last executing test programs: 11m4.603741655s ago: executing program 0 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000180)) fsopen(0x0, 0x1) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 11m0.384049308s ago: executing program 0 (id=14): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}}}}}, 0x0) 10m59.88627047s ago: executing program 0 (id=20): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000080), &(0x7f0000000000)='system_u:object_r:dhcp_state_t:s0\x00', 0xff4c, 0x3) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x110, 0xffffffffffffffff, 0xaf88f000) 10m59.335117523s ago: executing program 0 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4442, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x9) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002340)={0x0, 0x0}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xcb, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mincore(&(0x7f00001a5000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/4096) 10m58.177583772s ago: executing program 0 (id=27): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000000c0)=""/25, &(0x7f0000000080)=0xfffffffffffffe29) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettimeofday(0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x64, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYBLOB="b29f94"], 0x0) 10m57.795824431s ago: executing program 0 (id=29): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffe, 0xffff, 0x0, 0x8, 0x8, 0x81, 0x9, 0x1, 0x3, 0x0, 0x46, 0x0, 0x2}, {0x3746, 0x400, 0xfe, 0x1, 0x0, 0x61, 0x0, 0x0, 0x0, 0x53, 0x42, 0xfd, 0xfffffffffffffffe}, {0x200003, 0x0, 0x60, 0x80, 0x1, 0x4, 0x5d, 0x1, 0x42, 0x0, 0xff}], 0x1ffffff}) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs}) sched_setscheduler(r0, 0x2, 0x0) modify_ldt$write(0x1, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x5, 0x0, 0x400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@perf_event={0x4b}}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f0000000300)='c', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x181801, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x3, 0x58040) setresuid(0xee01, 0xee00, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x8000000) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @rand_addr=0x64010102}, 0xc) getsockopt$inet_opts(r4, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f40)={'vlan0\x00', &(0x7f0000000e40)=@ethtool_pauseparam={0x1, 0xffffffc0, 0x4, 0x1}}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x10) 10m57.098541238s ago: executing program 32 (id=29): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffe, 0xffff, 0x0, 0x8, 0x8, 0x81, 0x9, 0x1, 0x3, 0x0, 0x46, 0x0, 0x2}, {0x3746, 0x400, 0xfe, 0x1, 0x0, 0x61, 0x0, 0x0, 0x0, 0x53, 0x42, 0xfd, 0xfffffffffffffffe}, {0x200003, 0x0, 0x60, 0x80, 0x1, 0x4, 0x5d, 0x1, 0x42, 0x0, 0xff}], 0x1ffffff}) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs}) sched_setscheduler(r0, 0x2, 0x0) modify_ldt$write(0x1, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x5, 0x0, 0x400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@perf_event={0x4b}}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f0000000300)='c', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x181801, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x3, 0x58040) setresuid(0xee01, 0xee00, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x8000000) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @rand_addr=0x64010102}, 0xc) getsockopt$inet_opts(r4, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f40)={'vlan0\x00', &(0x7f0000000e40)=@ethtool_pauseparam={0x1, 0xffffffc0, 0x4, 0x1}}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x10) 57.537438589s ago: executing program 4 (id=2560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="c3ad7f0ceb48f8794fda5bd6e9ff44000014000000000600000000000000000000004e2b4e2000089f78"], 0x0) 57.50447161s ago: executing program 4 (id=2563): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r1 = io_uring_setup(0x24e0, &(0x7f0000000400)={0x0, 0x1f8e, 0x0, 0x3, 0x89}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc00) write$P9_RSETATTR(r4, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) unshare(0x20000400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000400000004000000f80f000001000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f00000002c0), &(0x7f0000000400)=r7}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r5, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r10}, &(0x7f00000001c0), &(0x7f0000000000)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r9, r8, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) 57.251773996s ago: executing program 4 (id=2566): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) syz_usb_connect$uac2(0x0, 0x90, &(0x7f0000000180)=ANY=[@ANYBLOB="12010003000000401e04373240000102030109027e000301041003080b010101072003090400000001012000092401f082081e00800924070101000400000c24030504055e0604ce929209040100"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x4}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)="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", 0xff}, {&(0x7f00000001c0)="6b65b245210eb4947e96e2a46e681e1d7db684f7f93ce2fad4d85c3872222da9a0d524394eb3777e95af9d78620acf7f2cc5120af2ba215d1f7457569f50fd594816891a3f01fc2f34da52a95c7a4c47a977856aaf0cbd63d1217caceb26516425eb0528e337f49f1c32c4dede43528eca6fee667c89b595d4b09fe4", 0x7c}, {&(0x7f0000000240)="25f0d950b7b7666562d73be020c81b0f53f1e5c0b6b34c80dcf75f635dc9cb66c3837056126a71de71f0fffa55dc53fe9ea5f7f1109718f6e681456a4960b6e42af1c5f886c795596b8222b354547a8738d2cdebab08cc6ac1cc673ae124b7", 0x5f}, {&(0x7f00000002c0)="8458282e9a4af07ae78ae6d0f77d2d578ba2d0d4e345694b586c2bbcef9ec653c1c7fb8d52107aa921075f112e4a7cd67be8a65e684e8e0c53752f2a999f8e19191cd0f3e337da873a52fa77904624c54a061d38f71bfc0672f88534bdd1d7cab7f707a3a15b3707c79b6184a07b9ca0c11a1804993b32bd3d66a7a9c19e629e7e2fade200b75b733c80629a042ed88bb80c0ff3d663cae04452f2603a88b507881bf48f77108e2fdf94c8f8a437a8eb7f2f5b9f70b9db7364e3ee5e09c1b2757eeb5305e6007706900f0536443d82cddab70c184f5b44e9111166f7f8df88709f027efdaa9abbc7a691d454cd3cce42c0a735659308face72314b670fe0a56c4d8ffbfcb10e71de95db2fdcf2e4680ebb63af9f7c8ea9413a1a32715980361a5a255caede69768935ae2f6df2bb08ea683a61049aeea02582963dd9d2c2e041fa48b4bc708818a8ac3850adedde8adc8e6afd7bbe8b476e57af66fc4d94777a61a3311b3f1c94f288e80894e1af1d04802d6bc40200116f4d4311e1ed1ce60253063b26b92db9c99fe2d510c7de1b19227628eac5fa8c33cf74f285c8aecfaeb0f25ac26a55f97a7dbcb4fd2fbab57a19920eaeb0d42f0387363419f5fe80be759a6e5c9ca0edb6c60e3f69aa506a29fae99b5fc349d298823dfa2b88a9636dd3029a440cef7877adeff0aa4987a9f85e067f08b3406e6b678bedc9b3f22ca892775f9bcbf5df35af93f9667762d28b2d0342477d8e06d042f3a4fb42b667d964cece207eee7ea93c90f68570f8252d0b6abc75a4c5ebbbf47f0ee5511daccee3ef01f75e0571c3d9d7eab7610a95ae2da6508026325480e28e5d07d38b280f35b79897c5af062ff93e805e797aeb031c31771460a967ec5fb3a4f833a702dfcc7cbbbdd57ca93277ac55402c69f361eaf965a47548390d3fcf0c6eb056f83435f3690c21a082c686caeb82ccec7319b5cd2a51de665c6c7203f072ce06856c722136af0ae8dcf79ee8bad494929e41d98e9e0897ce5d2b1c6eb701070ceee859a8cb9b171fbd0e18e5d8ff5961341b7ae2f671a7d7cfbcca9f4f2a32fe8e32135395f618426f4e00308392015cdeabd8ee17cf55a66944199ef1032729d8507681092947f59597df472ae938c483429171e61d7cc3d790baa287ef64f868c5308a676710608c924dc8d3db21205f6d75185595ff58d4e3f4253efa970676e33d28a2028f9711ea5b126a50ec3c99e472e45615266ff040492bb0d9deaf94462879e0567dd7339d9a8e2097b33b926b192d8055ac75a22cc8b48527030dabeea99eb6d62d8ef0e6468f7df94c3a32879e336e2897690ed975edc638174366d5bce6e96a6e7359e4547a98d222ec0b0699dde539af1c57", 0x3d7}], 0x4}, 0x7101}], 0x1, 0x4001c00) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f0000001b45010000000000000000b2bbdd14"], 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000004fc0)) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) write$FUSE_INIT(r2, &(0x7f0000000b80)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0x16008011, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) 53.590792625s ago: executing program 4 (id=2573): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xffffffff}}, 0x10) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x0, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0x19df8ffd9, 0x0, 0x0, 0x120, 0x0, 0xd01, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='1', 0x1) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) io_uring_enter(r4, 0x17f4, 0x65a3, 0x11, &(0x7f0000000240)={[0x10001]}, 0x8) ioctl$KVM_CAP_PMU_CAPABILITY(r3, 0x4068aea3, &(0x7f0000000180)) 53.313407002s ago: executing program 4 (id=2582): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x2100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x0, 0x3, 0x1, 0x1, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x20, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xffffffffffffff76, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5000000002010102f0ffffffffffffff070000091c001080080003400000000508000340000000020800014000000b9c14001080080002400000e30d0800880f92010100000000000000800600034000030000"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000004) r6 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaaaa6ab0bd0aa27a80354597001c0064000007029078ac1e0101ac1414aa1e0590780a0100ffe4c880ed162385d67aeb868cc1fd3c9f2debab9d3d092277386decb40393"], 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000c80)='\x05d\x00\xd6\x92n\x9e*\xf8\xcd\xd7w\xc3c-\xcd\xf1\xd1\b\xd1\xf6F\xd8\xadg\x8dI\x7f\xab7:6o\x85\xa7\xc3\xc6X\xcb\x86\xf1\xceo\xdeIJ\xff\xe1\xe4\xc6\xe0\r\xf38\x7fT\x1a\xbf\x03\\>\xbd?>\x00\xd1\x8c\xb3\x02JKj\x1e\x00Q\x7f>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x00\x00\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x100000000000000) prctl$PR_GET_NAME(0x10, 0xfffffffffffffffe) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvmmsg(r7, &(0x7f0000000a80)=[{{&(0x7f0000000300)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/20, 0x14}, {&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/109, 0x6d}, {&(0x7f0000000780)=""/57, 0x39}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/172, 0xac}], 0x9, &(0x7f0000000a00)=""/125, 0x7d}, 0x3}], 0x1, 0x0, &(0x7f0000000ac0)={0x0, 0x3938700}) linkat(0xffffffffffffff9c, &(0x7f0000000c40)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000dc0)='.\x00', 0x400) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f00)=ANY=[@ANYBLOB="4000000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03370070f3658b00011d0000180012801e00010077695c65677561726400000004000280", @ANYBLOB="f18cea87d9137285323425557ea8c7f98e69ddca7c0506bd0200000080000000e5b74e60d967ffcd78ca6d3a481e7849031d4e38753c0083c07c7b35bde211240d25b62922aeeb2ea71c910b7fc1ba9ca27950b3900500aa1fa6dbd711a7f7878d4e9c716656f09438c7621546a084b524dab1f9dc792c71c2b75c0958e020d761670f", @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2004d809}, 0x0) 53.173906676s ago: executing program 4 (id=2585): epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x101) unshare(0x22020400) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040044, &(0x7f0000000400)={0xa, 0x4e23, 0x9c, @empty}, 0x1c) getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x1) writev(r2, &(0x7f0000001a00)=[{&(0x7f00000018c0)="93466813e796af922eb8728904d2401c7da026d5ab3f5f0eb150985ec00f3bab1e7b35810896be5e6e6b80c1e4a56bb792ac18f808942bf84c651221678b6819ddba25b7d59eb759cc74c49ad98e5712cc384f60582d2f62edd924c5529c490d7846474b20d1af4e133ec5e6144f4a58baaadb7e40b222edcb883a24936cbc178ce02e", 0x83}, {&(0x7f0000001980)="1706d0158a09354385bc4ee9a22f9f11e273c7e24a0f83890b", 0x19}], 0x2) 53.131920067s ago: executing program 33 (id=2585): epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x101) unshare(0x22020400) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040044, &(0x7f0000000400)={0xa, 0x4e23, 0x9c, @empty}, 0x1c) getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x1) writev(r2, &(0x7f0000001a00)=[{&(0x7f00000018c0)="93466813e796af922eb8728904d2401c7da026d5ab3f5f0eb150985ec00f3bab1e7b35810896be5e6e6b80c1e4a56bb792ac18f808942bf84c651221678b6819ddba25b7d59eb759cc74c49ad98e5712cc384f60582d2f62edd924c5529c490d7846474b20d1af4e133ec5e6144f4a58baaadb7e40b222edcb883a24936cbc178ce02e", 0x83}, {&(0x7f0000001980)="1706d0158a09354385bc4ee9a22f9f11e273c7e24a0f83890b", 0x19}], 0x2) 24.114268353s ago: executing program 1 (id=2800): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) eventfd2(0x9, 0x801) creat(&(0x7f0000000280)='./bus\x00', 0xd4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 24.056495435s ago: executing program 1 (id=2802): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x98}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800718, &(0x7f0000000000)={[{@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nodiscard}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@nolazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}]}, 0x22, 0x4aa, &(0x7f0000000f80)="$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") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0xc, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) 23.961485877s ago: executing program 1 (id=2804): r0 = socket(0x2, 0xa, 0x1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20300}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40890}, 0x80) (fail_nth: 3) 23.960952117s ago: executing program 1 (id=2805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000008000004a374920000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x97f}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffe0000001", @ANYRES32, @ANYBLOB="000000001400"], 0x40}}], 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001080)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000004980)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@resgid}, {@test_dummy_encryption}]}, 0x3, 0x45e, &(0x7f0000000580)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="070099c7", @ANYRESDEC=r4, @ANYRESDEC=r1, @ANYRESOCT=r3, @ANYBLOB="18001d801400008006000500b200000005000700820000009a437a07bf87634297b32fdb7d4f4b143a0839708b4459a50c8daa99"], 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x80480c5) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="46bec200", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf254900000008000300", @ANYRES32=r7, @ANYBLOB="0c009900eaf400001f000000"], 0x28}, 0x1, 0x0, 0x0, 0x8085}, 0x5) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000e80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1309f211f3492a7c", @ANYRES16=0x0, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x8045}, 0x4040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 22.958902472s ago: executing program 1 (id=2810): r0 = getpid() syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}, "33702d4b53954eacee6f7f4fa63357dd78904d63"}}}}, 0x0) process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0xb72}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@newchain={0x44, 0x64, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0xf}, {0xb}, {0xffe0, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x14ec2}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x97}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c010}, 0x801) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4000090}, 0x80) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x1) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x39, 0x10000000000003, 0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000080)=@ethtool_link_settings={0x2, 0x0, 0x7, 0x4, 0x7, 0x0, 0xff, 0x0, 0x20, 0x4, [0x2, 0x2, 0xffffffff, 0x102, 0xf4, 0x3, 0x0, 0x6]}}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) 22.725802287s ago: executing program 1 (id=2811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000940), &(0x7f0000000980)='%pi6 \x00'}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="c3ad7f0ceb48f8794fda5bd6e9ff44000014000000000600000000000000000000004e2b4e2000089f78"], 0x0) 9.917804089s ago: executing program 5 (id=2853): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x98}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800718, &(0x7f0000000000)={[{@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nodiscard}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@nolazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}]}, 0x22, 0x4aa, &(0x7f0000000f80)="$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") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) 9.917487499s ago: executing program 2 (id=2854): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @random}, &(0x7f0000000080)=0x80, 0x800) 9.917285249s ago: executing program 3 (id=2855): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000008000004a374920000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x97f}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffe0000001", @ANYRES32, @ANYBLOB="000000001400"], 0x40}}], 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001080)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000004980)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@resgid}, {@test_dummy_encryption}]}, 0x3, 0x45e, &(0x7f0000000580)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="070099c7", @ANYRESDEC=r5, @ANYRESDEC=r2, @ANYRESOCT=r4, @ANYBLOB="18001d801400008006000500b200000005000700820000009a437a07bf87634297b32fdb7d4f4b143a0839708b4459a50c8daa99"], 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x80480c5) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="46bec200", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf254900000008000300", @ANYRES32=r8, @ANYBLOB="0c009900eaf400001f000000"], 0x28}, 0x1, 0x0, 0x0, 0x8085}, 0x5) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000e80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1309f211f3492a7c", @ANYRES16=0x0, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x8045}, 