0, 0x406, 0x7, "0ab315a407536058e05b07da0000000a002eb8", 0x4, 0x2008386}) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001180)=""/4096, 0x100f}, {&(0x7f0000000100)=""/44}], 0x1) syz_usb_connect$uac3(0x0, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040b492810040000102030109028d00030101c010080b0002010130070904000000010130000a24011029000a000000132403050101010207ff07000007000900ff010c240b07010400000008060009040100000102300009040101010102300009050109200009d4840a252500000000010400090402000001023000090402010101023000090582091002fa0a020a252500000080050900"], 0x0) 32.420522808s ago: executing program 8 (id=553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000080000000001400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r2, 0xffffffffffffffff, 0xaa) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) fallocate(r3, 0x0, 0x0, 0x8800000) r4 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000040)="85", 0x1}], 0x1, 0x7000, 0x0, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x5, 0x20}]}, {0x0, [0x2e, 0x2e, 0x0, 0x2e]}}, 0x0, 0x2a}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004) socket$nl_xfrm(0x10, 0x3, 0x6) 32.154779914s ago: executing program 8 (id=555): syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8100100086dd60f53a0400403a00fe800000ffffffffffffffff000000c9f5ffff00000000000000000000000001020090780000050060000000000000fffc010000000000000000000000000000fc0200000000000000000000000000032f40fec8670000002c00000000000000dfe7c5f2ddd9863ff75e123717616a44af4a052fcacaa1fcf72647da8b78b104081c3872663d65826dc6a8489b2fb698718e5a4e39f557c610787641e91c84855ac720"], 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$unix(0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x56a9, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x3328}, {0xffffffffffffffff, 0x4236}], 0x2, 0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000001100)=0x0) io_submit(r4, 0x21ec, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x1000, 0xffffffffffffffff, 0x0}]) close(0xffffffffffffffff) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 32.106220066s ago: executing program 37 (id=555): syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8100100086dd60f53a0400403a00fe800000ffffffffffffffff000000c9f5ffff00000000000000000000000001020090780000050060000000000000fffc010000000000000000000000000000fc0200000000000000000000000000032f40fec8670000002c00000000000000dfe7c5f2ddd9863ff75e123717616a44af4a052fcacaa1fcf72647da8b78b104081c3872663d65826dc6a8489b2fb698718e5a4e39f557c610787641e91c84855ac720"], 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$unix(0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x56a9, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x3328}, {0xffffffffffffffff, 0x4236}], 0x2, 0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000001100)=0x0) io_submit(r4, 0x21ec, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x1000, 0xffffffffffffffff, 0x0}]) close(0xffffffffffffffff) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 30.096527091s ago: executing program 7 (id=563): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000e00400000004000000010000000080003fd327dfb336b7ba00", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148cd, &(0x7f0000000a00)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@utf8no}, {@shortname_win95}, {@numtail}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r5, 0x4236}, {r6, 0x3328}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000300)={0x1a}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000440)=0x4) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r3, &(0x7f0000004c40)={0x2020}, 0x2020) 29.587997392s ago: executing program 5 (id=568): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r0, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x14, 0x2}, &(0x7f0000000180)) 29.540153074s ago: executing program 5 (id=569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) fallocate(r1, 0x0, 0x1, 0x2000404) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003, 0x1000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x2f000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.937328777s ago: executing program 7 (id=571): socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x4400, 0x0, 0xd}, 0x18) openat(r0, &(0x7f0000000280)='./file0\x00', 0xc55f391ef63abdf2, 0x1c4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0xf}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0xf0, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26, 0x10}, {0x0, 0xffff1000, 0xc, 0x4, 0x0, 0x4, 0x0, 0x6, 0x8, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x18, 0xa3, 0xff, 0x8}, {0xeeee8000, 0xdddd1000, 0x9, 0x4, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0xff}, {0x0, 0xe000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x8080000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 28.342348541s ago: executing program 7 (id=573): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000006c0)="c10fa33553e32dfc8667e57bdc4f1425aa95a364f2f24b309e035c3d0ab05367cb2600081e47ec07feb5579995da20dba2322fe8aa6376605f62393c7a6854496ba5f6cc1a006aad11f450e79f0c411f64b21c2f370fce7be946e6f4252eed1ffd4516c074bfbd497f31e3a27fef85152de25d00fea8dc897d4d703ef6d500d7b1ce269a88ea65c1fb332f3f7c627c81b2534fcfa6af31ff3b57b0ab6fb7434cf9f05952ac680ff66ecab11a674a35fddb2b8f9b6ed2e5dc9b9b9f104d5628b86cd3e94e93a91a31ad1883041e85bed0ae90cbefc43e114a425a043a1572ca94642e217359c0ac") setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0xc86, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@minixdf}, {@init_itable}, {@nolazytime}]}, 0x1, 0x5db, &(0x7f00000007c0)="$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") 28.294227822s ago: executing program 38 (id=573): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000006c0)="c10fa33553e32dfc8667e57bdc4f1425aa95a364f2f24b309e035c3d0ab05367cb2600081e47ec07feb5579995da20dba2322fe8aa6376605f62393c7a6854496ba5f6cc1a006aad11f450e79f0c411f64b21c2f370fce7be946e6f4252eed1ffd4516c074bfbd497f31e3a27fef85152de25d00fea8dc897d4d703ef6d500d7b1ce269a88ea65c1fb332f3f7c627c81b2534fcfa6af31ff3b57b0ab6fb7434cf9f05952ac680ff66ecab11a674a35fddb2b8f9b6ed2e5dc9b9b9f104d5628b86cd3e94e93a91a31ad1883041e85bed0ae90cbefc43e114a425a043a1572ca94642e217359c0ac") setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0xc86, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@minixdf}, {@init_itable}, {@nolazytime}]}, 0x1, 0x5db, &(0x7f00000007c0)="$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") 28.262969662s ago: executing program 5 (id=575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 27.967456519s ago: executing program 5 (id=581): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000e00400000004000000010000000080003fd327dfb336b7ba00", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148cd, &(0x7f0000000a00)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@utf8no}, {@shortname_win95}, {@numtail}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r5, 0x4236}, {r6, 0x3328}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000300)={0x1a}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000440)=0x4) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r3, &(0x7f0000004c40)={0x2020}, 0x2020) 26.926394232s ago: executing program 5 (id=585): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000080000000001400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r2, 0xffffffffffffffff, 0xaa) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) fallocate(r3, 0x0, 0x0, 0x8800000) r4 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000040)="85", 0x1}], 0x1, 0x7000, 0x0, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x5, 0x20}]}, {0x0, [0x2e, 0x2e, 0x0, 0x2e]}}, 0x0, 0x2a}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}}}, 0xb8}}, 0x0) 26.399258054s ago: executing program 5 (id=591): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r0, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x14, 0x2}, &(0x7f0000000180)) 26.345804975s ago: executing program 39 (id=591): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r0, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x14, 0x2}, &(0x7f0000000180)) 10.677817149s ago: executing program 0 (id=685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.553959082s ago: executing program 0 (id=689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) (fail_nth: 3) 10.274937388s ago: executing program 0 (id=691): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 10.254834749s ago: executing program 0 (id=693): pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80080) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000e00400000004000000010000000080003fd327dfb336b7ba00", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148cd, &(0x7f0000000a00)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@utf8no}, {@shortname_win95}, {@numtail}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r3, 0x4236}, {r4, 0x3328}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r1, &(0x7f0000004c40)={0x2020}, 0x2020) 8.838544871s ago: executing program 9 (id=702): socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x4400, 0x0, 0xd}, 0x18) openat(r0, &(0x7f0000000280)='./file0\x00', 0xc55f391ef63abdf2, 0x1c4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.709833573s ago: executing program 0 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x9, 0x7, 0x7, 0x10025, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0xb}, 0x50) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4018, r0}, 0x18) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) (async, rerun: 32) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) recvmmsg(r3, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x20ff}], 0x1, 0x40010102, 0x0) (async, rerun: 32) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 32) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) write(r4, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1, r0}, 0xc) syz_emit_ethernet(0x88, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaae3334f947dba8ac3c6caf9d2f6b9ab5d78b31cd58284758c01dcd037169dccec81baf63f7a0bba27d9ba6ed9c32d24e15695a5f4c17c3442de42e75c704a1f219b6dceb4fc3bf0a988864d1208d19f0efb631f5031e0c34019"], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x10) (async) r6 = dup(r5) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9", 0x5ee, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, 0x0) (async) fcntl$setflags(r10, 0x2, 0x1) (async, rerun: 32) syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x56, &(0x7f0000000240)=@string={0x56, 0x3, "00e9167f7064be4228d86b6d2b93fe5265f8fa29b201113cee41e7568b52ed4c95ac5af0fa440aa8345526fbcd6a4a29d9738436cdf463914ae14b7c10c601512416851d333adeb6499dae435c6b4b256219abb2"}}]}) (async, rerun: 32) syz_usb_control_io$hid(r9, 0x0, 0x0) (async) syz_usb_control_io$hid(r9, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 8.563615567s ago: executing program 0 (id=706): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000404) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003, 0x1000000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x2f000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.579681099s ago: executing program 40 (id=706): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000404) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003, 0x1000000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x2f000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.464048482s ago: executing program 9 (id=710): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.360495154s ago: executing program 1 (id=711): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) 7.359813384s ago: executing program 1 (id=712): socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x4400, 0x0, 0xd}, 0x18) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0xc55f391ef63abdf2, 0x1c4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0xf}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0xf0, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26, 0x10}, {0x0, 0xffff1000, 0xc, 0x4, 0x0, 0x4, 0x0, 0x6, 0x8, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x18, 0xa3, 0xff, 0x8}, {0xeeee8000, 0xdddd1000, 0x9, 0x4, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0xff}, {0x0, 0xe000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x8080000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) syz_clone(0x9300080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, 0x0) write$snapshot(r2, &(0x7f0000000800), 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r7, 0xc0805841, &(0x7f0000000000)={0x6, 0xfffffffb, 0x8e, 0x3, 0x4}) getdents64(r1, &(0x7f00000000c0)=""/58, 0x3a) getdents64(r1, 0xfffffffffffffffe, 0x29) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x8, 0x4, 0x100002, 0x60, 0x1, 0x2b}, 0x50) 7.331053005s ago: executing program 9 (id=713): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 7.255487606s ago: executing program 9 (id=714): pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80080) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000e00400000004000000010000000080003fd327dfb336b7ba00", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148cd, &(0x7f0000000a00)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@utf8no}, {@shortname_win95}, {@numtail}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r3, 0x4236}, {r4, 0x3328}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r1, &(0x7f0000004c40)={0x2020}, 0x2020) 6.374547856s ago: executing program 6 (id=717): socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x4400, 0x0, 0xd}, 0x18) r2 = openat(r1, &(0x7f0000000280)='./file0\x00', 0xc55f391ef63abdf2, 0x1c4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0xf}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0xf0, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26, 0x10}, {0x0, 0xffff1000, 0xc, 0x4, 0x0, 0x4, 0x0, 0x6, 0x8, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x18, 0xa3, 0xff, 0x8}, {0xeeee8000, 0xdddd1000, 0x9, 0x4, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0xff}, {0x0, 0xe000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x8080000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r7 = gettid() process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) syz_clone(0x9300080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, 0x0) write$snapshot(r3, &(0x7f0000000800), 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r8, 0xc0805841, &(0x7f0000000000)={0x6, 0xfffffffb, 0x8e, 0x3, 0x4}) getdents64(r2, &(0x7f00000000c0)=""/58, 0x3a) getdents64(r2, 0xfffffffffffffffe, 0x29) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x8, 0x4, 0x100002, 0x60, 0x1, 0x2b}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) 6.369513966s ago: executing program 9 (id=718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="b805000000fa0000000f01d9b9800000c00f3235000800000f301bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc7750284ae740f7e60200c98660f3a21bbaf044b7d000c987866b857000f211a", 0xfffffffffffffcf7}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000a00)={0x1, 0x0, [{0x0, 0x9, 0x1, 0xa0ac, 0x3, 0x1, 0xffff}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.289530858s ago: executing program 9 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) close_range(r3, r4, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1eb802, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000b80)="ed", 0x1, 0x600}]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0006000008001b0000000000632e290e4d8428d19395e088e91391870b8c045dfb5a0641b4cc636b570356460f7ae77e7dbd3d19b29c4ba9ece5146cd3195e992a71f4328c42a5e7d5695bd189be7c89"], 0x30}}, 0x0) 5.207064152s ago: executing program 41 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) close_range(r3, r4, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1eb802, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000b80)="ed", 0x1, 0x600}]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0006000008001b0000000000632e290e4d8428d19395e088e91391870b8c045dfb5a0641b4cc636b570356460f7ae77e7dbd3d19b29c4ba9ece5146cd3195e992a71f4328c42a5e7d5695bd189be7c89"], 0x30}}, 0x0) 5.195558173s ago: executing program 1 (id=721): futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, 0x0, 0x0, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000011c0), &(0x7f0000000440)=0x4) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100008d1e502039102021a7020a020301090212000100ffc0000904"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000240)={0x75, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0c66b88e008ec02d1aa80000460f1c460041ae", 0x46}], 0x1, 0x6c, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5.057236486s ago: executing program 3 (id=723): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 5.018698897s ago: executing program 3 (id=724): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) 5.018185677s ago: executing program 3 (id=725): futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, 0x0, 0x0, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000011c0), &(0x7f0000000440)=0x4) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100008d1e502039102021a7020a020301090212000100ffc0000904"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000240)={0x75, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0c66b88e008ec02d1aa80000460f1c460041ae", 0x46}], 0x1, 0x6c, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.954968568s ago: executing program 6 (id=726): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000300)=0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8044}, 0x20042000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xfffffffffffffff1, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xb}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x20040084) r4 = io_uring_setup(0x1aaf, &(0x7f0000000580)={0x0, 0xb1e1, 0x2, 0x0, 0x10181}) close_range(r4, r4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140), 0x0) 4.43356897s ago: executing program 2 (id=727): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) unshare(0x40400) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) accept$unix(r0, &(0x7f0000000f00)=@abs, &(0x7f0000001f80)=0x6e) 4.307601813s ago: executing program 2 (id=728): socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x183341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4.307362543s ago: executing program 2 (id=729): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) syz_usb_connect(0x2, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.100656608s ago: executing program 6 (id=731): socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x4400, 0x0, 0xd}, 0x18) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0xc55f391ef63abdf2, 0x1c4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0xf}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0xf0, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26, 0x10}, {0x0, 0xffff1000, 0xc, 0x4, 0x0, 0x4, 0x0, 0x6, 0x8, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x18, 0xa3, 0xff, 0x8}, {0xeeee8000, 0xdddd1000, 0x9, 0x4, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0xff}, {0x0, 0xe000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x8080000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) syz_clone(0x9300080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, 0x0) write$snapshot(r2, &(0x7f0000000800), 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r7, 0xc0805841, &(0x7f0000000000)={0x6, 0xfffffffb, 0x8e, 0x3, 0x4}) getdents64(r1, &(0x7f00000000c0)=""/58, 0x3a) getdents64(r1, 0xfffffffffffffffe, 0x29) 3.906118112s ago: executing program 6 (id=734): socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x4400, 0x0, 0xd}, 0x18) r2 = openat(r1, &(0x7f0000000280)='./file0\x00', 0xc55f391ef63abdf2, 0x1c4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0xf}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0xf0, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26, 0x10}, {0x0, 0xffff1000, 0xc, 0x4, 0x0, 0x4, 0x0, 0x6, 0x8, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x18, 0xa3, 0xff, 0x8}, {0xeeee8000, 0xdddd1000, 0x9, 0x4, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0xff}, {0x0, 0xe000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x8080000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r7 = gettid() process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) syz_clone(0x9300080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, 0x0) write$snapshot(r3, &(0x7f0000000800), 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r8, 0xc0805841, &(0x7f0000000000)={0x6, 0xfffffffb, 0x8e, 0x3, 0x4}) getdents64(r2, &(0x7f00000000c0)=""/58, 0x3a) getdents64(r2, 0xfffffffffffffffe, 0x29) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x8, 0x4, 0x100002, 0x60, 0x1, 0x2b}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) 3.773136975s ago: executing program 1 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x88, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x75d186d, @ipv4={'\x00', '\xff\xff', @remote}, 0x4000f357}, 0x1c) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xfd}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x7df, 0x240, 0x9, 0x6, 0x10000000100006, 0x2, 0x4d, 0x100000000000b, 0x3, 0xffffffff, 0xfffffffffffffff, 0x9, 0x800000000000001, 0x0, 0x5, 0x4], 0x241000, 0x1002}) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) getsockname$packet(r7, 0x0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r9 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000740)="c4c13d6afb0f20e035000004000f22e00f01c566baf80cb8f0cb2687ef66bafc0ced67670f2292c4e379172b126464f2a5450f01d10f0198bc0000002e26450f01f8", 0x42}], 0x1, 0x14, &(0x7f0000000800)=[@cr4={0x1, 0x200160}, @vmwrite={0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6}], 0x2) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b00010103200109040000000101200009240108000c1900e508020a00040b060308240a0901030602090401000001022000090401010101022000090501090002080706082501800f07000009040200000102200009040201010102200009058209ff03093b09082501c000060400"], &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x0, 0x7f, 0x8, 0x7}, 0x0, 0x0}) 1.505491147s ago: executing program 3 (id=736): pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80080) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000e00400000004000000010000000080003fd327dfb336b7ba00", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148cd, &(0x7f0000000a00)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@utf8no}, {@shortname_win95}, {@numtail}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r3, 0x4236}, {r4, 0x3328}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r2) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r1, &(0x7f0000004c40)={0x2020}, 0x2020) 1.372056649s ago: executing program 4 (id=740): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0x20000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESDEC=r2], 0x27) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1666}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81, 0x82c}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r4, &(0x7f0000000740)={0x11, 0x18, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r10, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) 1.325377571s ago: executing program 6 (id=741): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000300)=0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8044}, 0x20042000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xfffffffffffffff1, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xb}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x20040084) r4 = io_uring_setup(0x1aaf, &(0x7f0000000580)={0x0, 0xb1e1, 0x2, 0x0, 0x10181}) close_range(r4, r4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140), 0x0) 1.31778424s ago: executing program 4 (id=742): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x0, &(0x7f0000000bc0)={[{@errors_remount}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x2}}, {@i_version}]}, 0x1, 0x4b6, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000009000000731176000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x10b440, 0x0) flock(r0, 0x1) read$FUSE(r0, &(0x7f0000000c00)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x0, 0x4, 0x1000000000000}) pipe(&(0x7f0000000340)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5f336cbd7000fbdbdf2501000000100002800c000180080001001400000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socket(0x400000000005, 0xa, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r5 = socket(0x10, 0x803, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000280)=0x2c) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000005e00010000000000000000000800000001ec"], 0x1c}], 0x1}, 0x0) sendmmsg(r4, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r6, 0x7}, 0x14, 0x0}}], 0x1, 0x80) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x510d3f49}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x80, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) setrlimit(0x5, &(0x7f0000000100)={0x0, 0x8}) 1.163148444s ago: executing program 4 (id=743): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'sit0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x2003fffe, 0x4007, 0x2, 0xb, 0xfffffffd, 0x100000, 0x7}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x8002, 0x4e21, 0x2, 0xa, 0x20, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast1, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@private1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) 1.162801364s ago: executing program 4 (id=744): r0 = socket$inet6(0xa, 0x80002, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x800, @mcast2, 0xd16}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x4) 1.104902975s ago: executing program 4 (id=745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003, 0x1000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.046848177s ago: executing program 4 (id=746): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) syz_usb_connect(0x2, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 943.292769ms ago: executing program 2 (id=747): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) unshare(0x40400) accept$unix(0xffffffffffffffff, &(0x7f0000000f00)=@abs, &(0x7f0000001f80)=0x6e) 861.877331ms ago: executing program 2 (id=748): pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80080) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000e00400000004000000010000000080003fd327dfb336b7ba00", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148cd, &(0x7f0000000a00)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@utf8no}, {@shortname_win95}, {@numtail}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r3, 0x4236}, {r4, 0x3328}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r1, &(0x7f0000004c40)={0x2020}, 0x2020) 708.005984ms ago: executing program 3 (id=749): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0xfffffffe}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x8841) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote, r3}, 0x14) unshare(0x2040400) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0xf9, 0x4}]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x8, r2, 'id1\x00'}) write$eventfd(r6, &(0x7f0000000100)=0x79, 0x8) process_madvise(r5, 0x0, 0x0, 0x19, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 623.609326ms ago: executing program 3 (id=750): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 620.020816ms ago: executing program 42 (id=750): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 475.392399ms ago: executing program 6 (id=752): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)={0x1, 0x2, 0x80008000000, 0x8000000000000, 0xfffffffffffffffe, 0x8, 0x0, 0x3, 0x4040c407}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x130) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000c17) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r3, 0xb, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_io_uring_setup(0x1fc7, &(0x7f00000001c0)={0x0, 0x9dca, 0x3180, 0x2, 0x3ae}, 0x0, 0x0, 0x0) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) io_destroy(r3) getpgid(0xffffffffffffffff) close_range(r0, r4, 0x3f00000000000000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={r6, r7+10000000}, 0x0, 0x802) futex(&(0x7f000000cffc)=0x1, 0x5, 0x3, 0x0, &(0x7f0000000100), 0x1) get_robust_list(r5, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_usb_disconnect(0xffffffffffffffff) 293.241654ms ago: executing program 1 (id=753): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000016000000850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 274.870144ms ago: executing program 1 (id=754): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0xb93, &(0x7f0000002900)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0xac840, 0x33) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt(r0, 0x3ff, 0x950, &(0x7f0000002380)="bc854946e3652d50d26720efad2e07b2c6f0845861bbd4c5e60dc3833c87ab61db82f08e00314d735b4c4b2b3e3790c42dd6681924d9db75be2fbdb19a3486fa645bb658e1af6b988aaa431a371256cf4ab935e7233aedaf2f4bdcbdbc7dfa5a91d47d72641c9f9373505a1746dc6d3b783f7b840c195ad26735507a48220ebcb07101df71bd896796b14280e4ff441b317ecf8cf9240b2fe6e75d73821f4ee4126518375f5939c5e375e86a8797eec49874d51b2bc596688bf53e1ee8f73d0c3d63c7b8060a9d94", 0xc8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xd, [@fwd={0xa}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x30, 0x61, 0x61, 0x2e, 0x2e, 0x0, 0x2e, 0x25a049f4d060172d]}}, 0x0, 0x31}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=@ipv4_delrule={0x30, 0x21, 0xb12becd5a2b54ddf, 0x70bd27, 0x0, {0x2, 0x0, 0x10}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/234, 0xea}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setresuid(0x0, 0x0, r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f000000e480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002180)={0x50, 0x0, r6, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r5, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r5, &(0x7f0000002140)={0x20, 0x0, r7, {0x403, 0x0, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r5, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x1000, 0x200800, 0x0, 0x0, 0x4000, 0xf0b, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000004c0)='./file1\x00', r4, r8) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x3d, 0x200, 0x70bd25, 0x25dfdbfb, {0x4}, [@generic="7298a07e3c08ff62c1689eab9df49d7db5a52b74b17d2182e28307c3da321b27c648457b9981e2a2ead48d0ed134548a1ce394753e42d495f9042a0e352baedc518024ebb80f1f8182812e143b54073c4aaa33ffa84b5a60204a3a200b6b", @typed={0xb, 0xc5, 0x0, 0x0, @str='$\xad1\xc1(&\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x10008015}, 0x4084) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7d, 0x8, 0x0, 0x0, 0x20, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cf3e7839005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749db213f7617a2bc785", "ba646f857993f0c5787944d335671e611d90022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e461519b104962775f9527ad4d3ff4ad351f4bd845ffcfba9be710877453dd32", [0x1ce, 0x20000001]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x8, 0xd}, 0x20) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 69.220219ms ago: executing program 8 (id=751): futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, 0x0, 0x0, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000011c0), &(0x7f0000000440)=0x4) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100008d1e502039102021a7020a020301090212000100ffc0000904"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000240)={0x75, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0c66b88e008ec02d1aa80000460f1c460041ae", 0x46}], 0x1, 0x6c, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 0s ago: executing program 2 (id=755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000016000000850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1c3800, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0xfff, {{0xa, 0x4e23, 0xf9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, {{0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}}}, 0x108) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): 77][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.158469][ T1815] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 96.191241][ T980] device bridge_slave_1 left promiscuous mode [ 96.197435][ T980] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.203124][ T1815] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 96.222611][ T980] device bridge_slave_0 left promiscuous mode [ 96.229034][ T980] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.238146][ T980] device veth1_macvtap left promiscuous mode [ 96.244288][ T980] device veth0_vlan left promiscuous mode [ 96.323148][ T1864] FAT-fs (loop7): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 96.325993][ T1863] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 96.622427][ T666] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 96.650620][ T666] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 96.675695][ T666] aqc111 6-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:fd:84:74:08:e6 [ 96.874779][ T665] usb 6-1: USB disconnect, device number 6 [ 96.881335][ T665] aqc111 6-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 96.950664][ T665] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 96.964488][ T665] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 96.983659][ T665] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 97.123294][ T1884] set_capacity_and_notify: 4 callbacks suppressed [ 97.123322][ T1884] loop8: detected capacity change from 0 to 512 [ 97.139928][ T1884] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 97.291630][ T1884] EXT4-fs (loop8): 1 truncate cleaned up [ 97.297372][ T1884] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 97.992500][ T1298] EXT4-fs (loop8): unmounting filesystem. [ 98.142429][ T1911] device syzkaller0 entered promiscuous mode [ 98.155587][ T1909] loop8: detected capacity change from 0 to 256 [ 98.168878][ T1909] exfat: Unknown parameter './file0' [ 98.222726][ T1909] loop8: detected capacity change from 0 to 256 [ 98.229279][ T1909] exfat: Deprecated parameter 'utf8' [ 98.260162][ T1909] exfat: Deprecated parameter 'utf8' [ 98.266588][ T1909] exfat: Deprecated parameter 'utf8' [ 98.282770][ T1909] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 98.380160][ T335] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 98.590090][ T335] usb 10-1: Using ep0 maxpacket: 32 [ 98.598775][ T335] usb 10-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 98.612383][ T335] usb 10-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 98.625026][ T335] usb 10-1: Product: syz [ 98.641195][ T335] usb 10-1: Manufacturer: syz [ 98.653632][ T335] usb 10-1: SerialNumber: syz [ 98.664984][ T335] usb 10-1: config 0 descriptor?? [ 98.830083][ T949] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 99.004148][ T335] usb 10-1: USB disconnect, device number 2 [ 99.020163][ T949] usb 6-1: Using ep0 maxpacket: 8 [ 99.026256][ T949] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.042672][ T949] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.059449][ T949] usb 6-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 99.072983][ T949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.085345][ T949] usb 6-1: Product: syz [ 99.092766][ T949] usb 6-1: Manufacturer: syz [ 99.099540][ T949] usb 6-1: SerialNumber: syz [ 99.155486][ T1935] loop7: detected capacity change from 0 to 256 [ 99.164720][ T1935] exfat: Deprecated parameter 'utf8' [ 99.170353][ T1935] exfat: Deprecated parameter 'utf8' [ 99.175763][ T1935] exfat: Deprecated parameter 'utf8' [ 99.182842][ T1935] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 99.312103][ T949] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 99.321492][ T949] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 99.455860][ T949] usb 6-1: USB disconnect, device number 7 [ 102.243005][ T1942] netlink: 12 bytes leftover after parsing attributes in process `syz.9.442'. [ 102.320154][ T1941] loop9: detected capacity change from 0 to 512 [ 102.321572][ T1946] loop4: detected capacity change from 0 to 512 [ 102.400378][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.419591][ T1941] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 102.430551][ T1946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.647080][ T1946] EXT4-fs (loop4): 1 truncate cleaned up [ 102.652872][ T1946] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.724286][ T1941] EXT4-fs (loop9): 1 truncate cleaned up [ 102.729990][ T1941] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 103.281497][ T1837] EXT4-fs (loop9): unmounting filesystem. [ 103.383072][ T292] EXT4-fs (loop4): unmounting filesystem. [ 103.450658][ T28] audit: type=1400 audit(1783606552.640:323): avc: denied { connect } for pid=1963 comm="syz.7.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.473740][ T1966] loop4: detected capacity change from 0 to 256 [ 103.492225][ T39] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.510219][ T39] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.515390][ T1966] exfat: Unknown parameter './file0' [ 103.565881][ T310] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.575937][ T1962] loop4: detected capacity change from 0 to 256 [ 103.584614][ T28] audit: type=1400 audit(1783606552.770:324): avc: denied { create } for pid=1967 comm="syz.5.