0x4040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 9.917069259s ago: executing program 6 (id=2856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000940), &(0x7f0000000980)='%pi6 \x00'}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0) 8.192703061s ago: executing program 5 (id=2857): r0 = socket(0x2, 0xa, 0x1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40890}, 0x80) (fail_nth: 2) 8.192412431s ago: executing program 2 (id=2858): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1000}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(r2) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000002100)={0x18, {"a2e3ad2119c70e0d8a267fd5d89dcd939b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62437264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d637545c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4953a9737d214060005ea6f1783e287b3bee96e3a726eafe2fd12a78d1f48c13b64df07847754b8010000009bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f577dcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2010891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57ccb938e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee11987f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b4907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d847dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e7832b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859add50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195301000000aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d0d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb4d600000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de4f8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3442bab515b0000348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de0000d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bdc8f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62f46fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x1000}}, 0x1006) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0xab4c0, 0x5) fcntl$setpipe(r4, 0x407, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0xf507, 0x0) 8.191559721s ago: executing program 3 (id=2859): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64=0x0, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r5 = syz_clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14c98, &(0x7f0000000f00)=ANY=[@ANYBLOB="747266646e6f05bd963601fd3474ce92b5b575177a50d3c32ef2cfc3924cf73fc056c098110c4f311486bb285ee288b93e764910af041a2f5463f986a937b0f0e011cbf840d25832b1293668a37527a5ecb3f7375a3e36c3f10bd935f22f9c1f898d73adad73e6051d0800000000000000f37c90ae0a68fa52fcab73d4af92995c49bf0f5a07872371a7be2bac8425a91c8cc6caebb1e796c76f3b3d733e3c4ad35d173b6d4d2478ef35a172ac23fc5646c76260e70f658f3092598614f25e840ef152a4a403265a773436654da22c3ca1d83e1d60ec4d0424deedf2ac2afe062865a488144573ebc91ed5553e088c18f8241e5528", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYRESDEC=r3]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000200)='./file1\x00', 0x48, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES16=r4, @ANYRESHEX=r3, @ANYRES16=r4, @ANYRES64, @ANYRESDEC=r0], 0x1, 0x105ca, &(0x7f0000004240)="$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") listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='attr/sockcreate\x00') read$FUSE(r10, &(0x7f0000002780)={0x2020}, 0x5ecfb203) socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) 8.191174561s ago: executing program 6 (id=2860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000200025a727bd7000fddbdf250a0000cdff0000010200010053faa769a74b3b9bb730c40fe962e834"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0xff, 0x3, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) syz_emit_ethernet(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, r5, 0xb, 0x0, @void}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x17) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r6) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) socket$inet6(0xa, 0x2, 0x0) memfd_create(0x0, 0x3) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000fb0500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300005fdb0900000000000027415e13ca60845bf784e295299b51745509010085337640fb68963651b19662f6fb321346771cb5c6507d28e9a2aaadf3661b77b5f6a53905e356d72f86bc22c5bc3a9b0776b2de1ed8f83a223b45286e384190faf1ef6998fb5a22107b4ba098db968181d3bfb7c969d45a252c28998765e50185657e201d42a8746f8ee281e47ea33642eaf04f1bd4b2aecbb3947b7bcc5e07589461af50fda0926cea63f42a23494e0cdef1fcf6b653c83bd73622e793144d645c9b662483e86779ce59495929f264c77eb4c8bf355fa8ebb6", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(r2, &(0x7f0000000580)=[{&(0x7f0000000200)="cfaff3cf4a00e9ea31bda4ec9be3b69daf1804262a6c4b76c6074bf278ba7e6a6f79506f22f5069982da299ef6f03a543bce6fcae14099c9a569e6490ce43a255e4b73933933a71a47ff0a0273d56f8fbe0fac706c01ecb9465ebd2c82c61c1aae683f777c4b532da4fa5f3979680e80dedfefe50a5c0244413eb2d28bbfc847545b98a74d580a6ce12fdfb3101883", 0x8f}, {&(0x7f00000002c0)="1253eb427cb663ccdd863b6659eea98f44f8eb7739c191750e62809850e3a0a3fd5f354c3b9f6ba64efe01935fe5f5647184d453bb1cf8cbba23149ec163c76d2e90882c2fcb813688c1762b86cd42cf2fefa654a2b1b2ee2b99491d01f8368083cc22ca77daa4c157447a4c772e9d7f44297d1fa0ff14b69ffd25629bb937abf2f83cd7ddf27ad8600ec0048147e8cbc55bc43395fcbd4e0e7f5dcdaba99f93271d901156a3", 0xa6}, {&(0x7f00000003c0)="d4ab1f23e03631fa920580579586cd52da242375ad30c890d0ef4f8b5cc81fbea35a0de6d1f011429024b64ede5fd202e7e4d4ee5a88b51f7c916e4dbee949fe3949d02f9e23b486cf4a7ee68c98bbc20ae0298dec7ab2d6eae7d3401b5a24f5d1c9f0e001bd124657802282568bb3b735eb46d0aed6007d17f3875c7b888183cc42e8887837e106", 0x88}, {&(0x7f0000000480)="205787ba1177dab584d746f81f7a6a09b05ffc743145904c2bde48a499a01973378596bd8c16be968ae7fb037d1efd8f1f2154937a99c262d779b7661b31ec4936035ef4648717cf0040c7800e031c138df068a1a79cdaa3af44af8d4fcc0a57b90f9fadc2160a2cae1f", 0x6a}, {&(0x7f0000000500)="05805ec85d75fe917880899c3f33fc4609e34b87674243ea988a57c8fedcf4c588d3707a2be1e659419a89b2455d2398dbd1d839bc1a6c0c598611ab95eaf4386dfc702c15e6abc57ba2633f5dd4d92541729808", 0x54}], 0x5, 0x12) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r11 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0xffffffffffffffd9) sendmmsg$inet(r11, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 6.353359836s ago: executing program 5 (id=2861): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 6.352817156s ago: executing program 2 (id=2862): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f00000004c0)={[{@noblock_validity}, {@nobh}, {@dioread_lock}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'y\x00'}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0xda6}}]}, 0x3, 0x617, &(0x7f0000000bc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0x4482c, 0x0, 0x3, 0x0, &(0x7f0000000680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0xffffff1e, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic', 0x3) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) shutdown(r0, 0x1) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00000000009d3300000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b1, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) mmap(&(0x7f0000275000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) splice(r4, 0x0, r7, 0x0, 0x25a5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00010027bd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="8000ff0a0a000200aa"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) 6.352199846s ago: executing program 3 (id=2863): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x30000000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.351763316s ago: executing program 6 (id=2864): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x10, 0x4, 0xfffffffc}, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0xd) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x20, 0x12, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@generic="e8122fe55c1e73f7c1"]}, 0x20}}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x1, 0x1, 0x3, 0x401}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@utf8no}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@uni_xlateno}]}, 0x1, 0x216, &(0x7f0000000180)="$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") r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x51d802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4404}, {0xffffffffffffffff, 0x402}], 0x2, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 4.417499113s ago: executing program 5 (id=2865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000ac0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) lseek(r2, 0x0, 0x1) r3 = syz_io_uring_setup(0x2f8e, &(0x7f0000000540)={0x0, 0x40c384, 0x400, 0x6, 0x306}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r7 = epoll_create(0xaf2) syz_io_uring_modify_offsets$generic(r4, r5, 0x50, 0x8) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000001c0)=0x95, 0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000080)={0xe000200f}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000300)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x85, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x1, 0xfc1, 0x0, 0x0, 0x1000, 0x6, 0xffffffffffffffff, 0x0, 0x4}}}, &(0x7f0000000380)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r1}, 0xc) 4.417177263s ago: executing program 2 (id=2866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r3, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000400)) 4.416929743s ago: executing program 3 (id=2867): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x98}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800718, &(0x7f0000000000)={[{@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nodiscard}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@nolazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}]}, 0x22, 0x4aa, &(0x7f0000000f80)="$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") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) 4.416673383s ago: executing program 6 (id=2868): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f00000001c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") (async) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0xfff000000000000, 0x7, 0x9, 0xfffffffffffffff8, 0x1, 0x8, 0x400f6b}) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008094}, 0x4004000) 2.227644726s ago: executing program 5 (id=2869): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000008000004a374920000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x97f}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffe0000001", @ANYRES32, @ANYBLOB="000000001400"], 0x40}}], 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001080)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000004980)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@resgid}, {@test_dummy_encryption}]}, 0x3, 0x45e, &(0x7f0000000580)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="070099c7", @ANYRESDEC=r5, @ANYRESDEC=r2, @ANYRESOCT=r4, @ANYBLOB="18001d801400008006000500b200000005000700820000009a437a07bf87634297b32fdb7d4f4b143a0839708b4459a50c8daa99"], 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x80480c5) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="46bec200", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf254900000008000300", @ANYRES32=r8, @ANYBLOB="0c009900eaf400001f000000"], 0x28}, 0x1, 0x0, 0x0, 0x8085}, 0x5) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000e80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1309f211f3492a7c", @ANYRES16=0x0, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x8045}, 0x4040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.227211676s ago: executing program 2 (id=2870): r0 = add_key$keyring(&(0x7f0000002040), &(0x7f0000002080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000020c0), &(0x7f0000002100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r2, 0x400, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYRES64=r4, @ANYRES64=r3, @ANYRESOCT=r3, @ANYRES32=r0, @ANYRES8=r2, @ANYRESDEC=r1], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) pread64(r6, &(0x7f00000000c0)=""/5, 0x5, 0x2) close(0x3) keyctl$chown(0x4, r1, 0xee01, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, r1, r8, r9) r10 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x13, r10, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2.227102466s ago: executing program 3 (id=2871): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x5, 0x1}, {0x4d, 0x2}, @cond=[{0x9, 0x528c, 0xc, 0x800, 0xf535, 0xf4a}, {0x4000, 0x805, 0x1, 0x7, 0x0, 0xffff}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 2) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 2.226952056s ago: executing program 6 (id=2872): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1000}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(r2) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0xab4c0, 0x5) fcntl$setpipe(r4, 0x407, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0xf507, 0x0) 67.380499ms ago: executing program 5 (id=2873): r0 = socket(0x2, 0xa, 0x1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40890}, 0x80) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x248340, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp1255,errors=continue,\x00'/49], 0x1, 0x153b, &(0x7f0000001700)="$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") setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) io_setup(0x2, &(0x7f0000000100)=0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xa2, 0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x700, r3, 0x0, 0x0, 0x100000000}]) r4 = eventfd2(0x9f, 0x80000) r5 = eventfd(0x6) io_submit(r2, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xc, 0xfff, r0, &(0x7f00000000c0)="d5ef2ccb36f9f810514304d788c8f483fa5f202a625a2b10780fe08190c8c3d0b3fdf0d4b926b9349f9de3f5c1676517b1f223bbe324979680f7398bd8390bf9f52e284661e8475497668a813aacb64615d44089fc4a1ed69d570058ef77cbbbe353bfafec9b5442e4f277c76e42efc09cee99ad", 0x74, 0x654, 0x0, 0x3, r4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x3, r1, &(0x7f0000000180)="64c98f00c848320c8ff71b972d06c3106ec9f0bf5bc196442af740c973bfa760a941209bee1f775afa0ca95f1a76b1e88edd6aee40195e058c0c849c6955745b4c63a3dd", 0x44, 0x3, 0x0, 0x1, r5}]) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) openat$incfs(r1, &(0x7f0000000040)='.pending_reads\x00', 0x1a1201, 0x11) 44.198469ms ago: executing program 2 (id=2874): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x9, 0x4f, "0d518e07009188b791e15b1b6f6f788c6b00", 0x9, 0x140220}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x7a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x0, {0xa, 0x25, 0x25, 0x401, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x73, 0x5, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbdd}}}}}}}}]}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) r2 = fsmount(0xffffffffffffffff, 0x1, 0x78) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) bind$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x1}, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000380)={0x1, 0x0, [{0x80000008, 0xffffffff, 0x9, 0x7ff, 0x7}]}) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048881}, 0x800) 10.76113ms ago: executing program 3 (id=2875): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x10000014}) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x3, 0x9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]}) (async) getuid() 0s ago: executing program 6 (id=2876): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x700, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) kernel console output (not intermixed with test programs): T484] usb 3-1: Product: syz [ 556.529593][ T484] usb 3-1: Manufacturer: syz [ 556.535084][ T484] usb 3-1: SerialNumber: syz [ 556.596566][ T323] usb 4-1: Invalid ep0 maxpacket: 64 [ 556.602933][ T323] usb usb4-port1: attempt power cycle [ 556.705344][ T648] usb 5-1: 0:1 : does not exist [ 556.713006][ T648] usb 5-1: USB disconnect, device number 43 [ 556.781272][ T484] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 556.791571][ T484] usb 3-1: USB disconnect, device number 41 [ 556.853157][ T7565] binder_alloc: 7564: binder_alloc_buf, no vma [ 556.860987][ T7565] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2198'. [ 556.871989][ T7565] netlink: 9052 bytes leftover after parsing attributes in process `syz.4.2198'. [ 557.063518][ T323] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 557.099468][ T323] usb 4-1: Invalid ep0 maxpacket: 64 [ 557.122787][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 557.259018][ T323] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 557.291962][ T323] usb 4-1: Invalid ep0 maxpacket: 64 [ 557.297725][ T323] usb usb4-port1: unable to enumerate USB device [ 557.620233][ T28] audit: type=1400 audit(1785174936.539:582): avc: denied { read write } for pid=7572 comm="syz.2.2201" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 557.646563][ T7573] base or size exceeds the MTRR width [ 557.694886][ T28] audit: type=1400 audit(1785174936.567:583): avc: denied { open } for pid=7572 comm="syz.2.2201" path="/439/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 557.773391][ T28] audit: type=1400 audit(1785174936.567:584): avc: denied { ioctl } for pid=7572 comm="syz.2.2201" path="/439/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 561.085124][ T7592] 9pnet: Could not find request transport: fd0x0000000000000003 [ 565.127562][ T7611] FAULT_INJECTION: forcing a failure. [ 565.127562][ T7611] name failslab, interval 1, probability 0, space 0, times 0 [ 565.155739][ T7611] CPU: 0 PID: 7611 Comm: syz.2.2214 Not tainted syzkaller #0 [ 