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 103.587744][ T310] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.608531][ T1968] loop5: detected capacity change from 0 to 512 [ 103.630401][ T1962] exfat: Deprecated parameter 'utf8' [ 103.635735][ T1962] exfat: Deprecated parameter 'utf8' [ 103.650085][ T28] audit: type=1400 audit(1783606552.790:325): avc: denied { ioctl } for pid=1967 comm="syz.5.452" path="socket:[28396]" dev="sockfs" ino=28396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 103.666846][ T310] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.675811][ T1968] EXT4-fs: Ignoring removed orlov option [ 103.692850][ T1962] exfat: Deprecated parameter 'utf8' [ 103.709252][ T1968] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.723069][ T28] audit: type=1400 audit(1783606552.790:326): avc: denied { write } for pid=1967 comm="syz.5.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 103.745289][ T1962] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 103.768201][ T1968] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.452: corrupted in-inode xattr [ 103.784806][ T1976] xt_hashlimit: size too large, truncated to 1048576 [ 103.791877][ T1968] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.452: couldn't read orphan inode 15 (err -117) [ 103.833652][ T1968] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 103.907553][ T1968] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.452'. [ 103.950598][ T1968] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 103.964904][ T28] audit: type=1400 audit(1783606553.150:327): avc: denied { write } for pid=1985 comm="syz.4.457" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.980137][ T1968] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 104.015123][ T1989] FAULT_INJECTION: forcing a failure. [ 104.015123][ T1989] name failslab, interval 1, probability 0, space 0, times 0 [ 104.025735][ T1990] loop9: detected capacity change from 0 to 256 [ 104.030983][ T1989] CPU: 1 PID: 1989 Comm: syz.4.458 Not tainted syzkaller #0 [ 104.041306][ T1989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.051362][ T1989] Call Trace: [ 104.054644][ T1989] [ 104.057581][ T1989] __dump_stack+0x21/0x24 [ 104.061917][ T1989] dump_stack_lvl+0x110/0x170 [ 104.066599][ T1989] ? __cfi_dump_stack_lvl+0x8/0x8 [ 104.071626][ T1989] ? memcpy+0x56/0x70 [ 104.075609][ T1989] dump_stack+0x15/0x24 [ 104.079766][ T1989] should_fail_ex+0x3bf/0x510 [ 104.084448][ T1989] __should_failslab+0xac/0xf0 [ 104.089219][ T1989] should_failslab+0x9/0x20 [ 104.093717][ T1989] slab_pre_alloc_hook+0x30/0x1d0 [ 104.098735][ T1989] kmem_cache_alloc_lru+0x49/0x280 [ 104.103835][ T1989] ? __d_alloc+0x34/0x6d0 [ 104.108158][ T1989] __d_alloc+0x34/0x6d0 [ 104.112309][ T1989] d_alloc+0x48/0x260 [ 104.116295][ T1989] ? lookup_one_qstr_excl+0xb6/0x270 [ 104.121568][ T1989] lookup_one_qstr_excl+0xcb/0x270 [ 104.126666][ T1989] filename_create+0x23d/0x440 [ 104.131420][ T1989] ? kern_path_create+0x1b0/0x1b0 [ 104.136436][ T1989] do_mkdirat+0x5c/0x4d0 [ 104.142475][ T1989] ? getname_flags+0x205/0x510 [ 104.147244][ T1989] __x64_sys_mkdirat+0x89/0xa0 [ 104.152015][ T1989] x64_sys_call+0x73d/0x9a0 [ 104.156514][ T1989] do_syscall_64+0x4c/0xa0 [ 104.160937][ T1989] ? clear_bhb_loop+0x30/0x80 [ 104.165600][ T1989] ? clear_bhb_loop+0x30/0x80 [ 104.170261][ T1989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.176165][ T1989] RIP: 0033:0x7fac4ef9ccc7 [ 104.180574][ T1989] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.200180][ T1989] RSP: 002b:00007fac4fedbe58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 104.208598][ T1989] RAX: ffffffffffffffda RBX: 00007fac4fedbee0 RCX: 00007fac4ef9ccc7 [ 104.216560][ T1989] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c [ 104.224527][ T1989] RBP: 0000200000002040 R08: 0000000000000000 R09: 0000000000000000 [ 104.232496][ T1989] R10: 0000200000002040 R11: 0000000000000246 R12: 0000200000000000 [ 104.240459][ T1989] R13: 00007fac4fedbea0 R14: 0000000000000000 R15: 0000200000000280 [ 104.248425][ T1989] [ 104.256158][ T1990] FAT-fs (loop9): Directory bread(block 1285) failed [ 104.269090][ T1990] FAT-fs (loop9): Directory bread(block 1286) failed [ 104.276812][ T408] EXT4-fs (loop5): unmounting filesystem. [ 104.282000][ T1990] FAT-fs (loop9): Directory bread(block 1287) failed [ 104.293156][ T1990] FAT-fs (loop9): Directory bread(block 1288) failed [ 104.320128][ T665] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 104.506308][ T2003] loop4: detected capacity change from 0 to 512 [ 104.516708][ T2003] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.656935][ T2005] loop5: detected capacity change from 0 to 512 [ 104.706491][ T2003] EXT4-fs (loop4): 1 truncate cleaned up [ 104.712260][ T2003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.912942][ T2005] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 105.052211][ T2005] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 105.230397][ T2005] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 105.238337][ T2005] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 105.266945][ T2005] EXT4-fs (loop5): failed to initialize system zone (-117) [ 105.290321][ T2005] EXT4-fs (loop5): mount failed [ 105.360102][ T292] EXT4-fs (loop4): unmounting filesystem. [ 105.381117][ T665] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 105.390583][ T665] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 105.400505][ T665] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 105.410335][ T665] usb 8-1: config 1 interface 0 has no altsetting 0 [ 105.416949][ T665] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 105.426065][ T665] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.450262][ T2015] FAULT_INJECTION: forcing a failure. [ 105.450262][ T2015] name failslab, interval 1, probability 0, space 0, times 0 [ 105.467357][ T2015] CPU: 1 PID: 2015 Comm: syz.4.466 Not tainted syzkaller #0 [ 105.474676][ T2015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.476653][ T665] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 105.484736][ T2015] Call Trace: [ 105.484750][ T2015] [ 105.484758][ T2015] __dump_stack+0x21/0x24 [ 105.484782][ T2015] dump_stack_lvl+0x110/0x170 [ 105.484797][ T2015] ? __cfi_dump_stack_lvl+0x8/0x8 [ 105.511810][ T2015] ? release_sock+0x169/0x1c0 [ 105.516504][ T2015] dump_stack+0x15/0x24 [ 105.520683][ T2015] should_fail_ex+0x3bf/0x510 [ 105.525370][ T2015] __should_failslab+0xac/0xf0 [ 105.530152][ T2015] should_failslab+0x9/0x20 [ 105.534663][ T2015] kmem_cache_alloc_node+0x42/0x330 [ 105.539871][ T2015] ? __alloc_skb+0xe8/0x4a0 [ 105.544386][ T2015] __alloc_skb+0xe8/0x4a0 [ 105.548728][ T2015] netlink_sendmsg+0x635/0xbd0 [ 105.553504][ T2015] ? __cfi_netlink_sendmsg+0x10/0x10 [ 105.558812][ T2015] ? security_socket_sendmsg+0x93/0xb0 [ 105.564291][ T2015] ? __cfi_netlink_sendmsg+0x10/0x10 [ 105.569596][ T2015] ____sys_sendmsg+0x5fb/0x9c0 [ 105.574371][ T2015] ? __sys_sendmsg_sock+0x40/0x40 [ 105.579404][ T2015] ? import_iovec+0x7c/0xb0 [ 105.583904][ T2015] ___sys_sendmsg+0x2a2/0x360 [ 105.588586][ T2015] ? __sys_sendmsg+0x290/0x290 [ 105.593355][ T2015] ? __kasan_check_write+0x14/0x20 [ 105.598465][ T2015] ? proc_fail_nth_write+0x180/0x200 [ 105.603751][ T2015] ? vfs_write+0xa51/0xd00 [ 105.608169][ T2015] ? __fdget+0x19c/0x220 [ 105.612412][ T2015] __x64_sys_sendmsg+0x20d/0x2e0 [ 105.617349][ T2015] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 105.622810][ T2015] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 105.628875][ T2015] x64_sys_call+0x171/0x9a0 [ 105.633381][ T2015] do_syscall_64+0x4c/0xa0 [ 105.637799][ T2015] ? clear_bhb_loop+0x30/0x80 [ 105.642475][ T2015] ? clear_bhb_loop+0x30/0x80 [ 105.647155][ T2015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.653051][ T2015] RIP: 0033:0x7fac4ef9de59 [ 105.657466][ T2015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.677066][ T2015] RSP: 002b:00007fac4fedc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.685485][ T2015] RAX: ffffffffffffffda RBX: 00007fac4f225fa0 RCX: 00007fac4ef9de59 [ 105.693453][ T2015] RDX: 0000000030004000 RSI: 0000200000000340 RDI: 0000000000000003 [ 105.701422][ T2015] RBP: 00007fac4fedc090 R08: 0000000000000000 R09: 0000000000000000 [ 105.709387][ T2015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.717358][ T2015] R13: 00007fac4f226038 R14: 00007fac4f225fa0 R15: 00007ffcb118e078 [ 105.725333][ T2015] [ 106.197193][ T28] audit: type=1400 audit(1783606555.380:328): avc: denied { bind } for pid=2021 comm="syz.8.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.330358][ T2023] netlink: 4 bytes leftover after parsing attributes in process `syz.8.467'. [ 106.400794][ T665] ums-sddr09: probe of 8-1:1.0 failed with error -22 [ 106.418437][ T665] usb 8-1: USB disconnect, device number 5 [ 106.448771][ T2033] loop8: detected capacity change from 0 to 256 [ 106.469626][ T2033] FAT-fs (loop8): Unrecognized mount option "shortname!winnt" or missing value [ 106.500664][ T2037] xt_hashlimit: size too large, truncated to 1048576 [ 106.625057][ T2047] FAULT_INJECTION: forcing a failure. [ 106.625057][ T2047] name failslab, interval 1, probability 0, space 0, times 0 [ 106.638623][ T2047] CPU: 1 PID: 2047 Comm: syz.9.475 Not tainted syzkaller #0 [ 106.645931][ T2047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.655979][ T2047] Call Trace: [ 106.659244][ T2047] [ 106.662158][ T2047] __dump_stack+0x21/0x24 [ 106.666471][ T2047] dump_stack_lvl+0x110/0x170 [ 106.671124][ T2047] ? __cfi_dump_stack_lvl+0x8/0x8 [ 106.676127][ T2047] ? release_sock+0x169/0x1c0 [ 106.680787][ T2047] dump_stack+0x15/0x24 [ 106.684928][ T2047] should_fail_ex+0x3bf/0x510 [ 106.689587][ T2047] __should_failslab+0xac/0xf0 [ 106.694332][ T2047] should_failslab+0x9/0x20 [ 106.698836][ T2047] kmem_cache_alloc_node+0x42/0x330 [ 106.704033][ T2047] ? __alloc_skb+0xe8/0x4a0 [ 106.708530][ T2047] __alloc_skb+0xe8/0x4a0 [ 106.712848][ T2047] netlink_sendmsg+0x635/0xbd0 [ 106.717624][ T2047] ? __cfi_netlink_sendmsg+0x10/0x10 [ 106.722890][ T2047] ? security_socket_sendmsg+0x93/0xb0 [ 106.728335][ T2047] ? __cfi_netlink_sendmsg+0x10/0x10 [ 106.733600][ T2047] ____sys_sendmsg+0x5fb/0x9c0 [ 106.738349][ T2047] ? __sys_sendmsg_sock+0x40/0x40 [ 106.743357][ T2047] ? import_iovec+0x7c/0xb0 [ 106.747851][ T2047] ___sys_sendmsg+0x2a2/0x360 [ 106.752544][ T2047] ? __sys_sendmsg+0x290/0x290 [ 106.757316][ T2047] ? __kasan_check_write+0x14/0x20 [ 106.762427][ T2047] ? proc_fail_nth_write+0x180/0x200 [ 106.767716][ T2047] ? vfs_write+0xa51/0xd00 [ 106.772136][ T2047] ? __fdget+0x19c/0x220 [ 106.776380][ T2047] __x64_sys_sendmsg+0x20d/0x2e0 [ 106.781331][ T2047] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 106.786792][ T2047] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 106.792862][ T2047] x64_sys_call+0x171/0x9a0 [ 106.797365][ T2047] do_syscall_64+0x4c/0xa0 [ 106.801778][ T2047] ? clear_bhb_loop+0x30/0x80 [ 106.806450][ T2047] ? clear_bhb_loop+0x30/0x80 [ 106.811126][ T2047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.817024][ T2047] RIP: 0033:0x7f1a5bd9de59 [ 106.821434][ T2047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.841041][ T2047] RSP: 002b:00007f1a5cc09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.849458][ T2047] RAX: ffffffffffffffda RBX: 00007f1a5c025fa0 RCX: 00007f1a5bd9de59 [ 106.857431][ T2047] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 106.865402][ T2047] RBP: 00007f1a5cc09090 R08: 0000000000000000 R09: 0000000000000000 [ 106.871859][ T28] audit: type=1400 audit(1783606556.060:329): avc: denied { setopt } for pid=2048 comm="syz.8.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.873369][ T2047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.873383][ T2047] R13: 00007f1a5c026038 R14: 00007f1a5c025fa0 R15: 00007ffccadfa7b8 [ 106.908457][ T2047] [ 106.915762][ T28] audit: type=1400 audit(1783606556.100:330): avc: denied { write } for pid=2048 comm="syz.8.476" name="snmp" dev="proc" ino=4026532598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 106.956670][ T28] audit: type=1400 audit(1783606556.100:331): avc: denied { ioctl } for pid=2048 comm="syz.8.476" path="socket:[29519]" dev="sockfs" ino=29519 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.115040][ T2058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.477'. [ 107.144451][ T2058] loop5: detected capacity change from 0 to 512 [ 108.013681][ T2058] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 108.220638][ T2058] EXT4-fs (loop5): 1 truncate cleaned up [ 108.226327][ T2058] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 108.593131][ T2069] FAULT_INJECTION: forcing a failure. [ 108.593131][ T2069] name failslab, interval 1, probability 0, space 0, times 0 [ 108.605853][ T2069] CPU: 1 PID: 2069 Comm: syz.8.480 Not tainted syzkaller #0 [ 108.613149][ T2069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.623186][ T2069] Call Trace: [ 108.626446][ T2069] [ 108.629359][ T2069] __dump_stack+0x21/0x24 [ 108.633677][ T2069] dump_stack_lvl+0x110/0x170 [ 108.638336][ T2069] ? __cfi_dump_stack_lvl+0x8/0x8 [ 108.643348][ T2069] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 108.649053][ T2069] dump_stack+0x15/0x24 [ 108.653201][ T2069] should_fail_ex+0x3bf/0x510 [ 108.657862][ T2069] __should_failslab+0xac/0xf0 [ 108.662614][ T2069] should_failslab+0x9/0x20 [ 108.667099][ T2069] kmem_cache_alloc_node+0x42/0x330 [ 108.672282][ T2069] ? __alloc_skb+0xe8/0x4a0 [ 108.676775][ T2069] __alloc_skb+0xe8/0x4a0 [ 108.681086][ T2069] create_monitor_ctrl_open+0x156/0x800 [ 108.686617][ T2069] ? hci_sock_gen_cookie+0x100/0x100 [ 108.691888][ T2069] ? ns_capable+0x8c/0xf0 [ 108.696201][ T2069] hci_sock_ioctl+0x289/0x7f0 [ 108.700866][ T2069] sock_do_ioctl+0x114/0x330 [ 108.705443][ T2069] ? sock_show_fdinfo+0xb0/0xb0 [ 108.710283][ T2069] ? selinux_file_ioctl+0x3ad/0x4c0 [ 108.715474][ T2069] sock_ioctl+0x475/0x700 [ 108.719790][ T2069] ? __cfi_sock_ioctl+0x10/0x10 [ 108.724628][ T2069] ? __fget_files+0x2d1/0x330 [ 108.729294][ T2069] ? security_file_ioctl+0x95/0xc0 [ 108.734392][ T2069] ? __cfi_sock_ioctl+0x10/0x10 [ 108.739233][ T2069] __se_sys_ioctl+0x12f/0x1b0 [ 108.743895][ T2069] __x64_sys_ioctl+0x7b/0x90 [ 108.748478][ T2069] x64_sys_call+0x58b/0x9a0 [ 108.752968][ T2069] do_syscall_64+0x4c/0xa0 [ 108.757367][ T2069] ? clear_bhb_loop+0x30/0x80 [ 108.762026][ T2069] ? clear_bhb_loop+0x30/0x80 [ 108.766686][ T2069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.772567][ T2069] RIP: 0033:0x7f685819de59 [ 108.776963][ T2069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.796554][ T2069] RSP: 002b:00007f6859035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.804951][ T2069] RAX: ffffffffffffffda RBX: 00007f6858426180 RCX: 00007f685819de59 [ 108.812910][ T2069] RDX: 0000200000000000 RSI: 00000000800448d2 RDI: 0000000000000009 [ 108.820872][ T2069] RBP: 00007f6859035090 R08: 0000000000000000 R09: 0000000000000000 [ 108.828823][ T2069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.836777][ T2069] R13: 00007f6858426218 R14: 00007f6858426180 R15: 00007ffe7ac9e758 [ 108.844738][ T2069] [ 108.871313][ T408] EXT4-fs (loop5): unmounting filesystem. [ 108.988695][ T2072] loop9: detected capacity change from 0 to 128 [ 108.997017][ T2074] loop7: detected capacity change from 0 to 512 [ 109.009429][ T2072] FAT-fs (loop9): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 109.021290][ T2074] EXT4-fs warning (device loop7): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop7. [ 109.079468][ T2086] netlink: 4 bytes leftover after parsing attributes in process `syz.8.484'. [ 109.432053][ T2102] loop4: detected capacity change from 0 to 512 [ 109.472374][ T2102] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.475542][ T28] audit: type=1400 audit(1783606558.660:332): avc: denied { getopt } for pid=2105 comm="syz.8.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.481493][ T2102] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.553353][ T2108] loop8: detected capacity change from 0 to 256 [ 109.568593][ T2108] exfat: Unknown parameter './file0' [ 109.653037][ T292] EXT4-fs (loop4): unmounting filesystem. [ 110.453094][ T2121] loop9: detected capacity change from 0 to 512 [ 110.476041][ T2125] random: crng reseeded on system resumption [ 110.514329][ T2121] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.497: bg 0: block 5: invalid block bitmap [ 110.547090][ T2121] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 110.566400][ T2121] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.497: invalid indirect mapped block 3 (level 2) [ 110.598736][ T2121] EXT4-fs (loop9): 1 orphan inode deleted [ 110.604728][ T2121] EXT4-fs (loop9): 1 truncate cleaned up [ 110.610705][ T2121] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 110.705281][ T1837] EXT4-fs (loop9): unmounting filesystem. [ 110.734080][ T2140] netlink: 64 bytes leftover after parsing attributes in process `syz.9.502'. [ 110.808602][ T2141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 110.836131][ T2141] loop4: detected capacity change from 0 to 512 [ 110.846221][ T2141] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.016471][ T2141] EXT4-fs (loop4): 1 truncate cleaned up [ 111.022282][ T2141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.585585][ T2136] loop7: detected capacity change from 0 to 40427 [ 111.628444][ T2136] F2FS-fs (loop7): invalid crc value [ 111.649181][ T2136] F2FS-fs (loop7): Found nat_bits in checkpoint [ 111.686671][ T292] EXT4-fs (loop4): unmounting filesystem. [ 111.705428][ T2136] F2FS-fs (loop7): Start checkpoint disabled! [ 111.719823][ T2136] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 111.738804][ T2136] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 111.739229][ T2153] FAULT_INJECTION: forcing a failure. [ 111.739229][ T2153] name failslab, interval 1, probability 0, space 0, times 0 [ 111.798395][ T2150] loop5: detected capacity change from 0 to 256 [ 111.802388][ T2153] CPU: 1 PID: 2153 Comm: syz.4.504 Not tainted syzkaller #0 [ 111.804997][ T316] kworker/u4:3: attempt to access beyond end of device [ 111.804997][ T316] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 111.811945][ T2153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.811957][ T2153] Call Trace: [ 111.811962][ T2153] [ 111.811968][ T2153] __dump_stack+0x21/0x24 [ 111.811992][ T2153] dump_stack_lvl+0x110/0x170 [ 111.838025][ T2150] exfat: Unknown parameter './file0' [ 111.839245][ T2153] ? __cfi_dump_stack_lvl+0x8/0x8 [ 111.861404][ T2153] ? release_sock+0x169/0x1c0 [ 111.866073][ T2153] dump_stack+0x15/0x24 [ 111.870215][ T2153] should_fail_ex+0x3bf/0x510 [ 111.874879][ T2153] __should_failslab+0xac/0xf0 [ 111.879627][ T2153] should_failslab+0x9/0x20 [ 111.884113][ T2153] kmem_cache_alloc_node+0x42/0x330 [ 111.889298][ T2153] ? __alloc_skb+0xe8/0x4a0 [ 111.893785][ T2153] __alloc_skb+0xe8/0x4a0 [ 111.898099][ T2153] netlink_sendmsg+0x635/0xbd0 [ 111.902847][ T2153] ? __cfi_netlink_sendmsg+0x10/0x10 [ 111.908116][ T2153] ? security_socket_sendmsg+0x93/0xb0 [ 111.913560][ T2153] ? __cfi_netlink_sendmsg+0x10/0x10 [ 111.918830][ T2153] ____sys_sendmsg+0x5fb/0x9c0 [ 111.923582][ T2153] ? __sys_sendmsg_sock+0x40/0x40 [ 111.928595][ T2153] ? import_iovec+0x7c/0xb0 [ 111.933084][ T2153] ___sys_sendmsg+0x2a2/0x360 [ 111.937748][ T2153] ? __sys_sendmsg+0x290/0x290 [ 111.942501][ T2153] ? __kasan_check_write+0x14/0x20 [ 111.947613][ T2153] ? proc_fail_nth_write+0x180/0x200 [ 111.952885][ T2153] ? vfs_write+0xa51/0xd00 [ 111.957288][ T2153] ? __fdget+0x19c/0x220 [ 111.961516][ T2153] __x64_sys_sendmsg+0x20d/0x2e0 [ 111.966438][ T2153] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 111.971904][ T2153] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 111.977962][ T2153] x64_sys_call+0x171/0x9a0 [ 111.982450][ T2153] do_syscall_64+0x4c/0xa0 [ 111.986860][ T2153] ? clear_bhb_loop+0x30/0x80 [ 111.991518][ T2153] ? clear_bhb_loop+0x30/0x80 [ 111.996176][ T2153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.002057][ T2153] RIP: 0033:0x7fac4ef9de59 [ 112.006456][ T2153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.026047][ T2153] RSP: 002b:00007fac4fedc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.034444][ T2153] RAX: ffffffffffffffda RBX: 00007fac4f225fa0 RCX: 00007fac4ef9de59 [ 112.042401][ T2153] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 112.050355][ T2153] RBP: 00007fac4fedc090 R08: 0000000000000000 R09: 0000000000000000 [ 112.058309][ T2153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.066269][ T2153] R13: 00007fac4f226038 R14: 00007fac4f225fa0 R15: 00007ffcb118e078 [ 112.074226][ T2153] [ 112.103508][ T2150] loop5: detected capacity change from 0 to 256 [ 112.112949][ T310] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.134891][ T2150] exfat: Deprecated parameter 'utf8' [ 112.144861][ T2150] exfat: Deprecated parameter 'utf8' [ 112.153202][ T2150] exfat: Deprecated parameter 'utf8' [ 112.175959][ T2168] FAULT_INJECTION: forcing a failure. [ 112.175959][ T2168] name failslab, interval 1, probability 0, space 0, times 0 [ 112.188736][ T2168] CPU: 0 PID: 2168 Comm: syz.7.507 Not tainted syzkaller #0 [ 112.196032][ T2168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.206095][ T2168] Call Trace: [ 112.209375][ T2168] [ 112.212299][ T2168] __dump_stack+0x21/0x24 [ 112.217152][ T2168] dump_stack_lvl+0x110/0x170 [ 112.221833][ T2168] ? __cfi_dump_stack_lvl+0x8/0x8 [ 112.226874][ T2168] ? release_sock+0x169/0x1c0 [ 112.231565][ T2168] dump_stack+0x15/0x24 [ 112.231764][ T2150] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 112.235735][ T2168] should_fail_ex+0x3bf/0x510 [ 112.252361][ T2168] __should_failslab+0xac/0xf0 [ 112.257144][ T2168] should_failslab+0x9/0x20 [ 112.261663][ T2168] kmem_cache_alloc_node+0x42/0x330 [ 112.266882][ T2168] ? __alloc_skb+0xe8/0x4a0 [ 112.271398][ T2168] __alloc_skb+0xe8/0x4a0 [ 112.275748][ T2168] netlink_sendmsg+0x635/0xbd0 [ 112.280521][ T2168] ? __cfi_netlink_sendmsg+0x10/0x10 [ 112.285810][ T2168] ? security_socket_sendmsg+0x93/0xb0 [ 112.291272][ T2168] ? __cfi_netlink_sendmsg+0x10/0x10 [ 112.296551][ T2168] ____sys_sendmsg+0x5fb/0x9c0 [ 112.301302][ T2168] ? __sys_sendmsg_sock+0x40/0x40 [ 112.306311][ T2168] ? import_iovec+0x7c/0xb0 [ 112.310800][ T2168] ___sys_sendmsg+0x2a2/0x360 [ 112.315465][ T2168] ? __sys_sendmsg+0x290/0x290 [ 112.320216][ T2168] ? __kasan_check_write+0x14/0x20 [ 112.325316][ T2168] ? proc_fail_nth_write+0x180/0x200 [ 112.330587][ T2168] ? vfs_write+0xa51/0xd00 [ 112.334988][ T2168] ? __fdget+0x19c/0x220 [ 112.339212][ T2168] __x64_sys_sendmsg+0x20d/0x2e0 [ 112.344136][ T2168] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 112.349625][ T2168] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 112.355773][ T2168] x64_sys_call+0x171/0x9a0 [ 112.360269][ T2168] do_syscall_64+0x4c/0xa0 [ 112.364673][ T2168] ? clear_bhb_loop+0x30/0x80 [ 112.369330][ T2168] ? clear_bhb_loop+0x30/0x80 [ 112.373991][ T2168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.379884][ T2168] RIP: 0033:0x7fb70bd9de59 [ 112.384285][ T2168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.403876][ T2168] RSP: 002b:00007fb70cc1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.412276][ T2168] RAX: ffffffffffffffda RBX: 00007fb70c025fa0 RCX: 00007fb70bd9de59 [ 112.420236][ T2168] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 112.428189][ T2168] RBP: 00007fb70cc1c090 R08: 0000000000000000 R09: 0000000000000000 [ 112.436142][ T2168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.444097][ T2168] R13: 00007fb70c026038 R14: 00007fb70c025fa0 R15: 00007ffcf0a64a38 [ 112.452058][ T2168] [ 112.487131][ T2176] 9pnet_fd: Insufficient options for proto=fd [ 113.073059][ T2183] random: crng reseeded on system resumption [ 113.220101][ T478] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 113.302984][ T2195] loop9: detected capacity change from 0 to 2048 [ 113.320293][ T28] audit: type=1400 audit(1783606562.510:333): avc: denied { append } for pid=2196 comm="syz.8.520" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 113.380760][ T2195] loop9: p4 < > [ 113.387995][ T28] audit: type=1400 audit(1783606562.570:334): avc: denied { write } for pid=2194 comm="syz.9.519" name="loop9p4" dev="devtmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 113.414076][ T28] audit: type=1400 audit(1783606562.570:335): avc: denied { open } for pid=2194 comm="syz.9.519" path="/dev/loop9p4" dev="devtmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 113.420290][ T478] usb 8-1: Using ep0 maxpacket: 32 [ 113.460173][ T310] udevd[310]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 113.507795][ T478] usb 8-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 113.519322][ T478] usb 8-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 113.530208][ T478] usb 8-1: Product: syz [ 113.534745][ T478] usb 8-1: Manufacturer: syz [ 113.541760][ T478] usb 8-1: SerialNumber: syz [ 113.546978][ T478] usb 8-1: config 0 descriptor?? [ 113.992393][ T2215] exfat: Unknown parameter './file0' [ 115.075025][ T2234] 9pnet_virtio: no channels available for device syz [ 115.164358][ T478] usb 8-1: USB disconnect, device number 6 [ 115.458627][ T2236] random: crng reseeded on system resumption [ 115.657221][ T2242] netlink: 12 bytes leftover after parsing attributes in process `syz.8.532'. [ 116.804987][ T2243] set_capacity_and_notify: 1 callbacks suppressed [ 116.805005][ T2243] loop4: detected capacity change from 0 to 256 [ 116.851290][ T2247] loop5: detected capacity change from 0 to 128 [ 116.891428][ T2247] FAT-fs (loop5): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 116.932592][ T2243] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 117.148715][ T2251] netlink: 12 bytes leftover after parsing attributes in process `syz.8.536'. [ 117.626601][ T2260] loop9: detected capacity change from 0 to 256 [ 118.080343][ T2260] exfat: Unknown parameter 'ÿÿÿÿÿÿ000000000000000000000000xffffffffffffffff' [ 118.417386][ T2274] random: crng reseeded on system resumption [ 118.503077][ T39] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 118.621781][ T2283] 9pnet_virtio: no channels available for device syz [ 118.700133][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 118.719221][ T39] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 118.806434][ T39] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 118.926135][ T39] usb 9-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00 [ 119.011523][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.099057][ T39] usb 9-1: config 0 descriptor?? [ 119.576128][ T2284] loop7: detected capacity change from 0 to 2048 [ 119.654692][ T39] usbhid 9-1:0.0: can't add hid device: -71 [ 119.660867][ T39] usbhid: probe of 9-1:0.0 failed with error -71 [ 119.670006][ T39] usb 9-1: USB disconnect, device number 4 [ 119.683446][ T2284] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 119.692456][ T2284] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.781122][ T2301] loop4: detected capacity change from 0 to 512 [ 119.890965][ T2301] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.980225][ T60] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 119.994187][ T2301] EXT4-fs (loop4): 1 truncate cleaned up [ 119.999930][ T2301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.418990][ T2304] loop8: detected capacity change from 0 to 128 [ 120.513191][ T2304] FAT-fs (loop8): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 120.522467][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 120.530287][ T60] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 120.549545][ T60] usb 6-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 120.579235][ T60] usb 6-1: Product: syz [ 120.587223][ T60] usb 6-1: Manufacturer: syz [ 120.596712][ T60] usb 6-1: SerialNumber: syz [ 120.616687][ T292] EXT4-fs (loop4): unmounting filesystem. [ 120.623433][ T60] usb 6-1: config 0 descriptor?? [ 120.711174][ T1105] EXT4-fs (loop7): unmounting filesystem. [ 120.841367][ T2314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'. [ 120.881279][ T2314] loop4: detected capacity change from 0 to 512 [ 120.891886][ T2314] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.016212][ T2314] EXT4-fs (loop4): 1 truncate cleaned up [ 121.021980][ T2314] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.440212][ T335] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 121.706086][ T292] EXT4-fs (loop4): unmounting filesystem. [ 121.801171][ T335] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 121.822536][ T60] usb 6-1: USB disconnect, device number 8 [ 121.828944][ T335] usb 8-1: New USB device found, idVendor=92b4, idProduct=0081, bcdDevice= 0.40 [ 121.843471][ T335] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.851725][ T335] usb 8-1: Product: syz [ 121.855896][ T335] usb 8-1: Manufacturer: syz [ 121.860699][ T335] usb 8-1: SerialNumber: syz [ 121.906579][ T2328] loop4: detected capacity change from 0 to 256 [ 121.926255][ T2328] FAT-fs (loop4): Directory bread(block 1285) failed [ 121.933209][ T2328] FAT-fs (loop4): Directory bread(block 1286) failed [ 121.936964][ T2327] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.939910][ T2328] FAT-fs (loop4): Directory bread(block 1287) failed [ 121.947072][ T2327] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.954730][ T2328] FAT-fs (loop4): Directory bread(block 1288) failed [ 121.961400][ T2327] device bridge_slave_0 entered promiscuous mode [ 121.974573][ T2327] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.981666][ T2327] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.989001][ T2327] device bridge_slave_1 entered promiscuous mode [ 122.027016][ T2327] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.034075][ T2327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.041337][ T2327] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.048376][ T2327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.075265][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.094665][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.126450][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.175069][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.185107][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.192202][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.199631][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.208056][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.215148][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.226161][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.243028][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.255805][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.284489][ T2327] device veth0_vlan entered promiscuous mode [ 122.294780][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.301236][ T2337] loop9: detected capacity change from 0 to 256 [ 122.310705][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.322890][ T2337] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 122.340484][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.366641][ T2327] device veth1_macvtap entered promiscuous mode [ 122.382850][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.410243][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.438874][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.744373][ T2349] loop4: detected capacity change from 0 to 512 [ 123.510344][ T2350] 9pnet_virtio: no channels available for device syz [ 123.602311][ T2349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.762077][ T335] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 123.798012][ T335] usb 8-1: unit 2 not found! [ 123.806163][ T335] usb 8-1: USB disconnect, device number 7 [ 123.841095][ T2355] loop5: detected capacity change from 0 to 512 [ 123.850113][ T2349] EXT4-fs (loop4): 1 truncate cleaned up [ 123.855803][ T2349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 123.923859][ T292] EXT4-fs (loop4): unmounting filesystem. [ 123.932767][ T2356] loop7: detected capacity change from 0 to 128 [ 123.965690][ T2356] FAT-fs (loop7): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 124.036961][ T2355] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 124.043985][ T2362] loop4: detected capacity change from 0 to 1024 [ 124.047312][ T2355] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.082399][ T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.207097][ T408] EXT4-fs (loop5): unmounting filesystem. [ 124.230978][ T310] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.435904][ T2376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.567'. [ 124.465079][ T2376] loop4: detected capacity change from 0 to 512 [ 124.475081][ T2376] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.584133][ T2376] EXT4-fs (loop4): 1 truncate cleaned up [ 124.589868][ T2376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.393074][ T2382] loop0: detected capacity change from 0 to 1024 [ 125.435256][ T292] EXT4-fs (loop4): unmounting filesystem. [ 125.447792][ T2382] EXT4-fs: Ignoring removed oldalloc option [ 125.531086][ T2382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.540288][ T2382] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.567370][ T2382] EXT4-fs (loop0): unmounting filesystem. [ 125.611687][ T2389] loop4: detected capacity change from 0 to 512 [ 125.662607][ T2389] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.673407][ T2389] ext4 filesystem being mounted at /103/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.693045][ T2389] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 125.710329][ T2389] EXT4-fs (loop4): Remounting filesystem read-only [ 125.722991][ T28] audit: type=1400 audit(2000000004.979:336): avc: denied { create } for pid=2388 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 125.814813][ T2400] FAULT_INJECTION: forcing a failure. [ 125.814813][ T2400] name failslab, interval 1, probability 0, space 0, times 0 [ 125.837734][ T2400] CPU: 0 PID: 2400 Comm: syz.0.578 Not tainted syzkaller #0 [ 125.845061][ T2400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.855137][ T2400] Call Trace: [ 125.858425][ T2400] [ 125.861362][ T2400] __dump_stack+0x21/0x24 [ 125.865718][ T2400] dump_stack_lvl+0x110/0x170 [ 125.870412][ T2400] ? __cfi_dump_stack_lvl+0x8/0x8 [ 125.874492][ T28] audit: type=1400 audit(2000000005.089:337): avc: denied { ioctl } for pid=2403 comm="syz.9.580" path="socket:[32226]" dev="sockfs" ino=32226 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.875450][ T2400] ? avc_has_perm+0x163/0x250 [ 125.904745][ T2400] dump_stack+0x15/0x24 [ 125.908918][ T2400] should_fail_ex+0x3bf/0x510 [ 125.913610][ T2400] __should_failslab+0xac/0xf0 [ 125.917071][ T2406] loop5: detected capacity change from 0 to 128 [ 125.918395][ T2400] should_failslab+0x9/0x20 [ 125.929100][ T2400] __kmem_cache_alloc_node+0x3d/0x2d0 [ 125.934489][ T2400] ? __get_vm_area_node+0x12c/0x360 [ 125.939704][ T2400] ? __get_vm_area_node+0x12c/0x360 [ 125.944909][ T2400] kmalloc_node_trace+0x26/0xb0 [ 125.949771][ T2400] __get_vm_area_node+0x12c/0x360 [ 125.954794][ T2400] __vmalloc_node_range+0x326/0x1440 [ 125.960070][ T2400] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 125.965607][ T2400] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 125.971320][ T2400] ? __stack_depot_save+0x36/0x490 [ 125.976421][ T2400] ? selinux_capable+0x2b6/0x3b0 [ 125.981346][ T2400] ? _parse_integer_limit+0x18e/0x1d0 [ 125.986704][ T2400] ? __cfi___vmalloc_node_range+0x10/0x10 [ 125.992410][ T2400] ? avc_has_perm_noaudit+0x390/0x490 [ 125.997766][ T2400] ? avc_has_perm_noaudit+0x390/0x490 [ 126.003120][ T2400] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 126.008656][ T2400] __vmalloc+0x79/0x90 [ 126.012708][ T2400] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 126.018243][ T2400] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 126.023599][ T2400] bpf_prog_alloc+0x21/0x1c0 [ 126.028180][ T2400] bpf_prog_load+0x811/0x1670 [ 126.032842][ T2400] ? map_freeze+0x3a0/0x3a0 [ 126.037342][ T2400] ? selinux_bpf+0xc7/0xf0 [ 126.041747][ T2400] ? security_bpf+0x93/0xb0 [ 126.046237][ T2400] __sys_bpf+0x57b/0x850 [ 126.050463][ T2400] ? bpf_link_show_fdinfo+0x330/0x330 [ 126.055820][ T2400] ? __cfi_ksys_write+0x10/0x10 [ 126.060653][ T2400] ? do_user_addr_fault+0x9a5/0x1030 [ 126.065927][ T2400] ? debug_smp_processor_id+0x17/0x20 [ 126.071283][ T2400] __x64_sys_bpf+0x7c/0x90 [ 126.075682][ T2400] x64_sys_call+0x488/0x9a0 [ 126.080170][ T2400] do_syscall_64+0x4c/0xa0 [ 126.084574][ T2400] ? clear_bhb_loop+0x30/0x80 [ 126.089233][ T2400] ? clear_bhb_loop+0x30/0x80 [ 126.093895][ T2400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.099777][ T2400] RIP: 0033:0x7f49f559de59 [ 126.104183][ T2400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.123776][ T2400] RSP: 002b:00007f49f63b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.132177][ T2400] RAX: ffffffffffffffda RBX: 00007f49f5825fa0 RCX: 00007f49f559de59 [ 126.140135][ T2400] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 126.148093][ T2400] RBP: 00007f49f63b9090 R08: 0000000000000000 R09: 0000000000000000 [ 126.156051][ T2400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.164009][ T2400] R13: 00007f49f5826038 R14: 00007f49f5825fa0 R15: 00007ffe83ead928 [ 126.171970][ T2400] [ 126.176541][ T2400] syz.0.578: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 126.181018][ T2406] FAT-fs (loop5): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 126.194874][ T2400] CPU: 1 PID: 2400 Comm: syz.0.578 Not tainted syzkaller #0 [ 126.208970][ T2400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.219016][ T2400] Call Trace: [ 126.222280][ T2400] [ 126.225196][ T2400] __dump_stack+0x21/0x24 [ 126.229521][ T2400] dump_stack_lvl+0x110/0x170 [ 126.234196][ T2400] ? __cfi_dump_stack_lvl+0x8/0x8 [ 126.239231][ T2400] ? pr_cont_kernfs_name+0x133/0x160 [ 126.244524][ T2400] dump_stack+0x15/0x24 [ 126.248673][ T2400] warn_alloc+0x1dc/0x200 [ 126.252991][ T2400] ? should_failslab+0x9/0x20 [ 126.257666][ T2400] ? __cfi_warn_alloc+0x10/0x10 [ 126.262522][ T2400] ? kmalloc_node_trace+0x3d/0xb0 [ 126.267542][ T2400] ? __get_vm_area_node+0x353/0x360 [ 126.272762][ T2400] __vmalloc_node_range+0x34b/0x1440 [ 126.278035][ T2400] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 126.283743][ T2400] ? __stack_depot_save+0x36/0x490 [ 126.288864][ T2400] ? selinux_capable+0x2b6/0x3b0 [ 126.293787][ T2400] ? _parse_integer_limit+0x18e/0x1d0 [ 126.299145][ T2400] ? __cfi___vmalloc_node_range+0x10/0x10 [ 126.304848][ T2400] ? avc_has_perm_noaudit+0x390/0x490 [ 126.310206][ T2400] ? avc_has_perm_noaudit+0x390/0x490 [ 126.315564][ T2400] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 126.321123][ T2400] __vmalloc+0x79/0x90 [ 126.325177][ T2400] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 126.330708][ T2400] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 126.336067][ T2400] bpf_prog_alloc+0x21/0x1c0 [ 126.340645][ T2400] bpf_prog_load+0x811/0x1670 [ 126.345308][ T2400] ? map_freeze+0x3a0/0x3a0 [ 126.349795][ T2400] ? selinux_bpf+0xc7/0xf0 [ 126.354199][ T2400] ? security_bpf+0x93/0xb0 [ 126.358693][ T2400] __sys_bpf+0x57b/0x850 [ 126.362919][ T2400] ? bpf_link_show_fdinfo+0x330/0x330 [ 126.368276][ T2400] ? __cfi_ksys_write+0x10/0x10 [ 126.373110][ T2400] ? do_user_addr_fault+0x9a5/0x1030 [ 126.378381][ T2400] ? debug_smp_processor_id+0x17/0x20 [ 126.383739][ T2400] __x64_sys_bpf+0x7c/0x90 [ 126.388137][ T2400] x64_sys_call+0x488/0x9a0 [ 126.392628][ T2400] do_syscall_64+0x4c/0xa0 [ 126.397033][ T2400] ? clear_bhb_loop+0x30/0x80 [ 126.401693][ T2400] ? clear_bhb_loop+0x30/0x80 [ 126.406351][ T2400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.412233][ T2400] RIP: 0033:0x7f49f559de59 [ 126.416634][ T2400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.436225][ T2400] RSP: 002b:00007f49f63b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.444629][ T2400] RAX: ffffffffffffffda RBX: 00007f49f5825fa0 RCX: 00007f49f559de59 [ 126.452585][ T2400] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 126.460542][ T2400] RBP: 00007f49f63b9090 R08: 0000000000000000 R09: 0000000000000000 [ 126.468500][ T2400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.476457][ T2400] R13: 00007f49f5826038 R14: 00007f49f5825fa0 R15: 00007ffe83ead928 [ 126.484418][ T2400] [ 126.488085][ T2400] Mem-Info: [ 126.490885][ T478] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 126.491364][ T2400] active_anon:7900 inactive_anon:5 isolated_anon:0 [ 126.491364][ T2400] active_file:8852 inactive_file:15166 isolated_file:0 [ 126.491364][ T2400] unevictable:1 dirty:321 writeback:1 [ 126.491364][ T2400] slab_reclaimable:8777 slab_unreclaimable:75285 [ 126.491364][ T2400] mapped:30842 shmem:257 pagetables:665 [ 126.491364][ T2400] sec_pagetables:0 bounce:0 [ 126.491364][ T2400] kernel_misc_reclaimable:0 [ 126.491364][ T2400] free:1499776 free_pcp:13886 free_cma:0 [ 126.544629][ T2400] Node 0 active_anon:31600kB inactive_anon:20kB active_file:35408kB inactive_file:60664kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:123368kB dirty:1284kB writeback:4kB shmem:1028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5036kB pagetables:2660kB sec_pagetables:0kB all_unreclaimable? no [ 126.551248][ T2399] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.576986][ T2400] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971892kB mlocked:0kB bounce:0kB free_pcp:5408kB local_pcp:5408kB free_cma:0kB [ 126.595098][ T2399] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.619199][ T28] audit: type=1326 audit(2000000005.869:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.9.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5bd9de59 code=0x7ffc0000 [ 126.620837][ T2400] lowmem_reserve[]: 0 3932 3932 3932 [ 126.644480][ T2399] device bridge_slave_0 entered promiscuous mode [ 126.649155][ T2400] Normal free:3031748kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:31700kB inactive_anon:20kB active_file:35408kB inactive_file:60664kB unevictable:4kB writepending:1288kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:49220kB local_pcp:24708kB free_cma:0kB [ 126.686998][ T2400] lowmem_reserve[]: 0 0 0 0 [ 126.687714][ T2399] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.698662][ T2400] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB [ 126.698871][ T28] audit: type=1326 audit(2000000005.869:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.9.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5bd9de59 code=0x7ffc0000 [ 126.720774][ T478] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 126.740722][ T2399] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.748665][ T2400] Normal: 1557*4kB (UME) 670*8kB (M) 182*16kB (M) 145*32kB (M) 40*64kB (UME) 198*128kB (UME) 29*256kB (UME) 15*512kB [ 126.755658][ T2399] device bridge_slave_1 entered promiscuous mode [ 126.768592][ T28] audit: type=1326 audit(2000000005.869:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.9.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5bd9de59 code=0x7ffc0000 [ 126.775027][ T478] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 126.799089][ T28] audit: type=1326 audit(2000000005.869:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.9.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5bd9de59 code=0x7ffc0000 [ 126.809228][ T2400] (UME) [ 126.833730][ T28] audit: type=1326 audit(2000000005.869:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.9.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1a5bd9de59 code=0x7ffc0000 [ 126.833937][ T10] device bridge_slave_1 left promiscuous mode [ 126.836627][ T28] audit: type=1326 audit(2000000005.869:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.9.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5bd9de59 code=0x7ffc0000 [ 126.861231][ T2400] 6*1024kB [ 126.867199][ T28] audit: type=1326 audit(2000000005.869:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.9.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5bd9de59 code=0x7ffc0000 [ 126.891805][ T478] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 126.895851][ T28] audit: type=1326 audit(2000000005.869:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.9.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5bd9de59 code=0x7ffc0000 [ 126.925074][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.932901][ T2400] (UM) [ 126.957571][ T478] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 126.962323][ T2400] 9*2048kB [ 126.974496][ T478] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.982337][ T2400] (M) [ 126.989974][ T478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.000818][ T2400] 719*4096kB (UM) = 3031748kB [ 127.005482][ T10] device bridge_slave_0 left promiscuous mode [ 127.011628][ T2400] 24278 total pagecache pages [ 127.011652][ T2400] 5 pages in swap cache [ 127.016432][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.027615][ T2400] Free swap = 124432kB [ 127.027735][ T478] usb 5-1: SerialNumber: syz [ 127.031975][ T2400] Total swap = 124996kB [ 127.041058][ T2400] 2097051 pages RAM [ 127.042129][ T478] cdc_acm 5-1:1.0: invalid descriptor buffer length [ 127.044895][ T2400] 0 pages HighMem/MovableOnly [ 127.051794][ T478] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 127.056568][ T2400] 347478 pages reserved [ 127.064099][ T478] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 127.068292][ T2400] 0 pages cma reserved [ 127.074593][ T478] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 127.097341][ T2418] loop0: detected capacity change from 0 to 1024 [ 127.123444][ T2420] FAULT_INJECTION: forcing a failure. [ 127.123444][ T2420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.136762][ T2420] CPU: 0 PID: 2420 Comm: syz.0.587 Not tainted syzkaller #0 [ 127.144062][ T2420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.154109][ T2420] Call Trace: [ 127.157375][ T2420] [ 127.160289][ T2420] __dump_stack+0x21/0x24 [ 127.164607][ T2420] dump_stack_lvl+0x110/0x170 [ 127.169268][ T2420] ? __cfi_dump_stack_lvl+0x8/0x8 [ 127.174282][ T2420] dump_stack+0x15/0x24 [ 127.178422][ T2420] should_fail_ex+0x3bf/0x510 [ 127.183080][ T2420] should_fail+0xb/0x10 [ 127.187220][ T2420] should_fail_usercopy+0x1a/0x20 [ 127.192225][ T2420] _copy_from_user+0x1e/0xc0 [ 127.196803][ T2420] bpf_prog_test_run_skb+0x279/0x12f0 [ 127.202169][ T2420] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 127.207971][ T2420] bpf_prog_test_run+0x3b4/0x5c0 [ 127.212891][ T2420] ? bpf_prog_query+0x270/0x270 [ 127.217724][ T2420] ? selinux_bpf+0xce/0xf0 [ 127.222124][ T2420] ? security_bpf+0x93/0xb0 [ 127.226613][ T2420] __sys_bpf+0x5ee/0x850 [ 127.230838][ T2420] ? bpf_link_show_fdinfo+0x330/0x330 [ 127.236197][ T2420] ? __cfi_ksys_write+0x10/0x10 [ 127.241033][ T2420] ? debug_smp_processor_id+0x17/0x20 [ 127.246393][ T2420] __x64_sys_bpf+0x7c/0x90 [ 127.250795][ T2420] x64_sys_call+0x488/0x9a0 [ 127.255287][ T2420] do_syscall_64+0x4c/0xa0 [ 127.259687][ T2420] ? clear_bhb_loop+0x30/0x80 [ 127.264347][ T2420] ? clear_bhb_loop+0x30/0x80 [ 127.269006][ T2420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.274885][ T2420] RIP: 0033:0x7f49f559de59 [ 127.279285][ T2420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.298875][ T2420] RSP: 002b:00007f49f63b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.307272][ T2420] RAX: ffffffffffffffda RBX: 00007f49f5825fa0 RCX: 00007f49f559de59 [ 127.315315][ T2420] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 127.323276][ T2420] RBP: 00007f49f63b9090 R08: 0000000000000000 R09: 0000000000000000 [ 127.331232][ T2420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.339189][ T2420] R13: 00007f49f5826038 R14: 00007f49f5825fa0 R15: 00007ffe83ead928 [ 127.347148][ T2420] [ 127.352149][ T453] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 127.365055][ T2389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.380195][ T2389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.395977][ T666] usb 5-1: USB disconnect, device number 14 [ 127.450666][ T2399] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.457771][ T2399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.465078][ T2399] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.472125][ T2399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.496324][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.504087][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.514294][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.521946][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.541520][ T453] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 127.553207][ T453] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 127.565112][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.580403][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.588636][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.591127][ T2429] loop0: detected capacity change from 0 to 256 [ 127.595717][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.620297][ T453] usb 10-1: config 1 interface 0 has no altsetting 0 [ 127.629634][ T453] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 127.644144][ T2429] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 127.650106][ T453] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.670243][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.678637][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.700077][ T453] usb 10-1: Product: syz [ 127.700099][ T453] usb 10-1: Manufacturer: syz [ 127.700113][ T453] usb 10-1: SerialNumber: syz [ 127.701499][ T2414] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 127.730304][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.730685][ T2414] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 127.737373][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.768078][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.778032][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.804774][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.813097][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.854581][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.863387][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.890136][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.898183][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.908735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.916555][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.927019][ T2399] device veth0_vlan entered promiscuous mode [ 127.935238][ T292] EXT4-fs (loop4): unmounting filesystem. [ 127.967463][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.978974][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.016287][ T2399] device veth1_macvtap entered promiscuous mode [ 128.032827][ T453] rtl8150 10-1:1.0: couldn't reset the device [ 128.039029][ T453] rtl8150: probe of 10-1:1.0 failed with error -5 [ 128.047439][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.062939][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.071895][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.080494][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.083009][ T453] usb 10-1: USB disconnect, device number 3 [ 128.088962][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.117458][ T2430] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.132439][ T2430] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.137036][ T2439] loop4: detected capacity change from 0 to 515 [ 128.156799][ T2439] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 128.160557][ T2430] device bridge_slave_0 entered promiscuous mode [ 128.166698][ T2439] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 128.195892][ T2430] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.203089][ T2430] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.214373][ T2439] EXT4-fs error (device loop4): __ext4_fill_super:5452: inode #2: comm syz.4.594: iget: bad i_size value: 8463800222054970741 [ 128.221380][ T2430] device bridge_slave_1 entered promiscuous mode [ 128.241812][ T2439] EXT4-fs (loop4): get root inode failed [ 128.247676][ T2439] EXT4-fs (loop4): mount failed [ 128.313206][ T2430] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.320352][ T2430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.327690][ T2430] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.334742][ T2430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.377231][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.390759][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.408144][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.431955][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.446935][ T485] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.454044][ T485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.461951][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.470513][ T485] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.477559][ T485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.500099][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.508191][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.515992][ T666] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 128.538010][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.563938][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.573986][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.590801][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.610264][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.668967][ T2430] device veth0_vlan entered promiscuous mode [ 128.686164][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.699121][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.708384][ T666] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 128.779144][ T2451] netlink: 12 bytes leftover after parsing attributes in process `syz.9.596'. [ 128.808163][ T2451] loop9: detected capacity change from 0 to 512 [ 128.818802][ T2451] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 129.042354][ T2451] EXT4-fs (loop9): 1 truncate cleaned up [ 129.048105][ T2451] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 129.757709][ T666] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 129.771550][ T666] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 129.782111][ T1837] EXT4-fs (loop9): unmounting filesystem. [ 129.782633][ T2430] device veth1_macvtap entered promiscuous mode [ 129.812161][ T666] usb 4-1: config 1 interface 0 has no altsetting 0 [ 129.818964][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.837607][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.846348][ T666] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 129.874484][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.875810][ T666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.900594][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.906624][ T2459] loop0: detected capacity change from 0 to 512 [ 129.943525][ T666] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 129.961134][ T2459] EXT4-fs warning (device loop0): read_mmp_block:115: Error -74 while reading MMP block 17 [ 129.980268][ T2463] loop9: detected capacity change from 0 to 1024 [ 130.002159][ T2468] loop1: detected capacity change from 0 to 256 [ 130.016282][ T2467] loop4: detected capacity change from 0 to 1024 [ 130.024869][ T368] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.040347][ T2459] netlink: 124 bytes leftover after parsing attributes in process `syz.0.598'. [ 130.065387][ T2468] exfat: Unknown parameter './file0' [ 130.095969][ T2473] netlink: 48 bytes leftover after parsing attributes in process `syz.0.603'. [ 130.127907][ T2467] EXT4-fs: Ignoring removed oldalloc option [ 130.208313][ T2461] loop1: detected capacity change from 0 to 256 [ 130.237321][ T666] ums-sddr09: probe of 4-1:1.0 failed with error -22 [ 130.248706][ T2461] exfat: Deprecated parameter 'utf8' [ 130.254334][ T2461] exfat: Deprecated parameter 'utf8' [ 130.259865][ T2461] exfat: Deprecated parameter 'utf8' [ 130.263900][ T666] usb 4-1: USB disconnect, device number 3 [ 130.269088][ T2467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.274129][ T2461] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 130.279708][ T2467] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.462192][ T2467] EXT4-fs (loop4): unmounting filesystem. [ 130.609237][ T2484] loop4: detected capacity change from 0 to 1024 [ 130.615943][ T2484] EXT4-fs: Ignoring removed oldalloc option [ 130.641042][ T2484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.649622][ T2484] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.660731][ T2484] EXT4-fs (loop4): unmounting filesystem. [ 133.461612][ T2501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 133.539273][ T2494] loop3: detected capacity change from 0 to 512 [ 133.540775][ T2504] loop0: detected capacity change from 0 to 512 [ 133.558084][ T2494] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.570302][ T2504] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.744765][ T2504] EXT4-fs (loop0): 1 truncate cleaned up [ 133.750535][ T2504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.762449][ T2494] EXT4-fs (loop3): 1 truncate cleaned up [ 133.768201][ T2494] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.204872][ T2399] EXT4-fs (loop3): unmounting filesystem. [ 135.281710][ T2327] EXT4-fs (loop0): unmounting filesystem. [ 135.388590][ T2515] loop0: detected capacity change from 0 to 512 [ 135.402088][ T2515] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 135.443751][ T2515] EXT4-fs (loop0): 1 truncate cleaned up [ 135.491528][ T2520] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 135.581158][ T2515] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.633843][ T2515] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.613: invalid indirect mapped block 4294901760 (level 0) [ 135.648005][ T2515] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.613: invalid indirect mapped block 2185560079 (level 0) [ 135.667871][ T2524] loop9: detected capacity change from 0 to 1024 [ 135.671871][ T2515] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #13: comm syz.0.613: corrupted inode contents [ 135.675035][ T2524] EXT4-fs: Ignoring removed oldalloc option [ 135.693244][ T2525] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz.0.613: Invalid inode table block 0 in block_group 0 [ 135.725767][ T2515] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #13: comm syz.0.613: mark_inode_dirty error [ 135.726926][ T2525] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 135.738316][ T2515] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.613: invalid indirect mapped block 65535 (level 2) [ 135.750510][ T2529] loop1: detected capacity change from 0 to 1024 [ 135.760981][ T2515] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz.0.613: Invalid inode table block 0 in block_group 0 [ 135.767615][ T2525] EXT4-fs error (device loop0): ext4_splice_branch:479: inode #15: comm syz.0.613: mark_inode_dirty error [ 135.790470][ T2524] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 135.798972][ T2524] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.809872][ T2515] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 135.820002][ T2524] EXT4-fs (loop9): unmounting filesystem. [ 135.834992][ T2515] fuse: Unknown parameter 'g;êyY2!