565.163218][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 565.173284][ T7611] Call Trace: [ 565.176572][ T7611] [ 565.179526][ T7611] __dump_stack+0x21/0x24 [ 565.179556][ T7611] dump_stack_lvl+0x110/0x170 [ 565.179574][ T7611] ? __cfi_dump_stack_lvl+0x8/0x8 [ 565.179595][ T7611] ? stack_trace_save+0xa6/0xf0 [ 565.179617][ T7611] dump_stack+0x15/0x24 [ 565.179635][ T7611] should_fail_ex+0x3bf/0x510 [ 565.179652][ T7611] __should_failslab+0xac/0xf0 [ 565.179672][ T7611] should_failslab+0x9/0x20 [ 565.179689][ T7611] __kmem_cache_alloc_node+0x3d/0x2d0 [ 565.179710][ T7611] ? bpf_test_init+0xa7/0x140 [ 565.179748][ T7611] ? avc_has_perm_noaudit+0x390/0x490 [ 565.179765][ T7611] ? bpf_test_init+0xa7/0x140 [ 565.179784][ T7611] __kmalloc+0xa4/0x1e0 [ 565.179799][ T7611] bpf_test_init+0xa7/0x140 [ 565.179822][ T7611] bpf_prog_test_run_xdp+0x488/0xf80 [ 565.179848][ T7611] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 565.179873][ T7611] ? __kasan_check_write+0x14/0x20 [ 565.179891][ T7611] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 565.179915][ T7611] bpf_prog_test_run+0x3b4/0x5c0 [ 565.179934][ T7611] ? bpf_prog_query+0x270/0x270 [ 565.179952][ T7611] ? selinux_bpf+0xce/0xf0 [ 565.179971][ T7611] ? security_bpf+0x93/0xb0 [ 565.179993][ T7611] __sys_bpf+0x5ee/0x850 [ 565.180009][ T7611] ? bpf_link_show_fdinfo+0x330/0x330 [ 565.180030][ T7611] ? __cfi_ksys_write+0x10/0x10 [ 565.180049][ T7611] ? debug_smp_processor_id+0x17/0x20 [ 565.180068][ T7611] __x64_sys_bpf+0x7c/0x90 [ 565.180084][ T7611] x64_sys_call+0x488/0x9a0 [ 565.180109][ T7611] do_syscall_64+0x4c/0xa0 [ 565.180127][ T7611] ? clear_bhb_loop+0x30/0x80 [ 565.180143][ T7611] ? clear_bhb_loop+0x30/0x80 [ 565.180159][ T7611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.180182][ T7611] RIP: 0033:0x7feb2799de99 [ 565.180197][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.180211][ T7611] RSP: 002b:00007feb28787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 565.180232][ T7611] RAX: ffffffffffffffda RBX: 00007feb27c25fa0 RCX: 00007feb2799de99 [ 565.180245][ T7611] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 565.180257][ T7611] RBP: 00007feb28787090 R08: 0000000000000000 R09: 0000000000000000 [ 565.180269][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.180279][ T7611] R13: 00007feb27c26038 R14: 00007feb27c25fa0 R15: 00007ffe80f21618 [ 565.180296][ T7611] [ 565.402387][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2216'. [ 565.402414][ T7615] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 565.813410][ T1253] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 566.062241][ T7632] 9pnet_fd: Insufficient options for proto=fd [ 566.287008][ T1253] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 566.620766][ T1253] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 566.642216][ T1253] usb 6-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice= 0.40 [ 566.651523][ T1253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.671513][ T7644] xt_hashlimit: size too large, truncated to 1048576 [ 566.678741][ T1253] usb 6-1: Product: syz [ 566.683048][ T1253] usb 6-1: Manufacturer: syz [ 566.688088][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2221'. [ 566.746415][ T1253] usb 6-1: SerialNumber: syz [ 566.780055][ T7648] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2221'. [ 566.832273][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2222'. [ 568.534645][ T1253] usb 6-1: Can't get UAC3 power state for id 10 [ 568.562655][ T1253] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 568.604627][ T1253] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 568.680202][ T1253] usb 6-1: USB disconnect, device number 35 [ 568.702065][ T7659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2222'. [ 569.163904][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2229'. [ 569.312545][ T7673] 9pnet_fd: Insufficient options for proto=fd [ 570.636807][ T28] audit: type=1400 audit(1785174948.723:585): avc: denied { ioctl } for pid=7683 comm="syz.5.2236" path="socket:[44187]" dev="sockfs" ino=44187 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 570.958518][ T7684] can0: slcan on ttyS3. [ 570.991031][ T28] audit: type=1400 audit(1785174948.723:586): avc: denied { write } for pid=7683 comm="syz.5.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 571.595603][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'. [ 571.605743][ T28] audit: type=1400 audit(1785174948.723:587): avc: denied { accept } for pid=7683 comm="syz.5.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 571.635192][ T7678] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 571.952464][ T7690] can0 (unregistered): slcan off ttyS3. [ 571.993513][ T7698] can0: slcan on ttyS3. [ 572.058090][ T28] audit: type=1400 audit(1785174950.052:588): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.079392][ T40] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 572.163154][ T28] audit: type=1400 audit(1785174950.090:589): avc: denied { read } for pid=142 comm="dhcpcd" name="n17" dev="tmpfs" ino=11040 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 572.192711][ T7724] syz.4.2248[7724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 572.192787][ T7724] syz.4.2248[7724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 572.243714][ T28] audit: type=1400 audit(1785174950.090:590): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=11040 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 572.307010][ T40] usb 4-1: unable to get BOS descriptor or descriptor too short [ 572.319944][ T40] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 572.360832][ T40] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 572.388939][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.404799][ T28] audit: type=1400 audit(1785174950.090:591): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=11040 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 572.468354][ T40] usb 4-1: Product: syz [ 572.476697][ T40] usb 4-1: Manufacturer: syz [ 572.481331][ T40] usb 4-1: SerialNumber: syz [ 572.497194][ T28] audit: type=1400 audit(1785174950.211:592): avc: denied { read } for pid=7725 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.546057][ T28] audit: type=1400 audit(1785174950.211:593): avc: denied { open } for pid=7725 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.615816][ T28] audit: type=1400 audit(1785174950.211:594): avc: denied { getattr } for pid=7725 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.687906][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 572.703163][ T7749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2253'. [ 572.718528][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2251'. [ 572.729936][ T7735] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 572.786218][ T7698] can0 (unregistered): slcan off ttyS3. [ 573.874009][ T7788] 9pnet_fd: Insufficient options for proto=fd [ 573.905482][ T7793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2268'. [ 573.938284][ T40] usb 4-1: USB disconnect, device number 41 [ 574.229841][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2269'. [ 574.302105][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 574.317969][ T318] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 574.374626][ T7810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2269'. [ 574.407450][ T7804] xt_hashlimit: size too large, truncated to 1048576 [ 574.501631][ T7814] overlayfs: upper fs does not support file handles, falling back to index=off. [ 574.511089][ T7814] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 574.521504][ T7814] SELinux: security_context_str_to_sid (0xffffffffffffffff) failed with errno=-22 [ 574.671359][ T318] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 574.745763][ T318] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 574.846751][ T318] usb 5-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice= 0.40 [ 574.882216][ T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.895034][ T318] usb 5-1: Product: syz [ 574.905017][ T318] usb 5-1: Manufacturer: syz [ 574.921980][ T318] usb 5-1: SerialNumber: syz [ 574.984320][ T7837] 9pnet_fd: Insufficient options for proto=fd [ 575.600288][ T318] usb 5-1: Can't get UAC3 power state for id 10 [ 575.644692][ T1253] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 575.650629][ T318] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 576.164723][ T1253] usb 3-1: unable to get BOS descriptor or descriptor too short [ 576.317107][ T1253] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 576.506786][ T318] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 577.864507][ T1253] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 577.890593][ T1253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.921004][ T318] usb 5-1: USB disconnect, device number 44 [ 577.934080][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 577.934095][ T28] audit: type=1400 audit(1785174955.555:607): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 577.978945][ T1253] usb 3-1: Product: syz [ 577.983573][ T1253] usb 3-1: Manufacturer: syz [ 577.988174][ T1253] usb 3-1: SerialNumber: syz [ 578.946471][ T1253] usb 3-1: USB disconnect, device number 42 [ 579.050208][ T7875] 9pnet_fd: Insufficient options for proto=fd [ 579.229638][ T318] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 579.358310][ T7884] syz.3.2290[7884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.358387][ T7884] syz.3.2290[7884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.470959][ T318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 582.214511][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'. [ 582.262702][ T318] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 582.279269][ T318] usb 5-1: can't read configurations, error -71 [ 582.285804][ T7900] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2295'. [ 582.792865][ T28] audit: type=1400 audit(1785174960.103:608): avc: denied { write } for pid=7923 comm="syz.4.2304" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 582.835855][ T28] audit: type=1400 audit(1785174960.121:609): avc: denied { map } for pid=7923 comm="syz.4.2304" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 583.261978][ T7935] syz.3.2308[7935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 583.262051][ T7935] syz.3.2308[7935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 583.325509][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 583.519196][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 583.835242][ T1253] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 584.355387][ T1253] usb 4-1: unable to get BOS descriptor or descriptor too short [ 584.422418][ T1253] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 584.594857][ T1253] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 584.679023][ T1253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.719482][ T1253] usb 4-1: Product: syz [ 584.926851][ T318] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 586.155867][ T318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 586.166636][ T28] audit: type=1400 audit(1785174963.256:610): avc: denied { mounton } for pid=7966 comm="syz.2.2318" path="/470/file1" dev="tmpfs" ino=2522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 586.167228][ T1253] usb 4-1: Manufacturer: syz [ 586.194187][ T1253] usb 4-1: SerialNumber: syz [ 586.201521][ T318] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 586.216090][ T7973] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 586.224071][ T318] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 586.233262][ T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.273788][ T318] usb 5-1: Product: syz [ 586.277997][ T318] usb 5-1: Manufacturer: syz [ 586.282865][ T318] usb 5-1: SerialNumber: syz [ 586.852849][ T648] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 587.618128][ T648] usb 3-1: device descriptor read/64, error -71 [ 587.916161][ T648] usb 3-1: device descriptor read/64, error -71 [ 588.073439][ T318] usb 5-1: USB disconnect, device number 47 [ 588.216759][ T648] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 588.387517][ T648] usb 3-1: device descriptor read/64, error -71 [ 588.446558][ T1253] usb 4-1: USB disconnect, device number 42 [ 588.447609][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 591.461852][ T648] usb 3-1: device descriptor read/64, error -71 [ 591.614903][ T648] usb usb3-port1: attempt power cycle [ 591.629071][ T8017] xt_hashlimit: size too large, truncated to 1048576 [ 591.669822][ T2732] udevd[2732]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 592.053397][ T318] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 592.267816][ T318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 592.279054][ T318] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 592.302384][ T318] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 592.357550][ T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.365919][ T7604] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 592.428561][ T318] usb 5-1: Product: syz [ 592.432877][ T318] usb 5-1: Manufacturer: syz [ 592.439092][ T318] usb 5-1: SerialNumber: syz [ 592.642971][ T7604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.683292][ T7604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.712774][ T7604] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 592.726580][ T7604] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.736389][ T7604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.746218][ T7604] usb 6-1: config 0 descriptor?? [ 593.175741][ T28] audit: type=1400 audit(1785174969.816:611): avc: denied { name_bind } for pid=8055 comm="syz.3.2346" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 593.257052][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.299730][ T28] audit: type=1400 audit(1785174969.854:612): avc: denied { sqpoll } for pid=8055 comm="syz.3.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 593.333578][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.138461][ T7604] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 594.145940][ T7604] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 594.153489][ T7604] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 594.310997][ T7604] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 594.346213][ T7604] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 594.403143][ T7604] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 594.419730][ T318] usb 5-1: USB disconnect, device number 48 [ 594.437199][ T7604] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 594.455449][ T7604] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 594.470234][ T7604] usb 6-1: USB disconnect, device number 36 [ 594.506061][ T8073] fido_id[8073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 594.554582][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2347'. [ 594.563539][ T8058] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 594.750428][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2350'. [ 594.759455][ T8081] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 595.022714][ T8093] tipc: Started in network mode [ 595.027782][ T8093] tipc: Node identity 0a838da40992, cluster identity 4711 [ 595.035485][ T8093] tipc: Enabled bearer , priority 0 [ 595.124682][ T7604] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 595.399330][ T7604] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 595.410695][ T7604] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 595.422539][ T8092] tipc: Disabling bearer [ 595.433085][ T7604] usb 3-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice= 0.40 [ 595.442223][ T7604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.450284][ T7604] usb 3-1: Product: syz [ 595.454492][ T7604] usb 3-1: Manufacturer: syz [ 595.459089][ T7604] usb 3-1: SerialNumber: syz [ 595.602430][ T28] audit: type=1400 audit(1785174972.090:613): avc: denied { create } for pid=8104 comm="syz.3.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 595.682277][ T7604] usb 3-1: Can't get UAC3 power state for id 10 [ 595.689452][ T7604] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 595.698685][ T7604] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 595.711900][ T7604] usb 3-1: USB disconnect, device number 46 [ 595.727988][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 595.856204][ T484] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 596.209311][ T484] usb 5-1: unable to get BOS descriptor or descriptor too short [ 596.219243][ T484] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 596.235639][ T484] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 596.246170][ T484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.289667][ T484] usb 5-1: Product: syz [ 596.312848][ T484] usb 5-1: Manufacturer: syz [ 596.355550][ T484] usb 5-1: SerialNumber: syz [ 597.274160][ T8129] process 'syz.3.2369' launched './file0' with NULL argv: empty string added [ 597.284879][ T8129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2369'. [ 597.345271][ T28] audit: type=1400 audit(1785174973.719:614): avc: denied { accept } for pid=8128 comm="syz.3.