ωÙD®¹ìroup_id' [ 135.839838][ T478] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.852929][ T310] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.884943][ T2540] loop1: detected capacity change from 0 to 1024 [ 135.891624][ T2540] EXT4-fs: Ignoring removed oldalloc option [ 135.911326][ T2540] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 135.926083][ T2540] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.030178][ T478] usb 4-1: Using ep0 maxpacket: 32 [ 136.053489][ T478] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.134964][ T478] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 136.145285][ T2540] EXT4-fs (loop1): unmounting filesystem. [ 136.151311][ T478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.159691][ T478] usb 4-1: Product: syz [ 136.161664][ T2545] random: crng reseeded on system resumption [ 136.164172][ T478] usb 4-1: Manufacturer: syz [ 136.174887][ T478] usb 4-1: SerialNumber: syz [ 136.237506][ T2548] loop1: detected capacity change from 0 to 1024 [ 136.244257][ T2548] EXT4-fs: Ignoring removed oldalloc option [ 136.271826][ T2548] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.285570][ T2548] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.290123][ T665] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 136.300654][ T60] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 136.307051][ T2548] EXT4-fs (loop1): unmounting filesystem. [ 136.511724][ T665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.528083][ T665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.538235][ T665] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 136.549948][ T2568] loop1: detected capacity change from 0 to 256 [ 136.560958][ T665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.572134][ T2568] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 136.612839][ T665] usb 1-1: config 0 descriptor?? [ 136.850089][ T666] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 136.924941][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 136.936629][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.946303][ T60] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 136.955880][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.963945][ T60] usb 5-1: Product: syz [ 136.968144][ T60] usb 5-1: Manufacturer: syz [ 136.972818][ T60] usb 5-1: SerialNumber: syz [ 137.031700][ T665] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 137.038601][ T665] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 137.045563][ T665] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 137.045650][ T666] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 137.061552][ T665] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 137.068384][ T665] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 137.075221][ T666] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 137.085023][ T665] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 137.091834][ T666] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 137.101734][ T665] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 137.108951][ T666] usb 10-1: config 1 interface 0 has no altsetting 0 [ 137.115824][ T665] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 137.126826][ T666] usb 10-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 137.136063][ T666] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.145528][ T666] ums-sddr09 10-1:1.0: USB Mass Storage device detected [ 137.231815][ T665] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 137.239431][ T665] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 137.246665][ T665] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -71 [ 137.270619][ T665] usb 1-1: USB disconnect, device number 3 [ 137.287895][ T2572] fido_id[2572]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 137.370546][ T666] ums-sddr09: probe of 10-1:1.0 failed with error -22 [ 137.380656][ T666] usb 10-1: USB disconnect, device number 4 [ 137.560084][ T453] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.740083][ T453] usb 2-1: Using ep0 maxpacket: 32 [ 137.746399][ T453] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.746437][ T2327] EXT4-fs (loop0): unmounting filesystem. [ 137.759395][ T453] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 137.774230][ T453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.783120][ T453] usb 2-1: config 0 descriptor?? [ 137.809311][ T2579] loop0: detected capacity change from 0 to 128 [ 137.818718][ T2579] FAT-fs (loop0): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 138.180087][ T2507] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 138.347438][ T2590] loop3: detected capacity change from 0 to 1024 [ 138.362356][ T2590] EXT4-fs: Ignoring removed oldalloc option [ 138.372656][ T2507] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 138.385323][ T478] usb 4-1: USB disconnect, device number 4 [ 138.392975][ T2507] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 138.406987][ T2507] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 138.417421][ T2507] usb 10-1: config 1 interface 0 has no altsetting 0 [ 138.424378][ T2507] usb 10-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 138.438977][ T2507] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.448814][ T2590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.458147][ T2590] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.474024][ T2507] ums-sddr09 10-1:1.0: USB Mass Storage device detected [ 138.481841][ T2590] EXT4-fs (loop3): unmounting filesystem. [ 138.554992][ T453] usbhid 2-1:0.0: can't add hid device: -71 [ 138.561041][ T453] usbhid: probe of 2-1:0.0 failed with error -71 [ 138.573470][ T453] usb 2-1: USB disconnect, device number 4 [ 138.623861][ T2600] loop3: detected capacity change from 0 to 1024 [ 138.649781][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.702757][ T2507] ums-sddr09: probe of 10-1:1.0 failed with error -22 [ 138.720689][ T2507] usb 10-1: USB disconnect, device number 5 [ 138.739599][ T60] usb 5-1: USB disconnect, device number 15 [ 138.775160][ T2614] random: crng reseeded on system resumption [ 138.830867][ T2617] FAULT_INJECTION: forcing a failure. [ 138.830867][ T2617] name failslab, interval 1, probability 0, space 0, times 0 [ 138.844065][ T2617] CPU: 1 PID: 2617 Comm: syz.0.643 Not tainted syzkaller #0 [ 138.851390][ T2617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.861431][ T2617] Call Trace: [ 138.864697][ T2617] [ 138.867612][ T2617] __dump_stack+0x21/0x24 [ 138.871959][ T2617] dump_stack_lvl+0x110/0x170 [ 138.876625][ T2617] ? __cfi_dump_stack_lvl+0x8/0x8 [ 138.881631][ T2617] ? release_sock+0x169/0x1c0 [ 138.886291][ T2617] dump_stack+0x15/0x24 [ 138.890434][ T2617] should_fail_ex+0x3bf/0x510 [ 138.895096][ T2617] __should_failslab+0xac/0xf0 [ 138.899852][ T2617] should_failslab+0x9/0x20 [ 138.904338][ T2617] kmem_cache_alloc_node+0x42/0x330 [ 138.909543][ T2617] ? __alloc_skb+0xe8/0x4a0 [ 138.914031][ T2617] __alloc_skb+0xe8/0x4a0 [ 138.918374][ T2617] netlink_sendmsg+0x635/0xbd0 [ 138.923161][ T2617] ? __cfi_netlink_sendmsg+0x10/0x10 [ 138.928454][ T2617] ? security_socket_sendmsg+0x93/0xb0 [ 138.933925][ T2617] ? __cfi_netlink_sendmsg+0x10/0x10 [ 138.939195][ T2617] ____sys_sendmsg+0x5fb/0x9c0 [ 138.943946][ T2617] ? __sys_sendmsg_sock+0x40/0x40 [ 138.948969][ T2617] ? import_iovec+0x7c/0xb0 [ 138.953459][ T2617] ___sys_sendmsg+0x2a2/0x360 [ 138.958127][ T2617] ? __sys_sendmsg+0x290/0x290 [ 138.962876][ T2617] ? __kasan_check_write+0x14/0x20 [ 138.967974][ T2617] ? proc_fail_nth_write+0x180/0x200 [ 138.973259][ T2617] ? vfs_write+0xa51/0xd00 [ 138.977661][ T2617] ? __fdget+0x19c/0x220 [ 138.981902][ T2617] __x64_sys_sendmsg+0x20d/0x2e0 [ 138.986844][ T2617] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 138.992293][ T2617] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 138.998349][ T2617] x64_sys_call+0x171/0x9a0 [ 139.002833][ T2617] do_syscall_64+0x4c/0xa0 [ 139.007228][ T2617] ? clear_bhb_loop+0x30/0x80 [ 139.011883][ T2617] ? clear_bhb_loop+0x30/0x80 [ 139.016541][ T2617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.022419][ T2617] RIP: 0033:0x7f49f559de59 [ 139.026815][ T2617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.046406][ T2617] RSP: 002b:00007f49f63b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.054809][ T2617] RAX: ffffffffffffffda RBX: 00007f49f5825fa0 RCX: 00007f49f559de59 [ 139.062769][ T2617] RDX: 0000000020000004 RSI: 0000200000000440 RDI: 0000000000000003 [ 139.070723][ T2617] RBP: 00007f49f63b9090 R08: 0000000000000000 R09: 0000000000000000 [ 139.078679][ T2617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.086627][ T2617] R13: 00007f49f5826038 R14: 00007f49f5825fa0 R15: 00007ffe83ead928 [ 139.094595][ T2617] [ 139.153590][ T2620] loop1: detected capacity change from 0 to 256 [ 139.194044][ T2620] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 139.273854][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 139.657045][ T2636] loop9: detected capacity change from 0 to 1024 [ 139.718397][ T2649] loop1: detected capacity change from 0 to 256 [ 139.721945][ T28] kauditd_printk_skb: 172 callbacks suppressed [ 139.721959][ T28] audit: type=1326 audit(2000000018.969:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.9.652" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a5bd9de59 code=0x0 [ 139.728919][ T2649] exfat: Unknown parameter './file0' [ 139.789616][ T2650] loop0: detected capacity change from 0 to 256 [ 139.801120][ T2650] exfat: Unknown parameter './file0' [ 139.831638][ T2652] netlink: 4 bytes leftover after parsing attributes in process `syz.9.652'. [ 139.854890][ T2655] random: crng reseeded on system resumption [ 139.865791][ T2652] device bridge_slave_1 left promiscuous mode [ 139.880946][ T2652] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.899456][ T2652] device bridge_slave_0 left promiscuous mode [ 139.915553][ T2652] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.954890][ T28] audit: type=1400 audit(2000000019.199:519): avc: denied { setopt } for pid=2659 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.111342][ T2668] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.128438][ T2668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 140.187032][ T2670] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.270568][ T2507] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.297337][ T2678] loop3: detected capacity change from 0 to 1024 [ 140.334288][ T2679] loop1: detected capacity change from 0 to 256 [ 140.366740][ T2679] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 140.427514][ T2684] loop3: detected capacity change from 0 to 256 [ 140.435540][ T2684] exfat: Unknown parameter './file0' [ 140.441218][ T2687] FAULT_INJECTION: forcing a failure. [ 140.441218][ T2687] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 140.455650][ T2687] CPU: 0 PID: 2687 Comm: syz.4.666 Not tainted syzkaller #0 [ 140.462951][ T2687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.473015][ T2687] Call Trace: [ 140.476306][ T2687] [ 140.479233][ T2687] __dump_stack+0x21/0x24 [ 140.483572][ T2687] dump_stack_lvl+0x110/0x170 [ 140.488254][ T2687] ? __cfi_dump_stack_lvl+0x8/0x8 [ 140.493284][ T2687] dump_stack+0x15/0x24 [ 140.497454][ T2687] should_fail_ex+0x3bf/0x510 [ 140.502133][ T2687] should_fail_alloc_page+0x61/0x90 [ 140.507339][ T2687] prepare_alloc_pages+0x131/0x570 [ 140.510200][ T2507] usb 1-1: Using ep0 maxpacket: 8 [ 140.512458][ T2687] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 140.512485][ T2687] ? slab_post_alloc_hook+0x4f/0x2d0 [ 140.527957][ T2687] ? kmem_cache_alloc+0x166/0x320 [ 140.532990][ T2687] ? security_inode_alloc+0x33/0x120 [ 140.538271][ T2687] ? inode_init_always+0x6ee/0x950 [ 140.543368][ T2687] ? new_inode_pseudo+0xa2/0x1f0 [ 140.548293][ T2687] __alloc_pages+0x15b/0x610 [ 140.552874][ T2687] ? xas_start+0x324/0x3e0 [ 140.557280][ T2687] ? __cfi___alloc_pages+0x10/0x10 [ 140.562379][ T2687] ? xas_load+0x394/0x3c0 [ 140.566706][ T2687] ? __filemap_get_folio+0x848/0xa70 [ 140.571976][ T2687] ? 0xffffffffa0003f00 [ 140.576115][ T2687] ? is_bpf_text_address+0x177/0x190 [ 140.581390][ T2687] append_pipe+0x272/0x6a0 [ 140.585790][ T2687] pipe_zero+0xaa/0x140 [ 140.589935][ T2687] iov_iter_zero+0x276/0xf60 [ 140.594514][ T2687] ? __cfi_iov_iter_zero+0x10/0x10 [ 140.599612][ T2687] ? kasan_set_track+0x60/0x70 [ 140.604363][ T2687] shmem_file_read_iter+0x54a/0x800 [ 140.609567][ T2687] generic_file_splice_read+0x1d9/0x530 [ 140.615103][ T2687] ? __cfi_generic_file_splice_read+0x10/0x10 [ 140.621157][ T2687] ? __kasan_check_read+0x11/0x20 [ 140.626194][ T2687] ? fsnotify_perm+0x269/0x5b0 [ 140.630953][ T2687] ? security_file_permission+0x94/0xb0 [ 140.636503][ T2687] ? rw_verify_area+0xa7/0x1c0 [ 140.641258][ T2687] splice_direct_to_actor+0x3d0/0xb30 [ 140.646622][ T2687] ? __cfi_direct_splice_actor+0x10/0x10 [ 140.652502][ T2687] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 140.658381][ T2687] ? security_file_permission+0x94/0xb0 [ 140.663920][ T2687] ? rw_verify_area+0xa7/0x1c0 [ 140.668667][ T2687] do_splice_direct+0x1c2/0x2d0 [ 140.673503][ T2687] ? __cfi_do_splice_direct+0x10/0x10 [ 140.678865][ T2687] ? security_file_permission+0x94/0xb0 [ 140.684403][ T2687] do_sendfile+0x515/0xe20 [ 140.688808][ T2687] ? __cfi_mutex_unlock+0x10/0x10 [ 140.693822][ T2687] ? do_preadv+0x390/0x390 [ 140.698224][ T2687] ? __kasan_check_write+0x14/0x20 [ 140.703318][ T2687] ? fput+0x154/0x1a0 [ 140.707286][ T2687] __x64_sys_sendfile64+0x199/0x1f0 [ 140.712477][ T2687] ? __cfi_ksys_write+0x10/0x10 [ 140.717317][ T2687] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 140.723062][ T2687] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 140.729122][ T2687] x64_sys_call+0x62c/0x9a0 [ 140.733612][ T2687] do_syscall_64+0x4c/0xa0 [ 140.738013][ T2687] ? clear_bhb_loop+0x30/0x80 [ 140.742679][ T2687] ? clear_bhb_loop+0x30/0x80 [ 140.747340][ T2687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.753225][ T2687] RIP: 0033:0x7fac4ef9de59 [ 140.757630][ T2687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.777231][ T2687] RSP: 002b:00007fac4fedc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 140.785634][ T2687] RAX: ffffffffffffffda RBX: 00007fac4f225fa0 RCX: 00007fac4ef9de59 [ 140.793591][ T2687] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 140.801545][ T2687] RBP: 00007fac4fedc090 R08: 0000000000000000 R09: 0000000000000000 [ 140.809501][ T2687] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.817457][ T2687] R13: 00007fac4f226038 R14: 00007fac4f225fa0 R15: 00007ffcb118e078 [ 140.825424][ T2687] [ 140.830169][ T2507] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.842252][ T2507] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 140.876917][ T2507] usb 1-1: config 0 has no interface number 0 [ 140.883172][ T2507] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 140.899919][ T2507] usb 1-1: config 0 interface 66 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.950955][ T2507] usb 1-1: New USB device found, idVendor=0bda, idProduct=b720, bcdDevice=d0.5a [ 140.970094][ T2507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.983754][ T2507] usb 1-1: Product: syz [ 140.991235][ T2507] usb 1-1: Manufacturer: syz [ 140.999110][ T2507] usb 1-1: SerialNumber: syz [ 141.012118][ T2507] usb 1-1: config 0 descriptor?? [ 141.088009][ T2698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 141.223930][ T28] audit: type=1326 audit(2000000020.479:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.0.657" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f559de59 code=0x7ffc0000 [ 141.318499][ T28] audit: type=1326 audit(2000000020.479:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.0.657" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49f559de59 code=0x7ffc0000 [ 141.380813][ T28] audit: type=1326 audit(2000000020.479:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.0.657" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f559de59 code=0x7ffc0000 [ 141.422239][ T2712] random: crng reseeded on system resumption [ 141.434917][ T2713] FAULT_INJECTION: forcing a failure. [ 141.434917][ T2713] name failslab, interval 1, probability 0, space 