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 597.375286][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2365'. [ 597.384222][ T8121] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 597.616828][ T484] usb 5-1: USB disconnect, device number 49 [ 597.708814][ T1253] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 597.775076][ T40] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 598.423407][ T1253] usb 4-1: config 1 interface 0 altsetting 119 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.438742][ T1253] usb 4-1: config 1 interface 0 has no altsetting 0 [ 598.447142][ T1253] usb 4-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40 [ 598.456551][ T1253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.464893][ T1253] usb 4-1: Product: syz [ 598.469226][ T1253] usb 4-1: Manufacturer: syz [ 598.473862][ T1253] usb 4-1: SerialNumber: syz [ 599.568074][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.579198][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.589222][ T40] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 599.613092][ T40] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.160042][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.209248][ T40] usb 6-1: config 0 descriptor?? [ 600.506773][ T1253] usbhid 4-1:1.0: can't add hid device: -71 [ 600.546932][ T1253] usbhid: probe of 4-1:1.0 failed with error -71 [ 600.585784][ T1253] usb 4-1: USB disconnect, device number 43 [ 600.655643][ T8126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.681515][ T8126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.756661][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 600.772546][ T8173] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 600.947312][ T40] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 600.955931][ T40] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 600.963524][ T40] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 600.971064][ T40] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 600.978518][ T40] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 600.985934][ T40] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 602.523713][ T40] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 602.609198][ T40] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 602.623370][ T40] usb 6-1: USB disconnect, device number 37 [ 603.111262][ T8194] fido_id[8194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 603.627562][ T28] audit: type=1326 audit(1785174979.595:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.1.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958319de99 code=0x7ffc0000 [ 603.711270][ T28] audit: type=1326 audit(1785174979.623:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.1.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958319de99 code=0x7ffc0000 [ 603.736240][ T28] audit: type=1326 audit(1785174979.633:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.1.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958319de99 code=0x7ffc0000 [ 603.778910][ T28] audit: type=1326 audit(1785174979.633:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.1.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f958319de99 code=0x7ffc0000 [ 603.805603][ T28] audit: type=1326 audit(1785174979.633:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.1.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958319de99 code=0x7ffc0000 [ 603.830782][ T28] audit: type=1326 audit(1785174979.633:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.1.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958319de99 code=0x7ffc0000 [ 604.300287][ T28] audit: type=1326 audit(1785174979.633:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.1.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958319de99 code=0x7ffc0000 [ 604.327553][ T28] audit: type=1326 audit(1785174979.642:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.1.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f958319de99 code=0x7ffc0000 [ 604.359690][ T28] audit: type=1326 audit(1785174979.642:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.1.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958319de99 code=0x7ffc0000 [ 604.385482][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2395'. [ 604.390682][ T28] audit: type=1326 audit(1785174979.642:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.1.2392" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958319de99 code=0x7ffc0000 [ 604.485886][ T8221] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2397'. [ 607.216469][ T8234] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 607.225639][ T8234] overlayfs: missing 'lowerdir' [ 610.262285][ T484] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 610.425841][ T8246] FAULT_INJECTION: forcing a failure. [ 610.425841][ T8246] name failslab, interval 1, probability 0, space 0, times 0 [ 610.451749][ T8246] CPU: 0 PID: 8246 Comm: syz.3.2404 Not tainted syzkaller #0 [ 610.459165][ T8246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 610.469264][ T8246] Call Trace: [ 610.472568][ T8246] [ 610.475508][ T8246] __dump_stack+0x21/0x24 [ 610.479859][ T8246] dump_stack_lvl+0x110/0x170 [ 610.484551][ T8246] ? __cfi_dump_stack_lvl+0x8/0x8 [ 610.489591][ T8246] dump_stack+0x15/0x24 [ 610.493759][ T8246] should_fail_ex+0x3bf/0x510 [ 610.498447][ T8246] ? getname_flags+0xba/0x510 [ 610.503148][ T8246] __should_failslab+0xac/0xf0 [ 610.507922][ T8246] should_failslab+0x9/0x20 [ 610.512439][ T8246] kmem_cache_alloc+0x3b/0x320 [ 610.517218][ T8246] getname_flags+0xba/0x510 [ 610.521715][ T8246] getname+0x19/0x20 [ 610.525594][ T8246] do_sys_openat2+0xeb/0x820 [ 610.530170][ T8246] ? __kasan_check_write+0x14/0x20 [ 610.535265][ T8246] ? do_sys_open+0xe0/0xe0 [ 610.539664][ T8246] ? ksys_write+0x1fa/0x260 [ 610.544151][ T8246] ? __cfi_ksys_write+0x10/0x10 [ 610.548984][ T8246] __x64_sys_openat+0x136/0x160 [ 610.553820][ T8246] x64_sys_call+0x783/0x9a0 [ 610.558317][ T8246] do_syscall_64+0x4c/0xa0 [ 610.562722][ T8246] ? clear_bhb_loop+0x30/0x80 [ 610.567392][ T8246] ? clear_bhb_loop+0x30/0x80 [ 610.572081][ T8246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.577994][ T8246] RIP: 0033:0x7f72bb59de99 [ 610.582419][ T8246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.602040][ T8246] RSP: 002b:00007f72bc504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 610.610477][ T8246] RAX: ffffffffffffffda RBX: 00007f72bb825fa0 RCX: 00007f72bb59de99 [ 610.618460][ T8246] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: ffffffffffffff9c [ 610.626442][ T8246] RBP: 00007f72bc504090 R08: 0000000000000000 R09: 0000000000000000 [ 610.634425][ T8246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.642407][ T8246] R13: 00007f72bb826038 R14: 00007f72bb825fa0 R15: 00007ffda7f6dc98 [ 610.650399][ T8246] [ 612.739076][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2419'. [ 612.748181][ T8289] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 612.800775][ T484] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 613.410841][ T484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.411644][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2421'. [ 613.432057][ T8294] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 613.623184][ T484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.634269][ T484] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 613.649005][ T484] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.658241][ T484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.678454][ T484] usb 6-1: config 0 descriptor?? [ 614.998467][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.009772][ T8318] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 615.029067][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.522345][ T484] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 615.529799][ T484] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 616.065926][ T484] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 616.073499][ T484] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 616.090158][ T484] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 616.097930][ T484] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 616.105645][ T484] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 616.116070][ T484] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 616.128800][ T7840] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 616.738601][ T7840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.758862][ T7840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.791294][ T7840] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 616.806180][ T7840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.827013][ T7840] usb 4-1: config 0 descriptor?? [ 617.532524][ T7840] usb 4-1: can't set config #0, error -71 [ 617.545938][ T7840] usb 4-1: USB disconnect, device number 44 [ 617.576770][ T318] usb 6-1: USB disconnect, device number 38 [ 617.798763][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 617.819584][ T8348] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 618.561613][ T8383] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 619.023319][ T8395] FAULT_INJECTION: forcing a failure. [ 619.023319][ T8395] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 619.038100][ T8395] CPU: 1 PID: 8395 Comm: syz.2.2450 Not tainted syzkaller #0 [ 619.045496][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 619.055554][ T8395] Call Trace: [ 619.058837][ T8395] [ 619.061768][ T8395] __dump_stack+0x21/0x24 [ 619.066102][ T8395] dump_stack_lvl+0x110/0x170 [ 619.071648][ T8395] ? __cfi_dump_stack_lvl+0x8/0x8 [ 619.076677][ T8395] ? selinux_socket_sock_rcv_skb+0x30f/0x880 [ 619.082661][ T8395] dump_stack+0x15/0x24 [ 619.086825][ T8395] should_fail_ex+0x3bf/0x510 [ 619.091500][ T8395] should_fail_alloc_page+0x61/0x90 [ 619.096706][ T8395] prepare_alloc_pages+0x131/0x570 [ 619.101817][ T8395] ? alloc_skb_with_frags+0x590/0x620 [ 619.107190][ T8395] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 619.112389][ T8395] ? skb_set_owner_w+0x25c/0x380 [ 619.117325][ T8395] __alloc_pages+0x15b/0x610 [ 619.121918][ T8395] ? __cfi___alloc_pages+0x10/0x10 [ 619.127034][ T8395] ? __kasan_check_write+0x14/0x20 [ 619.132148][ T8395] ? sock_def_readable+0x1c8/0x320 [ 619.137261][ T8395] ? __kasan_check_write+0x14/0x20 [ 619.142383][ T8395] ? __cfi_sock_def_readable+0x10/0x10 [ 619.147847][ T8395] __folio_alloc+0x12/0x40 [ 619.152264][ T8395] wp_page_copy+0x258/0x1490 [ 619.156872][ T8395] ? fault_dirty_shared_page+0x310/0x310 [ 619.162505][ T8395] ? vm_normal_page+0x1eb/0x200 [ 619.167366][ T8395] do_wp_page+0x9b5/0xf70 [ 619.171702][ T8395] handle_mm_fault+0x114f/0x26b0 [ 619.176911][ T8395] ? __cfi_handle_mm_fault+0x10/0x10 [ 619.182203][ T8395] ? down_read_trylock+0x27f/0x660 [ 619.187349][ T8395] ? __sys_sendmsg+0x290/0x290 [ 619.192127][ T8395] ? lock_mm_and_find_vma+0x9e/0x320 [ 619.197420][ T8395] ? do_user_addr_fault+0x2eb/0x1030 [ 619.202726][ T8395] do_user_addr_fault+0x61e/0x1030 [ 619.207855][ T8395] exc_page_fault+0x51/0xb0 [ 619.212371][ T8395] asm_exc_page_fault+0x27/0x30 [ 619.217234][ T8395] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 619.222989][ T8395] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 619.242956][ T8395] RSP: 0018:ffffc90006a97c98 EFLAGS: 00050293 [ 619.249038][ T8395] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000200000001c38 [ 619.257281][ T8395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 619.265260][ T8395] RBP: ffffc90006a97ec8 R08: ffff8881481f0a83 R09: 1ffff1102903e150 [ 619.273499][ T8395] R10: dffffc0000000000 R11: ffffed102903e151 R12: 0000000000000000 [ 619.281485][ T8395] R13: 1ffff92000d52fa0 R14: 0000000000040840 R15: 0000200000001c00 [ 619.289472][ T8395] ? __sys_sendmmsg+0x2ef/0x4e0 [ 619.294357][ T8395] ? __cfi___sys_sendmmsg+0x10/0x10 [ 619.299574][ T8395] ? __cfi_ksys_write+0x10/0x10 [ 619.304441][ T8395] __x64_sys_sendmmsg+0xa0/0xb0 [ 619.309304][ T8395] x64_sys_call+0x3f5/0x9a0 [ 619.313820][ T8395] do_syscall_64+0x4c/0xa0 [ 619.318245][ T8395] ? clear_bhb_loop+0x30/0x80 [ 619.322924][ T8395] ? clear_bhb_loop+0x30/0x80 [ 619.327603][ T8395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.333508][ T8395] RIP: 0033:0x7feb2799de99 [ 619.337927][ T8395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.357570][ T8395] RSP: 002b:00007feb28787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 619.365997][ T8395] RAX: ffffffffffffffda RBX: 00007feb27c25fa0 RCX: 00007feb2799de99 [ 619.373986][ T8395] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 619.381967][ T8395] RBP: 00007feb28787090 R08: 0000000000000000 R09: 0000000000000000 [ 619.389943][ T8395] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 619.397915][ T8395] R13: 00007feb27c26038 R14: 00007feb27c25fa0 R15: 00007ffe80f21618 [ 619.405891][ T8395] [ 620.424156][ T323] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 620.616493][ T323] usb 4-1: Using ep0 maxpacket: 8 [ 620.623034][ T323] usb 4-1: unable to get BOS descriptor or descriptor too short [ 620.638362][ T323] usb 4-1: config 238 has an invalid descriptor of length 0, skipping remainder of the config [ 620.659029][ T323] usb 4-1: config 238 has 0 interfaces, different from the descriptor's value: 3 [ 620.669600][ T8417] FAULT_INJECTION: forcing a failure. [ 620.669600][ T8417] name failslab, interval 1, probability 0, space 0, times 0 [ 620.694201][ T323] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 620.711329][ T323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.720610][ T8417] CPU: 0 PID: 8417 Comm: syz.2.2453 Not tainted syzkaller #0 [ 620.728003][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 620.738313][ T8417] Call Trace: [ 620.741582][ T8417] [ 620.744499][ T8417] __dump_stack+0x21/0x24 [ 620.748821][ T8417] dump_stack_lvl+0x110/0x170 [ 620.753482][ T8417] ? __cfi_dump_stack_lvl+0x8/0x8 [ 620.758519][ T8417] ? stack_trace_save+0xa6/0xf0 [ 620.763356][ T8417] dump_stack+0x15/0x24 [ 620.767501][ T8417] should_fail_ex+0x3bf/0x510 [ 620.772163][ T8417] __should_failslab+0xac/0xf0 [ 620.776919][ T8417] should_failslab+0x9/0x20 [ 620.781408][ T8417] __kmem_cache_alloc_node+0x3d/0x2d0 [ 620.786768][ T8417] ? bpf_test_init+0xa7/0x140 [ 620.791438][ T8417] ? avc_has_perm_noaudit+0x390/0x490 [ 620.796797][ T8417] ? bpf_test_init+0xa7/0x140 [ 620.801470][ T8417] __kmalloc+0xa4/0x1e0 [ 620.805634][ T8417] bpf_test_init+0xa7/0x140 [ 620.810142][ T8417] bpf_prog_test_run_xdp+0x488/0xf80 [ 620.815419][ T8417] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 620.821215][ T8417] ? __kasan_check_write+0x14/0x20 [ 620.826309][ T8417] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 620.832103][ T8417] bpf_prog_test_run+0x3b4/0x5c0 [ 620.837028][ T8417] ? bpf_prog_query+0x270/0x270 [ 620.841861][ T8417] ? selinux_bpf+0xce/0xf0 [ 620.846267][ T8417] ? security_bpf+0x93/0xb0 [ 620.850779][ T8417] __sys_bpf+0x5ee/0x850 [ 620.855005][ T8417] ? bpf_link_show_fdinfo+0x330/0x330 [ 620.860366][ T8417] ? __cfi_ksys_write+0x10/0x10 [ 620.865219][ T8417] ? debug_smp_processor_id+0x17/0x20 [ 620.870576][ T8417] __x64_sys_bpf+0x7c/0x90 [ 620.874975][ T8417] x64_sys_call+0x488/0x9a0 [ 620.879464][ T8417] do_syscall_64+0x4c/0xa0 [ 620.883867][ T8417] ? clear_bhb_loop+0x30/0x80 [ 620.888532][ T8417] ? clear_bhb_loop+0x30/0x80 [ 620.893211][ T8417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.899091][ T8417] RIP: 0033:0x7feb2799de99 [ 620.903496][ T8417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.923090][ T8417] RSP: 002b:00007feb263f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.931490][ T8417] RAX: ffffffffffffffda RBX: 00007feb27c26090 RCX: 00007feb2799de99 [ 620.939451][ T8417] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 620.947409][ T8417] RBP: 00007feb263f7090 R08: 0000000000000000 R09: 0000000000000000 [ 620.955451][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.963407][ T8417] R13: 00007feb27c26128 R14: 00007feb27c26090 R15: 00007ffe80f21618 [ 620.971365][ T8417] [ 620.984205][ T323] usb 4-1: Product: syz [ 620.993052][ T323] usb 4-1: Manufacturer: syz [ 621.003365][ T323] usb 4-1: SerialNumber: syz [ 621.231759][ T323] usb 4-1: USB disconnect, device number 45 [ 621.481709][ T8432] xt_hashlimit: size too large, truncated to 1048576 [ 621.504105][ T8429] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2460'. [ 621.513210][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2460'. [ 621.522593][ T8429] device vlan0 entered promiscuous mode [ 622.059126][ T323] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 622.396208][ T323] usb 5-1: config 7 has an invalid interface number: 247 but max is 0 [ 622.405595][ T323] usb 5-1: config 7 has no interface number 0 [ 622.411845][ T323] usb 5-1: config 7 interface 247 has no altsetting 0 [ 622.426351][ T323] usb 5-1: New USB device found, idVendor=0bc2, idProduct=331a, bcdDevice=10.0a [ 622.443117][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.721555][ T323] usb 5-1: Product: syz [ 622.725820][ T323] usb 5-1: Manufacturer: syz [ 622.730430][ T323] usb 5-1: SerialNumber: syz [ 623.022286][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2463'. [ 623.108744][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.182280][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.249915][ T323] usb-storage 5-1:7.247: USB Mass Storage device detected [ 623.278812][ T323] usb-storage 5-1:7.247: Quirks match for vid 0bc2 pid 331a: 10000000 [ 623.387864][ T323] usb 5-1: USB disconnect, device number 51 [ 623.752105][ T8485] xt_hashlimit: size too large, truncated to 1048576 [ 623.851030][ T8489] xt_CT: No such helper "snmp_trap" [ 623.999938][ T8492] syz.1.2476[8492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 624.000015][ T8492] syz.1.2476[8492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 624.011612][ T323] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 624.414190][ T8504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2479'. [ 624.453028][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.465139][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.479319][ T323] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 624.489532][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.604058][ T323] usb 3-1: config 0 descriptor?? [ 624.641425][ T8506] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 624.667357][ T647] Bluetooth: hci0: Frame reassembly failed (-84) [ 625.019777][ T484] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 625.045693][ T323] usbhid 3-1:0.0: can't add hid device: -71 [ 625.094037][ T323] usbhid: probe of 3-1:0.0 failed with error -71 [ 625.120838][ T323] usb 3-1: USB disconnect, device number 47 [ 625.129616][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 625.129633][ T28] audit: type=1400 audit(1785174999.715:711): avc: denied { setopt } for pid=8523 comm="syz.5.