0, times 0 [ 141.457636][ T28] audit: type=1326 audit(2000000020.479:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.0.657" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f49f559de59 code=0x7ffc0000 [ 141.491764][ T2709] loop4: detected capacity change from 0 to 1024 [ 141.499179][ T2713] CPU: 0 PID: 2713 Comm: syz.3.676 Not tainted syzkaller #0 [ 141.502089][ T2709] EXT4-fs: Ignoring removed oldalloc option [ 141.506482][ T2713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 141.506498][ T2713] Call Trace: [ 141.506503][ T2713] [ 141.506510][ T2713] __dump_stack+0x21/0x24 [ 141.532935][ T2713] dump_stack_lvl+0x110/0x170 [ 141.537620][ T2713] ? __cfi_dump_stack_lvl+0x8/0x8 [ 141.542653][ T2713] ? release_sock+0x169/0x1c0 [ 141.547334][ T2713] dump_stack+0x15/0x24 [ 141.551499][ T2713] should_fail_ex+0x3bf/0x510 [ 141.556185][ T2713] __should_failslab+0xac/0xf0 [ 141.560972][ T2713] should_failslab+0x9/0x20 [ 141.565492][ T2713] kmem_cache_alloc_node+0x42/0x330 [ 141.570709][ T2713] ? __alloc_skb+0xe8/0x4a0 [ 141.575227][ T2713] __alloc_skb+0xe8/0x4a0 [ 141.579557][ T2713] netlink_sendmsg+0x635/0xbd0 [ 141.584324][ T2713] ? __cfi_netlink_sendmsg+0x10/0x10 [ 141.589618][ T2713] ? security_socket_sendmsg+0x93/0xb0 [ 141.595098][ T2713] ? __cfi_netlink_sendmsg+0x10/0x10 [ 141.600400][ T2713] ____sys_sendmsg+0x5fb/0x9c0 [ 141.605184][ T2713] ? __sys_sendmsg_sock+0x40/0x40 [ 141.610226][ T2713] ? import_iovec+0x7c/0xb0 [ 141.614734][ T2713] ___sys_sendmsg+0x2a2/0x360 [ 141.619416][ T2713] ? __sys_sendmsg+0x290/0x290 [ 141.624182][ T2713] ? __kasan_check_write+0x14/0x20 [ 141.626435][ T28] audit: type=1326 audit(2000000020.479:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.0.657" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f559de59 code=0x7ffc0000 [ 141.629293][ T2713] ? proc_fail_nth_write+0x180/0x200 [ 141.629319][ T2713] ? vfs_write+0xa51/0xd00 [ 141.654989][ T28] audit: type=1326 audit(2000000020.499:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.0.657" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49f559de59 code=0x7ffc0000 [ 141.659122][ T2713] ? __fdget+0x19c/0x220 [ 141.659147][ T2713] __x64_sys_sendmsg+0x20d/0x2e0 [ 141.663808][ T28] audit: type=1326 audit(2000000020.499:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.0.657" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f559de59 code=0x7ffc0000 [ 141.688000][ T2713] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 141.688031][ T2713] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 141.688051][ T2713] x64_sys_call+0x171/0x9a0 [ 141.688068][ T2713] do_syscall_64+0x4c/0xa0 [ 141.688084][ T2713] ? clear_bhb_loop+0x30/0x80 [ 141.688098][ T2713] ? clear_bhb_loop+0x30/0x80 [ 141.693188][ T28] audit: type=1326 audit(2000000020.499:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.0.657" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f559de59 code=0x7ffc0000 [ 141.697244][ T2713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.697279][ T2713] RIP: 0033:0x7f506459de59 [ 141.697294][ T2713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.697308][ T2713] RSP: 002b:00007f50653ec028 EFLAGS: 00000246 [ 141.724149][ T2709] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.727307][ T2713] ORIG_RAX: 000000000000002e [ 141.727321][ T2713] RAX: ffffffffffffffda RBX: 00007f5064825fa0 RCX: 00007f506459de59 [ 141.727333][ T2713] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 141.727345][ T2713] RBP: 00007f50653ec090 R08: 0000000000000000 R09: 0000000000000000 [ 141.733945][ T2709] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.737882][ T2713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.737897][ T2713] R13: 00007f5064826038 R14: 00007f5064825fa0 R15: 00007ffc11d22848 [ 141.737912][ T2713] [ 141.804677][ T2721] loop3: detected capacity change from 0 to 256 [ 141.807883][ T2709] EXT4-fs (loop4): unmounting filesystem. [ 141.814864][ T2721] exfat: Unknown parameter './file0' [ 141.943018][ T2720] exfat: Deprecated parameter 'utf8' [ 141.969138][ T2720] exfat: Deprecated parameter 'utf8' [ 141.974868][ T2720] exfat: Deprecated parameter 'utf8' [ 141.988299][ T2720] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 142.235898][ T2733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 142.275554][ T2733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.329110][ T2735] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 142.434628][ T2733] EXT4-fs (loop4): 1 truncate cleaned up [ 142.440416][ T2733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.181558][ T292] EXT4-fs (loop4): unmounting filesystem. [ 143.194675][ T2507] usb 1-1: USB disconnect, device number 4 [ 143.206002][ T2742] 9pnet_fd: Insufficient options for proto=fd [ 143.214684][ T2742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'. [ 143.228371][ T2746] device ip6tnl1 entered promiscuous mode [ 143.281607][ T2752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.290742][ T2752] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.313125][ T292] EXT4-fs (loop4): unmounting filesystem. [ 143.334842][ T2756] FAULT_INJECTION: forcing a failure. [ 143.334842][ T2756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.349607][ T2756] CPU: 0 PID: 2756 Comm: syz.0.689 Not tainted syzkaller #0 [ 143.356918][ T2756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.366972][ T2756] Call Trace: [ 143.370249][ T2756] [ 143.373172][ T2756] __dump_stack+0x21/0x24 [ 143.377496][ T2756] dump_stack_lvl+0x110/0x170 [ 143.382250][ T2756] ? __cfi_dump_stack_lvl+0x8/0x8 [ 143.387276][ T2756] dump_stack+0x15/0x24 [ 143.391421][ T2756] should_fail_ex+0x3bf/0x510 [ 143.396080][ T2756] should_fail+0xb/0x10 [ 143.400220][ T2756] should_fail_usercopy+0x1a/0x20 [ 143.405233][ T2756] _copy_to_user+0x1e/0x90 [ 143.409638][ T2756] simple_read_from_buffer+0xe9/0x160 [ 143.414996][ T2756] proc_fail_nth_read+0x1a6/0x220 [ 143.420007][ T2756] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 143.425544][ T2756] ? security_file_permission+0x94/0xb0 [ 143.431079][ T2756] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 143.436608][ T2756] vfs_read+0x286/0x930 [ 143.440747][ T2756] ? __cfi_vfs_read+0x10/0x10 [ 143.445409][ T2756] ? __kasan_check_write+0x14/0x20 [ 143.450636][ T2756] ? mutex_lock+0x93/0x1b0 [ 143.455062][ T2756] ? __cfi_mutex_lock+0x10/0x10 [ 143.459908][ T2756] ? __fdget_pos+0x2cd/0x380 [ 143.464489][ T2756] ? ksys_read+0x70/0x260 [ 143.468804][ T2756] ksys_read+0x14a/0x260 [ 143.473030][ T2756] ? __cfi_ksys_read+0x10/0x10 [ 143.477790][ T2756] ? debug_smp_processor_id+0x17/0x20 [ 143.483208][ T2756] __x64_sys_read+0x7b/0x90 [ 143.487722][ T2756] x64_sys_call+0x2f/0x9a0 [ 143.492136][ T2756] do_syscall_64+0x4c/0xa0 [ 143.496539][ T2756] ? clear_bhb_loop+0x30/0x80 [ 143.501201][ T2756] ? clear_bhb_loop+0x30/0x80 [ 143.505861][ T2756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.511746][ T2756] RIP: 0033:0x7f49f555e68e [ 143.516147][ T2756] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 143.535736][ T2756] RSP: 002b:00007f49f63b8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.544136][ T2756] RAX: ffffffffffffffda RBX: 00007f49f63b96c0 RCX: 00007f49f555e68e [ 143.552095][ T2756] RDX: 000000000000000f RSI: 00007f49f63b90a0 RDI: 0000000000000005 [ 143.560050][ T2756] RBP: 00007f49f63b9090 R08: 0000000000000000 R09: 0000000000000000 [ 143.568005][ T2756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.575968][ T2756] R13: 00007f49f5826038 R14: 00007f49f5825fa0 R15: 00007ffe83ead928 [ 143.583947][ T2756] [ 143.638734][ T2768] set_capacity_and_notify: 3 callbacks suppressed [ 143.638753][ T2768] loop0: detected capacity change from 0 to 128 [ 143.662144][ T2768] FAT-fs (loop0): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 143.733960][ T2773] loop4: detected capacity change from 0 to 1024 [ 143.762012][ T2776] loop9: detected capacity change from 0 to 1024 [ 143.767285][ T2773] EXT4-fs: Ignoring removed oldalloc option [ 143.776577][ T2776] EXT4-fs: Ignoring removed oldalloc option [ 143.802027][ T2776] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 143.810688][ T2773] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.813324][ T2776] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.823157][ T2773] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.843201][ T2776] EXT4-fs (loop9): unmounting filesystem. [ 143.851537][ T2773] EXT4-fs (loop4): unmounting filesystem. [ 144.828045][ T2796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 144.849954][ T2796] loop3: detected capacity change from 0 to 512 [ 144.874855][ T2796] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.049208][ T2796] EXT4-fs (loop3): 1 truncate cleaned up [ 145.054971][ T2796] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.180562][ T2399] EXT4-fs (loop3): unmounting filesystem. [ 145.196742][ T2802] random: crng reseeded on system resumption [ 145.352737][ T2812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'. [ 145.382132][ T2812] loop1: detected capacity change from 0 to 512 [ 145.431296][ T2812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.565750][ T2812] EXT4-fs (loop1): 1 truncate cleaned up [ 145.571499][ T2812] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.314448][ T2430] EXT4-fs (loop1): unmounting filesystem. [ 146.367582][ T423] device bridge_slave_1 left promiscuous mode [ 146.379041][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.380534][ T2820] loop1: detected capacity change from 0 to 1024 [ 146.392705][ T423] device bridge_slave_0 left promiscuous mode [ 146.395494][ T2820] EXT4-fs: Ignoring removed oldalloc option [ 146.407835][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.428690][ T423] device veth1_macvtap left promiscuous mode [ 146.434885][ T666] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 146.442860][ T423] device veth0_vlan left promiscuous mode [ 146.445544][ T2820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.457185][ T2820] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.468160][ T2820] EXT4-fs (loop1): unmounting filesystem. [ 146.527002][ T2831] random: crng reseeded on system resumption [ 146.594712][ T2836] loop9: detected capacity change from 0 to 128 [ 146.612481][ T2836] FAT-fs (loop9): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 146.621681][ T666] usb 5-1: Using ep0 maxpacket: 16 [ 146.628005][ T666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.628535][ T2824] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.639297][ T666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.656006][ T666] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.669050][ T666] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.675146][ T2824] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.678391][ T666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.694503][ T2824] device bridge_slave_0 entered promiscuous mode [ 146.701226][ T666] usb 5-1: config 0 descriptor?? [ 146.707343][ T2824] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.714836][ T2824] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.722540][ T2824] device bridge_slave_1 entered promiscuous mode [ 146.768288][ T2824] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.775359][ T2824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.782726][ T2824] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.789749][ T2824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.808916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.817333][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.824825][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.839329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.847725][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.854794][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.862296][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.870683][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.877740][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.888385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.898507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.914555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.922762][ T2804] loop4: detected capacity change from 0 to 4096 [ 146.927047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.937672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.945793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.955475][ T2824] device veth0_vlan entered promiscuous mode [ 146.966470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.976089][ T2824] device veth1_macvtap entered promiscuous mode [ 146.986431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.997162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.054660][ T2848] FAULT_INJECTION: forcing a failure. [ 147.054660][ T2848] name failslab, interval 1, probability 0, space 0, times 0 [ 147.067519][ T2848] CPU: 1 PID: 2848 Comm: syz.6.715 Not tainted syzkaller #0 [ 147.074821][ T2848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.084883][ T2848] Call Trace: [ 147.088176][ T2848] [ 147.091103][ T2848] __dump_stack+0x21/0x24 [ 147.095434][ T2848] dump_stack_lvl+0x110/0x170 [ 147.100095][ T2848] ? __cfi_dump_stack_lvl+0x8/0x8 [ 147.105114][ T2848] ? kasan_save_alloc_info+0x1f/0x30 [ 147.110389][ T2848] ? __kasan_kmalloc+0x95/0xb0 [ 147.115163][ T2848] dump_stack+0x15/0x24 [ 147.119326][ T2848] should_fail_ex+0x3bf/0x510 [ 147.124004][ T2848] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 147.130075][ T2848] __should_failslab+0xac/0xf0 [ 147.134848][ T2848] should_failslab+0x9/0x20 [ 147.139344][ T2848] kmem_cache_alloc+0x3b/0x320 [ 147.140395][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x6 [ 147.144129][ T2848] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 147.151442][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x7 [ 147.157660][ T2848] kvm_mmu_topup_memory_cache+0x20/0x30 [ 147.165385][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.170376][ T2848] kvm_mmu_load+0x99/0x2570 [ 147.170408][ T2848] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 147.177625][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.182088][ T2848] ? queue_delayed_work_on+0x10d/0x160 [ 147.182111][ T2848] ? kvm_apic_has_interrupt+0x776/0x780 [ 147.187567][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.194724][ T2848] vcpu_enter_guest+0x4d3b/0x7050 [ 147.200212][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.205706][ T2848] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 147.213782][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.217890][ T2848] ? __cfi__raw_spin_lock+0x10/0x10 [ 147.225139][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.230796][ T2848] ? pvclock_gtod_update_fn+0x270/0x270 [ 147.237999][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.243159][ T2848] ? 0xffffffffa0003f00 [ 147.243173][ T2848] ? is_bpf_text_address+0x177/0x190 [ 147.250379][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.255882][ T2848] ? kernel_text_address+0xa0/0xd0 [ 147.263128][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.267183][ T2848] ? __kernel_text_address+0xd/0x30 [ 147.272490][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.279629][ T2848] ? unwind_get_return_address+0x4d/0x90 [ 147.284938][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.292073][ T2848] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 147.297285][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.304439][ T2848] ? arch_stack_walk+0xfc/0x150 [ 147.310491][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.317268][ T2848] ? stack_trace_save+0xa6/0xf0 [ 147.323445][ T666] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 147.330602][ T2848] ? vmx_vcpu_pi_load+0x14c/0x840 [ 147.335469][ T666] microsoft 0003:045E:07DA.0005: unbalanced collection at end of report description [ 147.342622][ T2848] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 147.342641][ T2848] ? _parse_integer_limit+0x18e/0x1d0 [ 147.342660][ T2848] ? __asan_set_shadow_00+0xe/0x10 [ 147.347837][ T666] microsoft 0003:045E:07DA.0005: parse failed [ 147.354651][ T2848] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 147.354673][ T2848] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 147.359690][ T666] microsoft: probe of 0003:045E:07DA.0005 failed with error -22 [ 147.369021][ T2848] ? __this_cpu_preempt_check+0x13/0x20 [ 147.369043][ T2848] ? xfd_validate_state+0x70/0x150 [ 147.369062][ T2848] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 147.369081][ T2848] ? __local_bh_enable_ip+0x58/0x80 [ 147.429621][ T2848] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 147.429647][ T2848] kvm_vcpu_ioctl+0x8ed/0xc00 [ 147.429668][ T2848] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 147.429687][ T2848] ? selinux_file_ioctl+0x3ad/0x4c0 [ 147.429709][ T2848] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 147.429726][ T2848] ? mutex_unlock+0x8f/0x230 [ 147.429748][ T2848] ? __cfi_mutex_unlock+0x10/0x10 [ 147.429770][ T2848] ? __fget_files+0x2d1/0x330 [ 147.429789][ T2848] ? security_file_ioctl+0x95/0xc0 [ 147.429811][ T2848] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 147.429832][ T2848] __se_sys_ioctl+0x12f/0x1b0 [ 147.429848][ T2848] __x64_sys_ioctl+0x7b/0x90 [ 147.429862][ T2848] x64_sys_call+0x58b/0x9a0 [ 147.429879][ T2848] do_syscall_64+0x4c/0xa0 [ 147.429894][ T2848] ? clear_bhb_loop+0x30/0x80 [ 147.429907][ T2848] ? clear_bhb_loop+0x30/0x80 [ 147.429918][ T2848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.429938][ T2848] RIP: 0033:0x7f45fc99de59 [ 147.429953][ T2848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.429966][ T2848] RSP: 002b:00007f45fb3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.429984][ T2848] RAX: ffffffffffffffda RBX: 00007f45fcc25fa0 RCX: 00007f45fc99de59 [ 147.429997][ T2848] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 147.430007][ T2848] RBP: 00007f45fb3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.430018][ T2848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.430028][ T2848] R13: 00007f45fcc26038 R14: 00007f45fcc25fa0 R15: 00007fff2a5409e8 [ 147.430041][ T2848] [ 147.659963][ T2858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 147.681784][ T2858] loop3: detected capacity change from 0 to 512 [ 147.685436][ T2858] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.726186][ T2858] EXT4-fs (loop3): 1 truncate cleaned up [ 147.726236][ T2858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 148.653271][ T2399] EXT4-fs (loop3): unmounting filesystem. [ 148.823562][ T2869] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.823582][ T2869] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.837340][ T2869] device bridge_slave_0 entered promiscuous mode [ 148.874984][ T2869] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.875892][ T335] usb 5-1: USB disconnect, device