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 625.168806][ T28] audit: type=1400 audit(1785174999.743:712): avc: denied { ioctl } for pid=8523 comm="syz.5.2486" path="socket:[46555]" dev="sockfs" ino=46555 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 625.198594][ T484] usb 4-1: device descriptor read/64, error -71 [ 625.425581][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2487'. [ 625.434490][ T8526] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 625.489349][ T484] usb 4-1: device descriptor read/64, error -71 [ 625.580127][ T8533] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2488'. [ 625.611446][ T8533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 625.618951][ T8533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 625.661171][ T8533] device ip6gre1 left promiscuous mode [ 625.732337][ T8535] xt_hashlimit: size too large, truncated to 1048576 [ 625.884735][ T484] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 625.960773][ T8540] FAULT_INJECTION: forcing a failure. [ 625.960773][ T8540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 625.974610][ T8540] CPU: 1 PID: 8540 Comm: syz.5.2491 Not tainted syzkaller #0 [ 625.982002][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 625.992078][ T8540] Call Trace: [ 625.995406][ T8540] [ 625.998340][ T8540] __dump_stack+0x21/0x24 [ 626.002687][ T8540] dump_stack_lvl+0x110/0x170 [ 626.007372][ T8540] ? __cfi_dump_stack_lvl+0x8/0x8 [ 626.012406][ T8540] ? selinux_socket_sock_rcv_skb+0x30f/0x880 [ 626.018400][ T8540] dump_stack+0x15/0x24 [ 626.022564][ T8540] should_fail_ex+0x3bf/0x510 [ 626.027251][ T8540] should_fail_alloc_page+0x61/0x90 [ 626.032465][ T8540] prepare_alloc_pages+0x131/0x570 [ 626.037597][ T8540] ? alloc_skb_with_frags+0x590/0x620 [ 626.042990][ T8540] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 626.048210][ T8540] ? skb_set_owner_w+0x25c/0x380 [ 626.053175][ T8540] __alloc_pages+0x15b/0x610 [ 626.057794][ T8540] ? __cfi___alloc_pages+0x10/0x10 [ 626.062928][ T8540] ? __kasan_check_write+0x14/0x20 [ 626.068038][ T8540] ? sock_def_readable+0x1c8/0x320 [ 626.073178][ T8540] ? __kasan_check_write+0x14/0x20 [ 626.078297][ T8540] ? __cfi_sock_def_readable+0x10/0x10 [ 626.083745][ T8540] __folio_alloc+0x12/0x40 [ 626.088174][ T8540] wp_page_copy+0x258/0x1490 [ 626.092758][ T8540] ? fault_dirty_shared_page+0x310/0x310 [ 626.098373][ T8540] ? vm_normal_page+0x1eb/0x200 [ 626.103222][ T8540] do_wp_page+0x9b5/0xf70 [ 626.107535][ T8540] handle_mm_fault+0x114f/0x26b0 [ 626.112470][ T8540] ? __cfi_handle_mm_fault+0x10/0x10 [ 626.117784][ T8540] ? down_read_trylock+0x27f/0x660 [ 626.122895][ T8540] ? __sys_sendmsg+0x290/0x290 [ 626.127651][ T8540] ? lock_mm_and_find_vma+0x9e/0x320 [ 626.132943][ T8540] ? do_user_addr_fault+0x2eb/0x1030 [ 626.138412][ T8540] do_user_addr_fault+0x61e/0x1030 [ 626.141245][ T484] usb 4-1: device descriptor read/64, error -71 [ 626.143540][ T8540] exc_page_fault+0x51/0xb0 [ 626.149851][ T323] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 626.154240][ T8540] asm_exc_page_fault+0x27/0x30 [ 626.154271][ T8540] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 626.154294][ T8540] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 626.191947][ T8540] RSP: 0018:ffffc90000c07c98 EFLAGS: 00050293 [ 626.198007][ T8540] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000200000001c38 [ 626.205965][ T8540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.213953][ T8540] RBP: ffffc90000c07ec8 R08: ffff88811e54ca83 R09: 1ffff11023ca9950 [ 626.221949][ T8540] R10: dffffc0000000000 R11: ffffed1023ca9951 R12: 0000000000000000 [ 626.229914][ T8540] R13: 1ffff92000180fa0 R14: 0000000000040840 R15: 0000200000001c00 [ 626.237903][ T8540] ? __sys_sendmmsg+0x2ef/0x4e0 [ 626.242743][ T8540] ? __cfi___sys_sendmmsg+0x10/0x10 [ 626.247922][ T8540] ? __cfi_ksys_write+0x10/0x10 [ 626.252786][ T8540] __x64_sys_sendmmsg+0xa0/0xb0 [ 626.257626][ T8540] x64_sys_call+0x3f5/0x9a0 [ 626.262114][ T8540] do_syscall_64+0x4c/0xa0 [ 626.266514][ T8540] ? clear_bhb_loop+0x30/0x80 [ 626.271179][ T8540] ? clear_bhb_loop+0x30/0x80 [ 626.275852][ T8540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.281747][ T8540] RIP: 0033:0x7f0a20b9de99 [ 626.286145][ T8540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.305738][ T8540] RSP: 002b:00007f0a21b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 626.314146][ T8540] RAX: ffffffffffffffda RBX: 00007f0a20e25fa0 RCX: 00007f0a20b9de99 [ 626.322104][ T8540] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 626.330064][ T8540] RBP: 00007f0a21b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 626.338030][ T8540] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 626.346002][ T8540] R13: 00007f0a20e26038 R14: 00007f0a20e25fa0 R15: 00007fff59efd4f8 [ 626.353974][ T8540] [ 626.396648][ T8543] FAULT_INJECTION: forcing a failure. [ 626.396648][ T8543] name failslab, interval 1, probability 0, space 0, times 0 [ 626.409753][ T8543] CPU: 0 PID: 8543 Comm: syz.5.2493 Not tainted syzkaller #0 [ 626.417157][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 626.427223][ T8543] Call Trace: [ 626.430520][ T8543] [ 626.433457][ T8543] __dump_stack+0x21/0x24 [ 626.437810][ T8543] dump_stack_lvl+0x110/0x170 [ 626.442505][ T8543] ? __cfi_dump_stack_lvl+0x8/0x8 [ 626.447559][ T8543] dump_stack+0x15/0x24 [ 626.451736][ T8543] should_fail_ex+0x3bf/0x510 [ 626.456429][ T8543] ? security_file_alloc+0x33/0x130 [ 626.461659][ T8543] __should_failslab+0xac/0xf0 [ 626.466447][ T8543] should_failslab+0x9/0x20 [ 626.470967][ T8543] kmem_cache_alloc+0x3b/0x320 [ 626.475744][ T8543] ? __alloc_file+0x28/0x2a0 [ 626.480349][ T8543] security_file_alloc+0x33/0x130 [ 626.485382][ T8543] __alloc_file+0xb5/0x2a0 [ 626.489804][ T8543] alloc_empty_file+0x97/0x180 [ 626.494579][ T8543] path_openat+0xf4/0x2f30 [ 626.499015][ T8543] ? kasan_set_track+0x60/0x70 [ 626.503795][ T8543] ? kasan_set_track+0x4b/0x70 [ 626.508559][ T8543] ? __kasan_slab_alloc+0x72/0x80 [ 626.513572][ T8543] ? slab_post_alloc_hook+0x4f/0x2d0 [ 626.518845][ T8543] ? kmem_cache_alloc+0x166/0x320 [ 626.523858][ T8543] ? getname_flags+0xba/0x510 [ 626.528521][ T8543] ? getname+0x19/0x20 [ 626.532573][ T8543] ? do_sys_openat2+0xeb/0x820 [ 626.537326][ T8543] ? __x64_sys_openat+0x136/0x160 [ 626.542367][ T8543] ? x64_sys_call+0x783/0x9a0 [ 626.547032][ T8543] ? do_syscall_64+0x4c/0xa0 [ 626.551609][ T8543] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.557672][ T8543] ? do_filp_open+0x420/0x420 [ 626.562339][ T8543] do_filp_open+0x1ee/0x420 [ 626.566828][ T8543] ? __cfi_do_filp_open+0x10/0x10 [ 626.571843][ T8543] ? alloc_fd+0x4c1/0x570 [ 626.576159][ T8543] do_sys_openat2+0x15e/0x820 [ 626.580825][ T8543] ? __kasan_check_write+0x14/0x20 [ 626.585922][ T8543] ? do_sys_open+0xe0/0xe0 [ 626.590337][ T8543] ? ksys_write+0x1fa/0x260 [ 626.594932][ T8543] ? __cfi_ksys_write+0x10/0x10 [ 626.599765][ T8543] __x64_sys_openat+0x136/0x160 [ 626.604603][ T8543] x64_sys_call+0x783/0x9a0 [ 626.609093][ T8543] do_syscall_64+0x4c/0xa0 [ 626.613496][ T8543] ? clear_bhb_loop+0x30/0x80 [ 626.618159][ T8543] ? clear_bhb_loop+0x30/0x80 [ 626.622816][ T8543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.628701][ T8543] RIP: 0033:0x7f0a20b9de99 [ 626.633103][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.652693][ T8543] RSP: 002b:00007f0a21b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 626.661093][ T8543] RAX: ffffffffffffffda RBX: 00007f0a20e25fa0 RCX: 00007f0a20b9de99 [ 626.669050][ T8543] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: ffffffffffffff9c [ 626.677007][ T8543] RBP: 00007f0a21b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 626.684962][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.692916][ T8543] R13: 00007f0a20e26038 R14: 00007f0a20e25fa0 R15: 00007fff59efd4f8 [ 626.700877][ T8543] [ 627.109774][ T8553] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2495'. [ 627.186973][ T8510] Bluetooth: hci0: command 0x1003 tx timeout [ 627.187082][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 627.381864][ T484] usb 4-1: device descriptor read/64, error -71 [ 627.392846][ T323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.408763][ T323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.418835][ T323] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 627.446583][ T8559] overlayfs: unrecognized mount option "smackfstransmute=wfdno" or missing value [ 627.473531][ T323] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.494015][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.509086][ T484] usb usb4-port1: attempt power cycle [ 627.523755][ T323] usb 5-1: config 0 descriptor?? [ 627.609730][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2499'. [ 627.618734][ T8561] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 627.957941][ T484] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 627.969656][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.088775][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.167687][ T484] usb 4-1: device descriptor read/8, error -71 [ 628.343319][ T484] usb 4-1: device descriptor read/8, error -71 [ 628.397521][ T323] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 628.484083][ T323] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 628.585362][ T323] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 628.593307][ T323] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 628.601365][ T323] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 630.287768][ T323] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 630.821688][ T8600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2505'. [ 630.831380][ T8601] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 630.840434][ T8601] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 630.859028][ T8601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 630.866550][ T8601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 630.962902][ T323] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 630.972975][ T323] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 631.006276][ T323] usb 5-1: USB disconnect, device number 52 [ 631.089676][ T8602] fido_id[8602]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 631.268292][ T8612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2509'. [ 631.477581][ T6807] Bluetooth: hci0: Frame reassembly failed (-84) [ 631.598318][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2514'. [ 631.607292][ T8618] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 631.933509][ T323] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 632.104465][ T323] usb 5-1: device descriptor read/64, error -71 [ 632.313572][ T8634] xt_hashlimit: size too large, truncated to 1048576 [ 632.392616][ T323] usb 5-1: device descriptor read/64, error -71 [ 632.461478][ T1253] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 632.671471][ T1253] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.682536][ T1253] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.692677][ T1253] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 632.706146][ T1253] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 632.718237][ T1253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.729256][ T1253] usb 6-1: config 0 descriptor?? [ 632.777252][ T484] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 632.784921][ T323] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 632.958956][ T323] usb 5-1: device descriptor read/64, error -71 [ 632.992039][ T484] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 633.003036][ T484] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 633.015477][ T484] usb 4-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice= 0.40 [ 633.024583][ T484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.032610][ T484] usb 4-1: Product: syz [ 633.036839][ T484] usb 4-1: Manufacturer: syz [ 633.041465][ T484] usb 4-1: SerialNumber: syz [ 633.168037][ T8632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.176653][ T8632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.186094][ T1253] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 633.193598][ T1253] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 633.201299][ T1253] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 633.208910][ T1253] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 633.216485][ T1253] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 633.223918][ T1253] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 633.231779][ T1253] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 633.241099][ T1253] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 633.279498][ T323] usb 5-1: device descriptor read/64, error -71 [ 633.398722][ T484] usb 4-1: Can't get UAC3 power state for id 10 [ 633.405291][ T318] usb 6-1: USB disconnect, device number 39 [ 633.407849][ T484] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 633.418922][ T323] usb usb5-port1: attempt power cycle [ 633.426353][ T484] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 633.437410][ T484] usb 4-1: USB disconnect, device number 50 [ 633.621449][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 634.400008][ T8656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2526'. [ 634.424275][ T8653] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2525'. [ 634.436920][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 634.444440][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 634.457293][ T8653] device vlan2 left promiscuous mode [ 634.462602][ T8653] device bridge0 left promiscuous mode [ 634.487095][ T323] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 634.520164][ T323] usb 5-1: device descriptor read/8, error -71 [ 634.787021][ T323] usb 5-1: device descriptor read/8, error -71 [ 634.849405][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2528'. [ 634.864948][ T8662] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 634.889368][ T8681] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 635.101956][ T8658] input: syz0 as /devices/virtual/input/input16 [ 635.241121][ T8687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2538'. [ 636.392408][ T8696] overlayfs: unrecognized mount option "smackfstransmute=wfdno" or missing value [ 636.460524][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 636.645043][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2549'. [ 636.664807][ T8717] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 636.870144][ T318] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 638.089531][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2553'. [ 638.620993][ T8744] overlayfs: unrecognized mount option "smackfstransmute=wfdno" or missing value [ 638.665356][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 638.669117][ T318] usb 6-1: device descriptor read/64, error -71 [ 638.671401][ T8510] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 638.964526][ T318] usb 6-1: device descriptor read/64, error -71 [ 638.985847][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'. [ 639.055034][ T8757] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 641.218777][ T318] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 641.640223][ T7604] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 641.736900][ T8787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2570'. [ 641.849252][ T318] usb 6-1: device descriptor read/64, error -71 [ 642.081273][ T7604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.094639][ T7604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.105428][ T7604] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 642.120179][ T7604] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 642.137120][ T7604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.201256][ T7604] usb 5-1: config 0 descriptor?? [ 642.551422][ T7604] usbhid 5-1:0.0: can't add hid device: -71 [ 642.641692][ T7604] usbhid: probe of 5-1:0.0 failed with error -71 [ 642.702574][ T7604] usb 5-1: USB disconnect, device number 57 [ 642.725255][ T8801] xt_hashlimit: size too large, truncated to 1048576 [ 643.037388][ T308] tipc: Left network mode [ 643.206037][ T28] audit: type=1400 audit(1785175016.625:713): avc: denied { mounton } for pid=8825 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 643.246109][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.253201][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.260790][ T8825] device bridge_slave_0 entered promiscuous mode [ 643.267643][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.274781][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.282548][ T8825] device bridge_slave_1 entered promiscuous mode [ 643.835515][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.842646][ T8825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.849960][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.856996][ T8825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.866680][ T318] usb 6-1: device descriptor read/64, error -71 [ 643.975364][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 643.984079][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 643.993385][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 644.001536][ T318] usb usb6-port1: attempt power cycle [ 644.007747][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 644.016048][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 644.264874][ T8825] device veth0_vlan entered promiscuous mode [ 644.311284][ T8825] device veth1_macvtap entered promiscuous mode [ 644.889899][ T28] audit: type=1400 audit(1785175018.207:714): avc: denied { mount } for pid=8825 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 644.921827][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 644.922845][ T28] audit: type=1400 audit(1785175018.235:715): avc: denied { mounton } for pid=8825 comm="syz-executor" path="/root/syzkaller.ifUJyn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 644.930842][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 644.967518][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 644.976775][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 644.985166][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 644.994615][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 645.002780][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 645.044443][ T6807] Bluetooth: hci0: Frame reassembly failed (-84) [ 645.152295][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 645.161255][ T8846] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 645.184540][ T308] device bridge_slave_1 left promiscuous mode [ 645.191055][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.199094][ T308] device bridge_slave_0 left promiscuous mode [ 645.206091][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.213964][ T308] device veth1_macvtap left promiscuous mode [ 645.220048][ T308] device veth0_vlan left promiscuous mode [ 645.354845][ T318] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 645.399775][ T318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.436406][ T318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.446641][ T318] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 645.459671][ T318] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 645.468998][ T318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.478666][ T8858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2595'. [ 645.494911][ T318] usb 6-1: config 0 descriptor?? [ 645.929674][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.938525][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.948073][ T318] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 645.955650][ T318] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 645.963126][ T318] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 645.970743][ T318] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 645.978231][ T318] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 645.985720][ T318] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 645.993317][ T318] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 646.001833][ T318] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 646.141738][ T8872] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 646.165993][ T318] usb 6-1: USB disconnect, device number 42 [ 646.444776][ T8842] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 646.734952][ T8842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.805215][ T8842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.851675][ T8842] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 646.903831][ T8842] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.913237][ T8842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.926489][ T8842] usb 3-1: config 0 descriptor?? [ 647.299589][ T8510] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 648.611218][ T8907] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2609'. [ 648.681035][ T8842] usbhid 3-1:0.0: can't add hid device: -71 [ 648.687016][ T8842] usbhid: probe of 3-1:0.0 failed with error -71 [ 648.691482][ T8906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2612'. [ 648.694560][ T8842] usb 3-1: USB disconnect, device number 48 [ 649.050174][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2608'. [ 649.066525][ T8888] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 649.156989][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 649.215119][ T28] audit: type=1326 audit(1785175022.259:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.2.2617" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2799de99 code=0x7ffc0000 [ 649.261339][ T28] audit: type=1326 audit(1785175022.259:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.2.2617" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2799de99 code=0x7ffc0000 [ 649.312396][ T28] audit: type=1326 audit(1785175022.259:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.2.2617" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb2799de99 code=0x7ffc0000 [ 649.313412][ T8932] loop6: detected capacity change from 0 to 512 [ 649.363310][ T28] audit: type=1326 audit(1785175022.259:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.2.2617" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2799de99 code=0x7ffc0000 [ 649.414893][ T28] audit: type=1326 audit(1785175022.259:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.2.2617" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2799de99 code=0x7ffc0000 [ 649.445550][ T8932] EXT4-fs (loop6): Test dummy encryption mode enabled [ 649.468045][ T28] audit: type=1326 audit(1785175022.287:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.2.2617" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7feb2799de99 code=0x7ffc0000 [ 649.469226][ T8932] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 649.518581][ T28] audit: type=1326 audit(1785175022.287:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.2.2617" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2799de99 code=0x7ffc0000 [ 649.569497][ T28] audit: type=1326 audit(1785175022.287:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.2.2617" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2799de99 code=0x7ffc0000 [ 649.578498][ T8932] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 649.619300][ T28] audit: type=1326 audit(1785175022.287:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.2.2617" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7feb2799de99 code=0x7ffc0000 [ 649.662258][ T8932] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 649.667967][ T28] audit: type=1326 audit(1785175022.287:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.2.2617" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2799de99 code=0x7ffc0000 [ 649.684724][ T8932] EXT4-fs (loop6): orphan cleanup on readonly fs [ 649.715260][ T8932] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.2614: corrupted xattr entries [ 649.746221][ T8932] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 649.785524][ T8932] EXT4-fs (loop6): 1 orphan inode deleted [ 649.803330][ T8932] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 650.518586][ T8825] EXT4-fs (loop6): unmounting filesystem. [ 650.821783][ T8950] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2626'. [ 651.055068][ T8958] syz.2.2630[8958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 651.055142][ T8958] syz.2.2630[8958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 651.418668][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 651.418749][ T8510] Bluetooth: hci0: command 0x1003 tx timeout [ 651.440193][ T318] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 651.691507][ T318] usb 4-1: Using ep0 maxpacket: 16 [ 651.698239][ T318] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 651.707034][ T318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.717435][ T318] usb 4-1: config 0 has no interface number 0 [ 651.723834][ T318] usb 4-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 651.736925][ T318] usb 4-1: config 0 interface 41 has no altsetting 0 [ 651.744658][ T318] usb 4-1: New USB device found, idVendor=0fe6, idProduct=a200, bcdDevice=d1.9a [ 651.754186][ T318] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 651.789221][ T318] usb 4-1: Product: syz [ 651.801683][ T318] usb 4-1: SerialNumber: syz [ 651.816603][ T318] usb 4-1: config 0 descriptor?? [ 651.938518][ T8979] loop6: detected capacity change from 0 to 40427 [ 651.955617][ T8979] F2FS-fs (loop6): invalid crc value [ 651.969071][ T8979] F2FS-fs (loop6): Found nat_bits in checkpoint [ 652.030761][ T8979] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 652.045611][ T318] usb 4-1: USB disconnect, device number 51 [ 652.570935][ T8825] syz-executor: attempt to access beyond end of device [ 652.570935][ T8825] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 652.741520][ T9014] overlayfs: unrecognized mount option "smackfstransmute=wfdno" or missing value [ 653.345880][ T9039] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2645'. [ 653.698910][ T9054] overlayfs: unrecognized mount option "smackfstransmute=wfdno" or missing value [ 654.498709][ T9069] syz.1.2667[9069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 654.498787][ T9069] syz.1.2667[9069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 654.673818][ T9079] overlayfs: unrecognized mount option "smackfstransmute=wfdno" or missing value [ 655.115499][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2675'. [ 655.129077][ T9085] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 655.184864][ T9089] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 656.192142][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 656.192158][ T28] audit: type=1400 audit(1785175028.790:754): avc: denied { setopt } for pid=9103 comm="syz.2.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 656.301518][ T9108] loop6: detected capacity change from 0 to 512 [ 656.399554][ T9108] EXT4-fs warning (device loop6): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 657.015471][ T9108] EXT4-fs (loop6): mount failed [ 657.458695][ T9129] loop6: detected capacity change from 0 to 1024 [ 657.474214][ T9129] EXT4-fs: Ignoring removed nobh option [ 657.481765][ T9129] ext4: Unknown parameter 'smackfsfloor' [ 657.683399][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2687'. [ 657.696763][ T9129] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 658.555237][ T9158] netlink: 'syz.5.2697': attribute type 1 has an invalid length. [ 659.022962][ T9168] netlink: 'syz.6.2700': attribute type 27 has an invalid length. [ 659.041049][ T9168] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 659.048636][ T9168] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 659.305679][ T9169] tipc: Enabling of bearer rejected, failed to enable media [ 659.331718][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 659.346656][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 659.355218][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 659.363499][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 659.379432][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 659.388202][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 659.396716][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 659.404979][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 659.414562][ T9172] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2699'. [ 659.563635][ T9185] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 659.603457][ T9188] loop6: detected capacity change from 0 to 512 [ 659.617710][ T9188] EXT4-fs: Ignoring removed mblk_io_submit option [ 659.799561][ T9188] EXT4-fs (loop6): orphan cleanup on readonly fs [ 659.806434][ T9188] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.2705: inode has both inline data and extents flags [ 659.821179][ T9188] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.2705: couldn't read orphan inode 15 (err -117) [ 659.833565][ T9188] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 659.867211][ T8825] EXT4-fs (loop6): unmounting filesystem. [ 660.161624][ T9201] loop6: detected capacity change from 0 to 256 [ 661.110340][ T9201] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 661.212188][ T28] audit: type=1400 audit(1785175033.479:755): avc: denied { setattr } for pid=9219 comm="syz.2.2715" path="socket:[48892]" dev="sockfs" ino=48892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 661.490963][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2716'. [ 661.509829][ T9236] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 662.473371][ T9260] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2724'. [ 663.274270][ T28] audit: type=1400 audit(1785175035.407:756): avc: denied { getopt } for pid=9274 comm="syz.5.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 663.371375][ T7604] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 663.516206][ T9289] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 663.537430][ T9291] overlayfs: unrecognized mount option "smackfstransmute=wfdno" or missing value [ 663.565172][ T7604] usb 4-1: unable to get BOS descriptor or descriptor too short [ 663.574084][ T7604] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 663.588038][ T7604] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 663.597366][ T7604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.605426][ T7604] usb 4-1: Product: syz [ 663.610014][ T7604] usb 4-1: Manufacturer: syz [ 663.614682][ T7604] usb 4-1: SerialNumber: syz [ 664.272291][ T9309] FAULT_INJECTION: forcing a failure. [ 664.272291][ T9309] name failslab, interval 1, probability 0, space 0, times 0 [ 664.444793][ T9309] CPU: 1 PID: 9309 Comm: syz.3.2728 Not tainted syzkaller #0 [ 664.452210][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 664.462268][ T9309] Call Trace: [ 664.465549][ T9309] [ 664.468482][ T9309] __dump_stack+0x21/0x24 [ 664.472817][ T9309] dump_stack_lvl+0x110/0x170 [ 664.477492][ T9309] ? __cfi_dump_stack_lvl+0x8/0x8 [ 664.482565][ T9309] dump_stack+0x15/0x24 [ 664.486722][ T9309] should_fail_ex+0x3bf/0x510 [ 664.491397][ T9309] __should_failslab+0xac/0xf0 [ 664.496164][ T9309] should_failslab+0x9/0x20 [ 664.500665][ T9309] __kmem_cache_alloc_node+0x3d/0x2d0 [ 664.506037][ T9309] ? refill_pi_state_cache+0x8e/0x170 [ 664.511423][ T9309] ? plist_add+0x3e6/0x470 [ 664.515841][ T9309] ? _parse_integer_limit+0x18e/0x1d0 [ 664.521211][ T9309] ? refill_pi_state_cache+0x8e/0x170 [ 664.527013][ T9309] kmalloc_trace+0x29/0xb0 [ 664.531429][ T9309] refill_pi_state_cache+0x8e/0x170 [ 664.536639][ T9309] futex_requeue+0x1e2/0x1330 [ 664.541343][ T9309] ? kstrtouint+0x74/0xe0 [ 664.545675][ T9309] ? kstrtouint_from_user+0x113/0x170 [ 664.551049][ T9309] ? __cfi_futex_requeue+0x10/0x10 [ 664.556163][ T9309] ? __cfi____update_load_sum+0x10/0x10 [ 664.561714][ T9309] ? __this_cpu_preempt_check+0x13/0x20 [ 664.567259][ T9309] ? xfd_validate_state+0x70/0x150 [ 664.572375][ T9309] ? __kasan_check_write+0x14/0x20 [ 664.577486][ T9309] ? __switch_to+0x56f/0x1070 [ 664.582159][ T9309] ? plist_check_list+0x240/0x270 [ 664.587201][ T9309] do_futex+0x25e/0x430 [ 664.591369][ T9309] ? __cfi_do_futex+0x10/0x10 [ 664.596061][ T9309] ? switch_mm_irqs_off+0x730/0x960 [ 664.601270][ T9309] __se_sys_futex+0x136/0x310 [ 664.605956][ T9309] ? __x64_sys_futex+0x100/0x100 [ 664.610899][ T9309] ? __this_cpu_preempt_check+0x13/0x20 [ 664.616444][ T9309] ? xfd_validate_state+0x70/0x150 [ 664.621558][ T9309] __x64_sys_futex+0xe5/0x100 [ 664.626230][ T9309] x64_sys_call+0x7ec/0x9a0 [ 664.630732][ T9309] do_syscall_64+0x4c/0xa0 [ 664.635145][ T9309] ? clear_bhb_loop+0x30/0x80 [ 664.639818][ T9309] ? clear_bhb_loop+0x30/0x80 [ 664.644488][ T9309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.650400][ T9309] RIP: 0033:0x7f72bb59de99 [ 664.654815][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.674423][ T9309] RSP: 002b:00007f72bc4c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 664.682843][ T9309] RAX: ffffffffffffffda RBX: 00007f72bb826180 RCX: 00007f72bb59de99 [ 664.690825][ T9309] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 664.698795][ T9309] RBP: 00007f72bc4c2090 R08: 0000200000048000 R09: 0000000000000001 [ 664.706771][ T9309] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 664.714749][ T9309] R13: 00007f72bb826218 R14: 00007f72bb826180 R15: 00007ffda7f6dc98 [ 664.722729][ T9309] [ 665.159559][ T9315] syz.1.2741[9315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.159631][ T9315] syz.1.2741[9315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.255224][ T9321] FAULT_INJECTION: forcing a failure. [ 665.255224][ T9321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.279871][ T9321] CPU: 0 PID: 9321 Comm: syz.6.2742 Not tainted syzkaller #0 [ 665.287262][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 665.297323][ T9321] Call Trace: [ 665.300605][ T9321] [ 665.303532][ T9321] __dump_stack+0x21/0x24 [ 665.307865][ T9321] dump_stack_lvl+0x110/0x170 [ 665.312541][ T9321] ? __cfi_dump_stack_lvl+0x8/0x8 [ 665.317565][ T9321] ? _parse_integer+0x2a/0x40 [ 665.322240][ T9321] dump_stack+0x15/0x24 [ 665.326394][ T9321] should_fail_ex+0x3bf/0x510 [ 665.331070][ T9321] should_fail+0xb/0x10 [ 665.335225][ T9321] should_fail_usercopy+0x1a/0x20 [ 665.340253][ T9321] _copy_from_user+0x1e/0xc0 [ 665.344852][ T9321] ___sys_sendmsg+0x1c3/0x360 [ 665.349531][ T9321] ? __sys_sendmsg+0x290/0x290 [ 665.354295][ T9321] ? __kasan_check_write+0x14/0x20 [ 665.359402][ T9321] ? proc_fail_nth_write+0x180/0x200 [ 665.364689][ T9321] ? vfs_write+0xa51/0xd00 [ 665.369126][ T9321] ? __fdget+0x19c/0x220 [ 665.373387][ T9321] __x64_sys_sendmsg+0x20d/0x2e0 [ 665.378345][ T9321] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 665.383823][ T9321] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 665.389913][ T9321] x64_sys_call+0x171/0x9a0 [ 665.394427][ T9321] do_syscall_64+0x4c/0xa0 [ 665.398856][ T9321] ? clear_bhb_loop+0x30/0x80 [ 665.403543][ T9321] ? clear_bhb_loop+0x30/0x80 [ 665.408231][ T9321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.414147][ T9321] RIP: 0033:0x7fe005d9de99 [ 665.418566][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.438179][ T9321] RSP: 002b:00007fe006cd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.446612][ T9321] RAX: ffffffffffffffda RBX: 00007fe006025fa0 RCX: 00007fe005d9de99 [ 665.454596][ T9321] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 665.462578][ T9321] RBP: 00007fe006cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 665.470571][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.478553][ T9321] R13: 00007fe006026038 R14: 00007fe006025fa0 R15: 00007ffd1ff3c228 [ 665.486544][ T9321] [ 665.725670][ T9326] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2739'. [ 665.743336][ T9328] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 665.768088][ T9330] overlayfs: unrecognized mount option "smackfstransmute=wfdno" or missing value [ 665.946552][ T9337] loop6: detected capacity change from 0 to 256 [ 665.958678][ T9337] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 666.482244][ T7604] usb 4-1: USB disconnect, device number 52 [ 666.609511][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2749'. [ 666.630357][ T9340] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 666.972966][ T9360] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 667.009356][ T9370] overlayfs: unrecognized mount option "smackfstransmute=wfdno" or missing value [ 667.269732][ T10] device offline error, dev sda, sector 1229110 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 667.280376][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2037 starting block 153638) [ 667.292188][ T10] Buffer I/O error on device sda1, logical block 153600 [ 667.299251][ T10] Buffer I/O error on device sda1, logical block 153601 [ 667.306278][ T10] Buffer I/O error on device sda1, logical block 153602 [ 667.313292][ T10] Buffer I/O error on device sda1, logical block 153603 [ 667.320291][ T10] Buffer I/O error on device sda1, logical block 153604 [ 667.322483][ T28] audit: type=1400 audit(1785175039.197:757): avc: denied { read write } for pid=9384 comm="syz.5.2764" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 667.327352][ T10] Buffer I/O error on device sda1, logical block 153605 [ 667.352562][ T28] audit: type=1400 audit(1785175039.197:758): avc: denied { open } for pid=9384 comm="syz.5.2764" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 667.381191][ T28] audit: type=1400 audit(1785175039.197:759): avc: denied { ioctl } for pid=9384 comm="syz.5.2764" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 667.406353][ T10] Buffer I/O error on device sda1, logical block 153606 [ 667.413631][ T10] device offline error, dev sda, sector 1143094 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 667.440794][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2034 starting block 142886) [ 667.452425][ T10] Buffer I/O error on device sda1, logical block 142848 [ 667.459536][ T10] Buffer I/O error on device sda1, logical block 142849 [ 667.466482][ T10] Buffer I/O error on device sda1, logical block 142850 [ 667.475517][ T10] device offline error, dev sda, sector 1245494 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 667.486079][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 155686) [ 667.497871][ T10] device offline error, dev sda, sector 1245998 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 667.508545][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 155749) [ 667.520146][ T10] device offline error, dev sda, sector 1253670 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 667.530690][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 156708) [ 667.542284][ T10] device offline error, dev sda, sector 1585438 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 667.552817][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 198179) [ 667.564474][ T10] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 667.575020][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 143398) [ 667.586861][ T10] device offline error, dev sda, sector 1147694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 667.597420][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 143461) [ 667.609037][ T10] device offline error, dev sda, sector 1155366 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 667.619586][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144420) [ 667.631214][ T10] device offline error, dev sda, sector 1159302 op 0x1:(WRITE) flags 0x0 phys_seg 17 prio class 2 [ 667.641861][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144912) [ 667.730888][ T66] Aborting journal on device sda1-8. [ 667.751028][ T42] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 667.760435][ T66] JBD2: I/O error when updating journal superblock for sda1-8. [ 667.879183][ T9373] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2761: Detected aborted journal [ 667.890507][ T61] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 667.891673][ T9359] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.2756: Detected aborted journal [ 667.910151][ T9373] EXT4-fs (sda1): I/O error while writing superblock [ 667.919319][ T9373] EXT4-fs (sda1): Remounting filesystem read-only [ 667.926009][ T9373] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2761: Detected aborted journal [ 667.928474][ T61] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 667.945122][ T9359] EXT4-fs (sda1): I/O error while writing superblock [ 667.945489][ T9373] EXT4-fs (sda1): previous I/O error to superblock detected [ 667.955114][ T9359] EXT4-fs (sda1): Remounting filesystem read-only [ 667.959225][ T9373] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 667.968524][ T9359] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.2756: Detected aborted journal [ 667.973854][ T9373] EXT4-fs (sda1): I/O error while writing superblock [ 667.985054][ T9359] EXT4-fs (sda1): Remounting filesystem read-only [ 667.991663][ T9373] EXT4-fs (sda1): Remounting filesystem read-only [ 668.007062][ T9385] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 668.019816][ T484] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 668.058646][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 668.074973][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 668.081532][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 668.093384][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 668.100236][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 668.151606][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 668.175441][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 668.214185][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 668.438468][ T9395] loop6: detected capacity change from 0 to 256 [ 668.447326][ T484] usb 6-1: device descriptor read/64, error -71 [ 668.487988][ T9395] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 668.538548][ T9401] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 668.573768][ T9404] loop6: detected capacity change from 0 to 1024 [ 668.582614][ T9404] EXT4-fs: Ignoring removed nobh option [ 668.590798][ T9404] ext4: Unknown parameter 'smackfsfloor' [ 668.593298][ T9406] overlayfs: unrecognized mount option "smackfstransmute=wfdno" or missing value [ 668.741140][ T484] usb 6-1: device descriptor read/64, error -71 [ 668.762428][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2770'. [ 668.771963][ T9415] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 668.976364][ T9420] tipc: Started in network mode [ 668.981303][ T9420] tipc: Node identity , cluster identity 4711 [ 668.987519][ T9420] tipc: Failed to set node id, please configure manually [ 668.994666][ T9420] tipc: Enabling of bearer rejected, failed to enable media [ 669.006607][ T9420] loop6: detected capacity change from 0 to 512 [ 669.025923][ T9420] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 669.034983][ T9420] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.059344][ T28] audit: type=1400 audit(1785175040.825:760): avc: denied { map } for pid=9419 comm="syz.6.2776" path="/44/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 669.083776][ T28] audit: type=1400 audit(1785175040.853:761): avc: denied { ioctl } for pid=9419 comm="syz.6.2776" path="/44/file1/file2" dev="loop6" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 669.109816][ T484] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 669.157500][ T8825] EXT4-fs (loop6): unmounting filesystem. [ 669.270152][ T484] usb 6-1: device descriptor read/64, error -71 [ 669.387521][ T9435] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 669.494678][ T9429] Write-error on swap-device (8:0:842566) [ 669.500500][ T9429] Write-error on swap-device (8:0:842574) Jul 27 17:57:21 [ 669.507752][ T9429] Write-error on swap-device (8:0:842582) syzkaller kern.a[ 669.514589][ T9429] Write-error on swap-device (8:0:842590) lert kernel: [ 669.494678][ T94[ 669.523288][ T9429] Write-error on swap-device (8:0:842598) 29] Write-error [ 669.530757][ T9429] Write-error on swap-device (8:0:842606) on swap-device ([ 669.538661][ T9429] Write-error on swap-device (8:0:842614) 8:0:842566) Jul 27 17:57:21 syzkaller kern.alert kernel: [ 669.500500][ T9429][ 669.551169][ T9429] Write-error on swap-device (8:0:842622) Write-error on swap-device (8:0:842574) Jul 27 17:57:21 syzkaller kern.alert kernel: [ 669.507752][ T9429] Write-error on swap-device (8:0:842582) Jul 27 17:57:21 syzkaller kern.alert kernel: [ 669.514589][ T9429] Write-error on swap-device (8:0:842590) Jul 27 17:57:21 syzkaller kern.alert kernel: [ 669.523288][ T9429] Write-error on swap-device (8:0:842598) Jul 27 17:57:21 syzkaller kern.alert kernel: [ 669.530757][ T9429] Write-error on swap-device (8:0:842606) Jul 27 17:57:21 syzkaller kern.alert kernel: [ 669.538661][ T9429] Write-error on swap-device (8:0:842614) Jul 27 17:57:21 syzkaller kern.alert kernel: [ 669.551169][ T9429] Write-error on sw[ 669.615310][ T9444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9444 comm=syz.3.2783 [ 669.622930][ T484] usb 6-1: device descriptor read/64, error -71 ap-device (8:0:8[ 669.634603][ T9429] Write-error on swap-device (8:0:842630) 42622) [ 669.642297][ T9429] Write-error on swap-device (8:0:842638) Jul 27 17:57:21 syzkaller kern.alert kernel: [ 669.634603][ T9429] Write-error on swap-device (8:0:842630) Jul 27 17:57:21 syzkaller kern.alert kernel: [ 669.642297][ T9429] Write-error on swap-device (8:0:842638) [ 669.762364][ T484] usb usb6-port1: attempt power cycle [ 670.237487][ T9455] loop6: detected capacity change from 0 to 512 [ 670.246622][ T9455] ext2: Unknown parameter 'subj_role' [ 670.306945][ T484] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 670.350702][ T484] usb 6-1: device descriptor read/8, error -71 [ 670.490909][ T9468] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 672.052754][ T484] usb 6-1: device descriptor read/8, error -71 [ 672.092780][ T9490] usb usb7: usbfs: process 9490 (syz.5.2795) did not claim interface 0 before use [ 672.172334][ T28] audit: type=1400 audit(1785175043.735:762): avc: denied { mount } for pid=9486 comm="syz.5.2795" name="/" dev="ramfs" ino=50403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 673.330824][ T648] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 673.358346][ T9523] EXT4-fs error: 104 callbacks suppressed [ 673.358374][ T9523] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2810: Detected aborted journal [ 673.435950][ T9523] EXT4-fs: 86 callbacks suppressed [ 673.436056][ T9523] EXT4-fs (sda1): Remounting filesystem read-only [ 673.459849][ T9523] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2810: Detected aborted journal [ 673.470933][ T9523] EXT4-fs (sda1): Remounting filesystem read-only [ 673.477677][ T9524] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 673.499701][ T9525] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2811: Detected aborted journal [ 673.510835][ T9525] EXT4-fs (sda1): Remounting filesystem read-only [ 673.518928][ T9525] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2811: Detected aborted journal [ 673.530262][ T9525] EXT4-fs (sda1): Remounting filesystem read-only [ 673.565319][ T9527] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 673.577784][ T648] usb 3-1: config index 0 descriptor too short (expected 63268, got 36) [ 673.589504][ T648] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 673.606389][ T648] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 673.625855][ T9528] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2813: Detected aborted journal [ 673.648977][ T648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 673.662446][ T9528] EXT4-fs (sda1): Remounting filesystem read-only [ 673.665769][ T9529] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 673.677912][ T9528] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2813: Detected aborted journal [ 673.694363][ T648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.710660][ T9531] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 673.714035][ T648] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 673.739456][ T9528] EXT4-fs (sda1): Remounting filesystem read-only [ 673.745429][ T9532] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 673.766713][ T648] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 673.776239][ T648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.788097][ T648] usb 3-1: config 0 descriptor?? [ 674.011653][ T9517] EXT4-fs (sda1): Remounting filesystem read-only [ 674.048801][ T9507] EXT4-fs (sda1): Remounting filesystem read-only [ 674.206380][ T9536] EXT4-fs (sda1): Remounting filesystem read-only [ 674.213783][ T9535] EXT4-fs (sda1): Remounting filesystem read-only [ 674.234200][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.249024][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.259275][ T648] thrustmaster 0003:044F:B653.001C: unknown main item tag 0x0 [ 674.266882][ T648] thrustmaster 0003:044F:B653.001C: unknown global tag 0xe [ 674.274333][ T648] thrustmaster 0003:044F:B653.001C: item 0 4 1 14 parsing failed [ 674.282207][ T648] thrustmaster 0003:044F:B653.001C: parse failed [ 674.288528][ T648] thrustmaster: probe of 0003:044F:B653.001C failed with error -22 [ 674.476821][ T648] usb 3-1: USB disconnect, device number 49 [ 674.761325][ T9546] overlayfs: unrecognized mount option "smackfstransmute=wfdno" or missing value [ 674.763923][ T9547] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 675.607122][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2820'. [ 675.619358][ T9555] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 675.936797][ T9556] loop6: detected capacity change from 0 to 131072 [ 675.953255][ T9556] F2FS-fs (loop6): invalid crc value [ 675.972838][ T9556] F2FS-fs (loop6): Found nat_bits in checkpoint [ 675.995902][ T9556] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 676.007375][ T9556] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 676.179651][ T9570] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2826'. [ 676.188863][ T9570] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2826'. [ 677.106418][ T9587] incfs: Error accessing: ./file0/file0. [ 677.112128][ T9587] incfs: mount failed -2 [ 678.010862][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2831'. [ 678.188917][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2832'. [ 678.919854][ T103] EXT4-fs error: 61 callbacks suppressed [ 678.919869][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 678.937129][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 678.948718][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 678.960748][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 678.972311][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 678.983895][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 679.084181][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 679.088939][ T9600] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 679.100731][ T9601] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2834: Detected aborted journal [ 679.108756][ T9602] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2835: Detected aborted journal [ 679.118665][ T279] EXT4-fs: 33 callbacks suppressed [ 679.118677][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 679.131774][ T9602] EXT4-fs (sda1): Remounting filesystem read-only [ 679.135678][ T9601] EXT4-fs (sda1): Remounting filesystem read-only [ 679.156618][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 679.166236][ T9604] EXT4-fs (sda1): Remounting filesystem read-only [ 679.166396][ T9601] EXT4-fs (sda1): Remounting filesystem read-only [ 679.173488][ T9602] EXT4-fs (sda1): Remounting filesystem read-only [ 679.183354][ T9607] EXT4-fs (sda1): Remounting filesystem read-only [ 679.186766][ T9604] EXT4-fs (sda1): Remounting filesystem read-only [ 679.192955][ T9601] EXT4-fs (sda1): Remounting filesystem read-only [ 679.287970][ T9610] end_swap_bio_write: 1009 callbacks suppressed [ 679.288061][ T9610] Write-error on swap-device (8:0:846622) Jul 27 17:57:30 syzkaller kern.alert kernel: [ 679.288061][ T9610] Write-error on swap-device (8:0:846622) [ 679.371792][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 680.385317][ T9619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.683279][ T9632] loop6: detected capacity change from 0 to 256 [ 681.695495][ T9632] ip6t_rpfilter: unknown options [ 681.701858][ T9632] x_tables: unsorted underflow at hook 2 [ 681.730219][ T28] audit: type=1400 audit(1785175052.653:763): avc: denied { mount } for pid=9628 comm="syz.6.2845" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 682.456626][ T648] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 682.626863][ T28] audit: type=1400 audit(1785175053.524:764): avc: denied { unmount } for pid=8825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 682.654269][ T648] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 682.670359][ T648] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 682.693045][ T648] usb 4-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice= 0.40 [ 682.702120][ T648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.710195][ T648] usb 4-1: Product: syz [ 682.714432][ T648] usb 4-1: Manufacturer: syz [ 682.719035][ T648] usb 4-1: SerialNumber: syz [ 682.940015][ T28] audit: type=1400 audit(1785175053.823:765): avc: denied { bind } for pid=9626 comm="syz.3.