number 16 [ 148.885392][ T2869] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.896150][ T2869] device bridge_slave_1 entered promiscuous mode [ 148.906504][ T423] device veth1_macvtap left promiscuous mode [ 148.914330][ T423] device veth0_vlan left promiscuous mode [ 148.983996][ T665] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.022743][ T2869] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.029809][ T2869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.037105][ T2869] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.044147][ T2869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.063568][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.071236][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.078470][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.087789][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.096473][ T485] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.103541][ T485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.112115][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.120547][ T485] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.127599][ T485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.139500][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.148996][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.164434][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.175047][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.180257][ T665] usb 2-1: Using ep0 maxpacket: 32 [ 149.183752][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.195557][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.197625][ T665] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 149.204456][ T2869] device veth0_vlan entered promiscuous mode [ 149.218026][ T665] usb 2-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 149.226312][ T665] usb 2-1: Product: syz [ 149.230717][ T665] usb 2-1: Manufacturer: syz [ 149.235354][ T665] usb 2-1: SerialNumber: syz [ 149.236932][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.242728][ T665] usb 2-1: config 0 descriptor?? [ 149.250475][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.261684][ T2869] device veth1_macvtap entered promiscuous mode [ 149.273732][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.284291][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.440125][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 149.448268][ T39] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 149.457635][ T39] usb 4-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 149.466038][ T39] usb 4-1: Product: syz [ 149.470552][ T39] usb 4-1: Manufacturer: syz [ 149.475170][ T39] usb 4-1: SerialNumber: syz [ 149.481092][ T39] usb 4-1: config 0 descriptor?? [ 149.558621][ T665] usb 2-1: USB disconnect, device number 5 [ 149.584143][ T2895] random: crng reseeded on system resumption [ 149.734061][ T39] usb 4-1: USB disconnect, device number 5 [ 149.854030][ T335] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 149.989590][ T2906] random: crng reseeded on system resumption [ 150.051142][ T335] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 150.060445][ T335] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 150.070771][ T335] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 150.080655][ T335] usb 3-1: config 1 interface 0 has no altsetting 0 [ 150.087359][ T335] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 150.096788][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.843647][ T2911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.733'. [ 151.004842][ T2911] loop4: detected capacity change from 0 to 512 [ 151.928428][ T2911] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.082795][ T2914] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.165228][ T335] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 152.218892][ T2911] EXT4-fs (loop4): 1 truncate cleaned up [ 152.224774][ T2911] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.335071][ T2919] loop3: detected capacity change from 0 to 128 [ 152.369718][ T2919] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 152.422067][ T292] EXT4-fs (loop4): unmounting filesystem. [ 152.461860][ T335] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 152.472609][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 152.472624][ T28] audit: type=1400 audit(2000000031.729:531): avc: denied { watch_reads } for pid=2927 comm="syz.4.739" path="/135" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.475214][ T335] usb 3-1: USB disconnect, device number 7 [ 152.510731][ T2931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.740'. [ 152.523009][ T2931] netlink: 'syz.4.740': attribute type 4 has an invalid length. [ 152.530151][ T39] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 152.568837][ T2936] loop4: detected capacity change from 0 to 512 [ 152.575692][ T2936] EXT4-fs: Ignoring removed i_version option [ 152.597515][ T2936] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.607292][ T2936] ext4 filesystem being mounted at /137/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.620908][ T28] audit: type=1400 audit(2000000031.879:532): avc: denied { append } for pid=2935 comm="syz.4.742" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.626932][ T2936] device gretap2 entered promiscuous mode [ 152.648015][ T28] audit: type=1400 audit(2000000031.879:533): avc: denied { lock } for pid=2935 comm="syz.4.742" path="/137/file3/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.671862][ T28] audit: type=1400 audit(2000000031.879:534): avc: denied { create } for pid=2935 comm="syz.4.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 152.692342][ T292] EXT4-fs (loop4): unmounting filesystem. [ 152.710180][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 152.720225][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.732828][ T39] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 152.743157][ T39] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 152.752566][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.760665][ T39] usb 2-1: Product: syz [ 152.764938][ T39] usb 2-1: Manufacturer: syz [ 152.769586][ T39] usb 2-1: SerialNumber: syz [ 152.942849][ T2952] loop2: detected capacity change from 0 to 512 [ 152.961972][ T2952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.971161][ T2952] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.999954][ T39] usb 2-1: USB disconnect, device number 6 [ 153.020698][ T2869] EXT4-fs (loop2): unmounting filesystem. [ 153.042401][ T2957] loop2: detected capacity change from 0 to 128 [ 153.049505][ T2957] FAT-fs (loop2): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 153.170113][ T665] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 153.324298][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.331521][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.338929][ T2961] device bridge_slave_0 entered promiscuous mode [ 153.346009][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.353400][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.361057][ T2961] device bridge_slave_1 entered promiscuous mode [ 153.361628][ T665] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 153.377158][ T665] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 153.387018][ T665] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 153.401507][ T665] usb 5-1: config 1 interface 0 has no altsetting 0 [ 153.409913][ T665] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 153.419451][ T2966] loop6: detected capacity change from 0 to 512 [ 153.426062][ T665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.439388][ T665] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 153.444683][ T2966] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 153.455510][ T2966] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.477713][ T28] audit: type=1400 audit(2000000032.729:535): avc: denied { watch watch_reads } for pid=2965 comm="syz.6.752" path="/7/file0/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.504088][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.511182][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.518472][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.525518][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.547109][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.554818][ T980] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.562621][ T980] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.594942][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.607570][ T980] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.614681][ T980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.622533][ T980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.624159][ T2976] loop1: detected capacity change from 0 to 4096 [ 153.631093][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.644045][ T980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.656361][ T2976] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.668512][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.677122][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.693839][ T2961] device veth0_vlan entered promiscuous mode [ 153.702492][ T665] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 153.713201][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.720937][ T665] usb 5-1: USB disconnect, device number 17 [ 153.729034][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.737392][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.745342][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.755867][ T2961] device veth1_macvtap entered promiscuous mode [ 153.764159][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.780891][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.792524][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.880815][ T353] device bridge_slave_1 left promiscuous mode [ 153.887028][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.895548][ T2982] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.754: corrupted xattr entries [ 153.907124][ T353] device bridge_slave_0 left promiscuous mode [ 153.907569][ T2982] ================================================================== [ 153.913570][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.921282][ T2982] BUG: KASAN: use-after-free in ext4_get_inode_usage+0x371/0x520 [ 153.921320][ T2982] Read of size 4 at addr ffff888142d1a000 by task syz.1.754/2982 [ 153.943917][ T2982] [ 153.946239][ T2982] CPU: 1 PID: 2982 Comm: syz.1.754 Not tainted syzkaller #0 [ 153.953528][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.963616][ T2982] Call Trace: [ 153.966897][ T2982] [ 153.969825][ T2982] __dump_stack+0x21/0x24 [ 153.974195][ T2982] dump_stack_lvl+0x110/0x170 [ 153.978872][ T2982] ? __cfi_dump_stack_lvl+0x8/0x8 [ 153.983889][ T2982] ? ext4_get_inode_usage+0x371/0x520 [ 153.989257][ T2982] print_address_description+0x71/0x200 [ 153.994801][ T2982] print_report+0x4a/0x60 [ 153.999118][ T2982] kasan_report+0x122/0x150 [ 154.003618][ T2982] ? ext4_get_inode_usage+0x371/0x520 [ 154.008996][ T2982] __asan_report_load4_noabort+0x14/0x20 [ 154.014615][ T2982] ext4_get_inode_usage+0x371/0x520 [ 154.019809][ T2982] ? qtree_write_dquot+0x45b/0x5f0 [ 154.025007][ T2982] ? __cfi_ext4_get_inode_usage+0x10/0x10 [ 154.030723][ T2982] ? kfree+0x6f/0xf0 [ 154.034610][ T2982] __dquot_transfer+0x1a0/0x2370 [ 154.039541][ T2982] ? __cfi_qtree_write_dquot+0x10/0x10 [ 154.044986][ T2982] ? __kasan_check_write+0x14/0x20 [ 154.050099][ T2982] ? mutex_unlock+0x8f/0x230 [ 154.054685][ T2982] ? __cfi_mutex_unlock+0x10/0x10 [ 154.059707][ T2982] ? __cfi___dquot_transfer+0x10/0x10 [ 154.065075][ T2982] ? dquot_acquire+0x27c/0x590 [ 154.069832][ T2982] ? __ext4_journal_stop+0x36/0x1a0 [ 154.075024][ T2982] ? ext4_acquire_dquot+0x378/0x4a0 [ 154.080476][ T2982] ? dqget+0xba6/0xf20 [ 154.084548][ T2982] dquot_transfer+0x620/0x7d0 [ 154.089229][ T2982] ? __cfi_dquot_transfer+0x10/0x10 [ 154.094421][ T2982] ? down_read+0xa6/0xf0 [ 154.098651][ T2982] ? __cfi_down_read+0x10/0x10 [ 154.103415][ T2982] ? __kasan_check_read+0x11/0x20 [ 154.108430][ T2982] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 154.114053][ T2982] ext4_setattr+0xa01/0x1c80 [ 154.118651][ T2982] ? __vfs_getxattr+0x3da/0x410 [ 154.123584][ T2982] ? __cfi_ext4_setattr+0x10/0x10 [ 154.128601][ T2982] notify_change+0xd33/0x1030 [ 154.133277][ T2982] chown_common+0x448/0x5f0 [ 154.137778][ T2982] ? __cfi_chown_common+0x10/0x10 [ 154.142799][ T2982] ? mnt_want_write+0x220/0x300 [ 154.147652][ T2982] do_fchownat+0x147/0x240 [ 154.152061][ T2982] ? __cfi_do_fchownat+0x10/0x10 [ 154.156992][ T2982] ? fput+0x154/0x1a0 [ 154.160969][ T2982] ? debug_smp_processor_id+0x17/0x20 [ 154.166334][ T2982] __x64_sys_lchown+0x85/0x90 [ 154.171004][ T2982] x64_sys_call+0x951/0x9a0 [ 154.175541][ T2982] do_syscall_64+0x4c/0xa0 [ 154.179951][ T2982] ? clear_bhb_loop+0x30/0x80 [ 154.184615][ T2982] ? clear_bhb_loop+0x30/0x80 [ 154.189312][ T2982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.195207][ T2982] RIP: 0033:0x7fe492b9de59 [ 154.199610][ T2982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.219207][ T2982] RSP: 002b:00007fe493a9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 154.227622][ T2982] RAX: ffffffffffffffda RBX: 00007fe492e26270 RCX: 00007fe492b9de59 [ 154.235591][ T2982] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 00002000000004c0 [ 154.243550][ T2982] RBP: 00007fe492c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 154.251512][ T2982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.259473][ T2982] R13: 00007fe492e26308 R14: 00007fe492e26270 R15: 00007ffc1c112468 [ 154.267443][ T2982] [ 154.270453][ T2982] [ 154.272778][ T2982] The buggy address belongs to the physical page: [ 154.279358][ T2982] page:ffffea00050b4680 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x142d1a [ 154.289591][ T2982] flags: 0x4000000000000000(zone=1) [ 154.294795][ T2982] raw: 4000000000000000 ffffea00050b4608 ffffea00050b46c8 0000000000000000 [ 154.303368][ T2982] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 154.312033][ T2982] page dumped because: kasan: bad access detected [ 154.318428][ T2982] page_owner tracks the page as freed [ 154.323782][ T2982] page last allocated via order 0, migratetype Movable, gfp_mask 0x8140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO|__GFP_CMA), pid 310, tgid 310 (udevd), ts 153687177910, free_ts 153698350777 [ 154.342792][ T2982] post_alloc_hook+0x1f5/0x210 [ 154.347561][ T2982] prep_new_page+0x1c/0x110 [ 154.352056][ T2982] get_page_from_freelist+0x2ca9/0x2d20 [ 154.357595][ T2982] __alloc_pages+0x1fa/0x610 [ 154.362178][ T2982] __folio_alloc+0x12/0x40 [ 154.366590][ T2982] handle_mm_fault+0x1989/0x26b0 [ 154.371513][ T2982] do_user_addr_fault+0x61e/0x1030 [ 154.376617][ T2982] exc_page_fault+0x51/0xb0 [ 154.381197][ T2982] asm_exc_page_fault+0x27/0x30 [ 154.386053][ T2982] page last free stack trace: [ 154.390715][ T2982] free_unref_page_prepare+0x80c/0x820 [ 154.396191][ T2982] free_unref_page_list+0x117/0x8d0 [ 154.401473][ T2982] release_pages+0xc7e/0xce0 [ 154.406052][ T2982] free_pages_and_swap_cache+0x86/0xa0 [ 154.411528][ T2982] tlb_finish_mmu+0x1b2/0x380 [ 154.416198][ T2982] unmap_region+0x2b7/0x320 [ 154.420690][ T2982] do_mas_align_munmap+0xbf3/0x1330 [ 154.425893][ T2982] do_mas_munmap+0x23d/0x2b0 [ 154.430478][ T2982] __vm_munmap+0x1af/0x310 [ 154.434894][ T2982] __x64_sys_munmap+0x6b/0x80 [ 154.439575][ T2982] x64_sys_call+0x8a/0x9a0 [ 154.444157][ T2982] do_syscall_64+0x4c/0xa0 [ 154.448577][ T2982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.454473][ T2982] [ 154.456784][ T2982] Memory state around the buggy address: [ 154.462400][ T2982] ffff888142d19f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 154.470449][ T2982] ffff888142d19f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 154.478508][ T2982] >ffff888142d1a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 154.486551][ T2982] ^ [ 154.490606][ T2982] ffff888142d1a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 154.498652][ T2982] ffff888142d1a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 154.506698][ T2982] ================================================================== [ 154.519840][ T28] audit: type=1400 audit(2000000033.769:536): avc: denied { write } for pid=266 comm="syz-executor" path="pipe:[7843]" dev="pipefs" ino=7843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 154.590197][ T353] device veth1_macvtap left promiscuous mode [ 154.596338][ T353] device veth0_vlan left promiscuous mode [ 154.611083][ T2966] EXT4-fs (loop6): unmounting filesystem. [ 154.640815][ T2983] loop1: detected capacity change from 4096 to 0 [ 154.690103][ T39] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 154.697801][ T2982] Disabling lock debugging due to kernel taint [ 154.916101][ T2982] EXT4-fs (loop1): unmounting filesystem. [ 155.091669][ T353] tipc: Left network mode [ 155.591830][ T353] device bridge_slave_1 left promiscuous mode [ 155.597957][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.605368][ T353] device bridge_slave_0 left promiscuous mode [ 155.611552][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.619505][ T353] device bridge_slave_1 left promiscuous mode [ 155.625730][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.633121][ T353] device bridge_slave_0 left promiscuous mode [ 155.639208][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.647013][ T353] device bridge_slave_1 left promiscuous mode [ 155.653166][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.660880][ T353] device bridge_slave_0 left promiscuous mode [ 155.666998][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.675210][ T353] device bridge_slave_1 left promiscuous mode [ 155.681337][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.688699][ T353] device bridge_slave_0 left promiscuous mode [ 155.694916][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.702653][ T353] device bridge_slave_1 left promiscuous mode [ 155.708741][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.716206][ T353] device bridge_slave_0 left promiscuous mode [ 155.722333][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.730946][ T353] device veth1_macvtap left promiscuous mode [ 155.736946][ T353] device veth0_vlan left promiscuous mode [ 155.743054][ T353] device veth1_macvtap left promiscuous mode [ 155.749044][ T353] device veth0_vlan left promiscuous mode [ 155.755162][ T353] device veth1_macvtap left promiscuous mode [ 155.761195][ T353] device veth0_vlan left promiscuous mode [ 155.767060][ T353] device veth1_macvtap left promiscuous mode [ 155.773140][ T353] device veth0_vlan left promiscuous mode [ 155.779017][ T353] device veth1_macvtap left promiscuous mode [ 155.785156][ T353] device veth0_vlan left promiscuous mode