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 682.962175][ T648] usb 4-1: Can't get UAC3 power state for id 10 [ 682.969199][ T648] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 682.978388][ T648] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 682.988464][ T648] usb 4-1: USB disconnect, device number 53 [ 683.205290][ T2732] udevd[2732]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 683.403009][ T9641] loop6: detected capacity change from 0 to 131072 [ 683.420375][ T9641] F2FS-fs (loop6): invalid crc value [ 683.462836][ T9641] F2FS-fs (loop6): Found nat_bits in checkpoint [ 683.492286][ T9641] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 683.522886][ T9641] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 684.569665][ T279] EXT4-fs error: 62 callbacks suppressed [ 684.569685][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 684.574858][ T9654] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 684.575660][ T279] EXT4-fs: 36 callbacks suppressed [ 684.575672][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 684.610206][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 684.621430][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 684.628113][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 684.631245][ T9655] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2849: Detected aborted journal [ 684.639782][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 684.650920][ T9655] EXT4-fs (sda1): Remounting filesystem read-only [ 684.661865][ T9656] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.2852: Detected aborted journal [ 684.669063][ T9657] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2850: Detected aborted journal [ 684.675352][ T9658] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2851: Detected aborted journal [ 684.689719][ T9657] EXT4-fs (sda1): Remounting filesystem read-only [ 684.696946][ T9656] EXT4-fs (sda1): Remounting filesystem read-only [ 684.705577][ T9655] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2849: Detected aborted journal [ 684.709535][ T9658] EXT4-fs (sda1): Remounting filesystem read-only [ 684.726586][ T9655] EXT4-fs (sda1): Remounting filesystem read-only [ 684.734268][ T9657] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2850: Detected aborted journal [ 684.735020][ T9656] EXT4-fs (sda1): Remounting filesystem read-only [ 684.755549][ T9658] EXT4-fs (sda1): Remounting filesystem read-only [ 684.786961][ T9662] FAULT_INJECTION: forcing a failure. [ 684.786961][ T9662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.814028][ T9662] CPU: 0 PID: 9662 Comm: syz.3.2851 Not tainted syzkaller #0 [ 684.821800][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 684.831866][ T9662] Call Trace: [ 684.835167][ T9662] [ 684.838112][ T9662] __dump_stack+0x21/0x24 [ 684.842455][ T9662] dump_stack_lvl+0x110/0x170 [ 684.847147][ T9662] ? __cfi_dump_stack_lvl+0x8/0x8 [ 684.852183][ T9662] ? _parse_integer_limit+0x18e/0x1d0 [ 684.857574][ T9662] dump_stack+0x15/0x24 [ 684.861748][ T9662] should_fail_ex+0x3bf/0x510 [ 684.866427][ T9662] should_fail+0xb/0x10 [ 684.870590][ T9662] should_fail_usercopy+0x1a/0x20 [ 684.875617][ T9662] _copy_from_user+0x1e/0xc0 [ 684.880218][ T9662] input_event_from_user+0xae/0x290 [ 684.885442][ T9662] ? __cfi_input_event_from_user+0x10/0x10 [ 684.891272][ T9662] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 684.897018][ T9662] evdev_write+0x2fe/0x470 [ 684.901453][ T9662] ? __cfi_evdev_write+0x10/0x10 [ 684.906406][ T9662] ? fsnotify_perm+0x67/0x5b0 [ 684.911106][ T9662] ? security_file_permission+0x8a/0xb0 [ 684.916664][ T9662] ? security_file_permission+0x94/0xb0 [ 684.922217][ T9662] ? __cfi_evdev_write+0x10/0x10 [ 684.927156][ T9662] vfs_write+0x3fb/0xd00 [ 684.931411][ T9662] ? __cfi_vfs_write+0x10/0x10 [ 684.936174][ T9662] ? __fget_files+0x2d1/0x330 [ 684.940851][ T9662] ? __fdget_pos+0x1f2/0x380 [ 684.945435][ T9662] ? ksys_write+0x70/0x260 [ 684.949851][ T9662] ksys_write+0x14a/0x260 [ 684.954196][ T9662] ? __cfi_ksys_write+0x10/0x10 [ 684.959066][ T9662] ? debug_smp_processor_id+0x17/0x20 [ 684.964456][ T9662] __x64_sys_write+0x7b/0x90 [ 684.969059][ T9662] x64_sys_call+0x27b/0x9a0 [ 684.973566][ T9662] do_syscall_64+0x4c/0xa0 [ 684.977987][ T9662] ? clear_bhb_loop+0x30/0x80 [ 684.982662][ T9662] ? clear_bhb_loop+0x30/0x80 [ 684.987361][ T9662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.993276][ T9662] RIP: 0033:0x7f72bb59de99 [ 684.997725][ T9662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.017351][ T9662] RSP: 002b:00007f72bc504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 685.025783][ T9662] RAX: ffffffffffffffda RBX: 00007f72bb825fa0 RCX: 00007f72bb59de99 [ 685.033771][ T9662] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 685.041763][ T9662] RBP: 00007f72bc504090 R08: 0000000000000000 R09: 0000000000000000 [ 685.049753][ T9662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.057751][ T9662] R13: 00007f72bb826038 R14: 00007f72bb825fa0 R15: 00007ffda7f6dc98 [ 685.065740][ T9662] [ 685.070102][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2849'. [ 686.319566][ T9679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 688.035452][ T9687] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2860'. [ 688.038623][ T9690] FAULT_INJECTION: forcing a failure. [ 688.038623][ T9690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.071543][ T9690] CPU: 0 PID: 9690 Comm: syz.5.2857 Not tainted syzkaller #0 [ 688.078954][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 688.089024][ T9690] Call Trace: [ 688.092311][ T9690] [ 688.095238][ T9690] __dump_stack+0x21/0x24 [ 688.099576][ T9690] dump_stack_lvl+0x110/0x170 [ 688.104262][ T9690] ? __cfi_dump_stack_lvl+0x8/0x8 [ 688.109297][ T9690] dump_stack+0x15/0x24 [ 688.113469][ T9690] should_fail_ex+0x3bf/0x510 [ 688.118156][ T9690] should_fail+0xb/0x10 [ 688.122318][ T9690] should_fail_usercopy+0x1a/0x20 [ 688.127360][ T9690] _copy_from_user+0x1e/0xc0 [ 688.131963][ T9690] iovec_from_user+0x1aa/0x2e0 [ 688.136754][ T9690] __import_iovec+0x6d/0x460 [ 688.141358][ T9690] ? kstrtoull+0x137/0x1d0 [ 688.145787][ T9690] import_iovec+0x7c/0xb0 [ 688.150131][ T9690] ___sys_sendmsg+0x252/0x360 [ 688.154838][ T9690] ? __sys_sendmsg+0x290/0x290 [ 688.159623][ T9690] ? __kasan_check_write+0x14/0x20 [ 688.164750][ T9690] ? proc_fail_nth_write+0x180/0x200 [ 688.170054][ T9690] ? vfs_write+0xa51/0xd00 [ 688.174481][ T9690] ? __fdget+0x19c/0x220 [ 688.178735][ T9690] __x64_sys_sendmsg+0x20d/0x2e0 [ 688.183681][ T9690] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 688.189152][ T9690] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 688.195235][ T9690] x64_sys_call+0x171/0x9a0 [ 688.199746][ T9690] do_syscall_64+0x4c/0xa0 [ 688.204162][ T9690] ? clear_bhb_loop+0x30/0x80 [ 688.208878][ T9690] ? clear_bhb_loop+0x30/0x80 [ 688.213573][ T9690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.219493][ T9690] RIP: 0033:0x7f0a20b9de99 [ 688.223922][ T9690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.243541][ T9690] RSP: 002b:00007f0a21b3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.252042][ T9690] RAX: ffffffffffffffda RBX: 00007f0a20e25fa0 RCX: 00007f0a20b9de99 [ 688.260012][ T9690] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 688.267980][ T9690] RBP: 00007f0a21b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 688.275965][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.283930][ T9690] R13: 00007f0a20e26038 R14: 00007f0a20e25fa0 R15: 00007fff59efd4f8 [ 688.291910][ T9690] [ 689.923131][ T9705] syz.3.2863[9705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.923212][ T9705] syz.3.2863[9705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.020187][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2862'. [ 690.066313][ T9703] loop6: detected capacity change from 0 to 256 [ 690.103414][ T9703] Write-error on swap-device (8:0:808686) [ 690.109351][ T9703] Write-error on swap-device (8:0:808694) [ 690.115175][ T9703] Write-error on swap-device (8:0:808702) [ 690.121187][ T85] EXT4-fs error: 47 callbacks suppressed [ 690.121202][ T85] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm syslogd: reading directory lblock 0 [ 690.138402][ T9703] Write-error on swap-device (8:0:808710) [ 690.144279][ T9703] Write-error on swap-device (8:0:808718) Jul 27 17:57:40 [ 690.150404][ T85] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm syslogd: reading directory lblock 0 syzkaller kern.a[ 690.163630][ T85] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm syslogd: reading directory lblock 0 lert kernel: [ 690.103414][ T97[ 690.178189][ T85] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm syslogd: reading directory lblock 0 03] Write-error [ 690.190195][ T85] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm syslogd: reading directory lblock 0 on swap-device (8:0:808686) Jul 27 17:57:40 syzkaller kern.alert kernel: [ 690.109351][ T9703] Write-error on swap-device (8:0:808694) Jul 27 17:57:40 syzkaller kern.alert kernel: [ 690.115175][ T9703] Write-error on swap-device (8:0:808702) Jul 27 17:57:40 syzkaller kern.alert kernel: [ 690.138402][ T9703] Write-error on swap-device (8:0:808710) Jul 27 17:57:40 syzkaller kern.alert kernel: [ 690.144279][ T9703] Write-error on swap-device (8:0:808718) [ 691.801643][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 691.807286][ T9709] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2865: Detected aborted journal [ 691.813660][ T9710] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2867: Detected aborted journal [ 691.828969][ T9708] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 691.840075][ T9712] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.2868: Detected aborted journal [ 691.847842][ T9711] EXT4-fs: 31 callbacks suppressed [ 691.847856][ T9711] EXT4-fs (sda1): Remounting filesystem read-only [ 691.858430][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 691.863292][ T9709] EXT4-fs (sda1): Remounting filesystem read-only [ 691.869463][ T9712] EXT4-fs (sda1): Remounting filesystem read-only [ 691.879451][ T9709] EXT4-fs (sda1): Remounting filesystem read-only [ 691.882369][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 691.889748][ T9711] EXT4-fs (sda1): Remounting filesystem read-only [ 691.895114][ T9710] EXT4-fs (sda1): Remounting filesystem read-only [ 691.914360][ T28] audit: type=1326 audit(1785175062.208:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a20b9de99 code=0x7ffc0000 [ 691.941707][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 691.948419][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 691.958929][ T28] audit: type=1326 audit(1785175062.208:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a20b9de99 code=0x7ffc0000 [ 691.993040][ T28] audit: type=1326 audit(1785175062.208:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a20b9de99 code=0x7ffc0000 [ 692.022963][ T28] audit: type=1326 audit(1785175062.208:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a20b9de99 code=0x7ffc0000 [ 692.047755][ T28] audit: type=1326 audit(1785175062.208:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0a20b9de99 code=0x7ffc0000 [ 692.072517][ T28] audit: type=1326 audit(1785175062.208:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a20b9de99 code=0x7ffc0000 [ 692.097472][ T28] audit: type=1326 audit(1785175062.208:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a20b9de99 code=0x7ffc0000 [ 692.122845][ T28] audit: type=1326 audit(1785175062.208:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a20b9de99 code=0x7ffc0000 [ 692.165980][ T28] audit: type=1326 audit(1785175062.208:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a20b9de99 code=0x7ffc0000 [ 692.190952][ T28] audit: type=1326 audit(1785175062.208:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f0a20b9de99 code=0x7ffc0000 [ 693.997193][ T9729] FAULT_INJECTION: forcing a failure. [ 693.997193][ T9729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.010504][ T9729] CPU: 0 PID: 9729 Comm: syz.3.2871 Not tainted syzkaller #0 [ 694.017898][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 694.027984][ T9729] Call Trace: [ 694.031276][ T9729] [ 694.034229][ T9729] __dump_stack+0x21/0x24 [ 694.038578][ T9729] dump_stack_lvl+0x110/0x170 [ 694.043268][ T9729] ? __cfi_dump_stack_lvl+0x8/0x8 [ 694.048304][ T9729] ? _parse_integer_limit+0x18e/0x1d0 [ 694.053683][ T9729] dump_stack+0x15/0x24 [ 694.057850][ T9729] should_fail_ex+0x3bf/0x510 [ 694.062536][ T9729] should_fail+0xb/0x10 [ 694.066722][ T9729] should_fail_usercopy+0x1a/0x20 [ 694.071781][ T9729] _copy_from_user+0x1e/0xc0 [ 694.076404][ T9729] input_event_from_user+0xae/0x290 [ 694.081618][ T9729] ? __cfi_input_event_from_user+0x10/0x10 [ 694.087420][ T9729] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 694.093230][ T9729] ? input_inject_event+0x10d/0x120 [ 694.098439][ T9729] evdev_write+0x2fe/0x470 [ 694.102843][ T9729] ? __cfi_evdev_write+0x10/0x10 [ 694.107778][ T9729] ? fsnotify_perm+0x67/0x5b0 [ 694.112440][ T9729] ? security_file_permission+0x8a/0xb0 [ 694.117981][ T9729] ? security_file_permission+0x94/0xb0 [ 694.123546][ T9729] ? __cfi_evdev_write+0x10/0x10 [ 694.128479][ T9729] vfs_write+0x3fb/0xd00 [ 694.132708][ T9729] ? __cfi_vfs_write+0x10/0x10 [ 694.137450][ T9729] ? __fget_files+0x2d1/0x330 [ 694.142111][ T9729] ? __fdget_pos+0x1f2/0x380 [ 694.146679][ T9729] ? ksys_write+0x70/0x260 [ 694.151077][ T9729] ksys_write+0x14a/0x260 [ 694.155385][ T9729] ? __cfi_ksys_write+0x10/0x10 [ 694.160212][ T9729] ? debug_smp_processor_id+0x17/0x20 [ 694.165565][ T9729] __x64_sys_write+0x7b/0x90 [ 694.170136][ T9729] x64_sys_call+0x27b/0x9a0 [ 694.174628][ T9729] do_syscall_64+0x4c/0xa0 [ 694.179058][ T9729] ? clear_bhb_loop+0x30/0x80 [ 694.183719][ T9729] ? clear_bhb_loop+0x30/0x80 [ 694.188379][ T9729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 694.194259][ T9729] RIP: 0033:0x7f72bb59de99 [ 694.198660][ T9729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.218248][ T9729] RSP: 002b:00007f72bc504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 694.227177][ T9729] RAX: ffffffffffffffda RBX: 00007f72bb825fa0 RCX: 00007f72bb59de99 [ 694.235159][ T9729] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 694.235180][ T9729] RBP: 00007f72bc504090 R08: 0000000000000000 R09: 0000000000000000 [ 694.235191][ T9729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.235200][ T9729] R13: 00007f72bb826038 R14: 00007f72bb825fa0 R15: 00007ffda7f6dc98 [ 694.235218][ T9729] [ 696.144881][ T279] EXT4-fs error: 30 callbacks suppressed [ 696.144924][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 696.149921][ T9740] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 696.154450][ T9741] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2873: Detected aborted journal SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=1 req=2812 state=1 status=67 (errno 9: Bad file descriptor) [ 696.167696][ T9742] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2874: Detected aborted journal [ 696.175488][ T9741] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.2873: Detected aborted journal [ 696.187100][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 696.196741][ T9744] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2875: Detected aborted journal [ 696.211105][ T9746] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.2876: Detected aborted journal [ 696.242956][ T9742] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2874: Detected aborted journal [ 696.254182][ T9742] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.2874: Detected aborted journal [ 696.947360][ T6191] device bridge_slave_1 left promiscuous mode [ 696.953504][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.960991][ T6191] device bridge_slave_0 left promiscuous mode [ 696.967097][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.974884][ T6191] device veth1_macvtap left promiscuous mode [ 696.980971][ T6191] device veth0_vlan left promiscuous mode [ 697.333450][ T6191] tipc: Left network mode [ 697.338101][ T6191] tipc: Left network mode [ 697.342804][ T6191] tipc: Left network mode [ 697.930936][ T6191] device bridge_slave_1 left promiscuous mode [ 697.937081][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.944532][ T6191] device bridge_slave_0 left promiscuous mode [ 697.950634][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.958624][ T6191] device bridge_slave_1 left promiscuous mode [ 697.964818][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.972136][ T6191] device bridge_slave_0 left promiscuous mode [ 697.978403][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.986078][ T6191] device bridge_slave_1 left promiscuous mode [ 697.992188][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.999677][ T6191] device bridge_slave_0 left promiscuous mode [ 698.005858][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.013751][ T6191] device veth1_macvtap left promiscuous mode [ 698.019825][ T6191] device veth0_vlan left promiscuous mode [ 698.025797][ T6191] device veth1_macvtap left promiscuous mode [ 698.031987][ T6191] device veth0_vlan left promiscuous mode